Edit tour

Windows Analysis Report
https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05|02|deborah.cantu@christushealth.org|9e7f5b22750f4b0a926208dd67155304|731939eac4fc4b44872b087271216567|0|0|6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOI

Overview

General Information

Sample URL:	https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05\|02\|deborah.cantu@christushealth.org\|9e7f5b22750f4b0a926208dd67155304\|731939eac4fc4b44872b087271216567\|0\|0\|6387
Analysis ID:	1643509
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

Performs DNS queries to domains with low reputation

Phishing site or detected (based on various text indicators)

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded SVGs detected

HTML title does not match URL

Invalid T&C link found

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1600,i,10613907384107303506,7445878619451696752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2020 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_139	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

HTML

Source	Rule	Description	Author
0.19..script.csv	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security
3.12.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
3.13.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://docs.faxcloudstorage.de/uTN1Q/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'docs.faxcloudstorage.de' does not match the legitimate domain for Microsoft., The domain 'faxcloudstorage.de' does not have any known association with Microsoft., The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites., The use of a non-Microsoft domain with a well-known brand like Microsoft is suspicious and indicative of phishing. DOM: 3.12.pages.csv
Source: https://docs.faxcloudstorage.de/uTN1Q/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'docs.faxcloudstorage.de' does not match the legitimate domain name for Microsoft., The domain 'faxcloudstorage.de' does not have any known association with Microsoft., The use of a subdomain 'docs' and the main domain 'faxcloudstorage.de' suggests a potential phishing attempt, as it does not align with Microsoft's typical domain structure., The email input field 'p7bbdx@tlfg.com' does not provide any direct association with Microsoft, adding to the suspicion. DOM: 3.13.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 3.12.pages.csv, type: HTML
Source: Yara match	File source: 3.13.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ%3D%3D%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj%20roFIB112Wvg%3D&reserved=0	Joe Sandbox AI: Page contains button: 'CLICK HERE TO VIEW' Source: '1.0.pages.csv'
Source: https://www.calameo.com/read/007891788a1804574bc62	Joe Sandbox AI: Page contains button: 'VIEW ONLINE PDF' Source: '2.4.pages.csv'
Source: https://docs.faxcloudstorage.de/uTN1Q/	Joe Sandbox AI: Page contains button: 'Verify you are human' Source: '3.8.pages.csv'

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.0

Yara detected JavaScript embedded in SVG

Source: Yara match	File source: 0.19..script.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_139, type: DROPPED

Source: https://docs.faxcloudstorage.de/uTN1Q/

HTTP Parser: Number of links: 0

Source: https://docs.faxcloudstorage.de/uTN1Q/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.calameo.com/read/007891788a1804574bc62

HTTP Parser: Total embedded SVG size: 170094

Source: https://docs.faxcloudstorage.de/uTN1Q/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: Invalid link: Privacy statement
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: Invalid link: Privacy statement

Source: https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0

Sample URL: PII: 05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ

Source: https://docs.faxcloudstorage.de/uTN1Q/

HTTP Parser: <input type="password" .../> found

Source: https://www.calameo.com/read/007891788a1804574bc62	HTTP Parser: No favicon
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No favicon
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No favicon
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No favicon
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No favicon
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No favicon
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No favicon

Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No <meta name="author".. found
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No <meta name="author".. found

Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No <meta name="copyright".. found
Source: https://docs.faxcloudstorage.de/uTN1Q/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 142.251.40.132:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.39.21:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.39.21:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.31.174:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.31.174:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.128.216:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.31.174:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.31.174:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.128.216:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.88.238.126:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.83.170.136:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.233.202.179:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.233.202.179:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.137:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.137:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.111.22:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.53.249:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.234:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.234:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.171.158:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.233.202.179:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.234:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.171.158:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.233.202.179:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.137:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.243.82:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.160:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.137:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.177:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.243.82:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.15.128:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.15.128:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.4:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.128.193.190:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.135.233:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.230.198:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.230.198:443 -> 192.168.2.4:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49864 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: 5148882780.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: 5148882780.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: 5148882780.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: 5148882780.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0 HTTP/1.1Host: polestubllin.ac-page.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oee92L/2025/03/13/16c5b8c8-3b9a-4bf6-8ebc-0128bcfba61c.png HTTP/1.1Host: content.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oee92L/2025/03/13/47ba6cb9-e3d6-487e-a1e1-1673c91f6e49.png HTTP/1.1Host: content.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diffuser/diffuser.js HTTP/1.1Host: diffuser-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/jquery/dist/jquery.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/lodash/lodash.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/lz-string/libs/lz-string.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/angular/angular.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/urijs/src/URI.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/angular-cookies/angular-cookies.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oee92L/2025/03/13/16c5b8c8-3b9a-4bf6-8ebc-0128bcfba61c.png HTTP/1.1Host: content.app-us1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oee92L/2025/03/13/47ba6cb9-e3d6-487e-a1e1-1673c91f6e49.png HTTP/1.1Host: content.app-us1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/ngstorage/ngStorage.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/angular-animate/angular-animate.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=226975603&u=https%3A%2F%2Fpolestubllin.ac-page.com%2Fdocuments-nowreview-copy%3Ftest%3Dtrue%26data%3D05%257C02%257Cdeborah.cantu%40christushealth.org%257C9e7f5b22750f4b0a926208dd67155304%257C731939eac4fc4b44872b087271216567%257C0%257C0%257C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ%3D%3D%257C0%257C%257C%257C%26sdata%3DJEFyfacBrjqR1C9dEXbaS2KjW2qYjj%2BroFIB112Wvg%3D%26reserved%3D0 HTTP/1.1Host: prism.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/gsap/src/minified/TweenMax.min.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/core.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/services/services.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/services/services.modal.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/services/services.paths.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/directives/directives.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/directives/directives.countdown.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/directives/directives.parallax.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/directives/directives.scratch.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/directives/directives.background-video.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/filters/filters.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/animations/animations.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/analytics.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/app.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/app.controllers.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/app.config.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/app.templates.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/bootstrap.js HTTP/1.1Host: landing-pages-cdn.app-us1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Visitor/ HTTP/1.1Host: landing-pages-visitor-events.cluster.app-us1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /read/007891788a1804574bc62 HTTP/1.1Host: www.calameo.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Visitor/ HTTP/1.1Host: landing-pages-visitor-events.cluster.app-us1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9198-000166/pinwheel/viewer/css/main.css HTTP/1.1Host: v.calameo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /9198-000166/pinwheel/viewer/scripts/loader.js HTTP/1.1Host: v.calameo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /uc.js HTTP/1.1Host: consent.cookiebot.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Framework/IAB/consent-sdk-2.2.js HTTP/1.1Host: consent.cookiebot.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2372292c-680d-47b7-90f2-1af22359ed6d/cc.js?renew=false&referer=www.calameo.com&dnt=false&init=false&framework=TCFv2.2 HTTP/1.1Host: consent.cookiebot.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/bc-v4.min.html HTTP/1.1Host: consentcdn.cookiebot.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pinwheel/9198-975f40/platform/img/favicon/manifest.json HTTP/1.1Host: s.calameoassets.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.calameo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pinwheel/9198-975f40/platform/img/favicon/favicon.ico HTTP/1.1Host: s.calameoassets.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.gif?dgi=2372292c-680d-47b7-90f2-1af22359ed6d HTTP/1.1Host: imgsct.cookiebot.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pinwheel/viewer/book/get?bkcode=007891788a1804574bc62 HTTP/1.1Host: d.calameo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://www.calameo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pinwheel/9198-975f40/platform/img/favicon/favicon-32x32.png HTTP/1.1Host: s.calameoassets.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pinwheel/9198-975f40/platform/img/favicon/favicon.ico HTTP/1.1Host: s.calameoassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.gif?dgi=2372292c-680d-47b7-90f2-1af22359ed6d HTTP/1.1Host: imgsct.cookiebot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9198-000166/pinwheel/viewer/locales/viewer/en-EN.js?callback=_i18n HTTP/1.1Host: v.calameo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /pinwheel/9198-975f40/platform/img/favicon/favicon-32x32.png HTTP/1.1Host: s.calameoassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pinwheel/viewer/book/get?bkcode=007891788a1804574bc62 HTTP/1.1Host: d.calameo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /9198-000166/pinwheel/viewer/scripts/modules/desktop/viewer-desktop.js HTTP/1.1Host: v.calameo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /pinwheel/skin/2.1/2021/skin.xml HTTP/1.1Host: v.calameo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/plain, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://www.calameo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /250310145323-d9d3dbe06d6b18cea2f9e513dfb5e2ef/link-11992805.bin?_token_=exp=1742461277~acl=%2F250310145323-d9d3dbe06d6b18cea2f9e513dfb5e2ef%2F%2A~hmac=2c324d9baa3a801c0e57dac8f230662a446682f0ceaec548be7d203a1cdcb398 HTTP/1.1Host: ps.calameoassets.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://www.calameo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pinwheel/skin/2.1/2021/skin.xml HTTP/1.1Host: v.calameo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /pinwheel/skin/2.1/2021/assets.png HTTP/1.1Host: v.calameo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /9198-000166/pinwheel/viewer/images/desktop/internal-assets.svg HTTP/1.1Host: v.calameo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/plain, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://www.calameo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /250310145323-d9d3dbe06d6b18cea2f9e513dfb5e2ef/link-11992805.bin?_token_=exp=1742461277~acl=%2F250310145323-d9d3dbe06d6b18cea2f9e513dfb5e2ef%2F%2A~hmac=2c324d9baa3a801c0e57dac8f230662a446682f0ceaec548be7d203a1cdcb398 HTTP/1.1Host: ps.calameoassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pinwheel/skin/2.1/2021/assets.png HTTP/1.1Host: v.calameo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /9198-000166/pinwheel/viewer/images/desktop/internal-assets.svg HTTP/1.1Host: v.calameo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lang=en
Source: global traffic	HTTP traffic detected: GET /250310145323-d9d3dbe06d6b18cea2f9e513dfb5e2ef/p1.svgz?_token_=exp=1742461277~acl=%2F250310145323-d9d3dbe06d6b18cea2f9e513dfb5e2ef%2F%2A~hmac=2c324d9baa3a801c0e57dac8f230662a446682f0ceaec548be7d203a1cdcb398 HTTP/1.1Host: ps.calameoassets.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=view&aid=7891788&bid=17392586&dv=desktop&src=calameo&_c=164498614 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=pageview&aid=7891788&bid=17392586&pages=1&dv=desktop&src=calameo&_c=870545700 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /250310145323-d9d3dbe06d6b18cea2f9e513dfb5e2ef/p1.svgz?_token_=exp=1742461277~acl=%2F250310145323-d9d3dbe06d6b18cea2f9e513dfb5e2ef%2F%2A~hmac=2c324d9baa3a801c0e57dac8f230662a446682f0ceaec548be7d203a1cdcb398 HTTP/1.1Host: ps.calameoassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=view&aid=7891788&bid=17392586&dv=desktop&src=calameo&_c=164498614 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=pageview&aid=7891788&bid=17392586&pages=1&dv=desktop&src=calameo&_c=870545700 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=link&aid=7891788&bid=17392586&pages=1&t=1&to=https%3A%2F%2Fdocs.faxcloudstorage.de%2FuTN1Q&dv=desktop&src=calameo&_c=457264775 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=pagetime&aid=7891788&bid=17392586&pages=1&time=8125&dv=desktop&src=calameo&_c=820397508 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uTN1Q HTTP/1.1Host: docs.faxcloudstorage.deConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=link&aid=7891788&bid=17392586&pages=1&t=1&to=https%3A%2F%2Fdocs.faxcloudstorage.de%2FuTN1Q&dv=desktop&src=calameo&_c=457264775 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=pagetime&aid=7891788&bid=17392586&pages=1&time=8125&dv=desktop&src=calameo&_c=820397508 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uTN1Q/ HTTP/1.1Host: docs.faxcloudstorage.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0y4e7/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=922fe7cb9afd42ef&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0y4e7/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0y4e7/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: docs.faxcloudstorage.deConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.faxcloudstorage.de/uTN1Q/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=j6tigi8et90sujc53eo8nv7hsi
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1776783448:1742415396:giZiQcbqlXktMBJhJfRBTruBBUvnIBRpVn9aUNuK8gg/922fe7cb9afd42ef/rP7K9NqIH26Xc.QzmuwASmapXRvrt__u..kyfYHXvyo-1742418090-1.1.1.1-Kb4c4OTLrlgk6YGCRX0VJsPokCIn.cnGqWrlsmYPt46iLntyrkcpriHqu6dlp8w_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/922fe7cb9afd42ef/1742418092128/DxegtWOKhlTU2g8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0y4e7/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/922fe7cb9afd42ef/1742418092128/DxegtWOKhlTU2g8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/922fe7cb9afd42ef/1742418092131/1017e7fe0147668ab7d4ab945899e78c0855e9583c400475050f10271b726dac/dVtlgxNjIzj_eQ1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0y4e7/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1776783448:1742415396:giZiQcbqlXktMBJhJfRBTruBBUvnIBRpVn9aUNuK8gg/922fe7cb9afd42ef/rP7K9NqIH26Xc.QzmuwASmapXRvrt__u..kyfYHXvyo-1742418090-1.1.1.1-Kb4c4OTLrlgk6YGCRX0VJsPokCIn.cnGqWrlsmYPt46iLntyrkcpriHqu6dlp8w_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1776783448:1742415396:giZiQcbqlXktMBJhJfRBTruBBUvnIBRpVn9aUNuK8gg/922fe7cb9afd42ef/rP7K9NqIH26Xc.QzmuwASmapXRvrt__u..kyfYHXvyo-1742418090-1.1.1.1-Kb4c4OTLrlgk6YGCRX0VJsPokCIn.cnGqWrlsmYPt46iLntyrkcpriHqu6dlp8w_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://docs.faxcloudstorage.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://docs.faxcloudstorage.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://docs.faxcloudstorage.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 5148882780-1317754460.cos.ap-bangkok.myqcloud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attachments/664305779951665173/1350051780712468582/6059C6BA-9C9F-4199-8218-8895A9F0C3C8.png?ex=67d55533&is=67d403b3&hm=c74e1d4a21a042a14a2f638c6c547646206f493cec40d064fe8dc4adf2421c7d& HTTP/1.1Host: cdn.discordapp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=pagetime&aid=7891788&bid=17392586&pages=1&time=13&dv=desktop&src=calameo&_c=118296171 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.calameo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 5148882780.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?e=pagetime&aid=7891788&bid=17392586&pages=1&time=13&dv=desktop&src=calameo&_c=118296171 HTTP/1.1Host: calameo-beacon.global.ssl.fastly.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://docs.faxcloudstorage.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 5148882780.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 5148882780.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_176.1.dr	String found in binary or memory: tag.src = "https://www.youtube.com/iframe_api"; equals www.youtube.com (Youtube)
Source: chromecache_130.1.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},Sk:function(){e=sb()},Md:function(){d()}}};var bc=wa(["data-gtm-yt-inspected-"]),LG=["www.youtube.com","www.youtube-nocookie.com"],MG,NG=!1; equals www.youtube.com (Youtube)
Source: chromecache_130.1.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Wh:f,Uh:g,Vh:k,Di:m,Ei:n,qf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var t=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){t&&t();d()};E(function(){for(var v=A.getElementsByTagName("script"),u=v.length,w=0;w<u;w++){var x=v[w].getAttribute("src");if(WG(x,"iframe_api")\|\|WG(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!NG&&UG(y[C],q.qf))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: polestubllin.ac-page.com
Source: global traffic	DNS traffic detected: DNS query: content.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: landing-pages-cdn.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: diffuser-cdn.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: prism.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: landing-pages-visitor-events.cluster.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: www.calameo.com
Source: global traffic	DNS traffic detected: DNS query: v.calameo.com
Source: global traffic	DNS traffic detected: DNS query: consent.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: consentcdn.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: s.calameoassets.com
Source: global traffic	DNS traffic detected: DNS query: imgsct.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: d.calameo.com
Source: global traffic	DNS traffic detected: DNS query: ps.calameoassets.com
Source: global traffic	DNS traffic detected: DNS query: calameo-beacon.global.ssl.fastly.net
Source: global traffic	DNS traffic detected: DNS query: docs.faxcloudstorage.de
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 5148882780-1317754460.cos.ap-bangkok.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 5148882780.xyz
Source: global traffic	DNS traffic detected: DNS query: cdn.discordapp.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: e2c27.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /Visitor/ HTTP/1.1Host: landing-pages-visitor-events.cluster.app-us1.comConnection: keep-aliveContent-Length: 60sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Accept: */*Origin: https://polestubllin.ac-page.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://polestubllin.ac-page.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 53Access-Control-Allow-Origin: Access-Control-Expose-Headers: Timing-Allow-Origin: *Cache-Control: public, max-age=600, s-maxage=600Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/plain; charset=utf-8ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Accept-Ranges: bytesDate: Wed, 19 Mar 2025 21:01:30 GMTAge: 0X-Served-By: cache-fra-etou8220171-FRA, cache-lga21952-LGAX-Cache: MISS, MISSVary: Accept-Encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 21:01:32 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1KcTdJyNKDs6R7dVHpf03nLo5vo4J4YG3rpe88nVY7nvueceIn8LgzYqlN4I4rfUyZVk8g%2F0FOq4P8omlRXVg4sJ4JPmbcsPZ2N%2FYTCuugdIue4JRrWb9RIivv9ploKmlpmWoCIudRMl1g%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 922fe7d31dda5e65-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=90589&min_rtt=90120&rtt_var=19715&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1233&delivery_rate=40799&cwnd=233&unsent_bytes=0&cid=fd94684a91dec208&ts=430&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 21:01:46 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 36Connection: closeSet-Cookie: __cf_bm=TbKUCwN.T46aziH4L6Se2iJ4LaYCTYIS43Ma2g276W8-1742418106-1.0.1.1-.7B5ZMC4r.MgCUnMafUmAgwaX9CdqwfEesDLX6vcl3_98r.w0HTLEAqGlmoTlcWPRG5fU.8TdV8ZBD6SKWhjgcp3LHk9DwMGeEwHLFI887Q; path=/; expires=Wed, 19-Mar-25 21:31:46 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=NoneReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DuvV%2FqbbbblqA9V99R8cKWh1YJnsTLB8Sg6mv1HUE%2FGNN1juUVR7jUxdH9TaZKTvEGg5kCaMTUTrcfCLQQ8PB11Lrn70N3NMepOofVRmS98NuL8kyY3ed2i%2BT1uH4a7zO32yIQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodpSet-Cookie: _cfuvid=ASlE9YzI833eY6MHCUM537lHYBKSi2LkY_39C.oVwG4-1742418106388-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 922fe82cca8e566e-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_180.1.dr	String found in binary or memory: http://adnordic.eu/privacypolicy.html
Source: chromecache_127.1.dr, chromecache_159.1.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_141.1.dr	String found in binary or memory: http://firstdonoharm.dev
Source: chromecache_136.1.dr	String found in binary or memory: http://greensock.com
Source: chromecache_136.1.dr	String found in binary or memory: http://greensock.com/standard-license
Source: chromecache_152.1.dr	String found in binary or memory: http://loading.retry.widdit.com/
Source: chromecache_198.1.dr	String found in binary or memory: http://medialize.github.io/URI.js/
Source: chromecache_183.1.dr	String found in binary or memory: http://meyerweb.com/eric/tools/css/reset/
Source: chromecache_143.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_192.1.dr, chromecache_188.1.dr	String found in binary or memory: http://skin.calameo.com/2.0
Source: chromecache_152.1.dr	String found in binary or memory: http://tt.epicplay.com
Source: chromecache_147.1.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_180.1.dr	String found in binary or memory: http://www.360.cn/privacy/v3/bpsxy.html
Source: chromecache_180.1.dr	String found in binary or memory: http://www.adsbynimbus.com/privacy-policy
Source: chromecache_192.1.dr, chromecache_188.1.dr	String found in binary or memory: http://www.calameo.com/
Source: chromecache_180.1.dr	String found in binary or memory: http://www.fancydigital.com.cn/html/privacy_GDRP.html
Source: chromecache_180.1.dr	String found in binary or memory: http://www.link.ch/privacy
Source: chromecache_180.1.dr	String found in binary or memory: http://www.signifimedia.com.au/home/privacy
Source: chromecache_180.1.dr	String found in binary or memory: https://ads.innovativeadserver.com/gdrp
Source: chromecache_130.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_141.1.dr	String found in binary or memory: https://animate.style/
Source: chromecache_180.1.dr	String found in binary or memory: https://app.flexitive.com/signup/privacy
Source: chromecache_183.1.dr	String found in binary or memory: https://app.landing-pages.app-us1.com/formsubmit/form
Source: chromecache_130.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_180.1.dr	String found in binary or memory: https://cdn.stroeerdigitalgroup.de/metatag/iabtcf/deviceStorage.json
Source: chromecache_183.1.dr	String found in binary or memory: https://content.app-us1.com/oee92L/2025/03/13/16c5b8c8-3b9a-4bf6-8ebc-0128bcfba61c.png
Source: chromecache_183.1.dr	String found in binary or memory: https://content.app-us1.com/oee92L/2025/03/13/47ba6cb9-e3d6-487e-a1e1-1673c91f6e49.png
Source: chromecache_180.1.dr	String found in binary or memory: https://corp.fluct.jp/privacy/
Source: chromecache_180.1.dr	String found in binary or memory: https://dg.dhgate.com/buyerdisputesystem/index.html#/privacyIndex?id=1&isapp=pc
Source: chromecache_183.1.dr	String found in binary or memory: https://diffuser-cdn.app-us1.com/diffuser/diffuser.js
Source: chromecache_150.1.dr, chromecache_160.1.dr	String found in binary or memory: https://docs.faxcloudstorage.de/uTN1Q
Source: chromecache_187.1.dr	String found in binary or memory: https://errors.angularjs.xlts.dev/1.9.1/
Source: chromecache_180.1.dr	String found in binary or memory: https://exposebox.com/privacy-policy/
Source: chromecache_180.1.dr	String found in binary or memory: https://firststars.de/datenschutzeinstellungen
Source: chromecache_180.1.dr	String found in binary or memory: https://flarie.com/privacy
Source: chromecache_183.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=IBM
Source: chromecache_126.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v21/zYXGKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1swZSAXcomDVmadSD
Source: chromecache_172.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752FD8Ghe4.woff2)
Source: chromecache_172.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752Fj8Ghe4.woff2)
Source: chromecache_172.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752Fz8Ghe4.woff2)
Source: chromecache_172.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752GT8G.woff2)
Source: chromecache_172.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752HT8Ghe4.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://foursquare.com/legal/privacy
Source: chromecache_180.1.dr	String found in binary or memory: https://fsharp.co/privacy-policy
Source: chromecache_197.1.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_179.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_183.1.dr	String found in binary or memory: https://github.com/p/delete-all-cookies/blob/master/index.js
Source: chromecache_197.1.dr, chromecache_179.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_197.1.dr, chromecache_179.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_180.1.dr	String found in binary or memory: https://kaden.ai/privacy-policy/
Source: chromecache_180.1.dr	String found in binary or memory: https://kidoz.net/gdpr/
Source: chromecache_180.1.dr	String found in binary or memory: https://kimiagroup.com/en/privacy-policy.html
Source: chromecache_180.1.dr	String found in binary or memory: https://kinesso.com/privacy-center/
Source: chromecache_180.1.dr	String found in binary or memory: https://kobler.no/privacy-policy
Source: chromecache_180.1.dr	String found in binary or memory: https://kubico.com/privacy-policy/
Source: chromecache_180.1.dr	String found in binary or memory: https://kwanza.co.tz/gdpr-compliance
Source: chromecache_180.1.dr	String found in binary or memory: https://lacunads.ushareit.com/policy.html
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/analytics/analytics.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/app/app.config.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/app/app.controllers.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/app/app.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/app/app.templates.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/app/app.templates.svg.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/app/bootstrap.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/animations/animations.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/core.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/directives/directives.background-video.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/directives/directives.countdown.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/directives/directives.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/directives/directives.parallax.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/directives/directives.scratch.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/filters/filters.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/services/services.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/services/services.modal.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/core/services/services.paths.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/angular-animate/angular-animate.min.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/angular-cookies/angular-cookies.min.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/angular/angular.min.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/gsap/src/minified/TweenMax.min.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/jquery/dist/jquery.min.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/lodash/lodash.min.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/lz-string/libs/lz-string.min.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/ngstorage/ngStorage.min.js
Source: chromecache_183.1.dr	String found in binary or memory: https://landing-pages-cdn.app-us1.com/vendor/urijs/src/URI.min.js
Source: chromecache_182.1.dr	String found in binary or memory: https://landing-pages-visitor-events-staging.cluster-public.staging.app-us1.com/Visitor/
Source: chromecache_182.1.dr	String found in binary or memory: https://landing-pages-visitor-events.cluster.app-us1.com/Visitor/
Source: chromecache_180.1.dr	String found in binary or memory: https://liftoff.io/privacy-policy/
Source: chromecache_180.1.dr	String found in binary or memory: https://listenloop.com/user-consent-policy
Source: chromecache_180.1.dr	String found in binary or memory: https://lndata.com/policy
Source: chromecache_147.1.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_147.1.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_180.1.dr	String found in binary or memory: https://lokaplatform.com/privacy/
Source: chromecache_180.1.dr	String found in binary or memory: https://nextlevel.sl/datenschutz/
Source: chromecache_147.1.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_147.1.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_130.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_130.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_180.1.dr	String found in binary or memory: https://partner.lentainform.com/privacy-policy/
Source: chromecache_176.1.dr	String found in binary or memory: https://player.vimeo.com/api/player.js
Source: chromecache_180.1.dr	String found in binary or memory: https://rebelai.com/gdpr
Source: chromecache_183.1.dr	String found in binary or memory: https://stackoverflow.com/questions/5639346/what-is-the-shortest-function-for-reading-a-cookie-by-na
Source: chromecache_130.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_130.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_130.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_180.1.dr	String found in binary or memory: https://terms.line.me/line_rules
Source: chromecache_183.1.dr	String found in binary or memory: https://www.activecampaign.com/lp/sem/pages?utm_source=direct&utm_campaign=acpages
Source: chromecache_180.1.dr	String found in binary or memory: https://www.adv.admeme.net/en/privacy/optout.html
Source: chromecache_183.1.dr	String found in binary or memory: https://www.calameo.com/read/007891788a1804574bc62
Source: chromecache_180.1.dr	String found in binary or memory: https://www.crownpeak.com/privacy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.everflow.io/legal/gdpr-policy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.expedia.co.uk/p/support/privacy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.factual.com/privacy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.fancs.com/privacypolicy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.fiverr.com/privacy-policy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.flywheel.jp/privacy-policy/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.forbes.com/privacy/english/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.fortvision.com/privacy-policy/index.html
Source: chromecache_130.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_130.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_130.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_130.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_130.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.ingenio.com/privacy-policy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.jysk.ee/cookies
Source: chromecache_180.1.dr	String found in binary or memory: https://www.kadam.net/ru/privacy-policy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.kaufda.de/Datenschutz
Source: chromecache_180.1.dr	String found in binary or memory: https://www.kayak.com/privacy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.kelkoo.fr/info-societe/politique-confidentialite
Source: chromecache_180.1.dr	String found in binary or memory: https://www.keycdn.com/gdpr
Source: chromecache_180.1.dr	String found in binary or memory: https://www.kwanzoo.com/gdpr
Source: chromecache_180.1.dr	String found in binary or memory: https://www.landsend.com/customerservice/legal_policies/privacy/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.leadbolt.com/privacy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.lendingtree.com/legal/privacy-policy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.lidl.es/es/politica-de-privacidad/s797
Source: chromecache_180.1.dr	String found in binary or memory: https://www.ligatus.com/en/privacy-policy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.linkstorm.net/privacy/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.livelyimpact.com/privacy-polilcy-data-regulation/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.livepartners.com/confidentiality.html
Source: chromecache_180.1.dr	String found in binary or memory: https://www.loblaw.ca/en/privacy-policy/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.localstars.com/localstars-privacy-policy
Source: chromecache_130.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_180.1.dr	String found in binary or memory: https://www.nexstardigital.com/privacy/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.nexus-soft.org/index/privacy
Source: chromecache_180.1.dr	String found in binary or memory: https://www.ninthdecimal.com/privacy/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.nomuraholdings.com/policy/privacy.html
Source: chromecache_180.1.dr	String found in binary or memory: https://www.philips.com/a-w/privacy-notice.html#triggername=info_how_we_protect_data
Source: chromecache_180.1.dr	String found in binary or memory: https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/datenschutz-sdi/
Source: chromecache_180.1.dr	String found in binary or memory: https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/sdi-datenschutz-b2c
Source: chromecache_130.1.dr, chromecache_176.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_127.1.dr, chromecache_159.1.dr	String found in binary or memory: https://xlts.dev/angularjs

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.40.132:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.39.21:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.39.21:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.31.174:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.31.174:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.128.216:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.57:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.31.174:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.31.174:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.128.216:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.88.238.126:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.83.170.136:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.233.202.179:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.233.202.179:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.137:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.137:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.111.22:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.53.249:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.234:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.234:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.171.158:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.233.202.179:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.234:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.171.158:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.233.202.179:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.137:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.243.82:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.160:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.136.137:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.235.177:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.243.82:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.15.128:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.15.128:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.4:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.128.193.190:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.135.233:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.230.198:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.230.198:443 -> 192.168.2.4:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49864 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5272_410751251

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5272_410751251

Jump to behavior

Source: classification engine

Classification label: mal72.phis.troj.win@26/155@98/32

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1600,i,10613907384107303506,7445878619451696752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2020 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1600,i,10613907384107303506,7445878619451696752,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2020 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://www.adsbynimbus.com/privacy-policy	0%	Avira URL Cloud	safe
https://www.loblaw.ca/en/privacy-policy/	0%	Avira URL Cloud	safe
https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/datenschutz-sdi/	0%	Avira URL Cloud	safe
https://www.nomuraholdings.com/policy/privacy.html	0%	Avira URL Cloud	safe
https://app.landing-pages.app-us1.com/formsubmit/form	0%	Avira URL Cloud	safe
https://xlts.dev/angularjs	0%	Avira URL Cloud	safe
https://www.ninthdecimal.com/privacy/	0%	Avira URL Cloud	safe
https://firststars.de/datenschutzeinstellungen	0%	Avira URL Cloud	safe
https://www.everflow.io/legal/gdpr-policy	0%	Avira URL Cloud	safe
https://www.flywheel.jp/privacy-policy/	0%	Avira URL Cloud	safe
http://firstdonoharm.dev	0%	Avira URL Cloud	safe
https://www.livepartners.com/confidentiality.html	0%	Avira URL Cloud	safe
http://greensock.com	0%	Avira URL Cloud	safe
https://kobler.no/privacy-policy	0%	Avira URL Cloud	safe
http://www.fancydigital.com.cn/html/privacy_GDRP.html	0%	Avira URL Cloud	safe
https://kimiagroup.com/en/privacy-policy.html	0%	Avira URL Cloud	safe
https://www.keycdn.com/gdpr	0%	Avira URL Cloud	safe
https://kubico.com/privacy-policy/	0%	Avira URL Cloud	safe
https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/sdi-datenschutz-b2c	0%	Avira URL Cloud	safe
https://www.nexus-soft.org/index/privacy	0%	Avira URL Cloud	safe
https://nextlevel.sl/datenschutz/	0%	Avira URL Cloud	safe
https://errors.angularjs.xlts.dev/1.9.1/	0%	Avira URL Cloud	safe
https://5148882780-1317754460.cos.ap-bangkok.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://www.localstars.com/localstars-privacy-policy	0%	Avira URL Cloud	safe
https://ads.innovativeadserver.com/gdrp	0%	Avira URL Cloud	safe
https://www.kwanzoo.com/gdpr	0%	Avira URL Cloud	safe
https://www.linkstorm.net/privacy/	0%	Avira URL Cloud	safe
http://skin.calameo.com/2.0	0%	Avira URL Cloud	safe
https://www.lidl.es/es/politica-de-privacidad/s797	0%	Avira URL Cloud	safe
https://fsharp.co/privacy-policy	0%	Avira URL Cloud	safe
http://www.link.ch/privacy	0%	Avira URL Cloud	safe
https://www.jysk.ee/cookies	0%	Avira URL Cloud	safe
https://www.kadam.net/ru/privacy-policy	0%	Avira URL Cloud	safe
http://tt.epicplay.com	0%	Avira URL Cloud	safe
https://www.ingenio.com/privacy-policy	0%	Avira URL Cloud	safe
https://docs.faxcloudstorage.de/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
d2j1le9npedpi7.cloudfront.net	18.238.49.57	true	false	unknown
beacons-handoff.gcp.gvt2.com	142.251.116.94	true	false	high
e2c27.gcp.gvt2.com	35.227.159.135	true	false	high
cos.ap-bangkok.myqcloud.com	43.128.193.190	true	false	high
cdn.discordapp.com	162.159.135.233	true	false	high
a559.dscb.akamai.net	23.55.235.234	true	false	high
d.calameo.com	85.233.202.179	true	false	high
polestubllin.ac-page.com	104.18.39.21	true	false	unknown
www.calameo.com	85.233.202.179	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	142.251.40.132	true	false	high
a1779.dscb.akamai.net	23.44.136.137	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	23.209.72.31	true	false	high
e3849.dsca.akamaiedge.net	23.209.53.249	true	false	high
prism.app-us1.com	104.18.128.216	true	false	high
docs.faxcloudstorage.de	104.21.15.128	true	false	high
a1435.dscb.akamai.net	23.55.243.82	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
5148882780.xyz	69.49.230.198	true	false	high
calameo-beacon.global.ssl.fastly.net	151.101.1.194	true	false	high
content.app-us1.com	104.17.31.174	true	false	high
diffuser-cdn.app-us1.com	104.18.128.216	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
landing-pages-visitor-events.cluster.app-us1.com	3.88.238.126	true	false	unknown
e110990.dsca.akamaiedge.net	23.44.111.22	true	false	high
5148882780-1317754460.cos.ap-bangkok.myqcloud.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
imgsct.cookiebot.com	unknown	unknown	false	high
landing-pages-cdn.app-us1.com	unknown	unknown	false	high
ps.calameoassets.com	unknown	unknown	false	high
consentcdn.cookiebot.com	unknown	unknown	false	high
v.calameo.com	unknown	unknown	false	high
consent.cookiebot.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
s.calameoassets.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://prism.app-us1.com/?a=226975603&u=https%3A%2F%2Fpolestubllin.ac-page.com%2Fdocuments-nowreview-copy%3Ftest%3Dtrue%26data%3D05%257C02%257Cdeborah.cantu%40christushealth.org%257C9e7f5b22750f4b0a926208dd67155304%257C731939eac4fc4b44872b087271216567%257C0%257C0%257C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ%3D%3D%257C0%257C%257C%257C%26sdata%3DJEFyfacBrjqR1C9dEXbaS2KjW2qYjj%2BroFIB112Wvg%3D%26reserved%3D0	false		high
https://cdn.discordapp.com/attachments/664305779951665173/1350051780712468582/6059C6BA-9C9F-4199-8218-8895A9F0C3C8.png?ex=67d55533&is=67d403b3&hm=c74e1d4a21a042a14a2f638c6c547646206f493cec40d064fe8dc4adf2421c7d&	false		high
https://landing-pages-cdn.app-us1.com/core/directives/directives.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/922fe7cb9afd42ef/1742418092128/DxegtWOKhlTU2g8	false		high
https://landing-pages-cdn.app-us1.com/core/directives/directives.countdown.js	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0	false		unknown
https://d.calameo.com/pinwheel/viewer/book/get?bkcode=007891788a1804574bc62	false		high
https://consent.cookiebot.com/Framework/IAB/consent-sdk-2.2.js	false		high
https://landing-pages-cdn.app-us1.com/vendor/angular-cookies/angular-cookies.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://landing-pages-cdn.app-us1.com/vendor/angular/angular.min.js	false		high
https://landing-pages-cdn.app-us1.com/app/app.config.js	false		high
https://landing-pages-cdn.app-us1.com/vendor/jquery/dist/jquery.min.js	false		high
https://landing-pages-cdn.app-us1.com/vendor/gsap/src/minified/TweenMax.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1776783448:1742415396:giZiQcbqlXktMBJhJfRBTruBBUvnIBRpVn9aUNuK8gg/922fe7cb9afd42ef/rP7K9NqIH26Xc.QzmuwASmapXRvrt__u..kyfYHXvyo-1742418090-1.1.1.1-Kb4c4OTLrlgk6YGCRX0VJsPokCIn.cnGqWrlsmYPt46iLntyrkcpriHqu6dlp8w_	false		high
https://landing-pages-cdn.app-us1.com/vendor/angular-animate/angular-animate.min.js	false		high
https://landing-pages-cdn.app-us1.com/core/directives/directives.background-video.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=922fe7cb9afd42ef&lang=auto	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://calameo-beacon.global.ssl.fastly.net/collect?e=pagetime&aid=7891788&bid=17392586&pages=1&time=13&dv=desktop&src=calameo&_c=118296171	false		high
https://landing-pages-cdn.app-us1.com/core/services/services.paths.js	false		high
https://landing-pages-cdn.app-us1.com/vendor/urijs/src/URI.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0y4e7/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/	false		high
https://landing-pages-cdn.app-us1.com/app/app.controllers.js	false		high
https://landing-pages-cdn.app-us1.com/app/bootstrap.js	false		high
https://5148882780-1317754460.cos.ap-bangkok.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://v.calameo.com/pinwheel/skin/2.1/2021/assets.png	false		high
https://calameo-beacon.global.ssl.fastly.net/collect?e=link&aid=7891788&bid=17392586&pages=1&t=1&to=https%3A%2F%2Fdocs.faxcloudstorage.de%2FuTN1Q&dv=desktop&src=calameo&_c=457264775	false		high
https://consent.cookiebot.com/2372292c-680d-47b7-90f2-1af22359ed6d/cc.js?renew=false&referer=www.calameo.com&dnt=false&init=false&framework=TCFv2.2	false		high
https://consentcdn.cookiebot.com/sdk/bc-v4.min.html	false		high
https://docs.faxcloudstorage.de/uTN1Q/	true		unknown
https://landing-pages-cdn.app-us1.com/core/services/services.modal.js	false		high
https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ%3D%3D%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj%20roFIB112Wvg%3D&reserved=0	true		unknown
https://landing-pages-cdn.app-us1.com/core/services/services.js	false		high
https://calameo-beacon.global.ssl.fastly.net/collect?e=pageview&aid=7891788&bid=17392586&pages=1&dv=desktop&src=calameo&_c=870545700	false		high
https://landing-pages-cdn.app-us1.com/analytics/analytics.js	false		high
https://docs.faxcloudstorage.de/favicon.ico	false	Avira URL Cloud: safe	unknown
https://landing-pages-cdn.app-us1.com/core/directives/directives.scratch.js	false		high
https://landing-pages-cdn.app-us1.com/core/core.js	false		high
https://s.calameoassets.com/pinwheel/9198-975f40/platform/img/favicon/favicon-32x32.png	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://player.vimeo.com/api/player.js	chromecache_176.1.dr	false		high
https://www.flywheel.jp/privacy-policy/	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/p/delete-all-cookies/blob/master/index.js	chromecache_183.1.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_130.1.dr	false		high
https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/datenschutz-sdi/	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://www.everflow.io/legal/gdpr-policy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://www.loblaw.ca/en/privacy-policy/	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stroeerdigitalgroup.de/metatag/iabtcf/deviceStorage.json	chromecache_180.1.dr	false		high
https://app.landing-pages.app-us1.com/formsubmit/form	chromecache_183.1.dr	false	Avira URL Cloud: safe	unknown
https://www.fiverr.com/privacy-policy	chromecache_180.1.dr	false		high
http://www.calameo.com/	chromecache_192.1.dr, chromecache_188.1.dr	false		high
https://liftoff.io/privacy-policy/	chromecache_180.1.dr	false		high
https://www.ninthdecimal.com/privacy/	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://xlts.dev/angularjs	chromecache_127.1.dr, chromecache_159.1.dr	false	Avira URL Cloud: safe	unknown
https://landing-pages-cdn.app-us1.com/app/app.templates.svg.js	chromecache_183.1.dr	false		high
https://www.google.com	chromecache_130.1.dr	false		high
https://www.youtube.com/iframe_api	chromecache_130.1.dr, chromecache_176.1.dr	false		high
http://www.adsbynimbus.com/privacy-policy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://terms.line.me/line_rules	chromecache_180.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_197.1.dr, chromecache_179.1.dr	false		high
https://www.philips.com/a-w/privacy-notice.html#triggername=info_how_we_protect_data	chromecache_180.1.dr	false		high
https://www.nomuraholdings.com/policy/privacy.html	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://firststars.de/datenschutzeinstellungen	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://www.landsend.com/customerservice/legal_policies/privacy/	chromecache_180.1.dr	false		high
https://www.kaufda.de/Datenschutz	chromecache_180.1.dr	false		high
http://firstdonoharm.dev	chromecache_141.1.dr	false	Avira URL Cloud: safe	unknown
https://www.livepartners.com/confidentiality.html	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_143.1.dr	false		high
http://greensock.com	chromecache_136.1.dr	false	Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_147.1.dr	false		high
https://www.nexus-soft.org/index/privacy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
http://www.fancydigital.com.cn/html/privacy_GDRP.html	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/sdi-datenschutz-b2c	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://kimiagroup.com/en/privacy-policy.html	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://kidoz.net/gdpr/	chromecache_180.1.dr	false		high
https://kobler.no/privacy-policy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://kubico.com/privacy-policy/	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://www.keycdn.com/gdpr	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://nextlevel.sl/datenschutz/	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://www.localstars.com/localstars-privacy-policy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_130.1.dr	false		high
http://underscorejs.org/LICENSE	chromecache_147.1.dr	false		high
https://errors.angularjs.xlts.dev/1.9.1/	chromecache_187.1.dr	false	Avira URL Cloud: safe	unknown
https://www.kwanzoo.com/gdpr	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://www.lidl.es/es/politica-de-privacidad/s797	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://fsharp.co/privacy-policy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_197.1.dr, chromecache_179.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_130.1.dr	false		high
http://skin.calameo.com/2.0	chromecache_192.1.dr, chromecache_188.1.dr	false	Avira URL Cloud: safe	unknown
https://www.linkstorm.net/privacy/	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://ads.innovativeadserver.com/gdrp	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
http://www.link.ch/privacy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://www.jysk.ee/cookies	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://npms.io/search?q=ponyfill.	chromecache_147.1.dr	false		high
https://www.kadam.net/ru/privacy-policy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
http://tt.epicplay.com	chromecache_152.1.dr	false	Avira URL Cloud: safe	unknown
https://www.ingenio.com/privacy-policy	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
98.83.170.136	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
23.201.171.158	unknown	United States	16625	AKAMAI-ASUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
18.238.49.57	d2j1le9npedpi7.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.1.194	calameo-beacon.global.ssl.fastly.net	United States	54113	FASTLYUS	false
162.159.135.233	cdn.discordapp.com	United States	13335	CLOUDFLARENETUS	false
69.49.230.198	5148882780.xyz	United States	46606	UNIFIEDLAYER-AS-1US	false
104.18.128.216	prism.app-us1.com	United States	13335	CLOUDFLARENETUS	false
23.209.53.249	e3849.dsca.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
23.55.235.234	a559.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false
142.251.40.132	www.google.com	United States	15169	GOOGLEUS	false
23.44.136.137	a1779.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
23.55.243.82	a1435.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false
23.209.72.31	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
23.55.235.177	unknown	United States	20940	AKAMAI-ASN1EU	false
23.209.72.9	unknown	United States	20940	AKAMAI-ASN1EU	false
23.44.111.22	e110990.dsca.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
43.128.193.190	cos.ap-bangkok.myqcloud.com	Japan	4249	LILLY-ASUS	false
85.233.202.179	d.calameo.com	France	15830	EQUINIX-CONNECT-EMEAGB	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.39.21	polestubllin.ac-page.com	United States	13335	CLOUDFLARENETUS	false
3.88.238.126	landing-pages-visitor-events.cluster.app-us1.com	United States	14618	AMAZON-AESUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
23.44.136.160	unknown	United States	20940	AKAMAI-ASN1EU	false
104.17.31.174	content.app-us1.com	United States	13335	CLOUDFLARENETUS	false
104.21.15.128	docs.faxcloudstorage.de	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1643509
Start date and time:	2025-03-19 21:59:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05\|02\|deborah.cantu@christushealth.org\|9e7f5b22750f4b0a926208dd67155304\|731939eac4fc4b44872b087271216567\|0\|0\|6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==\|0\|\|\|&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.troj.win@26/155@98/32

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.99, 142.250.65.174, 142.250.72.110, 142.251.167.84, 142.250.31.84, 142.251.40.206, 142.251.32.110, 142.251.40.238, 142.250.80.110, 142.250.80.74, 142.250.80.35, 199.232.210.172, 23.203.176.221, 208.89.73.31, 142.251.35.174, 142.250.65.168, 142.251.40.142, 142.250.65.170, 142.250.65.202, 142.250.65.234, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.250.80.42, 142.251.40.138, 142.251.40.170, 142.250.64.74, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.251.40.106, 172.217.165.138, 142.251.41.10, 142.251.40.234, 142.250.80.99, 142.250.80.78, 142.250.80.46, 142.251.41.3, 172.253.115.84, 23.204.23.20, 52.149.20.212, 13.107.246.40
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, c.pki.goog, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	183
Entropy (8bit):	4.947269531985676
Encrypted:	false
SSDEEP:	3:iPaQJx25BXQob7RMoQRTaioS6wFQXQLGRNaeTBELrXQjSpvIv:iPT2TAU3QVYS/QJBorXQ4Iv
MD5:	47CB67BBFD3213BA85B35DBF821C6849
SHA1:	58E45FD34E22A680AA40C60BA1BE2EE380668276
SHA-256:	F1CC16DF0CCE04BFB10CC0DC4C0E91ECDE6569ABADF31A35434F99E5B4632196
SHA-512:	3A9677E539B72A3AC5F7E937E13A1C8BD64B963210C508DF79FEF6A2419E1F2FC1355BF48C2E16DCD94CD5FCEA17CB67CC49E6E712067110F757B287CCD595AC
Malicious:	false
Reputation:	low
URL:	https://landing-pages-cdn.app-us1.com/app/app.controllers.js
Preview:	angular.module("rv.app").controller("AppCtrl", function ($scope, $timeout) {. $scope.LL_INFO = window.LL_INFO;.. $timeout(function () {. $scope.pageLoaded = true;. }, 200);.});.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 22:00:56.784437895 CET	53	50145	1.1.1.1	192.168.2.4
Mar 19, 2025 22:00:57.050019026 CET	53	53110	1.1.1.1	192.168.2.4
Mar 19, 2025 22:00:57.100915909 CET	53	55325	1.1.1.1	192.168.2.4
Mar 19, 2025 22:00:57.570451021 CET	53	55475	1.1.1.1	192.168.2.4
Mar 19, 2025 22:00:57.781913042 CET	53	53956	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:00.401329994 CET	56436	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:00.401591063 CET	62820	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:00.492505074 CET	53	56436	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:00.493555069 CET	53	62820	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:02.054245949 CET	65290	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:02.054348946 CET	50718	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:02.154232025 CET	53	65290	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:02.157833099 CET	53	50718	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:02.719042063 CET	61992	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:02.719042063 CET	52973	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:02.809088945 CET	53	55918	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:02.814820051 CET	53	61992	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:02.816952944 CET	53	52973	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:03.231349945 CET	61677	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:03.232542992 CET	55313	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:03.246069908 CET	60456	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:03.246171951 CET	58348	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:03.315390110 CET	52055	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:03.316014051 CET	54785	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:03.340446949 CET	53	58348	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:03.341279030 CET	53	60456	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:03.358680010 CET	53	55313	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:03.366072893 CET	53	61677	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:03.410659075 CET	53	52055	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:03.414055109 CET	53	54785	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:03.852874994 CET	51050	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:03.853180885 CET	64095	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:03.944771051 CET	53	51050	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:03.946222067 CET	53	64095	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:05.969964981 CET	55291	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:05.970293045 CET	60289	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:06.072537899 CET	53	60289	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:06.098747015 CET	53	55291	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:07.256293058 CET	59112	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:07.256546974 CET	55269	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:07.350976944 CET	53	55269	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:07.377927065 CET	53	59112	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:12.730897903 CET	50724	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:12.731050014 CET	60947	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:12.826145887 CET	53	60947	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:12.826692104 CET	53	50724	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:13.593503952 CET	55524	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:13.593554974 CET	58424	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:13.693116903 CET	53	58424	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:13.753643036 CET	53	55524	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:14.550822973 CET	63689	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:14.550952911 CET	61544	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:14.644596100 CET	53	63689	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:14.645643950 CET	53	61544	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:14.834942102 CET	53	60249	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:15.451015949 CET	54453	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:15.451277971 CET	50771	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:15.541702032 CET	53	50771	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:15.542681932 CET	53	54453	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:16.345180988 CET	49276	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:16.345330954 CET	56843	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:16.445728064 CET	53	49276	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:16.447971106 CET	53	56843	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:16.607012987 CET	55005	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:16.607657909 CET	59522	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:16.616235971 CET	61439	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:16.616461992 CET	52720	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:16.698568106 CET	53	55005	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:16.699039936 CET	53	59522	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:16.711782932 CET	53	52720	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:16.712224960 CET	53	61439	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:17.046257019 CET	49420	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:17.047317028 CET	60495	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:17.086391926 CET	50242	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:17.086539984 CET	57115	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:17.139357090 CET	53	49420	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:17.157872915 CET	53	60495	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:17.176868916 CET	53	57115	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:17.178334951 CET	53	50242	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:17.398789883 CET	57221	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:17.399600983 CET	60309	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:17.491646051 CET	53	60309	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:17.493041992 CET	53	57221	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:18.737195015 CET	49163	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:18.737792969 CET	62843	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:18.823292971 CET	53	58172	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:18.831044912 CET	53	49163	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:18.877963066 CET	53	62843	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:19.135329962 CET	63916	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:19.135518074 CET	56414	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:19.228938103 CET	53	63916	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:19.268878937 CET	52722	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:19.269104958 CET	62089	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:19.296703100 CET	53	56414	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:19.370609999 CET	53	62089	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:19.436458111 CET	53	52722	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:20.208070993 CET	54708	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:20.208187103 CET	52063	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:20.214302063 CET	53	61146	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:20.301281929 CET	53	54708	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:20.301877022 CET	53	52063	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:20.312058926 CET	53	58158	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:20.686860085 CET	54120	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:20.686995983 CET	56829	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:20.780067921 CET	53	54120	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:20.780458927 CET	53	56829	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:28.274972916 CET	49701	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:28.274972916 CET	59986	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:28.436140060 CET	53	59986	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:28.493463993 CET	53	49701	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:29.336462021 CET	49164	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:29.336579084 CET	49813	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:29.340163946 CET	52114	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:29.340302944 CET	58813	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:29.428198099 CET	53	49813	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:29.428215027 CET	53	49164	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:29.431886911 CET	53	52114	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:29.432611942 CET	53	58813	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:30.345787048 CET	50824	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:30.345904112 CET	61436	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:30.436566114 CET	53	61436	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:30.436954021 CET	53	50824	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:31.460488081 CET	53987	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:31.460728884 CET	51435	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:31.554527044 CET	53	53987	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:31.554758072 CET	53	51435	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:32.261069059 CET	55081	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:32.261193037 CET	55759	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:32.351130009 CET	53	55081	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:32.352215052 CET	53	55759	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:33.753973961 CET	53	52391	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:41.628195047 CET	52187	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:41.628436089 CET	59201	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:41.900913000 CET	53	52187	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:41.904975891 CET	53	59201	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.513972998 CET	50930	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.514130116 CET	60183	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.514615059 CET	57194	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.514753103 CET	57860	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.515170097 CET	49834	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.515316963 CET	56812	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.516676903 CET	63601	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.516814947 CET	55365	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.517241955 CET	64843	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.517405033 CET	50050	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:42.605730057 CET	53	60183	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.606065989 CET	53	50930	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.606106997 CET	53	56812	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.606143951 CET	53	57860	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.606184006 CET	53	57194	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.606636047 CET	53	49834	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.606950045 CET	53	63601	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.607932091 CET	53	55365	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.608131886 CET	53	50317	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:42.840764999 CET	53	50050	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:43.057466030 CET	53	64843	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:45.887720108 CET	60942	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:45.887721062 CET	61477	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:45.892267942 CET	64525	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:45.892267942 CET	53070	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:45.985398054 CET	53	53070	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:45.987988949 CET	53	64525	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:46.098336935 CET	53	60942	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:46.148638964 CET	53	61477	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:46.858959913 CET	53558	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:46.859083891 CET	63109	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:46.992074966 CET	53	53558	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:46.992321968 CET	53	63109	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:49.877578974 CET	63390	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:49.877844095 CET	57755	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:49.970305920 CET	53	57755	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:50.004899025 CET	53	63390	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:50.057249069 CET	53	59256	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:50.496701002 CET	53936	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:50.496848106 CET	50993	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:50.591113091 CET	53	53936	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:56.281883955 CET	53	61783	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:56.821619987 CET	53	50790	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:57.676115036 CET	53	64808	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:58.771838903 CET	53	64411	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:58.910933971 CET	53	55933	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:59.322843075 CET	63748	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:59.323260069 CET	65218	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:59.416779041 CET	53	63748	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:59.424302101 CET	53	65218	1.1.1.1	192.168.2.4
Mar 19, 2025 22:01:59.884280920 CET	63628	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:01:59.976470947 CET	53	63628	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:00.993885040 CET	51846	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:01.088469982 CET	53	51846	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:02.008661032 CET	51846	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:02.099863052 CET	53	51846	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:03.024550915 CET	51846	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:03.114960909 CET	53	51846	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:03.592469931 CET	138	138	192.168.2.4	192.168.2.255
Mar 19, 2025 22:02:05.024327040 CET	51846	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:05.117872953 CET	53	51846	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:09.025423050 CET	51846	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:09.116933107 CET	53	51846	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:14.966639996 CET	49417	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:14.966991901 CET	54694	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:15.061398029 CET	53	49417	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:15.061877012 CET	53	54694	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:15.524812937 CET	64000	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:15.524928093 CET	63966	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:15.616199017 CET	53	64000	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:15.616849899 CET	53	63966	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:16.634519100 CET	59247	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:16.725220919 CET	53	59247	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:17.634033918 CET	59247	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:17.731477976 CET	53	59247	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:18.634017944 CET	59247	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:18.727705002 CET	53	59247	1.1.1.1	192.168.2.4
Mar 19, 2025 22:02:20.649599075 CET	59247	53	192.168.2.4	1.1.1.1
Mar 19, 2025 22:02:20.747529984 CET	53	59247	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 19, 2025 22:00:57.049942017 CET	192.168.2.4	1.1.1.1	c1f9	(Port unreachable)	Destination Unreachable
Mar 19, 2025 22:01:18.878060102 CET	192.168.2.4	1.1.1.1	c277	(Port unreachable)	Destination Unreachable
Mar 19, 2025 22:01:28.493809938 CET	192.168.2.4	1.1.1.1	c281	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 22:01:08.449470997 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 22:01:08.544338942 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 20:13:27 GMT Expires: Wed, 19 Mar 2025 21:03:27 GMT Age: 2861 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 19, 2025 22:01:08.550218105 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 22:01:08.642827988 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 20:13:30 GMT Expires: Wed, 19 Mar 2025 21:03:30 GMT Age: 2858 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:02 UTC	1038	OUT	GET /documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0 HTTP/1.1 Host: polestubllin.ac-page.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:02 UTC	375	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 21:01:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922fe71acd223f3b-EWR CF-Cache-Status: DYNAMIC x-envoy-upstream-service-time: 36 Set-Cookie: __cfruid=ad395f75712ec61448f32e5b1d3e354e5b8452c1-1742418062; path=/; domain=.ac-page.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2025-03-19 21:01:02 UTC	994	IN	Data Raw: 65 38 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 0d 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 22 20 78 6d 6c 6e 73 3a 61 70 70 3d 22 69 67 6e 6f 72 65 64 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 0d 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 22 20 78 6d 6c 6e 73 3a 61 70 70 3d 22 69 67 6e 6f 72 65 64 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0d 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 74 2d 69 65 39 22 20 78 6d 6c 6e 73 3a 61 70 70 3d 22 69 67 6e 6f 72 Data Ascii: e85<!DOCTYPE html>...[if lt IE 7]><html class="no-js lt-ie9 lt-ie8 lt-ie7" xmlns:app="ignored"> <![endif]-->...[if IE 7]><html class="no-js lt-ie9 lt-ie8" xmlns:app="ignored"> <![endif]-->...[if IE 8]><html class="no-js lt-ie9" xmlns:app="ignor
2025-03-19 21:01:02 UTC	1369	IN	Data Raw: 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0d 20 20 20 20 3c 21 2d 2d 20 46 6f 72 20 74 68 65 20 42 72 61 6e 64 65 64 20 46 6f 6f 74 65 72 20 2d 2d 3e 0d 20 20 20 20 3c 6c 69 6e 6b 0d 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 49 42 4d 2b 50 6c 65 78 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 0d 20 20 20 20 20 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 0d 20 20 20 Data Ascii: <meta property="og:image" content="" /> <meta property="og:description" content="" /> ... For the Branded Footer --> <link href="https://fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@400&display=swap" rel="stylesheet"
2025-03-19 21:01:02 UTC	1361	IN	Data Raw: 74 6f 72 47 6c 6f 62 61 6c 4f 62 6a 65 63 74 41 6c 69 61 73 5d 2e 6c 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 72 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 73 72 63 3d 6f 3b 72 2e 61 73 79 6e 63 3d 74 72 75 65 3b 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 69 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 22 68 74 74 70 73 3a 2f 2f 64 69 66 66 75 73 65 72 2d 63 64 6e 2e 61 70 70 2d 75 73 31 2e 63 6f 6d 2f 64 69 66 66 75 73 65 72 2f 64 69 66 66 75 73 65 72 2e 6a 73 22 2c 22 76 67 6f 22 29 3b 0a 20 20 20 20 76 67 6f 28 27 73 Data Ascii: torGlobalObjectAlias].l=(new Date).getTime();r=t.createElement("script");r.src=o;r.async=true;i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i)})(window,document,"https://diffuser-cdn.app-us1.com/diffuser/diffuser.js","vgo"); vgo('s
2025-03-19 21:01:02 UTC	1369	IN	Data Raw: 31 33 64 30 0d 0a 74 3a 31 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 72 65 6d 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 33 30 2c 20 33 30 2c 20 33 32 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 75 74 6c 69 6e 65 3a 30 70 78 3b 7d 23 70 61 67 65 2d 74 68 65 6d 65 20 Data Ascii: 13d0t:1.5rem;padding-bottom:0.5rem;padding-left:1.5rem;font-family:inherit;font-size:1.6rem;color:#ffffff;background-color:rgb(30, 30, 32);text-decoration:none;letter-spacing:1px;line-height:1.5;text-align:center;cursor:pointer;outline:0px;}#page-theme
2025-03-19 21:01:02 UTC	1369	IN	Data Raw: 6f 63 6b 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 46 37 44 43 37 33 36 39 2d 41 41 44 34 2d 42 32 45 35 2d 39 31 46 43 2d 33 46 41 41 33 43 45 46 39 44 31 33 22 5d 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 36 64 32 65 64 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 31 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 Data Ascii: ock;}}</style><style>#page-theme [data-bach-id="F7DC7369-AAD4-B2E5-91FC-3FAA3CEF9D13"]{border-style:solid;border-width:0px;border-color:#c6d2ed;margin-right:auto;margin-left:auto;float: none;width:100%;opacity:1;display:block;}@media screen and (max-width
2025-03-19 21:01:02 UTC	1369	IN	Data Raw: 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 7d 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 30 37 33 36 31 35 44 46 2d 33 36 42 39 2d 38 44 36 32 2d 42 35 41 36 2d 37 30 31 42 39 33 34 30 35 37 45 31 22 5d 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 64 69 73 63 3b 7d 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 30 37 33 36 31 35 44 46 2d 33 36 42 39 2d 38 44 36 32 2d 42 35 41 36 2d 37 30 31 42 39 33 34 30 35 37 45 31 22 5d 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 64 65 63 69 6d 61 6c 3b 7d 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 30 37 33 36 31 35 44 46 2d 33 36 42 39 2d 38 44 36 32 2d 42 35 41 36 2d 37 30 31 42 39 33 34 30 35 37 Data Ascii: -break:break-word;}#page-theme [data-bach-id="073615DF-36B9-8D62-B5A6-701B934057E1"] ul{list-style:disc;}#page-theme [data-bach-id="073615DF-36B9-8D62-B5A6-701B934057E1"] ol{list-style:decimal;}#page-theme [data-bach-id="073615DF-36B9-8D62-B5A6-701B934057
2025-03-19 21:01:02 UTC	973	IN	Data Raw: 39 32 34 2d 39 35 39 41 38 32 36 33 39 36 39 30 22 5d 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 36 64 32 65 64 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 31 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 2e 30 72 65 6d 3b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 42 45 31 32 43 32 46 45 2d 35 34 42 42 Data Ascii: 924-959A82639690"]{border-style:solid;border-width:0px;border-color:#c6d2ed;margin-right:auto;margin-left:auto;float: none;width:100%;opacity:1;display:block;margin-top:0.0rem;}@media screen and (max-width: 767px) {#page-theme [data-bach-id="BE12C2FE-54BB
2025-03-19 21:01:02 UTC	1369	IN	Data Raw: 32 30 30 30 0d 0a 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 2e 30 72 65 6d 3b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 44 31 46 34 43 43 35 36 2d 34 32 31 33 2d 38 31 33 35 2d 36 36 30 30 2d 41 45 42 43 38 37 35 33 33 33 39 44 22 5d 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 23 70 61 67 65 2d 74 Data Ascii: 2000uto;margin-left:auto;float: none;width:100%;margin-top:3.0rem;}@media screen and (max-width: 767px) {#page-theme [data-bach-id="D1F4CC56-4213-8135-6600-AEBC8753339D"]{width:100%;margin-right:auto;margin-left:auto;float: none;}}</style><style>#page-t
2025-03-19 21:01:02 UTC	1369	IN	Data Raw: 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 38 31 39 42 30 44 42 43 2d 43 31 45 31 2d 39 43 35 46 2d 32 30 37 38 2d 43 30 36 41 35 37 44 35 36 44 30 31 22 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 36 64 32 65 64 3b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 23 70 61 67 65 2d Data Ascii: dth:100%;margin-right:auto;margin-left:auto;float: none;}}</style><style>#page-theme [data-bach-id="819B0DBC-C1E1-9C5F-2078-C06A57D56D01"]{display:block;border-style:solid;border-width:0px;border-color:#c6d2ed;}@media screen and (max-width: 767px) {#page-
2025-03-19 21:01:02 UTC	1369	IN	Data Raw: 46 45 38 36 38 22 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 2e 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 2e 30 72 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 2e 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 2e 30 72 65 6d 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 75 6e 64 65 66 69 6e 65 64 22 5d 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 23 70 61 67 65 2d 74 68 65 6d 65 20 5b 64 61 74 61 2d 62 61 63 68 2d 69 64 3d 22 75 6e 64 65 66 69 6e 65 64 22 5d 7b 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e Data Ascii: FE868"]{padding-right:2.0rem;padding-left:2.0rem;display:block;padding-top:5.0rem;padding-bottom:5.0rem;}}</style><style>#page-theme [data-bach-id="undefined"]{}@media screen and (max-width: 767px) {#page-theme [data-bach-id="undefined"]{}}</style><style>

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	686	OUT	GET /oee92L/2025/03/13/16c5b8c8-3b9a-4bf6-8ebc-0128bcfba61c.png HTTP/1.1 Host: content.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	560	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 21:01:03 GMT Content-Type: image/png Content-Length: 22950 Connection: close Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=44525 etag: "d762550d98bff353409be8da3a3ce59a" last-modified: Thu, 13 Mar 2025 07:51:23 GMT x-envoy-upstream-service-time: 44 CF-Cache-Status: HIT Age: 565766 Expires: Thu, 19 Mar 2026 21:01:03 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 922fe71ee9a65541-EWR
2025-03-19 21:01:03 UTC	809	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 66 00 00 00 ee 08 02 00 00 00 85 d0 3a 40 00 00 0c 28 69 43 43 50 69 63 63 00 00 78 da ad 97 77 5c 93 d7 f7 c7 cf 33 92 90 40 58 01 04 64 84 bd 04 11 19 01 64 84 b0 02 c8 1e 82 8b 90 04 08 23 c6 40 50 71 8f 52 05 eb 16 07 b8 d0 aa 88 45 ab 15 90 3a 11 ab 56 8a e0 b6 8e a2 16 85 4a 2d 6a 71 2b bf 0b 09 e8 cf f6 fb c7 f7 f5 fa 9e d7 eb 3e cf 3b 9f 7b ee 39 e7 9e 9b bc 9e 3c 00 5a a7 04 32 59 1e ae 0d 90 2f 2d 94 c7 87 05 b1 27 a4 a6 b1 69 5d 40 03 0c 0d 17 d0 12 08 0b 64 dc d8 d8 28 40 a6 bc 7f 69 2f af 23 5f 64 57 9c 07 62 c1 7f 67 3a 22 71 81 10 00 8b 45 9c 21 2a 10 e6 23 fe 01 80 ac 14 ca e4 85 00 d4 01 dd 6a 46 a1 6c 80 d1 00 3d 39 2a 10 f1 d2 01 ce 52 72 e5 00 67 28 f9 e0 a0 4f 62 3c 0f 71 33 80 Data Ascii: PNGIHDRf:@(iCCPiccxw\3@Xdd#@PqRE:VJ-jq+>;{9<Z2Y/-'i]@d(@i/#_dWbg:"qE!#jFl=9Rrg(Ob<q3
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: e5 a9 ea 46 35 7e d1 c3 2f 76 f0 e9 34 86 fc e8 ae 74 9c 3e 82 1e 48 b7 ff 72 a5 a6 a3 a6 c7 10 0f f4 fa f3 fe a8 6a cd 18 ea f7 70 05 ff cc cf fb ac fb 22 74 8f fc d2 93 58 4a 1c 26 ce 11 a7 89 0b c4 31 a2 1e d8 c4 49 a2 81 68 21 8e 23 1e fe 76 0d 9e 6e d6 70 b6 f8 c1 7a 72 51 1c 09 b0 ff fd c4 07 3b 59 e0 5a e3 da ed fa 5e 39 57 28 9e 59 08 c8 78 d3 64 b3 e4 92 ac ec 42 36 17 3d 11 c4 6c be 54 e8 32 8a ed e6 ea e6 0e 30 f0 7c 81 41 7b 11 07 18 00 60 06 2d 9f b4 c5 bf 01 f8 9d ec ef ef ff f1 93 16 71 12 e0 7b 2f 00 c6 d1 4f 9a 3d 07 40 47 1d e0 fc 51 a1 42 5e a4 d4 48 40 46 01 06 68 81 1e 18 81 19 58 81 3d 38 83 1b 78 82 2f 04 42 08 44 40 0c 24 42 2a 4c 01 21 64 43 3e c8 61 06 cc 81 85 50 02 65 b0 0a d6 c3 66 d8 06 3b 61 2f 7c 07 87 a0 1e 8e c1 69 f8 09 Data Ascii: F5~/v4t>Hrjp"tXJ&1Ih!#vnpzrQ;YZ^9W(YxdB6=lT20\|A{`-q{/O=@GQB^H@FhX=8x/BD@$B*L!dC>aPef;a/\|i
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: b1 3f c6 51 e3 62 e3 2a e2 1e c5 8f 89 9f 13 7f 2e 81 95 30 35 61 5f c2 cb c4 a0 c4 95 89 b7 93 ec 93 14 49 4d c9 5a c9 93 92 ab 93 5f a5 04 a7 ac 49 e9 98 30 7a c2 dc 09 17 53 8d 53 25 a9 0d 69 b4 b4 e4 b4 dd 69 7d 13 43 26 ae 9f d8 39 c9 63 52 c9 a4 eb 93 ed 26 cf 9c 7c 61 8a f1 94 bc 29 c7 a7 6a 4d 15 4c 3d 9c 4e 49 4f 49 df 97 fe 5e 10 23 a8 12 f4 65 f0 33 2a 33 7a 85 3c e1 06 e1 13 51 a0 68 9d a8 5b ec 27 5e 23 7e 9c e9 97 b9 26 b3 2b cb 2f 6b 6d 56 77 76 40 76 79 76 8f 84 27 d9 2c 79 96 13 9e b3 2d e7 55 6e 4c ee 9e dc fe bc 94 bc 03 f9 6a f9 e9 f9 47 a5 ba d2 5c 69 f3 34 b3 69 33 a7 b5 cb 9c 64 25 b2 8e e9 3e d3 d7 4f ef 95 47 ca 77 17 60 05 93 0b 1a 0a f5 d0 1f f9 16 85 bd e2 2b c5 fd 22 ff a2 8a a2 d7 33 92 67 1c 9e a9 33 53 3a b3 65 96 e3 ac 65 Data Ascii: ?Qb.05a_IMZ_I0zSS%ii}C&9cR&\|a)jML=NIOI^#e33z<Qh['^#~&+/kmVwv@vyv',y-UnLjG\i4i3d%>OGw`+"3g3S:ee
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 64 42 4d 9a bb 89 d9 89 ff 9c ff 5d a7 b5 24 39 4b 0a e7 f2 fe de 2e 4b 52 b2 bd 67 af bc b7 02 dc a4 1c 79 a0 62 ba cf 19 ad 63 22 25 5b ca b6 93 d4 1a 27 d9 3e f0 6c bb 83 d9 ea 3c a4 fb 67 aa 6a fd 66 7b 93 f2 70 b7 5e 2c 16 aa b3 5a ae 4e 4f 4e 97 ab e5 fe 93 36 e9 34 9d 9a b4 e7 2f 9b 92 9f d8 31 df 1e 35 81 20 0e cf cc 02 b2 07 06 a4 f7 ce a4 89 f6 fb 7f a5 7b d1 b4 c9 a5 ff d4 34 1c a9 ec ee 14 16 5d 71 41 cb ab bb f4 f4 c9 2f 66 81 31 6c 88 f3 b8 ec a9 c0 3a 65 bb db 7d 7d fe 02 c0 56 16 a5 b5 06 c3 81 5b 79 c5 bc 2b e3 8d a9 eb bd eb 94 45 56 84 33 28 8a 42 91 ea 64 e1 3e 47 7f f7 43 70 0c af 80 2c 47 db 20 0c 94 31 fc 8a ab 3b d5 30 61 0b 23 22 f1 34 65 1c f1 ee 45 3d d0 32 54 86 bb 14 08 e1 ee b2 f9 be 93 52 56 55 65 e7 73 f1 81 5c b9 f5 70 62 Data Ascii: dBM]$9K.KRgybc"%['>l<gjf{p^,ZNON64/15 {4]qA/f1l:e}}V[y+EV3(Bd>GCp,G 1;0a#"4eE=2TRVUes\pb
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: e6 67 a7 af 4e 5f 5d 9c e2 9d e6 10 32 ae 1a 5d a9 41 a3 9a a8 c5 95 f1 9d 8b 9a f5 ff 91 b1 ff d6 c1 4b 57 f5 b5 b7 e9 3a 07 23 91 ac fd 2f c7 ec 2a 31 bc 31 23 29 89 18 c4 0a 61 c0 3a bd 01 58 16 71 44 8c de a4 e3 1c a0 06 f3 92 07 17 b6 7c 91 bf f4 76 f6 62 f6 d0 e0 82 c3 d9 25 b8 f6 46 d5 7a 1c 42 c6 1e 31 7c 81 4d 2f 74 46 13 8e 60 60 ff 75 08 56 0a 0b d0 75 5c 92 23 b2 8c ce cf d5 37 c4 63 64 f8 a8 6a 3a ae 83 e1 c0 3a d3 77 bc 5e e3 10 32 f6 05 13 0d 8a 03 c5 20 08 72 ad 38 26 00 88 a1 dc aa 5c 49 96 38 8a 80 8e 95 44 65 1b 89 96 38 44 99 6c 94 20 49 50 2a 2d 48 53 81 75 9c 8f 48 50 04 a4 95 3a ac cc 88 60 fa 5f b2 10 d0 20 4b d2 1e 92 b0 4a 06 eb ef 4a 7d 49 eb 22 a8 0c 6e 5e e1 01 92 10 31 d2 e2 ca 4a ae 4c 09 49 a9 d1 05 15 12 96 f5 b7 10 41 9a Data Ascii: gN_]2]AKW:#/11#)a:XqD\|vb%FzB1\|M/tF``uVu\#7cdj::w^2 r8&\I8De8Dl IP-HSuHP:`_ KJJ}I"n^1JLIA
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: e0 0a 38 30 28 2c 74 d1 2e ba 33 0b a9 8c f4 0f d8 35 4a 70 b5 0e 82 02 ac 0e 08 88 d5 44 d4 cc 90 3a 71 60 c3 aa de 24 92 b2 10 82 63 ea 29 c8 95 30 4b b3 c0 07 cb af ad 92 0e 00 85 26 e6 e9 1f da 83 df 9f ff ee b9 bc 7c 99 bd 02 7c b4 42 59 d9 07 79 95 7e 3d 42 c6 98 6b 45 3b ab df e1 81 08 26 d1 a0 27 c5 9d ac e1 e6 06 d3 e9 74 78 90 05 22 7d b7 24 bd 77 3d 9d 85 40 df b3 da 07 7b 6d 46 eb 25 7d 20 3a 9a 37 fe 7e c9 dd e6 0b 6f af 4e e4 6c f6 4a 55 6f c4 0c c3 ef 7e c8 20 41 40 8c 51 11 04 d5 d1 0c cd 9a 76 8b 7a 64 41 8d 02 d3 d7 6a 56 a8 98 04 61 1d 12 53 60 92 2c f7 9f 9b 05 d5 14 d4 e3 e3 db 66 32 99 1c 4d a7 c7 d3 e9 11 c5 81 5c d6 58 2c 16 de 7b c6 c2 f9 7c 9e ca c7 fc db ed 0d 04 60 22 d6 c6 cd 2f 66 b3 20 23 c3 0f 4f 6b 94 8b 55 3a 30 ad 13 85 Data Ascii: 80(,t.35JpD:q`$c)0K&\|\|BYy~=BkE;&'tx"}$w=@{mF%} :7~oNlJUo~ A@QvzdAjVaS`,f2M\X,{\|`"/f #OkU:0
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: d7 83 64 f7 fd 35 1e e4 f7 bf c8 ff 30 e3 ec 42 2e 56 df 3e 24 48 96 22 b8 c1 21 64 ec 0a 59 03 c0 9a b4 d3 8d b7 ff 14 12 72 e5 9e 71 7a fa f2 fc ec 6c 4c 1f 13 12 dc 39 18 9a be 38 a6 89 2e 73 19 80 b2 5d 29 7d 77 65 fa d0 ae 9e 40 2c 6a 96 07 60 dd 9f 91 6c 94 5f 2f 66 56 b4 65 cd 67 e3 f3 5f 1c ea 32 b6 c4 19 01 2c 05 9a 39 73 99 17 97 db ea 22 ad 30 c3 92 a4 63 06 aa 98 17 8a 98 23 10 96 63 6b 31 20 00 68 e5 7a ed 9f bb a1 a3 5e c3 60 ab 72 01 a0 44 03 43 3f dc d8 88 18 8b 6c 6e cf fe 7d 1b 39 5f cc 5f 9e cf 9f 9d 9e 7d 70 e7 38 be 57 51 e0 00 d0 50 41 5c 31 16 21 2c 30 11 27 c0 24 3b ba 7d fb 9b b7 6e bf 87 00 a7 00 3c 09 80 cc 3a fb 71 09 58 75 6b 51 96 3b 6d 36 d9 80 97 9f 18 d1 e4 d2 d7 1c 1a 7b 2e e4 62 86 07 f9 c3 5b d3 5b 1f ba ef 01 b8 ed 6f Data Ascii: d50B.V>$H"!dYrqzlL98.s])}we@,j`l_/fVeg_2,9s"0c#ck1 hz^`rDC?ln}9__}p8WQPA\1!,0'$;}n<:qXukQ;m6{.b[[o
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: f3 a1 b0 02 fb 84 aa e6 79 8e 43 5d c6 0e 9f c9 5a e6 1a 6f 5a b7 ac b4 28 82 04 d5 2b 72 06 2d b7 60 fc 92 ae 0c a9 bc 5a da 75 19 e5 15 78 38 34 b4 07 89 ee 55 8c 68 87 ad 9b 72 63 22 a5 26 41 40 83 aa cb f9 6c f6 ca 5e 05 97 5c 06 73 f1 41 0f 0d 1e 42 c6 be 90 15 7c 5d 6e ee 86 2f ce c3 51 e3 46 8c b2 29 4f 78 6f 9b 75 c6 64 19 3e 8e 91 59 2e f3 43 5d c6 b6 18 7c 50 09 05 0c 04 b0 1a 58 42 05 b8 11 40 cd 52 bd 03 11 31 56 b3 5d c0 5c e6 10 71 3a 85 21 d3 23 74 42 a6 ba 06 63 de 15 ac 09 13 0c 60 52 8d 8c d0 69 b1 e4 24 ae bb 32 f7 41 80 0b 00 c6 65 5c 57 34 30 ee f2 d2 62 71 6d 70 ba 8e 76 d4 30 b3 f4 bf fb 7f 01 ef 8c 1a 7b d9 fd 4f da a3 48 72 f3 0b 59 f8 a5 cf dc 24 0f 0b 61 1a 6b a3 8a 80 1c b2 8c eb ad 7a c8 f3 fc e9 b3 67 bd 96 3c 2b c4 16 58 e4 Data Ascii: yC]ZoZ(+r-`Zux84Uhrc"&A@l^\sAB\|]n/QF)Oxoud>Y.C]\|PXB@R1V]\q:!#tBc`Ri$2Ae\W40bqmpv0{OHrY$akzg<+X
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: c0 00 13 be 16 90 12 6d 1d 88 a0 c4 ff 4a 1b 19 42 1b 09 ee 3a 66 d1 18 44 e4 42 cf 9f 2f 9e 5e c8 3c a8 f4 c1 75 e0 d6 e0 21 64 ec 05 8d 8a d2 4f 3e f9 a4 6c 3d 49 c9 c5 64 32 21 d9 b8 14 2f 22 d8 3f 1a c3 d2 02 5b 76 70 20 71 ed 90 1c c8 35 f6 b9 ff f1 25 f0 b9 3f bb 38 3b 64 19 bb 44 82 6f 3e 6e d4 cc 8e 23 66 96 ab 9f 1e 1f 85 24 22 9b 4e 2e e6 73 11 99 cd ce cf cf cf dc b7 ce fe fc 47 7f f2 67 1f 1f 7f f8 67 32 7b 31 0f d2 c4 31 73 44 90 a6 85 34 40 3b ec 83 44 57 bb e3 25 3f b7 b9 42 64 41 1a 83 25 8e 16 2c cf 4d 60 34 75 22 99 73 61 19 64 44 1a 2b ad fe 1d 22 ec ff 04 b8 7a 2e 3d 5d b0 d3 0d 05 10 8d 5a 21 51 e8 28 41 94 98 24 bb f2 0b 21 9c 00 52 3f 74 7a d7 16 88 49 b2 3e bb fa 2b ff cf ec 9d dd 93 23 d5 79 c6 9f e7 3d 9a 2f 69 66 77 67 bf 60 3f Data Ascii: mJB:fDB/^<u!dO>l=Id2!/"?[vp q5%?8;dDo>n#f$"N.sGgg2{11sD4@;DW%?BdA%,M`4u"sadD+"z.=]Z!Q(A$!R?tzI>+#y=/ifwg`?
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 9e 41 ce 1e c4 36 4f dd 84 bc 64 11 2c 8d 42 54 56 bd 91 54 d4 98 a0 49 65 0c e3 d8 65 f4 8b c4 65 c0 73 f2 e4 c9 53 a7 de c0 da 3c fa e8 a3 f7 de 77 2f 86 86 ba c5 c0 ba 2e 43 eb 90 ec 3c fe 42 b5 d1 18 d3 05 4c a9 43 bb 44 72 dd 58 44 75 58 b5 9e 38 76 2d a7 1a c9 f9 1d bb 8c fe c2 82 35 93 84 e7 83 93 97 8f cf c5 5f 7b 74 02 0e 13 01 a0 2a 00 51 01 10 4f 5c 3b 78 6c d7 a1 bb ce 2d bf ba 80 8b d3 7b f6 ec 9d 9e 9a 71 95 79 2b 95 8a 0b 1b 0f 59 b9 fa 8e d6 68 ee 35 00 45 0e e9 2b a9 8b fe c2 d3 9b 45 13 1b e6 20 32 63 32 c1 60 0f d8 5c 29 17 60 ab 0b f0 fb 2a 24 b8 00 a5 28 34 4e e5 a3 27 04 a0 25 72 be 3b 35 f7 1f 6d ee 09 15 b6 fa 02 22 05 7b 5d 80 b6 7e de 63 00 11 95 60 d9 1a a1 a8 82 a4 a6 26 c4 cc d8 65 f4 09 55 15 11 63 04 75 de 78 e3 8d 53 a7 4e Data Ascii: A6Od,BTVTIeeesS<w/.C<BLCDrXDuX8v-5_{tQO\;xl-{qy+Yh5E+E 2c2`\)`$(4N'%r;5m"{]~c`&eUcuxSN

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	686	OUT	GET /oee92L/2025/03/13/47ba6cb9-e3d6-487e-a1e1-1673c91f6e49.png HTTP/1.1 Host: content.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 21:01:03 GMT Content-Type: image/png Content-Length: 52227 Connection: close Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=87220 etag: "06ce9cd6b9724a9515f5fb18118c0257" last-modified: Thu, 13 Mar 2025 07:38:56 GMT x-envoy-upstream-service-time: 133 CF-Cache-Status: HIT Age: 176399 Expires: Thu, 19 Mar 2026 21:01:03 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 922fe71eec6ae56c-EWR
2025-03-19 21:01:03 UTC	808	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 30 00 00 01 86 08 02 00 00 00 73 0a 4a cc 00 00 0c 33 69 43 43 50 69 63 63 00 00 78 da ad 97 77 54 53 d9 16 c6 f7 2d 49 48 20 74 22 20 25 f4 26 88 48 47 4a 08 1d a4 17 41 54 42 12 20 94 18 13 82 8a 1d 1d 66 04 c7 2e 22 58 46 74 14 c4 41 47 47 40 06 1b ea a8 23 83 62 77 2c 13 0b 2a 23 e3 e0 28 76 e5 1d 08 a0 4f df fb e3 ad f5 f6 5a e7 de 5f be b3 cf 77 f6 39 f7 de 75 73 01 34 14 3c 89 24 1f d7 04 28 10 17 4a e3 43 03 d9 93 52 d3 d8 b4 6e c0 80 09 2c b0 04 47 1e 5f 26 e1 c4 c6 46 01 8a c1 f3 17 f1 e2 0a ca 46 71 d1 71 c0 0b fe b7 d0 12 08 65 7c 00 2c 16 71 a6 40 c6 2f 40 fc 13 00 d9 ca 97 48 0b 01 a8 12 a4 5b cc 2c 94 0c f0 5a c4 ba 52 54 20 e2 da 01 ce 56 72 eb 00 67 2a f9 fc 60 4e 62 3c 17 f1 7d 00 Data Ascii: PNGIHDR0sJ3iCCPiccxwTS-IH t" %&HGJATB f."XFtAGG@#bw,#(vOZ_w9us4<$(JCRn,G_&FFqqe\|,q@/@H[,ZRT Vrg`Nb<}
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 48 ba a2 79 38 a4 3f 9a d9 0d a9 dc a1 ba 51 8d 9f ed e1 67 2b f8 78 85 86 f3 e8 ce 74 9c 3e 8a 1e 40 b7 fd 7c a4 ba bd ba db 30 0f ee f5 a7 fb a3 ac 35 73 78 bf 47 2a f8 72 7e ee 27 bb 2f 40 e7 c8 cf 33 89 6f 88 fd c4 29 e2 18 71 86 68 25 9a 80 4d 1c 21 9a 89 76 e2 10 e2 91 3b 6e f0 ea 66 8f cc 16 3f 58 4f 1e e4 0f df 33 5f 5e f1 c1 9d 94 39 d7 3b 77 3b bf 53 f6 15 0a 67 15 02 0a ee 74 c9 6c a9 28 3b a7 90 cd 41 6f 0c 21 3b 5c cc 77 1a c3 76 71 76 71 03 18 78 ff c0 60 3c 8b 1b 7c af 60 ac f6 8f da e2 3f 00 7c 8f f4 f7 f7 ff fc 51 8b 38 02 f0 a3 07 00 e3 e0 47 cd d6 13 40 4b 15 e0 f4 41 be 5c 5a a4 d4 48 40 41 01 06 68 80 2e 18 80 09 58 80 2d 5a 8f 0b b8 83 0f 04 40 30 44 40 0c 24 42 2a 4c 45 d5 e7 40 01 aa 7f 26 cc 85 45 50 0a e5 b0 12 d6 41 15 6c 81 6d Data Ascii: Hy8?Qg+xt>@\|05sxGr~'/@3o)qh%M!v;nf?XO3_^9;w;Sgtl(;Ao!;\wvqvqx`<\|`?\|Q8G@KA\ZH@Ah.X-Z@0D@$BLE@&EPAlm
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 9b 62 20 26 3c 66 4d cc ad 58 9b d8 19 b1 3f c7 51 e3 62 e3 aa e3 1e c4 8f 8b 9f 1b 7f 2a 41 27 61 5a c2 ae 84 17 89 81 89 2b 12 6f 24 d9 26 c9 93 da 92 35 92 d3 93 eb 92 5f a6 04 a5 ac 4e 51 4c 1a 3b 69 de a4 b3 a9 86 a9 a2 d4 e6 34 5a 5a 72 da 8e b4 be c9 c1 93 d7 4d ee 4a 77 4b 2f 4d bf 32 c5 66 ca ac 29 67 a6 1a 4e cd 9f 7a 68 9a c6 34 de b4 fd 19 94 8c 94 8c 5d 19 ef 78 31 bc 1a 5e 5f 66 78 e6 c6 cc 5e 3e 97 bf 9e ff 58 10 20 58 2b e8 16 fa 0a 57 0b 1f 66 f9 66 ad ce 7a 94 ed 9b bd 26 bb 3b c7 3f a7 22 a7 47 c4 15 55 89 9e e6 86 e5 6e c9 7d 99 17 93 b7 33 af 3f 3f 25 7f 4f 81 4a 41 46 c1 41 b1 b6 38 4f 7c 62 ba c9 f4 59 d3 3b 25 0e 92 52 89 62 86 f7 8c 75 33 7a a5 91 d2 1d 32 4c 36 45 d6 5c a8 8b fe e8 b7 cb 6d e5 5f c9 ef 14 f9 15 55 17 bd 9a 99 3c Data Ascii: b &<fMX?Qb*A'aZ+o$&5_NQL;i4ZZrMJwK/M2f)gNzh4]x1^_fx^>X X+Wffz&;?"GUn}3??%OJAFA8O\|bY;%Rbu3z2L6E\m_U<
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 83 27 32 a4 a4 8d c9 2a 28 e4 79 86 e4 3e 00 ba b7 ce c6 65 42 ee 7b 7b 3c 1e fb be b7 d6 18 ab 6b 1a c7 52 76 d2 c9 b4 31 59 40 28 e8 aa e1 7a 48 31 a8 df b6 6d fc e8 15 4a d6 7d 14 b2 db 28 c2 0b 06 0e c7 30 6f 63 a6 c7 64 15 31 43 6e db c6 35 55 5a 2a 22 94 b3 8f 77 c4 58 2b a4 ee bb 3e 1e 4d b5 a9 76 21 b5 d6 3a 26 70 91 92 06 25 97 60 14 92 b5 5e ec 21 c5 70 e9 94 23 6b 57 59 a1 86 2d b5 aa c5 57 81 42 1d c1 58 93 e4 e5 71 42 02 88 25 2b 77 8b b3 9a 23 eb 84 34 78 f3 a3 47 cf aa b2 5f 5d 52 c8 e4 2a c4 92 b5 18 38 60 d5 ea 7f 90 ac cd 90 24 c6 c1 b8 dd ba 70 5c 8c 7d 46 5a 18 2e 12 17 8f 1a 2c 36 e2 ef e5 ea 36 07 19 27 df c7 38 e3 0e 7c 3d 39 2b 79 85 7a 65 fa 64 80 c1 4d f6 90 c5 a8 c6 b9 84 eb 85 e4 f1 c4 4d 0e 3a 07 fc a0 31 59 e2 02 38 0f 40 0e Data Ascii: '2(y>eB{{<kRv1Y@(zH1mJ}(0ocd1Cn5UZ"wX+>Mv!:&p%`^!p#kWY-WBXqB%+w#4xG_]R*8`$p\}FZ.,66'8\|=9+yzedMM:1Y8@
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 59 98 1a c3 89 3c f4 20 31 83 d9 29 36 85 5c 78 05 b5 e6 cd d9 9d b5 90 6a 29 95 4b 9d a1 93 eb 2b db ff 50 f9 6f d7 67 57 9d da ed d9 39 ac 5c 11 d3 95 63 55 95 45 f2 9e 81 d8 f3 37 9b 4f ee 06 00 71 ea e8 37 6a a9 4a 04 16 22 01 b1 3b d9 aa df 1e af 8b fe 9d 5e 9e 17 3d ec 6d 86 59 ad 95 88 56 0d 19 0f 08 ab 55 08 63 2d 0c 08 c5 22 92 06 ab b7 d9 e7 a9 3d 1e af af ab 02 6f 73 2b 0b e2 19 91 fd 66 0f 9a b6 79 ca ce 71 1d 6a 2b 65 1c 6a 11 7b 88 f3 6d 2c 72 97 5a a2 fd e4 eb 92 d4 24 47 04 45 1d 0a f0 8f 2d a2 de f9 f4 c0 91 63 57 b2 9d f2 f8 4e c5 4e f1 b4 93 c6 7e b3 ce a3 83 0a 01 55 3d 11 32 71 b4 cc df c7 35 74 fc d9 68 29 22 ef 3b c3 8f 3e 08 df f1 8b 85 3d 58 24 6f a5 b3 38 42 38 cc 8c 69 81 a8 de c6 fb 13 d1 30 0c 32 4e f7 3a c7 6f 66 55 0e 42 a6 Data Ascii: Y< 1)6\xj)K+PogW9\cUE7Oq7jJ";^=mYVUc-"=os+fyqj+ej{m,rZ$GE-cWNN~U=2q5th)";>=X$o8B8i02N:ofUB
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 4e c8 cb cd db a3 03 db 86 13 4c 08 07 92 c8 8e 93 2b 85 03 12 e8 44 b2 1d 1e e8 bf ab 04 8e 53 93 1c bf 7b f2 fa 74 2a b6 80 07 de a4 50 4f 69 42 b7 68 cc 8e e7 fd 08 15 75 c7 55 3f ff 7e f3 2d 7c 22 93 15 40 6a ac 44 51 65 d6 10 41 76 78 33 7b 34 7b 75 7f 79 5d f3 da 9e bf 2f c1 fb 65 f5 15 4e 37 1d 5a 6b 79 cb 87 61 68 bb c0 59 6b 8f c7 e3 f9 f9 f9 f5 65 e5 e4 c9 4c ca f2 e8 6b 6c 68 64 ce 54 4b 1d c7 2d 69 ae 53 6e cf c5 59 aa 9d d2 8b ca dd de 23 06 21 ed cc 61 a8 aa dd 64 05 c9 ab 53 04 39 6c a6 88 82 0c a5 dc 87 e1 cb fd be c4 39 e4 7e ab c3 72 a0 88 2a 83 5a 0b cb f5 e5 61 73 d4 ef 60 4a b0 50 70 83 c9 08 0e 5c 55 07 07 ba 22 92 9d e7 27 4a cc 01 0b 74 de 66 f0 26 85 3e 0f 66 0e 53 32 0a 40 3f 9e ac ce 7a a6 40 72 f2 44 da 3c 6f cf 7f ca 6f 1d 67 Data Ascii: NL+DS{tPOiBhuU?~-\|"@jDQeAvx3{4{uy]/eN7ZkyahYkeLklhdTK-iSnY#!adS9l9~rZas`JPp\U"'Jtf&>fS2@?z@rD<oog
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: a1 2a 45 94 83 1e b6 02 3f 02 33 9f a6 26 58 09 19 18 86 a1 04 00 64 c7 f2 f4 b2 a3 3e e4 ba 2b f6 fe dc b9 86 55 3a e5 b2 9e ec e0 79 80 77 24 61 3a 6f 3b c3 4f 53 78 5e 09 f9 fe 14 52 bd 9e 6c c9 49 5b fe 66 93 f4 7c d6 49 ae b6 db bc 31 13 04 5f 40 d8 9c 6f b7 bb 88 0e 4a b7 8a 5a eb c2 c9 a7 fb 72 ec 9e 0a 2a 59 a4 ca 22 dd 6b df 1f ab c2 01 42 12 1c 3b 21 1d 25 4e 8a 34 c0 58 02 1c f8 d1 5b 74 8e 51 ef 6e 40 a6 41 9c c5 46 90 78 d7 66 f9 75 66 80 99 dc 9d f6 68 0a 0b a5 e4 a9 14 2e b4 9d bc 8b ec ba 8b 93 f8 f6 68 c4 89 90 49 a7 ee ec 91 c0 29 d5 bb 17 03 90 71 c8 93 67 28 d1 09 79 bd 0e bd d8 f1 a1 d0 9d 3a fd ec 27 42 02 f8 67 35 95 99 5d 7f ef 75 76 a9 df 66 0a 82 ff 6f 42 62 5d 18 c4 3b cd 52 ff 49 5a b0 9c 2e 57 64 b9 d8 c9 ae 57 48 91 10 d4 cc Data Ascii: E?3&Xd>+U:yw$a:o;OSx^RlI[f\|I1_@oJZrY"kB;!%N4X[tQn@AFxfufh.hI)qg(y:'Bg5]uvfoBb];RIZ.WdWH
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 28 f9 2c f4 6d 52 bf a8 62 82 4f ca 4a c4 2d 7c cf 8f fc 7b cd ae 66 ae 0b 3c 97 02 41 55 e4 dc 86 7c 52 a8 40 18 cc 90 9c 4b 9b 0e 54 68 9a 98 f6 73 1c c4 d4 8a fa 89 40 0e a7 7c 4d 91 6e de 93 ff 70 17 53 90 10 83 e7 99 66 b9 0f 06 b1 62 a2 f9 65 fa 2e 2f 33 13 a9 e8 7c c9 f2 12 3d 2c 1b 28 a7 10 fc 3e 18 6e 2d c3 e9 bc df d6 90 8c 3a 2c dc 73 d2 f9 59 62 d4 ed 0c 6a b8 2f 8f 95 9c 3d 4c 5f ee 5d 4b d7 82 22 58 f2 38 f0 36 8f 4f 76 77 7b e4 59 fd b4 41 c8 9f ec 5d 81 6e dc 30 08 05 6c 27 f7 ff bf bb 1a a6 41 86 10 4f b3 aa 6e d2 d4 ad 48 cd 55 4e 6c 5d af 7e c0 01 7e fc b1 3c 64 31 92 99 ec 70 e1 6a ee 52 d5 3b 2a d5 58 98 3c 04 34 45 ae 39 95 af 11 cc 02 34 dd 22 d5 f6 8f b5 e3 d5 60 97 21 f2 d8 ba fd 56 b6 b2 ca 4f 19 fe 24 0d e6 c1 21 d5 df 0b d0 be Data Ascii: (,mRbOJ-\|{f<AU\|R@KThs@\|MnpSfbe./3\|=,(>n-:,sYbj/=L_]K"X86Ovw{YA]n0l'AOnHUNl]~~<d1pjR;*X<4E94"`!VO$!
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 59 d3 4a 5c 5c 35 e6 c5 69 eb ae 61 5f b3 7b 05 4d e4 e2 b2 ac 75 bb dd 5f 0d 40 ec 74 5f 1e 72 48 11 91 32 c5 12 29 26 d8 00 e4 7f 1e 44 6a 77 e3 4a 1a 5a d2 d8 ca 34 c3 36 28 e8 52 d2 f0 59 32 49 cb 24 f0 54 ff 66 7f 8d 19 5b 3e 0f 94 29 59 86 c7 f1 c9 f2 b1 76 57 db 76 07 e4 2e 7f 7f 5b 27 84 ff ab 96 f5 1e fb a8 d0 72 f9 2e 5d 4c d5 16 28 90 af 88 c8 67 ca c0 97 2e a4 da b0 14 27 db 80 72 a9 bd ab f8 36 44 80 5e 6c bb 90 ad 6c f9 51 e8 1a d8 1a 37 5a 7f 59 4a 8a 9d 0a b6 aa 30 d9 a9 b0 f7 e9 85 49 69 c7 ca 4e 79 fd b2 5e 67 ab 6c c3 fa 2a dc 45 d6 5d be ad f0 57 64 d4 a7 03 64 81 e7 a6 bc 96 06 93 97 69 0d dd 6d 6b be 4e 7f 4a e5 c1 3d 7d 7f 19 12 d6 02 21 56 99 fa 7c 3a e9 97 43 da 8c f2 07 42 48 f3 8c 95 ac 18 b2 23 39 08 bb 35 22 22 16 84 08 aa 76 Data Ascii: YJ\\5ia_{Mu_@t_rH2)&DjwJZ46(RY2I$Tf[>)YvWv.['r.]L(g.'r6D^llQ7ZYJ0IiNy^gl*E]WddimkNJ=}!V\|:CBH#95""v
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 97 b9 9f 66 88 d5 64 74 02 32 c7 d0 4a 2a 80 7a bd 2f 1f 7d e0 64 67 5d f5 14 a7 b3 0d 3e ce 37 9e d0 72 9e e0 fa e3 2b 90 51 97 d3 5f 82 7f 8f 5f ee ce 6b e9 a9 00 b9 27 b5 b9 5e f6 c0 3a 14 b2 16 08 b0 01 c1 73 32 46 70 f2 49 2f f2 dd dd d1 aa 43 92 5d 6c 08 f0 6a 7c b1 97 f2 f5 e1 f5 cb 1f f6 11 90 7d 94 7b 94 e3 5b 31 10 bb 4f cd 29 b2 56 5f 04 6a 6e 74 b5 a0 ac d7 c4 ca 2f 3c 42 0c 8b 90 43 b5 4a 16 67 f3 62 e2 1c 2e ea 1e 52 29 77 df 7e 65 f5 d1 1f 20 bb e0 af 35 31 b2 ce 5c 35 04 a4 bf e6 73 3f b5 d9 63 d3 51 f8 3a 91 c4 50 be b1 91 2b e3 a1 d0 72 47 c7 8d ee 1f 6a 3b a7 12 0f f8 09 95 f5 77 81 64 50 65 8b 53 89 c2 43 8b c3 6b af 53 84 43 9a e2 71 65 bf 59 7f d4 82 b7 1c 58 a2 1e 9b ea 2d 39 71 6b 9b cd 97 32 bd d8 92 d5 3c ab d2 f4 93 1b dd 83 d5 Data Ascii: fdt2J*z/}dg]>7r+Q__k'^:s2FpI/C]lj\|}{[1O)V_jnt/<BCJgb.R)w~e 51\5s?cQ:P+rGj;wdPeSCkSCqeYX-9qk2<

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	593	OUT	GET /diffuser/diffuser.js HTTP/1.1 Host: diffuser-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	679	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 21:01:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 19 Sep 2024 15:47:53 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=300 etag: W/"234346615b452270c8ee1158258c83bb" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 22faf6fcae096ee97264521770b65762.cloudfront.net (CloudFront) x-amz-cf-pop: ATL59-P4 x-amz-cf-id: 3X5F4wNQyXOuozUuyXygS-zomSQMh8Qwa322gb98nB8WpVm2PA37cg== CF-Cache-Status: HIT Age: 118 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 922fe7223d6b5e6c-EWR
2025-03-19 21:01:03 UTC	690	IN	Data Raw: 37 63 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 74 2c 5f 5f 77 65 62 70 61 63 6b Data Ascii: 7cf9!function(e){var t={};function __webpack_require__(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,__webpack_require__),n.l=!0,n.exports}__webpack_require__.m=e,__webpack_require__.c=t,__webpack
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 65 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 72 2c 6e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3d 66 75 6e 63 Data Ascii: e;var r=Object.create(null);if(__webpack_require__.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)__webpack_require__.d(r,n,function(t){return e[t]}.bind(null,n));return r},__webpack_require__.n=func
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 65 3d 3d 3d 6f 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 6f 2e 63 61 6c 6c 2c 63 3d 6e 26 26 6f 2e 62 69 6e 64 2e 62 69 6e 64 28 69 2c 69 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 Data Ascii: unction(e){return"function"==typeof e\|\|e===o}:function(e){return"function"==typeof e}},function(e,t,r){var n=r(9),o=Function.prototype,i=o.call,c=n&&o.bind.bind(i,i);e.exports=n?c:function(e){return function(){return i.apply(e,arguments)}}},function(e,t,r
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 6f 72 74 73 3d 6e 26 26 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 33 34 29 2c 6f 3d 72 28 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 21 21 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 65 29 7c 7c 21 28 4f 62 6a 65 63 74 28 65 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 6e 26 26 6e 3c 34 31 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 Data Ascii: orts=n&&!Symbol.sham&&"symbol"==typeof Symbol.iterator},function(e,t,r){var n=r(34),o=r(3);e.exports=!!Object.getOwnPropertySymbols&&!o((function(){var e=Symbol();return!String(e)\|\|!(Object(e)instanceof Symbol)\|\|!Symbol.sham&&n&&n<41}))},function(e,t,r){v
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 2c 74 29 3b 6e 26 26 6e 2e 77 72 69 74 61 62 6c 65 26 26 28 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 2c 72 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 69 6e 20 72 3f 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 22 65 6e 75 6d 65 72 61 62 6c 65 22 69 6e 20 72 3f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3a 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 72 29 7d 3a 75 3a 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 72 29 7b 69 66 28 63 28 65 29 2c 74 3d 61 28 74 29 2c 63 28 72 29 2c 6f 29 74 72 79 7b 72 65 74 75 72 6e 20 75 28 65 2c 74 2c Data Ascii: ,t);n&&n.writable&&(e[t]=r.value,r={configurable:"configurable"in r?r.configurable:n.configurable,enumerable:"enumerable"in r?r.enumerable:n.enumerable,writable:!1})}return u(e,t,r)}:u:function defineProperty(e,t,r){if(c(e),t=a(t),c(r),o)try{return u(e,t,
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 28 73 2c 65 2c 74 29 2c 21 6f 28 72 29 7c 7c 69 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 75 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 6e 75 6d 62 65 72 22 29 2c 61 28 65 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 7b 7d 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 3d 72 28 30 29 2c 63 3d 72 28 33 35 29 2c 61 3d 69 2e 70 72 6f 63 65 73 73 2c 73 3d 69 2e 44 65 6e 6f 2c 75 3d 61 26 26 61 2e 76 65 72 73 69 6f 6e 73 7c Data Ascii: (s,e,t),!o(r)\|\|i(r))return r;throw u("Can't convert object to primitive value")}return void 0===t&&(t="number"),a(e,t)}},function(e,t,r){var n=r(5);e.exports=n({}.isPrototypeOf)},function(e,t,r){var n,o,i=r(0),c=r(35),a=i.process,s=i.Deno,u=a&&a.versions\|
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 34 32 29 2c 6f 3d 72 28 34 33 29 3b 28 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7c 7c 28 6f 5b 65 5d 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 7b 7d 29 7d 29 28 22 76 65 72 73 69 6f 6e 73 22 2c 5b 5d 29 2e 70 75 73 68 28 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 32 36 2e 31 22 2c 6d 6f 64 65 3a 6e 3f 22 70 75 72 65 22 3a 22 67 6c 6f 62 61 6c 22 2c 63 6f 70 79 72 69 67 68 74 3a 22 c2 a9 20 32 30 31 34 2d 32 30 32 32 20 44 65 6e 69 73 20 50 75 73 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b 2e 72 75 29 22 2c 6c 69 63 65 6e 73 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a Data Ascii: ction(e,t,r){var n=r(42),o=r(43);(e.exports=function(e,t){return o[e]\|\|(o[e]=void 0!==t?t:{})})("versions",[]).push({version:"3.26.1",mode:n?"pure":"global",copyright:" 2014-2022 Denis Pushkarev (zloirock.ru)",license:"https://github.com/zloirock/core-j
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 45 78 70 28 22 5b 5c 5c 3f 26 5d 22 2b 65 2b 22 3d 28 5b 5e 26 23 5d 2a 29 22 29 2e 65 78 65 63 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 3f 22 22 3a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 7d 2c 67 65 74 4c 6f 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4c 6f 63 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 56 67 6f 50 61 72 61 6d 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 7d 2c 67 65 74 50 61 74 68 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 50 61 74 68 6e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 Data Ascii: Exp("[\\?&]"+e+"=([^&#]*)").exec(window.location.search);return null===t?"":decodeURIComponent(t[1].replace(/\+/g," "))},getLocation:function getLocation(){return this.removeVgoParam(window.location.href)},getPathname:function getPathname(){return this.re
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 72 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 69 2e 61 5b 65 5d 2e 64 6f 6d 61 69 6e 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 6e 65 63 74 28 29 7b 7d 7d 2c 7b 6b 65 79 3a 22 75 70 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 28 29 7b 7d 7d 5d 29 2c 53 65 72 76 69 63 65 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 28 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: r.name.toLowerCase();return i.a[e].domain}},{key:"connect",value:function connect(){}},{key:"update",value:function update(){}}]),Service}();function _typeof(e){return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return
2025-03-19 21:01:03 UTC	1369	IN	Data Raw: 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 5f 63 72 65 61 74 65 53 75 70 65 72 49 6e 74 65 72 6e 61 6c 28 29 7b 76 61 72 20 72 2c 6e 3d 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 6f 3d 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6e 2c 61 72 67 75 6d 65 6e 74 73 2c 6f 29 7d 65 6c 73 65 20 72 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 5f Data Ascii: flect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function _createSuperInternal(){var r,n=_getPrototypeOf(e);if(t){var o=_getPrototypeOf(this).constructor;r=Reflect.construct(n,arguments,o)}else r=n.apply(this,arguments);return _

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	610	OUT	GET /vendor/jquery/dist/jquery.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	517	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 87533 Connection: close Date: Wed, 19 Mar 2025 21:01:04 GMT Last-Modified: Tue, 15 Oct 2024 18:11:13 GMT ETag: "2c872dbe60f4ba70fb85356113d8b35e" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e3d2c542026df7b9357e3b591c889f64.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: T9W9PUAiUPmKe-HL_0F6MrfHpTG5CEafuqrWiQ1NobxQtmgs3GOhBQ==
2025-03-19 21:01:03 UTC	14588	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-19 21:01:03 UTC	2373	IN	Data Raw: 29 3a 31 3c 61 2e 6c 65 6e 67 74 68 3f 28 74 3d 5b 65 2c 65 2c 22 22 2c 6f 5d 2c 62 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 46 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 65 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 73 65 2e 63 61 6c 6c 28 65 2c 72 5b 69 5d 29 5d 3d 21 28 74 5b 6e 5d 3d 72 5b 69 5d 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 30 2c 74 29 7d 29 3a 61 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 46 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 5b 5d 2c 73 3d 6e 65 28 65 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 Data Ascii: ):1<a.length?(t=[e,e,"",o],b.setFilters.hasOwnProperty(e.toLowerCase())?F(function(e,t){var n,r=a(e,o),i=r.length;while(i--)e[n=se.call(e,r[i])]=!(t[n]=r[i])}):function(e){return a(e,0,t)}):a}},pseudos:{not:F(function(e){var r=[],i=[],s=ne(e.replace(ve,"$
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 63 65 28 30 29 3b 61 3d 65 2c 73 3d 5b 5d 2c 75 3d 62 2e 70 72 65 46 69 6c 74 65 72 3b 77 68 69 6c 65 28 61 29 7b 66 6f 72 28 6f 20 69 6e 20 6e 26 26 21 28 72 3d 79 2e 65 78 65 63 28 61 29 29 7c 7c 28 72 26 26 28 61 3d 61 2e 73 6c 69 63 65 28 72 5b 30 5d 2e 6c 65 6e 67 74 68 29 7c 7c 61 29 2c 73 2e 70 75 73 68 28 69 3d 5b 5d 29 29 2c 6e 3d 21 31 2c 28 72 3d 6d 2e 65 78 65 63 28 61 29 29 26 26 28 6e 3d 72 2e 73 68 69 66 74 28 29 2c 69 2e 70 75 73 68 28 7b 76 61 6c 75 65 3a 6e 2c 74 79 70 65 3a 72 5b 30 5d 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 20 22 29 7d 29 2c 61 3d 61 2e 73 6c 69 63 65 28 6e 2e 6c 65 6e 67 74 68 29 29 2c 62 2e 66 69 6c 74 65 72 29 21 28 72 3d 44 5b 6f 5d 2e 65 78 65 63 28 61 29 29 7c 7c 75 5b 6f 5d 26 26 21 28 72 3d 75 5b 6f 5d 28 72 29 Data Ascii: ce(0);a=e,s=[],u=b.preFilter;while(a){for(o in n&&!(r=y.exec(a))\|\|(r&&(a=a.slice(r[0].length)\|\|a),s.push(i=[])),n=!1,(r=m.exec(a))&&(n=r.shift(),i.push({value:n,type:r[0].replace(ve," ")}),a=a.slice(n.length)),b.filter)!(r=D[o].exec(a))\|\|u[o]&&!(r=u[o](r)
2025-03-19 21:01:03 UTC	15990	IN	Data Raw: 67 68 74 22 2c 22 42 6f 74 74 6f 6d 22 2c 22 4c 65 66 74 22 5d 2c 4a 3d 43 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 65 29 7d 2c 5a 3d 7b 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 3b 4a 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 28 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 65 29 7c 7c 65 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 5a 29 3d 3d 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7d 29 3b 76 61 72 20 65 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 6e 6f 6e 65 22 3d 3d 3d 28 65 Data Ascii: ght","Bottom","Left"],J=C.documentElement,K=function(e){return ce.contains(e.ownerDocument,e)},Z={composed:!0};J.getRootNode&&(K=function(e){return ce.contains(e.ownerDocument,e)\|\|e.getRootNode(Z)===e.ownerDocument});var ee=function(e,t){return"none"===(e
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 22 2b 47 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 7a 65 3d 2f 5e 2d 2d 2f 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 6f 70 65 6e 65 72 7c 7c 28 74 3d 69 65 29 2c 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 7d 2c 55 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 7b 7d 3b 66 6f 72 28 69 20 69 6e 20 74 29 6f 5b 69 5d 3d 65 2e 73 74 79 6c 65 5b 69 5d 2c 65 2e 73 74 79 6c 65 5b 69 5d 3d 74 5b 69 5d 3b 66 6f 72 28 69 20 69 6e 20 72 3d 6e 2e 63 61 6c 6c 28 65 29 2c 74 29 65 2e 73 74 79 6c 65 5b 69 5d 3d 6f 5b 69 5d 3b 72 65 74 75 72 6e Data Ascii: "+G+")(?!px)[a-z%]+$","i"),ze=/^--/,Xe=function(e){var t=e.ownerDocument.defaultView;return t&&t.opener\|\|(t=ie),t.getComputedStyle(e)},Ue=function(e,t,n){var r,i,o={};for(i in t)o[i]=e.style[i],e.style[i]=t[i];for(i in r=n.call(e),t)e.style[i]=o[i];return
2025-03-19 21:01:03 UTC	5196	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 22 72 6f 77 53 70 61 6e 22 2c 22 63 6f 6c 53 70 61 6e 22 2c 22 75 73 65 4d 61 70 22 2c 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 2e Data Ascii: unction(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex)}}),ce.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){ce.propFix[this.
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 29 7d 7d 29 3b 76 61 72 20 71 74 3d 2f 5c 5b 5c 5d 24 2f 2c 4c 74 3d 2f 5c 72 3f 5c 6e 2f 67 2c 48 74 3d 2f 5e 28 3f 3a 73 75 62 6d 69 74 7c 62 75 74 74 6f 6e 7c 69 6d 61 67 65 7c 72 65 73 65 74 7c 66 69 6c 65 29 24 2f 69 2c 4f 74 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 6b 65 79 67 65 6e 29 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 50 74 28 6e 2c 65 2c 72 2c 69 29 7b 76 61 72 20 74 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 63 65 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 7c 7c 71 74 2e 74 65 73 74 28 6e 29 3f 69 28 6e 2c 74 29 3a 50 74 28 6e 2b 22 5b 22 2b 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 74 3f 65 3a 22 22 29 2b 22 5d 22 2c Data Ascii: )}});var qt=/\[\]$/,Lt=/\r?\n/g,Ht=/^(?:submit\|button\|image\|reset\|file)$/i,Ot=/^(?:input\|select\|textarea\|keygen)/i;function Pt(n,e,r,i){var t;if(Array.isArray(e))ce.each(e,function(e,t){r\|\|qt.test(n)?i(n,t):Pt(n+"["+("object"==typeof t&&null!=t?e:"")+"]",
2025-03-19 21:01:03 UTC	234	IN	Data Raw: 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 65 7d 29 3b 76 61 72 20 74 6e 3d 69 65 2e 6a 51 75 65 72 79 2c 6e 6e 3d 69 65 2e 24 3b 72 65 74 75 72 6e 20 63 65 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 65 2e 24 3d 3d 3d 63 65 26 26 28 69 65 2e 24 3d 6e 6e 29 2c 65 26 26 69 65 2e 6a 51 75 65 72 79 3d 3d 3d 63 65 26 26 28 69 65 2e 6a 51 75 65 72 79 3d 74 6e 29 2c 63 65 7d 2c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 69 65 2e 6a 51 75 65 72 79 3d 69 65 2e 24 3d 63 65 29 2c 63 65 7d 29 3b 0a Data Ascii: efine&&define.amd&&define("jquery",[],function(){return ce});var tn=ie.jQuery,nn=ie.$;return ce.noConflict=function(e){return ie.$===ce&&(ie.$=nn),e&&ie.jQuery===ce&&(ie.jQuery=tn),ce},"undefined"==typeof e&&(ie.jQuery=ie.$=ce),ce});

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	605	OUT	GET /vendor/lodash/lodash.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	517	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 73015 Connection: close Date: Wed, 19 Mar 2025 21:01:04 GMT Last-Modified: Tue, 15 Oct 2024 18:11:14 GMT ETag: "9becc40fb1d85d21d0ca38e2f7069511" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 255e8a45aff6633687f7e4911e918abc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: NSui-LLHwejOB0QhrBO9-rZc7R3fCuJuDmB_rUAM4FuTmw29ZfD7vA==
2025-03-19 21:01:03 UTC	8192	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 4c 6f 64 61 73 68 20 3c 68 74 74 70 73 3a 2f 2f 6c 6f 64 61 73 68 2e 63 6f 6d 2f 3e 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 3c 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 6a 73 66 2e 6f 72 67 2f 3e 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 3c 68 74 74 70 73 3a 2f 2f 6c 6f 64 61 73 68 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 3e 0a 20 2a 20 42 61 73 65 64 20 6f 6e 20 55 6e 64 65 72 73 63 6f 72 65 2e 6a 73 20 31 2e 38 2e 33 20 3c 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 6a 73 2e 6f 72 67 2f 4c 49 43 45 4e 53 45 3e 0a 20 2a 20 43 6f Data Ascii: /** * @license * Lodash <https://lodash.com/> * Copyright OpenJS Foundation and other contributors <https://openjsf.org/> * Released under MIT license <https://lodash.com/license> * Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE> * Co
2025-03-19 21:01:03 UTC	8789	IN	Data Raw: 66 74 5d 3d 4b 72 5b 4e 6e 5d 3d 4b 72 5b 63 74 5d 3d 4b 72 5b 50 6e 5d 3d 4b 72 5b 5a 6e 5d 3d 4b 72 5b 4b 6e 5d 3d 4b 72 5b 47 6e 5d 3d 4b 72 5b 48 6e 5d 3d 4b 72 5b 59 6e 5d 3d 4b 72 5b 6e 74 5d 3d 4b 72 5b 74 74 5d 3d 4b 72 5b 72 74 5d 3d 4b 72 5b 69 74 5d 3d 21 31 3b 76 61 72 20 56 72 3d 7b 7d 3b 56 72 5b 44 6e 5d 3d 56 72 5b 4d 6e 5d 3d 56 72 5b 66 74 5d 3d 56 72 5b 63 74 5d 3d 56 72 5b 4e 6e 5d 3d 56 72 5b 50 6e 5d 3d 56 72 5b 61 74 5d 3d 56 72 5b 6c 74 5d 3d 56 72 5b 73 74 5d 3d 56 72 5b 68 74 5d 3d 56 72 5b 70 74 5d 3d 56 72 5b 47 6e 5d 3d 56 72 5b 48 6e 5d 3d 56 72 5b 59 6e 5d 3d 56 72 5b 6e 74 5d 3d 56 72 5b 74 74 5d 3d 56 72 5b 72 74 5d 3d 56 72 5b 65 74 5d 3d 56 72 5b 5f 74 5d 3d 56 72 5b 76 74 5d 3d 56 72 5b 67 74 5d 3d 56 72 5b 79 74 5d 3d Data Ascii: ft]=Kr[Nn]=Kr[ct]=Kr[Pn]=Kr[Zn]=Kr[Kn]=Kr[Gn]=Kr[Hn]=Kr[Yn]=Kr[nt]=Kr[tt]=Kr[rt]=Kr[it]=!1;var Vr={};Vr[Dn]=Vr[Mn]=Vr[ft]=Vr[ct]=Vr[Nn]=Vr[Pn]=Vr[at]=Vr[lt]=Vr[st]=Vr[ht]=Vr[pt]=Vr[Gn]=Vr[Hn]=Vr[Yn]=Vr[nt]=Vr[tt]=Vr[rt]=Vr[et]=Vr[_t]=Vr[vt]=Vr[gt]=Vr[yt]=
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 7d 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 48 72 28 6e 2c 74 2c 72 2c 65 29 7b 76 61 72 20 75 3d 2d 31 2c 69 3d 6f 2c 61 3d 21 30 2c 6c 3d 6e 2e 6c 65 6e 67 74 68 2c 73 3d 5b 5d 2c 68 3d 74 2e 6c 65 6e 67 74 68 3b 0a 69 66 28 21 6c 29 72 65 74 75 72 6e 20 73 3b 72 26 26 28 74 3d 63 28 74 2c 7a 28 72 29 29 29 2c 65 3f 28 69 3d 66 2c 61 3d 21 31 29 3a 74 2e 6c 65 6e 67 74 68 3e 3d 74 6e 26 26 28 69 3d 53 2c 61 3d 21 31 2c 74 3d 6e 65 77 20 79 72 28 74 29 29 3b 6e 3a 66 6f 72 28 3b 2b 2b 75 3c 6c 3b 29 7b 76 61 72 20 70 3d 6e 5b 75 5d 2c 5f 3d 6e 75 6c 6c 3d 3d 72 3f 70 3a 72 28 70 29 3b 69 66 28 70 3d 65 7c 7c 30 21 3d 3d 70 3f 70 3a 30 2c 61 26 26 5f 3d 3d 3d 5f 29 7b 66 6f 72 28 76 61 72 20 76 3d 68 3b 76 2d 2d 3b 29 69 66 28 74 5b 76 5d 3d 3d 3d 5f 29 63 Data Ascii: },t)}function Hr(n,t,r,e){var u=-1,i=o,a=!0,l=n.length,s=[],h=t.length;if(!l)return s;r&&(t=c(t,z(r))),e?(i=f,a=!1):t.length>=tn&&(i=S,a=!1,t=new yr(t));n:for(;++u<l;){var p=n[u],_=null==r?p:r(p);if(p=e\|\|0!==p?p:0,a&&_===_){for(var v=h;v--;)if(t[v]===_)c
2025-03-19 21:01:03 UTC	15990	IN	Data Raw: 69 66 28 70 26 26 21 5f 29 7b 76 61 72 20 64 3d 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 62 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 64 21 3d 62 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 69 6e 20 6e 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 69 6e 20 74 26 26 21 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 26 26 28 70 3d 21 31 29 7d 72 65 74 75 72 6e 20 69 2e 64 65 6c 65 74 65 28 6e 29 2c 0a 69 2e 64 65 6c 65 74 65 28 74 29 2c 70 7d 66 75 6e 63 74 69 6f 6e 20 67 69 28 6e 29 7b 72 65 74 75 72 6e 20 4c 73 28 56 69 28 6e 2c 58 2c 5f 6f 29 2c 6e 2b 22 22 29 7d 66 75 6e Data Ascii: if(p&&!_){var d=n.constructor,b=t.constructor;d!=b&&"constructor"in n&&"constructor"in t&&!("function"==typeof d&&d instanceof d&&"function"==typeof b&&b instanceof b)&&(p=!1)}return i.delete(n),i.delete(t),p}function gi(n){return Ls(Vi(n,X,_o),n+"")}fun
2025-03-19 21:01:03 UTC	11012	IN	Data Raw: 71 74 2e 74 65 73 74 28 6e 29 3b 72 65 74 75 72 6e 20 72 7c 7c 4b 74 2e 74 65 73 74 28 6e 29 3f 58 72 28 6e 2e 73 6c 69 63 65 28 32 29 2c 72 3f 32 3a 38 29 3a 50 74 2e 74 65 73 74 28 6e 29 3f 43 6e 3a 2b 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 63 28 6e 29 7b 72 65 74 75 72 6e 20 24 75 28 6e 2c 71 63 28 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 63 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3f 4d 72 28 6b 63 28 6e 29 2c 2d 57 6e 2c 57 6e 29 3a 30 3d 3d 3d 6e 3f 6e 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 45 63 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 22 22 3a 76 75 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 53 63 28 6e 2c 74 29 7b 76 61 72 20 72 3d 67 73 28 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 72 3a 43 72 28 72 2c 74 29 3b 0a 7d 66 75 6e 63 74 Data Ascii: qt.test(n);return r\|\|Kt.test(n)?Xr(n.slice(2),r?2:8):Pt.test(n)?Cn:+n}function Rc(n){return $u(n,qc(n))}function zc(n){return n?Mr(kc(n),-Wn,Wn):0===n?n:0}function Ec(n){return null==n?"":vu(n)}function Sc(n,t){var r=gs(n);return null==t?r:Cr(r,t);}funct
2025-03-19 21:01:03 UTC	6396	IN	Data Raw: 72 43 6f 64 65 41 74 28 30 29 26 26 74 2e 70 75 73 68 28 22 22 29 2c 6e 2e 72 65 70 6c 61 63 65 28 45 74 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 2c 75 29 7b 74 2e 70 75 73 68 28 65 3f 75 2e 72 65 70 6c 61 63 65 28 4d 74 2c 22 24 31 22 29 3a 72 7c 7c 6e 29 7d 29 2c 74 7d 29 2c 55 73 3d 75 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4a 66 28 6e 29 3f 48 72 28 6e 2c 65 65 28 74 2c 31 2c 4a 66 2c 21 30 29 29 3a 5b 5d 7d 29 2c 42 73 3d 75 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 6a 6f 28 74 29 3b 72 65 74 75 72 6e 20 4a 66 28 72 29 26 26 28 72 3d 58 29 2c 4a 66 28 6e 29 3f 48 72 28 6e 2c 65 65 28 74 2c 31 2c 4a 66 2c 21 30 29 2c 6d 69 28 72 2c 32 29 29 3a 5b 5d 7d 29 2c 54 73 3d 75 75 28 66 75 6e 63 74 69 Data Ascii: rCodeAt(0)&&t.push(""),n.replace(Et,function(n,r,e,u){t.push(e?u.replace(Mt,"$1"):r\|\|n)}),t}),Us=uu(function(n,t){return Jf(n)?Hr(n,ee(t,1,Jf,!0)):[]}),Bs=uu(function(n,t){var r=jo(t);return Jf(r)&&(r=X),Jf(n)?Hr(n,ee(t,1,Jf,!0),mi(r,2)):[]}),Ts=uu(functi
2025-03-19 21:01:03 UTC	6252	IN	Data Raw: 6c 6c 41 6c 6c 42 79 3d 49 6f 2c 5a 2e 70 75 6c 6c 41 6c 6c 57 69 74 68 3d 52 6f 2c 5a 2e 70 75 6c 6c 41 74 3d 4e 73 2c 5a 2e 72 61 6e 67 65 3d 63 70 2c 5a 2e 72 61 6e 67 65 52 69 67 68 74 3d 61 70 2c 5a 2e 72 65 61 72 67 3d 76 68 2c 5a 2e 72 65 6a 65 63 74 3d 6d 66 2c 5a 2e 72 65 6d 6f 76 65 3d 7a 6f 2c 5a 2e 72 65 73 74 3d 54 66 2c 0a 5a 2e 72 65 76 65 72 73 65 3d 45 6f 2c 5a 2e 73 61 6d 70 6c 65 53 69 7a 65 3d 6a 66 2c 5a 2e 73 65 74 3d 4a 63 2c 5a 2e 73 65 74 57 69 74 68 3d 59 63 2c 5a 2e 73 68 75 66 66 6c 65 3d 41 66 2c 5a 2e 73 6c 69 63 65 3d 53 6f 2c 5a 2e 73 6f 72 74 42 79 3d 6f 68 2c 5a 2e 73 6f 72 74 65 64 55 6e 69 71 3d 24 6f 2c 5a 2e 73 6f 72 74 65 64 55 6e 69 71 42 79 3d 44 6f 2c 5a 2e 73 70 6c 69 74 3d 64 61 2c 5a 2e 73 70 72 65 61 64 3d 24 Data Ascii: llAllBy=Io,Z.pullAllWith=Ro,Z.pullAt=Ns,Z.range=cp,Z.rangeRight=ap,Z.rearg=vh,Z.reject=mf,Z.remove=zo,Z.rest=Tf,Z.reverse=Eo,Z.sampleSize=jf,Z.set=Jc,Z.setWith=Yc,Z.shuffle=Af,Z.slice=So,Z.sortBy=oh,Z.sortedUniq=$o,Z.sortedUniqBy=Do,Z.split=da,Z.spread=$

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	616	OUT	GET /vendor/lz-string/libs/lz-string.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4719 Connection: close Date: Wed, 19 Mar 2025 21:01:04 GMT Last-Modified: Tue, 15 Oct 2024 18:11:15 GMT ETag: "109c13d75d0b6fc6440d3e98f803d396" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a363b826ba48f4e79f7e95839a3bcf3a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: Qf_rFezPCL0ygeVxB5iLdYFU1Wb9npDstWrZpE9G484NlOPIS_8_IQ==
2025-03-19 21:01:03 UTC	4719	IN	Data Raw: 76 61 72 20 4c 5a 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6f 2c 72 29 7b 69 66 28 21 74 5b 6f 5d 29 7b 74 5b 6f 5d 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6f 5d 5b 6f 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 7d 72 65 74 75 72 6e 20 74 5b 6f 5d 5b 72 5d 7d 76 61 72 20 72 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 6e 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 65 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a Data Ascii: var LZString=function(){function o(o,r){if(!t[o]){t[o]={};for(var n=0;n<o.length;n++)t[o][o.charAt(n)]=n}return t[o][r]}var r=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	607	OUT	GET /vendor/angular/angular.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	518	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 177888 Connection: close Date: Wed, 19 Mar 2025 21:01:04 GMT Last-Modified: Tue, 15 Oct 2024 18:11:13 GMT ETag: "30eca49917fc1e011ece03721a3b6aaf" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6ca3dc9afd6f12cee41f6246e0c4aa8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 7FCw_Dj99Nk4YTxDuxHK7AWEMVh0hr6q5lnunMLrmbO_XgpZSjk_RA==
2025-03-19 21:01:03 UTC	14588	IN	Data Raw: 0a 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 78 65 28 61 29 7b 69 66 28 44 28 61 29 29 77 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 26 26 28 58 62 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3d 59 62 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 3f 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3a 4e 61 4e 29 2c 77 28 61 2e 75 72 6c 45 72 72 6f 72 50 61 72 61 6d 73 45 6e 61 62 6c 65 64 29 26 26 47 61 28 61 2e 75 72 6c 45 72 72 6f 72 50 61 72 61 6d 73 45 6e 61 62 6c 65 64 29 26 26 28 58 62 2e 75 72 6c 45 72 72 6f 72 50 61 72 61 6d 73 45 6e 61 62 6c 65 64 3d 61 2e 75 72 6c 45 72 72 6f 72 50 61 72 61 6d 73 45 6e 61 62 6c 65 64 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 58 62 Data Ascii: (function(A){'use strict';function xe(a){if(D(a))w(a.objectMaxDepth)&&(Xb.objectMaxDepth=Yb(a.objectMaxDepth)?a.objectMaxDepth:NaN),w(a.urlErrorParamsEnabled)&&Ga(a.urlErrorParamsEnabled)&&(Xb.urlErrorParamsEnabled=a.urlErrorParamsEnabled);else return Xb
2025-03-19 21:01:03 UTC	2392	IN	Data Raw: 66 28 31 30 3e 72 61 29 66 6f 72 28 63 3d 68 62 5b 63 5d 7c 7c 68 62 2e 5f 64 65 66 61 75 6c 74 2c 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 63 5b 31 5d 2b 65 2b 63 5b 32 5d 2c 6b 3d 63 5b 30 5d 3b 6b 2d 2d 3b 29 64 3d 64 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 6c 73 65 7b 63 3d 73 61 5b 63 5d 7c 7c 5b 5d 3b 66 6f 72 28 6b 3d 63 2e 6c 65 6e 67 74 68 3b 2d 31 3c 2d 2d 6b 3b 29 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 41 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 5b 6b 5d 29 29 2c 64 3d 64 2e 66 69 72 73 74 43 68 69 6c 64 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 7d 67 3d 64 62 28 67 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 29 3b 64 3d 66 2e 66 69 72 73 74 43 68 69 6c 64 3b 64 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 7d 65 6c 73 Data Ascii: f(10>ra)for(c=hb[c]\|\|hb._default,d.innerHTML=c[1]+e+c[2],k=c[0];k--;)d=d.firstChild;else{c=sa[c]\|\|[];for(k=c.length;-1<--k;)d.appendChild(A.document.createElement(c[k])),d=d.firstChild;d.innerHTML=e}g=db(g,d.childNodes);d=f.firstChild;d.textContent=""}els
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 2b 5d 3d 62 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 64 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 62 28 61 2c 22 24 22 2b 28 62 7c 7c 22 6e 67 43 6f 6e 74 72 6f 6c 6c 65 72 22 29 2b 22 43 6f 6e 74 72 6f 6c 6c 65 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 46 62 28 61 2c 62 2c 64 29 7b 39 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 28 61 3d 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 3b 66 6f 72 28 62 3d 48 28 62 29 3f 62 3a 5b 62 5d 3b 61 3b 29 7b 66 6f 72 28 76 61 72 20 63 3d 0a 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 65 3b 63 2b 2b 29 69 66 28 77 28 64 3d 78 2e 64 61 74 61 28 61 2c 62 5b 63 5d 29 29 29 72 65 74 75 72 6e 20 64 3b 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 31 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 61 2e 68 6f 73 74 7d Data Ascii: +]=b}}function ld(a,b){return Fb(a,"$"+(b\|\|"ngController")+"Controller")}function Fb(a,b,d){9===a.nodeType&&(a=a.documentElement);for(b=H(b)?b:[b];a;){for(var c=0,e=b.length;c<e;c++)if(w(d=x.data(a,b[c])))return d;a=a.parentNode\|\|11===a.nodeType&&a.host}
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 6e 61 28 62 2c 61 2e 6e 6f 64 65 56 61 6c 75 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 3a 69 66 28 21 4f 61 29 62 72 65 61 6b 3b 46 28 61 2c 62 2c 64 2c 65 2c 66 29 7d 62 2e 73 6f 72 74 28 69 61 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 74 72 79 7b 76 61 72 20 66 3d 67 2e 65 78 65 63 28 61 2e 6e 6f 64 65 56 61 6c 75 65 29 3b 69 66 28 66 29 7b 76 61 72 20 68 3d 79 61 28 66 5b 31 5d 29 3b 0a 59 28 62 2c 68 2c 22 4d 22 2c 64 2c 65 29 26 26 28 63 5b 68 5d 3d 56 28 66 5b 32 5d 29 29 7d 7d 63 61 74 63 68 28 6b 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3d 30 3b 69 66 28 62 26 26 61 2e 68 61 73 41 74 74 72 69 62 Data Ascii: parentNode)\|\|na(b,a.nodeValue);break;case 8:if(!Oa)break;F(a,b,d,e,f)}b.sort(ia);return b}function F(a,b,c,d,e){try{var f=g.exec(a.nodeValue);if(f){var h=ya(f[1]);Y(b,h,"M",d,e)&&(c[h]=V(f[2]))}}catch(k){}}function U(a,b,c){var d=[],e=0;if(b&&a.hasAttrib
2025-03-19 21:01:03 UTC	9200	IN	Data Raw: 62 3d 54 28 29 2c 64 3b 43 28 61 29 3f 72 28 61 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 3b 76 61 72 20 65 3d 4b 28 56 28 61 2e 73 75 62 73 74 72 28 30 2c 64 29 29 29 3b 61 3d 56 28 61 2e 73 75 62 73 74 72 28 64 2b 31 29 29 3b 65 26 26 28 62 5b 65 5d 3d 62 5b 65 5d 3f 62 5b 65 5d 2b 22 2c 20 22 2b 61 3a 61 29 7d 29 3a 44 28 61 29 26 26 0a 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 76 61 72 20 66 3d 4b 28 64 29 2c 67 3d 56 28 61 29 3b 66 26 26 28 62 5b 66 5d 3d 62 5b 66 5d 3f 62 5b 66 5d 2b 22 2c 20 22 2b 67 3a 67 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 43 64 28 61 29 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: b=T(),d;C(a)?r(a.split("\n"),function(a){d=a.indexOf(":");var e=K(V(a.substr(0,d)));a=V(a.substr(d+1));e&&(b[e]=b[e]?b[e]+", "+a:a)}):D(a)&&r(a,function(a,d){var f=K(d),g=V(a);f&&(b[f]=b[f]?b[f]+", "+g:g)});return b}function Cd(a){var b;return function(d
2025-03-19 21:01:03 UTC	3578	IN	Data Raw: 2e 70 72 6f 74 6f 63 6f 6c 5d 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 46 64 28 61 2c 62 2c 64 29 7b 69 66 28 53 67 2e 74 65 73 74 28 61 29 29 74 68 72 6f 77 20 6b 62 28 22 62 61 64 70 61 74 68 22 2c 61 29 3b 76 61 72 20 63 3d 22 2f 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 3b 63 26 26 28 61 3d 0a 22 2f 22 2b 61 29 3b 61 3d 67 61 28 61 29 3b 66 6f 72 28 76 61 72 20 63 3d 28 63 26 26 22 2f 22 3d 3d 3d 61 2e 70 61 74 68 6e 61 6d 65 2e 63 68 61 72 41 74 28 30 29 3f 61 2e 70 61 74 68 6e 61 6d 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3a 61 2e 70 61 74 68 6e 61 6d 65 29 2e 73 70 6c 69 74 28 22 2f 22 29 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 65 2d 2d 3b 29 63 5b 65 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 5b 65 5d 29 2c 64 26 26 Data Ascii: .protocol]\|\|null}function Fd(a,b,d){if(Sg.test(a))throw kb("badpath",a);var c="/"!==a.charAt(0);c&&(a="/"+a);a=ga(a);for(var c=(c&&"/"===a.pathname.charAt(0)?a.pathname.substring(1):a.pathname).split("/"),e=c.length;e--;)c[e]=decodeURIComponent(c[e]),d&&
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 3f 28 64 2e 24 65 76 61 6c 41 73 79 6e 63 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 6d 2e 61 62 73 55 72 6c 28 29 2c 65 3d 6d 2e 24 24 73 74 61 74 65 2c 66 3b 6d 2e 24 24 70 61 72 73 65 28 61 29 3b 6d 2e 24 24 73 74 61 74 65 3d 62 3b 66 3d 64 2e 24 62 72 6f 61 64 63 61 73 74 28 22 24 6c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 65 53 74 61 72 74 22 2c 0a 61 2c 63 2c 62 2c 65 29 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3b 6d 2e 61 62 73 55 72 6c 28 29 3d 3d 3d 61 26 26 28 66 3f 28 6d 2e 24 24 70 61 72 73 65 28 63 29 2c 6d 2e 24 24 73 74 61 74 65 3d 65 2c 68 28 63 2c 21 31 2c 65 29 29 3a 28 4e 3d 21 31 2c 6c 28 63 2c 65 29 29 29 7d 29 2c 64 2e 24 24 70 68 61 73 65 7c 7c 64 2e 24 64 69 67 65 73 74 28 29 29 3a 67 2e 6c 6f 63 61 74 69 6f 6e 2e Data Ascii: ?(d.$evalAsync(function(){var c=m.absUrl(),e=m.$$state,f;m.$$parse(a);m.$$state=b;f=d.$broadcast("$locationChangeStart",a,c,b,e).defaultPrevented;m.absUrl()===a&&(f?(m.$$parse(c),m.$$state=e,h(c,!1,e)):(N=!1,l(c,e)))}),d.$$phase\|\|d.$digest()):g.location.
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 63 68 69 6c 64 48 65 61 64 7c 7c 63 21 3d 3d 74 68 69 73 26 26 63 2e 24 24 6e 65 78 74 53 69 62 6c 69 6e 67 29 29 66 6f 72 28 3b 63 21 3d 3d 74 68 69 73 26 26 21 28 64 3d 63 2e 24 24 6e 65 78 74 53 69 62 6c 69 6e 67 29 3b 29 63 3d 63 2e 24 70 61 72 65 6e 74 7d 65 2e 63 75 72 72 65 6e 74 53 63 6f 70 65 3d 0a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 65 7d 7d 3b 76 61 72 20 76 3d 6e 65 77 20 6d 2c 77 3d 76 2e 24 24 61 73 79 6e 63 51 75 65 75 65 3d 5b 5d 2c 78 3d 76 2e 24 24 70 6f 73 74 44 69 67 65 73 74 51 75 65 75 65 3d 5b 5d 2c 79 3d 76 2e 24 24 61 70 70 6c 79 41 73 79 6e 63 51 75 65 75 65 3d 5b 5d 2c 4a 3d 30 3b 72 65 74 75 72 6e 20 76 7d 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 65 28 29 7b 76 61 72 20 61 3d 2f 5e 5c 73 2a 28 68 74 74 70 73 3f 7c 73 3f 66 74 70 7c Data Ascii: childHead\|\|c!==this&&c.$$nextSibling))for(;c!==this&&!(d=c.$$nextSibling);)c=c.$parent}e.currentScope=null;return e}};var v=new m,w=v.$$asyncQueue=[],x=v.$$postDigestQueue=[],y=v.$$applyAsyncQueue=[],J=0;return v}]}function Te(){var a=/^\s*(https?\|s?ftp\|
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 21 31 3b 6c 28 29 7d 29 7d 76 61 72 20 68 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 68 26 26 28 66 2e 64 65 66 65 72 2e 63 61 6e 63 65 6c 28 68 29 2c 68 3d 6e 75 6c 6c 29 3b 69 66 28 21 6b 29 7b 76 61 72 20 65 3d 62 2e 76 61 6c 28 29 3b 61 3d 61 26 26 61 2e 74 79 70 65 3b 22 70 61 73 73 77 6f 72 64 22 3d 3d 3d 67 7c 7c 64 2e 6e 67 54 72 69 6d 26 26 0a 22 66 61 6c 73 65 22 3d 3d 3d 64 2e 6e 67 54 72 69 6d 7c 7c 28 65 3d 56 28 65 29 29 3b 28 63 2e 24 76 69 65 77 56 61 6c 75 65 21 3d 3d 65 7c 7c 22 22 3d 3d 3d 65 26 26 63 2e 24 24 68 61 73 4e 61 74 69 76 65 56 61 6c 69 64 61 74 6f 72 73 29 26 26 63 2e 24 73 65 74 56 69 65 77 56 61 6c 75 65 28 65 2c 61 29 7d 7d 3b 69 66 28 65 2e 68 61 73 45 76 65 6e 74 28 22 69 6e 70 75 74 22 29 29 62 2e 6f 6e 28 22 69 6e Data Ascii: !1;l()})}var h,l=function(a){h&&(f.defer.cancel(h),h=null);if(!k){var e=b.val();a=a&&a.type;"password"===g\|\|d.ngTrim&&"false"===d.ngTrim\|\|(e=V(e));(c.$viewValue!==e\|\|""===e&&c.$$hasNativeValidators)&&c.$setViewValue(e,a)}};if(e.hasEvent("input"))b.on("in
2025-03-19 21:01:03 UTC	3072	IN	Data Raw: 66 3a 61 2e 6f 66 66 2c 70 69 6e 3a 61 2e 70 69 6e 2c 65 6e 61 62 6c 65 64 3a 61 2e 65 6e 61 62 6c 65 64 2c 63 61 6e 63 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 61 6e 63 65 6c 26 26 61 2e 63 61 6e 63 65 6c 28 29 7d 2c 0a 65 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 68 2c 6c 29 7b 64 3d 64 26 26 78 28 64 29 3b 68 3d 68 26 26 78 28 68 29 3b 64 3d 64 7c 7c 68 2e 70 61 72 65 6e 74 28 29 3b 62 28 63 2c 64 2c 68 29 3b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2c 22 65 6e 74 65 72 22 2c 74 61 28 6c 29 29 7d 2c 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 68 2c 6c 29 7b 64 3d 64 26 26 78 28 64 29 3b 68 3d 68 26 26 78 28 68 29 3b 64 3d 64 7c 7c 68 2e 70 61 72 65 6e 74 28 29 3b 62 28 63 2c 64 2c 68 29 3b 72 65 74 75 72 6e 20 61 Data Ascii: f:a.off,pin:a.pin,enabled:a.enabled,cancel:function(a){a.cancel&&a.cancel()},enter:function(c,d,h,l){d=d&&x(d);h=h&&x(h);d=d\|\|h.parent();b(c,d,h);return a.push(c,"enter",ta(l))},move:function(c,d,h,l){d=d&&x(d);h=h&&x(h);d=d\|\|h.parent();b(c,d,h);return a

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	605	OUT	GET /vendor/urijs/src/URI.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	517	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 47616 Connection: close Date: Wed, 19 Mar 2025 21:01:04 GMT Last-Modified: Tue, 15 Oct 2024 18:11:15 GMT ETag: "1a2b6dfed7c245acdf7d6b14852a7bbf" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 08c35fba3c05c07f78b1292e4a5f949a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: -sdseADqWNESMl1FQEGswjslWVczUgb18T5yLxyxMWiT5Sqfl7ScGg==
2025-03-19 21:01:03 UTC	15867	IN	Data Raw: 2f 2a 21 20 55 52 49 2e 6a 73 20 76 31 2e 31 39 2e 31 31 20 68 74 74 70 3a 2f 2f 6d 65 64 69 61 6c 69 7a 65 2e 67 69 74 68 75 62 2e 69 6f 2f 55 52 49 2e 6a 73 2f 20 2a 2f 0a 2f 2a 20 62 75 69 6c 64 20 63 6f 6e 74 61 69 6e 73 3a 20 49 50 76 36 2e 6a 73 2c 20 70 75 6e 79 63 6f 64 65 2e 6a 73 2c 20 53 65 63 6f 6e 64 4c 65 76 65 6c 44 6f 6d 61 69 6e 73 2e 6a 73 2c 20 55 52 49 2e 6a 73 2c 20 55 52 49 54 65 6d 70 6c 61 74 65 2e 6a 73 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 72 2c 78 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 78 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! URI.js v1.19.11 http://medialize.github.io/URI.js/ //* build contains: IPv6.js, punycode.js, SecondLevelDomains.js, URI.js, URITemplate.js */(function(r,x){"object"===typeof module&&module.exports?module.exports=x():"function"===typeof define&&defi
2025-03-19 21:01:03 UTC	1094	IN	Data Raw: 73 69 6f 6e 3d 2f 5c 62 28 28 3f 3a 5b 61 2d 7a 5d 5b 5c 77 2d 5d 2b 3a 28 3f 3a 5c 2f 7b 31 2c 33 7d 7c 5b 61 2d 7a 30 2d 39 25 5d 29 7c 77 77 77 5c 64 7b 30 2c 33 7d 5b 2e 5d 7c 5b 61 2d 7a 30 2d 39 2e 5c 2d 5d 2b 5b 2e 5d 5b 61 2d 7a 5d 7b 32 2c 34 7d 5c 2f 29 28 3f 3a 5b 5e 5c 73 28 29 3c 3e 5d 2b 7c 5c 28 28 5b 5e 5c 73 28 29 3c 3e 5d 2b 7c 28 5c 28 5b 5e 5c 73 28 29 3c 3e 5d 2b 5c 29 29 29 2a 5c 29 29 2b 28 3f 3a 5c 28 28 5b 5e 5c 73 28 29 3c 3e 5d 2b 7c 28 5c 28 5b 5e 5c 73 28 29 3c 3e 5d 2b 5c 29 29 29 2a 5c 29 7c 5b 5e 5c 73 60 21 28 29 5c 5b 5c 5d 7b 7d 3b 3a 27 22 2e 2c 3c 3e 3f 5c 75 30 30 61 62 5c 75 30 30 62 62 5c 75 32 30 31 63 5c 75 32 30 31 64 5c 75 32 30 31 38 5c 75 32 30 31 39 5d 29 29 2f 69 67 3b 64 2e 66 69 6e 64 55 72 69 3d 7b 73 74 Data Ascii: sion=/\b((?:[a-z][\w-]+:(?:\/{1,3}\|[a-z0-9%])\|www\d{0,3}[.]\|[a-z0-9.\-]+[.][a-z]{2,4}\/)(?:[^\s()<>]+\|\(([^\s()<>]+\|(\([^\s()<>]+\)))\))+(?:\(([^\s()<>]+\|(\([^\s()<>]+\)))\)\|[^\s`!()\[\]{};:'".,<>?\u00ab\u00bb\u201c\u201d\u2018\u2019]))/ig;d.findUri={st
2025-03-19 21:01:03 UTC	16384	IN	Data Raw: 74 72 69 62 75 74 65 73 5b 62 5d 7d 7d 3b 64 2e 65 6e 63 6f 64 65 3d 46 3b 64 2e 64 65 63 6f 64 65 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 64 2e 69 73 6f 38 38 35 39 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 65 6e 63 6f 64 65 3d 65 73 63 61 70 65 3b 64 2e 64 65 63 6f 64 65 3d 75 6e 65 73 63 61 70 65 7d 3b 64 2e 75 6e 69 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 65 6e 63 6f 64 65 3d 46 3b 64 2e 64 65 63 6f 64 65 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7d 3b 64 2e 63 68 61 72 61 63 74 65 72 73 3d 7b 70 61 74 68 6e 61 6d 65 3a 7b 65 6e 63 6f 64 65 3a 7b 65 78 70 72 65 73 73 69 6f 6e 3a 2f 25 28 32 34 7c 32 36 7c 32 42 7c 32 43 7c 33 42 7c 33 44 7c 33 41 7c 34 30 29 2f 69 67 2c 6d 61 70 3a 7b 22 25 32 34 22 3a Data Ascii: tributes[b]}};d.encode=F;d.decode=decodeURIComponent;d.iso8859=function(){d.encode=escape;d.decode=unescape};d.unicode=function(){d.encode=F;d.decode=decodeURIComponent};d.characters={pathname:{encode:{expression:/%(24\|26\|2B\|2C\|3B\|3D\|3A\|40)/ig,map:{"%24":
2025-03-19 21:01:03 UTC	14271	IN	Data Raw: 6e 67 74 68 3b 63 3d 74 68 69 73 2e 5f 70 61 72 74 73 2e 70 61 74 68 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 29 3b 63 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 71 28 63 29 29 3b 74 68 69 73 2e 69 73 28 22 72 65 6c 61 74 69 76 65 22 29 7c 7c 28 61 7c 7c 28 61 3d 22 2f 22 29 2c 22 2f 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 26 26 0a 28 61 3d 22 2f 22 2b 61 29 29 3b 61 26 26 22 2f 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 3b 61 3d 64 2e 72 65 63 6f 64 65 50 61 74 68 28 61 29 3b 74 68 69 73 2e 5f 70 61 72 74 73 2e 70 61 74 68 3d 74 68 69 73 2e 5f 70 61 72 74 73 2e 70 61 74 68 2e 72 65 70 6c 61 63 65 28 63 2c 61 29 3b 74 68 69 73 2e 62 75 69 6c 64 28 21 62 29 3b 72 65 74 75 72 6e 20 74 68 Data Ascii: ngth;c=this._parts.path.substring(0,c);c=new RegExp("^"+q(c));this.is("relative")\|\|(a\|\|(a="/"),"/"!==a.charAt(0)&&(a="/"+a));a&&"/"!==a.charAt(a.length-1)&&(a+="/");a=d.recodePath(a);this._parts.path=this._parts.path.replace(c,a);this.build(!b);return th

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:03 UTC	623	OUT	GET /vendor/angular-cookies/angular-cookies.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:03 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1498 Connection: close Date: Wed, 19 Mar 2025 21:01:04 GMT Last-Modified: Tue, 15 Oct 2024 18:11:13 GMT ETag: "c0a738603474e9999c41324c6077f84a" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 255e8a45aff6633687f7e4911e918abc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: POwknOVRjP-Z7oiXYJUTjz62adXvgduY3r7zm1yHOJj4hGUWJBhbaQ==
2025-03-19 21:01:03 UTC	1498	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 0a 20 28 63 29 20 32 30 31 30 2d 32 30 32 30 20 47 6f 6f 67 6c 65 20 4c 4c 43 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 20 58 4c 54 53 20 66 6f 72 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 39 2e 31 0a 20 28 63 29 20 32 30 32 32 20 58 4c 54 53 2e 64 65 76 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 68 74 74 70 73 3a 2f 2f 78 6c 74 73 2e 64 65 76 2f 61 6e 67 75 6c 61 72 6a 73 0a 20 4c 69 63 65 6e 73 65 3a 20 4f 62 74 61 69 6e 20 61 20 63 6f 6d 6d 65 72 63 69 61 6c 20 6c 69 63 65 6e 73 65 20 66 72 6f 6d 20 58 4c 54 53 2e 64 65 76 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 2e 0a 2a 2f 0a 28 66 Data Ascii: /* AngularJS (c) 2010-2020 Google LLC. http://angularjs.org License: MIT XLTS for AngularJS v1.9.1 (c) 2022 XLTS.dev All Rights Reserved. https://xlts.dev/angularjs License: Obtain a commercial license from XLTS.dev before using this software.*/(f

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	611	OUT	GET /vendor/ngstorage/ngStorage.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2486 Connection: close Date: Wed, 19 Mar 2025 21:01:05 GMT Last-Modified: Tue, 15 Oct 2024 18:11:15 GMT ETag: "ee45fc1dc996fc2033bc24c058f95fe4" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9d75edcf5a40394118428c99809b7ff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: Nlmso4SdSn6hPr4lbVoXUY18nUr7_Q_L8OMKn0UpLncg_Ae97vJWpQ==
2025-03-19 21:01:04 UTC	2486	IN	Data Raw: 2f 2a 21 20 6e 67 73 74 6f 72 61 67 65 20 30 2e 33 2e 31 30 20 7c 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 47 69 61 73 20 4b 61 79 20 4c 65 65 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 61 6e 67 75 6c 61 72 22 5d 2c 62 29 3a 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 6e 67 75 6c 61 72 22 29 3f 62 28 61 2e 61 6e 67 75 6c 61 72 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 72 65 71 75 69 72 65 28 22 61 6e Data Ascii: /! ngstorage 0.3.10 \| Copyright (c) 2016 Gias Kay Lee \| MIT License /!function(a,b){"use strict";"function"==typeof define&&define.amd?define(["angular"],b):a.hasOwnProperty("angular")?b(a.angular):"object"==typeof exports&&(module.exports=b(require("an

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	623	OUT	GET /vendor/angular-animate/angular-animate.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	517	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 26976 Connection: close Date: Wed, 19 Mar 2025 21:01:05 GMT Last-Modified: Tue, 15 Oct 2024 18:11:13 GMT ETag: "e520dfff5fbc918fd2ffbffec3cbeb42" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 4e1c4d133adc8d8214916eeaddd7af66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: v7H0C-9LtirCda1fLL_yuiZdjLEaVL50e3Vog6HJujm_0te3y2kT7w==
2025-03-19 21:01:04 UTC	15867	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 0a 20 28 63 29 20 32 30 31 30 2d 32 30 32 30 20 47 6f 6f 67 6c 65 20 4c 4c 43 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 20 58 4c 54 53 20 66 6f 72 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 39 2e 31 0a 20 28 63 29 20 32 30 32 32 20 58 4c 54 53 2e 64 65 76 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 68 74 74 70 73 3a 2f 2f 78 6c 74 73 2e 64 65 76 2f 61 6e 67 75 6c 61 72 6a 73 0a 20 4c 69 63 65 6e 73 65 3a 20 4f 62 74 61 69 6e 20 61 20 63 6f 6d 6d 65 72 63 69 61 6c 20 6c 69 63 65 6e 73 65 20 66 72 6f 6d 20 58 4c 54 53 2e 64 65 76 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 2e 0a 2a 2f 0a 28 66 Data Ascii: /* AngularJS (c) 2010-2020 Google LLC. http://angularjs.org License: MIT XLTS for AngularJS v1.9.1 (c) 2022 XLTS.dev All Rights Reserved. https://xlts.dev/angularjs License: Obtain a commercial license from XLTS.dev before using this software.*/(f
2025-03-19 21:01:04 UTC	123	IN	Data Raw: 6f 6e 44 75 72 61 74 69 6f 6e 2c 30 29 2c 76 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3d 4d 61 74 68 2e 6d 61 78 28 76 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 2c 30 29 2c 63 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 64 2c 66 29 2c 6b 2e 70 75 74 28 73 2c 76 2c 21 30 29 29 29 3b 72 65 74 75 72 6e 20 76 7c 7c 7b 7d 7d 66 75 6e 63 74 69 6f Data Ascii: onDuration,0),v.transitionDuration=Math.max(v.transitionDuration,0),c.removeClass(d,f),k.put(s,v,!0)));return v\|\|{}}functio
2025-03-19 21:01:04 UTC	1537	IN	Data Raw: 6e 20 55 28 61 29 7b 75 2e 70 75 73 68 28 61 29 3b 4c 2e 77 61 69 74 55 6e 74 69 6c 51 75 69 65 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 66 6c 75 73 68 28 29 3b 66 6f 72 28 76 61 72 20 61 3d 65 28 29 2c 62 3d 30 3b 62 3c 75 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 75 5b 62 5d 28 61 29 3b 75 2e 6c 65 6e 67 74 68 3d 30 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 28 63 2c 64 2c 66 2c 65 29 7b 64 3d 6b 2e 67 65 74 28 66 29 3b 64 7c 7c 28 64 3d 4b 61 28 61 2c 63 2c 57 61 29 2c 22 69 6e 66 69 6e 69 74 65 22 3d 3d 3d 64 2e 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 43 6f 75 6e 74 26 26 28 64 2e 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 43 6f 75 6e 74 3d 31 29 29 3b 6b 2e 70 75 74 28 66 2c 64 2c 65 7c 7c 30 3c 64 2e 74 72 61 6e 73 69 74 69 6f Data Ascii: n U(a){u.push(a);L.waitUntilQuiet(function(){k.flush();for(var a=e(),b=0;b<u.length;b++)u[b](a);u.length=0})}function z(c,d,f,e){d=k.get(f);d\|\|(d=Ka(a,c,Wa),"infinite"===d.animationIterationCount&&(d.animationIterationCount=1));k.put(f,d,e\|\|0<d.transitio
2025-03-19 21:01:04 UTC	9449	IN	Data Raw: 6c 61 73 73 22 29 2b 22 20 22 2b 56 3b 6b 61 3d 6b 2e 63 61 63 68 65 4b 65 79 28 6c 2c 6a 61 2c 67 2e 61 64 64 43 6c 61 73 73 2c 67 2e 72 65 6d 6f 76 65 43 6c 61 73 73 29 3b 72 3d 7a 28 6c 2c 54 2c 6b 61 2c 21 31 29 3b 67 61 3d 72 2e 6d 61 78 44 65 6c 61 79 3b 57 3d 0a 4d 61 74 68 2e 6d 61 78 28 67 61 2c 30 29 3b 44 3d 72 2e 6d 61 78 44 75 72 61 74 69 6f 6e 3b 69 66 28 30 3d 3d 3d 44 29 7b 76 28 29 3b 72 65 74 75 72 6e 7d 70 2e 68 61 73 54 72 61 6e 73 69 74 69 6f 6e 73 3d 30 3c 72 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3b 70 2e 68 61 73 41 6e 69 6d 61 74 69 6f 6e 73 3d 30 3c 72 2e 61 6e 69 6d 61 74 69 6f 6e 44 75 72 61 74 69 6f 6e 7d 70 2e 61 70 70 6c 79 41 6e 69 6d 61 74 69 6f 6e 44 65 6c 61 79 26 26 28 67 61 3d 22 62 6f 6f 6c 65 61 6e Data Ascii: lass")+" "+V;ka=k.cacheKey(l,ja,g.addClass,g.removeClass);r=z(l,T,ka,!1);ga=r.maxDelay;W=Math.max(ga,0);D=r.maxDuration;if(0===D){v();return}p.hasTransitions=0<r.transitionDuration;p.hasAnimations=0<r.animationDuration}p.applyAnimationDelay&&(ga="boolean

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	1034	OUT	GET /?a=226975603&u=https%3A%2F%2Fpolestubllin.ac-page.com%2Fdocuments-nowreview-copy%3Ftest%3Dtrue%26data%3D05%257C02%257Cdeborah.cantu%40christushealth.org%257C9e7f5b22750f4b0a926208dd67155304%257C731939eac4fc4b44872b087271216567%257C0%257C0%257C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ%3D%3D%257C0%257C%257C%257C%26sdata%3DJEFyfacBrjqR1C9dEXbaS2KjW2qYjj%2BroFIB112Wvg%3D%26reserved%3D0 HTTP/1.1 Host: prism.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	539	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 21:01:04 GMT Content-Type: application/javascript Content-Length: 0 Connection: close Cache-Control: no-cache, private Set-Cookie: prism_226975603=7ae89ae6-da61-45c5-8f05-4500057f97a8; expires=Fri, 18 Apr 2025 21:01:04 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none x-powered-by: PHP/8.1.29 x-envoy-upstream-service-time: 66 cf-cache-status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 922fe726be8f728f-EWR

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	618	OUT	GET /vendor/gsap/src/minified/TweenMax.min.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	518	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 115731 Connection: close Date: Wed, 19 Mar 2025 21:01:05 GMT Last-Modified: Tue, 15 Oct 2024 18:11:13 GMT ETag: "09d0caa35d95a2a74ad89d97a9326c49" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1f85764c0bc1f70d16858df07753dfa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: HBRq4XBIBB7oAVTFYxCJrmBSJ8gaGyrVb6AEoQ8OG7RQ6c7ssToTNQ==
2025-03-19 21:01:04 UTC	14588	IN	Data Raw: 2f 2a 21 0a 20 2a 20 56 45 52 53 49 4f 4e 3a 20 31 2e 32 30 2e 35 0a 20 2a 20 44 41 54 45 3a 20 32 30 31 38 2d 30 35 2d 32 31 0a 20 2a 20 55 50 44 41 54 45 53 20 41 4e 44 20 44 4f 43 53 20 41 54 3a 20 68 74 74 70 3a 2f 2f 67 72 65 65 6e 73 6f 63 6b 2e 63 6f 6d 0a 20 2a 20 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 61 6c 6c 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 54 77 65 65 6e 4c 69 74 65 2c 20 54 77 65 65 6e 4d 61 78 2c 20 54 69 6d 65 6c 69 6e 65 4c 69 74 65 2c 20 54 69 6d 65 6c 69 6e 65 4d 61 78 2c 20 45 61 73 65 50 61 63 6b 2c 20 43 53 53 50 6c 75 67 69 6e 2c 20 52 6f 75 6e 64 50 72 6f 70 73 50 6c 75 67 69 6e 2c 20 42 65 7a 69 65 72 50 6c 75 67 69 6e 2c 20 41 74 74 72 50 6c 75 67 69 6e 2c 20 44 69 72 65 63 74 69 6f 6e 61 6c 52 6f 74 61 74 Data Ascii: /! VERSION: 1.20.5 * DATE: 2018-05-21 * UPDATES AND DOCS AT: http://greensock.com * * Includes all of the following: TweenLite, TweenMax, TimelineLite, TimelineMax, EasePack, CSSPlugin, RoundPropsPlugin, BezierPlugin, AttrPlugin, DirectionalRotat
2025-03-19 21:01:04 UTC	16384	IN	Data Raw: 6f 6e 29 3a 74 68 69 73 2e 5f 74 69 6d 65 3d 74 68 69 73 2e 5f 74 6f 74 61 6c 54 69 6d 65 3d 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 3d 74 68 69 73 2e 5f 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 3d 30 2c 74 68 69 73 7d 2c 71 2e 61 70 70 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 61 2c 74 68 69 73 2e 5f 70 61 72 73 65 54 69 6d 65 4f 72 4c 61 62 65 6c 28 6e 75 6c 6c 2c 62 2c 21 30 2c 61 29 29 7d 2c 71 2e 69 6e 73 65 72 74 3d 71 2e 69 6e 73 65 72 74 4d 75 6c 74 69 70 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 61 2c 62 7c 7c 30 2c 63 2c 64 29 7d 2c 71 2e 61 70 70 65 6e 64 4d 75 6c 74 69 70 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 Data Ascii: on):this._time=this._totalTime=this._duration=this._totalDuration=0,this},q.append=function(a,b){return this.add(a,this._parseTimeOrLabel(null,b,!0,a))},q.insert=q.insertMultiple=function(a,b,c,d){return this.add(a,b\|\|0,c,d)},q.appendMultiple=function(a,b
2025-03-19 21:01:04 UTC	16384	IN	Data Raw: 3d 67 2e 61 3d 28 6c 2b 6d 29 2f 32 2c 67 2e 62 3d 6d 2d 6e 2c 68 2e 62 3d 6b 2b 28 64 2d 6b 29 2f 34 2c 67 2e 63 3d 68 2e 61 3d 28 67 2e 62 2b 68 2e 62 29 2f 32 2c 5b 65 2c 66 2c 67 2c 68 5d 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 66 2c 67 2c 68 29 7b 76 61 72 20 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 2c 76 2c 77 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 78 3d 30 2c 79 3d 61 5b 30 5d 2e 61 3b 66 6f 72 28 6a 3d 30 3b 77 3e 6a 3b 6a 2b 2b 29 6e 3d 61 5b 78 5d 2c 6b 3d 6e 2e 61 2c 6c 3d 6e 2e 64 2c 6d 3d 61 5b 78 2b 31 5d 2e 64 2c 68 3f 28 74 3d 62 5b 6a 5d 2c 75 3d 63 5b 6a 5d 2c 76 3d 28 75 2b 74 29 2a 65 2a 2e 32 35 2f 28 67 3f 2e 35 3a 64 5b 6a 5d 7c 7c 2e 35 29 2c 6f 3d 6c 2d 28 6c 2d 6b 29 2a 28 67 3f 2e 35 2a 65 3a Data Ascii: =g.a=(l+m)/2,g.b=m-n,h.b=k+(d-k)/4,g.c=h.a=(g.b+h.b)/2,[e,f,g,h]},j=function(a,e,f,g,h){var j,k,l,m,n,o,p,q,r,s,t,u,v,w=a.length-1,x=0,y=a[0].a;for(j=0;w>j;j++)n=a[x],k=n.a,l=n.d,m=a[x+1].d,h?(t=b[j],u=c[j],v=(u+t)e.25/(g?.5:d[j]\|\|.5),o=l-(l-k)(g?.5e:
2025-03-19 21:01:04 UTC	16384	IN	Data Raw: 61 5b 31 5d 3d 6f 61 28 61 5b 31 5d 2c 62 29 29 2c 70 61 2e 6c 61 73 74 49 6e 64 65 78 3d 30 7d 2c 62 2e 64 65 66 61 75 6c 74 53 74 72 69 6e 67 46 69 6c 74 65 72 7c 7c 28 62 2e 64 65 66 61 75 6c 74 53 74 72 69 6e 67 46 69 6c 74 65 72 3d 67 2e 63 6f 6c 6f 72 53 74 72 69 6e 67 46 69 6c 74 65 72 29 3b 76 61 72 20 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 65 2c 66 3d 62 3f 28 61 2e 6d 61 74 63 68 28 70 61 29 7c 7c 5b 22 22 5d 29 5b 30 5d 3a 22 22 2c 67 3d 61 2e 73 70 6c 69 74 28 66 29 2e 6a 6f 69 6e 28 22 22 29 2e 6d 61 74 63 68 28 75 29 7c 7c 5b 5d 2c 68 3d 61 2e 73 75 62 73 74 72 28 30 2c 61 2e 69 6e 64 65 Data Ascii: a[1]=oa(a[1],b)),pa.lastIndex=0},b.defaultStringFilter\|\|(b.defaultStringFilter=g.colorStringFilter);var qa=function(a,b,c,d){if(null==a)return function(a){return a};var e,f=b?(a.match(pa)\|\|[""])[0]:"",g=a.split(f).join("").match(u)\|\|[],h=a.substr(0,a.inde
2025-03-19 21:01:04 UTC	7174	IN	Data Raw: 29 2c 28 70 7c 7c 4c 29 26 26 28 70 26 26 28 48 2b 3d 65 2a 2d 70 2c 49 2b 3d 68 2a 2d 70 2c 4a 2b 3d 6b 2a 2d 70 2b 70 29 2c 4c 26 26 28 48 2b 3d 7a 2e 78 4f 72 69 67 69 6e 2d 28 7a 2e 78 4f 72 69 67 69 6e 2a 63 2b 7a 2e 79 4f 72 69 67 69 6e 2a 64 29 2b 7a 2e 78 4f 66 66 73 65 74 2c 49 2b 3d 7a 2e 79 4f 72 69 67 69 6e 2d 28 7a 2e 78 4f 72 69 67 69 6e 2a 66 2b 7a 2e 79 4f 72 69 67 69 6e 2a 67 29 2b 7a 2e 79 4f 66 66 73 65 74 29 2c 71 3e 48 26 26 48 3e 2d 71 26 26 28 48 3d 77 29 2c 71 3e 49 26 26 49 3e 2d 71 26 26 28 49 3d 77 29 2c 71 3e 4a 26 26 4a 3e 2d 71 26 26 28 4a 3d 30 29 29 2c 75 3d 7a 2e 78 50 65 72 63 65 6e 74 7c 7c 7a 2e 79 50 65 72 63 65 6e 74 3f 22 74 72 61 6e 73 6c 61 74 65 28 22 2b 7a 2e 78 50 65 72 63 65 6e 74 2b 22 25 2c 22 2b 7a 2e 79 50 Data Ascii: ),(p\|\|L)&&(p&&(H+=e-p,I+=h-p,J+=k-p+p),L&&(H+=z.xOrigin-(z.xOriginc+z.yOrigind)+z.xOffset,I+=z.yOrigin-(z.xOriginf+z.yOrigin*g)+z.yOffset),q>H&&H>-q&&(H=w),q>I&&I>-q&&(I=w),q>J&&J>-q&&(J=0)),u=z.xPercent\|\|z.yPercent?"translate("+z.xPercent+"%,"+z.yP
2025-03-19 21:01:04 UTC	16384	IN	Data Raw: 2c 6a 3b 72 65 74 75 72 6e 20 39 3e 70 3f 28 69 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2c 6a 3d 38 3e 70 3f 22 20 22 3a 22 2c 22 2c 68 3d 22 72 65 63 74 28 22 2b 69 2e 63 6c 69 70 54 6f 70 2b 6a 2b 69 2e 63 6c 69 70 52 69 67 68 74 2b 6a 2b 69 2e 63 6c 69 70 42 6f 74 74 6f 6d 2b 6a 2b 69 2e 63 6c 69 70 4c 65 66 74 2b 22 29 22 2c 62 3d 74 68 69 73 2e 66 6f 72 6d 61 74 28 62 29 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6a 6f 69 6e 28 6a 29 29 3a 28 68 3d 74 68 69 73 2e 66 6f 72 6d 61 74 28 5f 28 61 2c 74 68 69 73 2e 70 2c 65 2c 21 31 2c 74 68 69 73 2e 64 66 6c 74 29 29 2c 62 3d 74 68 69 73 2e 66 6f 72 6d 61 74 28 62 29 29 2c 74 68 69 73 2e 70 61 72 73 65 43 6f 6d 70 6c 65 78 28 61 2e 73 74 79 6c 65 2c 68 2c 62 2c 66 2c 67 29 7d 7d 29 2c 79 61 28 22 74 65 78 Data Ascii: ,j;return 9>p?(i=a.currentStyle,j=8>p?" ":",",h="rect("+i.clipTop+j+i.clipRight+j+i.clipBottom+j+i.clipLeft+")",b=this.format(b).split(",").join(j)):(h=this.format(_(a,this.p,e,!1,this.dflt)),b=this.format(b)),this.parseComplex(a.style,h,b,f,g)}}),ya("tex
2025-03-19 21:01:04 UTC	16384	IN	Data Raw: 35 2b 31 7d 2c 2e 34 35 29 29 2c 6d 28 22 45 78 70 6f 22 2c 6b 28 22 45 78 70 6f 4f 75 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 31 2d 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 31 30 2a 61 29 7d 29 2c 6b 28 22 45 78 70 6f 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 70 6f 77 28 32 2c 31 30 2a 28 61 2d 31 29 29 2d 2e 30 30 31 7d 29 2c 6b 28 22 45 78 70 6f 49 6e 4f 75 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 2a 3d 32 29 3c 31 3f 2e 35 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 31 30 2a 28 61 2d 31 29 29 3a 2e 35 2a 28 32 2d 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 31 30 2a 28 61 2d 31 29 29 29 7d 29 29 2c 6d 28 22 53 69 6e 65 22 2c 6b 28 22 53 69 6e 65 4f 75 74 22 2c 66 75 6e 63 74 69 Data Ascii: 5+1},.45)),m("Expo",k("ExpoOut",function(a){return 1-Math.pow(2,-10a)}),k("ExpoIn",function(a){return Math.pow(2,10(a-1))-.001}),k("ExpoInOut",function(a){return(a=2)<1?.5Math.pow(2,10(a-1)):.5(2-Math.pow(2,-10*(a-1)))})),m("Sine",k("SineOut",functi
2025-03-19 21:01:04 UTC	630	IN	Data Raw: 6e 28 29 7b 76 61 72 20 61 2c 62 3d 4a 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 4b 3d 7b 7d 3b 2d 2d 62 3e 2d 31 3b 29 61 3d 4a 5b 62 5d 2c 61 26 26 61 2e 5f 6c 61 7a 79 21 3d 3d 21 31 26 26 28 61 2e 72 65 6e 64 65 72 28 61 2e 5f 6c 61 7a 79 5b 30 5d 2c 61 2e 5f 6c 61 7a 79 5b 31 5d 2c 21 30 29 2c 61 2e 5f 6c 61 7a 79 3d 21 31 29 3b 4a 2e 6c 65 6e 67 74 68 3d 30 7d 3b 58 2e 5f 73 74 61 72 74 54 69 6d 65 3d 69 2e 74 69 6d 65 2c 57 2e 5f 73 74 61 72 74 54 69 6d 65 3d 69 2e 66 72 61 6d 65 2c 58 2e 5f 61 63 74 69 76 65 3d 57 2e 5f 61 63 74 69 76 65 3d 21 30 2c 73 65 74 54 69 6d 65 6f 75 74 28 5a 2c 31 29 2c 44 2e 5f 75 70 64 61 74 65 52 6f 6f 74 3d 47 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 3b 69 66 28 4a 2e 6c 65 6e 67 Data Ascii: n(){var a,b=J.length;for(K={};--b>-1;)a=J[b],a&&a._lazy!==!1&&(a.render(a._lazy[0],a._lazy[1],!0),a._lazy=!1);J.length=0};X._startTime=i.time,W._startTime=i.frame,X._active=W._active=!0,setTimeout(Z,1),D._updateRoot=G.render=function(){var a,b,c;if(J.leng
2025-03-19 21:01:04 UTC	394	IN	Data Raw: 61 75 73 65 64 3b 29 63 3d 63 2e 5f 6e 65 78 74 3b 63 7c 7c 69 2e 73 6c 65 65 70 28 29 7d 7d 7d 2c 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 69 63 6b 22 2c 44 2e 5f 75 70 64 61 74 65 52 6f 6f 74 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 61 2e 5f 67 73 54 77 65 65 6e 49 44 3b 69 66 28 53 5b 66 7c 7c 28 61 2e 5f 67 73 54 77 65 65 6e 49 44 3d 66 3d 22 74 22 2b 54 2b 2b 29 5d 7c 7c 28 53 5b 66 5d 3d 7b 74 61 72 67 65 74 3a 61 2c 74 77 65 65 6e 73 3a 5b 5d 7d 29 2c 62 26 26 28 64 3d 53 5b 66 5d 2e 74 77 65 65 6e 73 2c 64 5b 65 3d 64 2e 6c 65 6e 67 74 68 5d 3d 62 2c 63 29 29 66 6f 72 28 3b 2d 2d 65 3e 2d 31 3b 29 64 5b 65 5d 3d 3d 3d 62 26 26 64 2e 73 70 6c 69 63 65 28 65 2c 31 29 Data Ascii: aused;)c=c._next;c\|\|i.sleep()}}},i.addEventListener("tick",D._updateRoot);var $=function(a,b,c){var d,e,f=a._gsTweenID;if(S[f\|\|(a._gsTweenID=f="t"+T++)]\|\|(S[f]={target:a,tweens:[]}),b&&(d=S[f].tweens,d[e=d.length]=b,c))for(;--e>-1;)d[e]===b&&d.splice(e,1)
2025-03-19 21:01:04 UTC	1024	IN	Data Raw: 3d 3d 21 31 7d 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 2c 67 2c 68 2c 69 3b 69 66 28 31 3d 3d 3d 64 7c 7c 64 3e 3d 34 29 7b 66 6f 72 28 69 3d 65 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 69 3e 66 3b 66 2b 2b 29 69 66 28 28 68 3d 65 5b 66 5d 29 21 3d 3d 62 29 68 2e 5f 67 63 7c 7c 68 2e 5f 6b 69 6c 6c 28 6e 75 6c 6c 2c 61 2c 62 29 26 26 28 67 3d 21 30 29 3b 65 6c 73 65 20 69 66 28 35 3d 3d 3d 64 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 67 7d 76 61 72 20 6a 2c 6b 3d 62 2e 5f 73 74 61 72 74 54 69 6d 65 2b 6d 2c 6c 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3d 3d 3d 62 2e 5f 64 75 72 61 74 69 6f 6e 3b 66 6f 72 28 66 3d 65 2e 6c 65 6e 67 74 68 3b 2d 2d 66 3e 2d 31 3b 29 28 68 3d 65 5b 66 5d 29 3d 3d 3d 62 7c 7c 68 2e 5f 67 63 7c Data Ascii: ==!1},aa=function(a,b,c,d,e){var f,g,h,i;if(1===d\|\|d>=4){for(i=e.length,f=0;i>f;f++)if((h=e[f])!==b)h._gc\|\|h._kill(null,a,b)&&(g=!0);else if(5===d)break;return g}var j,k=b._startTime+m,l=[],n=0,o=0===b._duration;for(f=e.length;--f>-1;)(h=e[f])===b\|\|h._gc\|

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	590	OUT	GET /core/core.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	515	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 107 Connection: close Date: Wed, 19 Mar 2025 21:01:05 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "02636607de7f635fab7a364f4790b0df" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 def26d054ec95b961e8352e3cd4fae7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: nyhFw_MDOzu8qVXUxa8L0wo1Nsb8LHTwDr-0UVoCdLeJRBpwnTPBdw==
2025-03-19 21:01:04 UTC	107	IN	Data Raw: 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 72 76 2e 63 6f 72 65 22 2c 20 5b 0a 20 20 22 72 76 2e 73 65 72 76 69 63 65 73 22 2c 0a 20 20 22 72 76 2e 64 69 72 65 63 74 69 76 65 73 22 2c 0a 20 20 2f 2f 22 72 76 2e 61 6e 69 6d 61 74 69 6f 6e 73 22 2c 0a 20 20 2f 2f 22 72 76 2e 66 69 6c 74 65 72 73 22 2c 0a 5d 29 3b 0a Data Ascii: angular.module("rv.core", [ "rv.services", "rv.directives", //"rv.animations", //"rv.filters",]);

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	603	OUT	GET /core/services/services.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	517	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 20617 Connection: close Date: Wed, 19 Mar 2025 21:01:05 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "299b0c44496fbe859f5cd0fd760947a6" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 145a3c1a881b9a37bb761d4b0890859a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: ZMImgF2DD3yT-o8O09MHW-arq3lOeTgR46XwSYoRp0Webr2la-zBuQ==
2025-03-19 21:01:04 UTC	8527	IN	Data Raw: 61 6e 67 75 6c 61 72 0a 20 20 2e 6d 6f 64 75 6c 65 28 22 72 76 2e 73 65 72 76 69 63 65 73 22 2c 20 5b 5d 29 0a 20 20 2e 73 65 72 76 69 63 65 28 22 56 69 6d 65 6f 41 50 49 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 24 77 69 6e 64 6f 77 2c 20 24 72 6f 6f 74 53 63 6f 70 65 2c 20 24 64 6f 63 75 6d 65 6e 74 29 20 7b 0a 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 74 68 69 73 2e 6f 6e 52 65 61 64 79 46 6e 73 20 3d 20 5b 5d 3b 0a 0a 20 20 20 20 74 68 69 73 2e 6f 6e 4c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 24 72 6f 6f 74 53 63 6f 70 65 2e 24 61 70 70 6c 79 28 29 3b 0a 20 20 20 20 20 20 73 65 6c 66 2e 69 6e 69 74 69 61 6c 69 7a 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 61 6e 67 75 6c 61 72 Data Ascii: angular .module("rv.services", []) .service("VimeoAPI", function ($window, $rootScope, $document) { var self = this; this.onReadyFns = []; this.onLoad = function () { $rootScope.$apply(); self.initialized = true; angular
2025-03-19 21:01:04 UTC	12090	IN	Data Raw: 76 65 6e 74 44 61 74 61 29 20 7b 0a 2f 2f 20 20 20 20 20 20 20 76 61 72 20 64 69 73 63 72 65 74 65 45 76 65 6e 74 20 3d 20 6e 65 77 20 44 69 73 63 72 65 74 65 45 76 65 6e 74 28 0a 2f 2f 20 20 20 20 20 20 20 20 20 61 6e 67 75 6c 61 72 2e 65 78 74 65 6e 64 28 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 7b 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 54 79 70 65 3a 20 65 76 65 6e 74 54 79 70 65 2c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 44 61 74 61 0a 2f 2f 20 20 20 20 20 20 20 20 20 29 0a 2f 2f 20 20 20 20 20 20 20 29 3b 0a 0a 2f 2f 20 20 20 20 20 20 20 64 69 73 63 72 65 74 65 45 76 65 6e 74 2e 73 61 76 65 28 29 3b 0a 0a 2f 2f 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 Data Ascii: ventData) {// var discreteEvent = new DiscreteEvent(// angular.extend(// {// eventType: eventType,// },// eventData// )// );// discreteEvent.save();// return thi

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	609	OUT	GET /core/services/services.modal.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4576 Connection: close Date: Wed, 19 Mar 2025 21:01:05 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "2810b2f344914c2e352a457ba2668edc" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 932eefec422d884c28f3c110319f29fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: _PIwetaeTbAN6eGgI85L8DIDalX6Re2gS-rgXKb6ExSJYQYeWmIncA==
2025-03-19 21:01:04 UTC	4576	IN	Data Raw: 2f 2f 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 72 76 2e 73 65 72 76 69 63 65 73 27 29 0a 2f 2f 20 20 20 20 20 2e 73 65 72 76 69 63 65 28 27 42 61 63 68 4d 6f 64 61 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 24 63 6f 6d 70 69 6c 65 2c 20 24 64 6f 63 75 6d 65 6e 74 2c 20 24 61 6e 69 6d 61 74 65 2c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 74 65 6d 70 6c 61 74 65 43 61 63 68 65 2c 20 24 74 69 6d 65 6f 75 74 2c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 6f 63 75 6d 65 6e 74 55 74 69 6c 2c 20 42 61 63 68 50 61 74 68 73 2c 20 24 72 6f 6f 74 53 63 6f 70 65 2c 0a 2f 2f 20 20 20 20 20 20 20 20 20 Data Ascii: // angular.module('rv.services')// .service('BachModal', function ($compile, $document, $animate,// $templateCache, $timeout,// DocumentUtil, BachPaths, $rootScope,//

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	609	OUT	GET /core/services/services.paths.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	515	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 786 Connection: close Date: Wed, 19 Mar 2025 21:01:05 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "b7fb2741853a4881076ad13e40b1be6a" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 83f903d51f378add519d351aa3b07052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: b66897re8INyPqYt3Ie_oCTkn1w8VbR-czgtxxvzh_WcfLQOKRRG9A==
2025-03-19 21:01:04 UTC	786	IN	Data Raw: 2f 2f 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 72 76 2e 73 65 72 76 69 63 65 73 27 29 0a 2f 2f 20 20 20 20 20 2e 70 72 6f 76 69 64 65 72 28 27 42 61 63 68 50 61 74 68 73 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 2f 2f 20 20 20 20 20 20 20 20 20 76 61 72 20 62 61 73 65 50 61 74 68 20 3d 20 27 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 73 2f 27 3b 0a 0a 2f 2f 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 74 68 73 20 3d 20 7b 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 6d 70 6c 61 74 65 73 3a 20 7b 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 3a 20 62 61 73 65 50 61 74 68 20 2b 20 27 63 6f 72 65 2e 74 65 6d 70 6c 61 74 65 73 2e 6d 6f 64 61 6c 2e 68 74 6d 6c 27 2c 0a 2f 2f 20 20 20 20 20 20 20 20 20 Data Ascii: // angular.module('rv.services')// .provider('BachPaths', function () {// var basePath = '/core/templates/';// var paths = {// templates: {// modal: basePath + 'core.templates.modal.html',//

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:04 UTC	607	OUT	GET /core/directives/directives.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:04 UTC	517	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 34555 Connection: close Date: Wed, 19 Mar 2025 21:01:05 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "0265d74786a928e1909a4c65c047ee20" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 90707ba4ec932f1b72abfb5c4f1add2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: gCVuJQaXl9L98lASg1HtifgOD_oL3jxxSykGxSOHVTcfpXvmhxvKqw==
2025-03-19 21:01:04 UTC	15990	IN	Data Raw: 61 6e 67 75 6c 61 72 0a 20 20 2e 6d 6f 64 75 6c 65 28 22 72 76 2e 64 69 72 65 63 74 69 76 65 73 22 2c 20 5b 5d 29 0a 20 20 2f 2f 20 20 20 2e 64 69 72 65 63 74 69 76 65 28 22 62 61 63 68 46 6f 72 6d 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 0a 20 20 2f 2f 20 20 20 20 20 24 71 2c 0a 20 20 2f 2f 20 20 20 20 20 24 68 74 74 70 2c 0a 20 20 2f 2f 20 20 20 20 20 24 6c 6f 67 2c 0a 20 20 2f 2f 20 20 20 20 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 2c 0a 20 20 2f 2f 20 20 20 20 20 24 63 6f 6f 6b 69 65 73 2c 0a 20 20 2f 2f 20 20 20 20 20 43 6f 6f 6b 69 65 54 6f 4a 73 6f 6e 2c 0a 20 20 2f 2f 20 20 20 20 20 44 69 73 63 72 65 74 65 45 76 65 6e 74 2c 0a 20 20 2f 2f 20 20 20 20 20 45 76 65 6e 74 73 4d 61 6e 61 67 65 72 2c 0a 20 20 2f 2f 20 20 20 20 20 50 72 69 6e 74 49 6d 61 67 65 Data Ascii: angular .module("rv.directives", []) // .directive("bachForm", function ( // $q, // $http, // $log, // Environment, // $cookies, // CookieToJson, // DiscreteEvent, // EventsManager, // PrintImage
2025-03-19 21:01:04 UTC	991	IN	Data Raw: 33 20 28 62 75 66 66 65 72 69 6e 67 29 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 35 20 28 76 69 64 65 6f 20 63 75 65 64 29 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 64 61 74 61 20 3d 3d 20 31 29 20 7b 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 69 6e 64 6f 77 49 64 6c 65 72 2e 73 74 6f 70 28 29 3b 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6d 2e 61 64 64 53 74 72 65 61 6d 45 76 65 6e 74 28 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 69 64 65 6f 61 63 74 69 76 65 22 2c 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b Data Ascii: 3 (buffering) // //5 (video cued) // if (e.data == 1) { // WindowIdler.stop(); // em.addStreamEvent( // "videoactive", // [
2025-03-19 21:01:04 UTC	9546	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 69 64 65 6f 61 63 74 69 76 65 22 2c 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 70 6c 61 79 65 72 2e 67 65 74 43 75 72 72 65 6e 74 54 69 6d 65 28 29 5d 2c 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 54 61 72 67 65 74 3a 20 61 74 74 72 73 2e 69 64 2c 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "videoactive", // [player.getCurrentTime()], // { // eventTarget: attrs.id, // } // ); //
2025-03-19 21:01:04 UTC	8028	IN	Data Raw: 20 2f 2f 20 20 20 65 6d 2e 74 72 69 67 67 65 72 28 22 6c 69 6e 6b 64 6f 77 6e 6c 6f 61 64 22 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 65 76 65 6e 74 44 61 74 61 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 20 20 68 72 65 66 3a 20 65 6c 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 65 6c 2e 61 74 74 72 28 22 64 6f 77 6e 6c 6f 61 64 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 65 6c 2e 61 74 74 72 28 22 68 72 65 66 22 29 20 26 26 20 65 Data Ascii: // em.trigger("linkdownload", { // eventData: { // href: el.attr("href"), // name: el.attr("download"), // }, // }); } else if (el.attr("href") && e

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:05 UTC	617	OUT	GET /core/directives/directives.countdown.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:05 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3456 Connection: close Date: Wed, 19 Mar 2025 21:01:06 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "094138b6fc241f838ac9a52d8dc1bdd0" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 932c2b3276a26e6c28876ec88fecf714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: NRtRTXSslk_6LPOPLRXdsDHQzreqNBxme0OT48_EQllVG1wliTH9Yw==
2025-03-19 21:01:05 UTC	3456	IN	Data Raw: 61 6e 67 75 6c 61 72 0a 20 20 2e 6d 6f 64 75 6c 65 28 22 72 76 2e 64 69 72 65 63 74 69 76 65 73 22 29 0a 20 20 2e 64 69 72 65 63 74 69 76 65 28 22 62 61 63 68 43 6f 75 6e 74 64 6f 77 6e 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 24 69 6e 74 65 72 76 61 6c 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 24 73 63 6f 70 65 2c 20 24 65 6c 65 6d 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 74 68 69 73 3a 20 22 2c 20 74 68 69 73 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 53 45 43 4f 4e 44 53 5f 4d 53 20 3d 20 31 30 30 30 3b 0a 20 20 20 20 20 20 20 20 76 61 72 Data Ascii: angular .module("rv.directives") .directive("bachCountdown", function ($interval) { return { controller: function ($scope, $element) { //console.log("this: ", this); var self = this; var SECONDS_MS = 1000; var

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:05 UTC	616	OUT	GET /core/directives/directives.parallax.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:05 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2699 Connection: close Date: Wed, 19 Mar 2025 21:01:06 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "2fad7e6f4088b2856e0216446dfe7d9d" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ff278a71a35448622a3b931c58f6a0ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: D8DtykY54icii_2Ec9fZOJISyQ12NvWPz1gbn7q9_hXhhIvaRTySdg==
2025-03-19 21:01:05 UTC	2699	IN	Data Raw: 61 6e 67 75 6c 61 72 0a 20 20 2e 6d 6f 64 75 6c 65 28 22 72 76 2e 64 69 72 65 63 74 69 76 65 73 22 29 0a 20 20 2e 64 69 72 65 63 74 69 76 65 28 22 62 61 63 68 50 61 72 61 6c 6c 61 78 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 24 77 69 6e 64 6f 77 2c 20 24 64 6f 63 75 6d 65 6e 74 2c 20 24 69 6e 74 65 72 76 61 6c 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 6c 69 6e 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 63 6f 70 65 2c 20 65 6c 65 6d 65 6e 74 2c 20 61 74 74 72 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 69 7a 65 4f 66 66 73 65 74 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 50 61 72 65 6e 74 20 3d 20 65 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 28 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d Data Ascii: angular .module("rv.directives") .directive("bachParallax", function ($window, $document, $interval) { return { link: function (scope, element, attrs) { var sizeOffset; var offsetParent = element.offsetParent(); var m

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:05 UTC	615	OUT	GET /core/directives/directives.scratch.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:05 UTC	517	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 12115 Connection: close Date: Wed, 19 Mar 2025 21:01:06 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "c24887a8c97859d1a3d887bfea18195b" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e3d2c542026df7b9357e3b591c889f64.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: Os8YDBt-6GjDsWb4s0w14aczUfgKnRE20Cy2884fK4m5WbdCVGLyIw==
2025-03-19 21:01:05 UTC	12115	IN	Data Raw: 2f 2f 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 72 76 2e 64 69 72 65 63 74 69 76 65 73 27 29 0a 2f 2f 20 20 20 20 20 2e 64 69 72 65 63 74 69 76 65 28 27 62 61 63 68 53 63 72 61 74 63 68 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 24 71 2c 20 24 74 69 6d 65 6f 75 74 2c 20 24 77 69 6e 64 6f 77 2c 20 24 64 6f 63 75 6d 65 6e 74 2c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 61 63 68 4d 6f 64 61 6c 2c 20 42 61 63 68 50 61 74 68 73 2c 20 24 6c 6f 67 29 20 7b 0a 2f 2f 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 49 6d 61 67 65 20 28 75 72 6c 29 20 7b 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6d 61 67 65 20 3d 20 6e 65 77 20 49 Data Ascii: // angular.module('rv.directives')// .directive('bachScratch', function ($q, $timeout, $window, $document,// BachModal, BachPaths, $log) {// function loadImage (url) {// var image = new I

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:05 UTC	624	OUT	GET /core/directives/directives.background-video.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:05 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4439 Connection: close Date: Wed, 19 Mar 2025 21:01:06 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "e80c8a38d907d6f81dbc21b1a6d0c64c" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b15f339834cfb5119481b1c1eb890372.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 6p61VGf9-n4qaXmDWTX3EpW2XUZStUE3kyMnqpGbgZO-tiQYsCpi8Q==
2025-03-19 21:01:05 UTC	4439	IN	Data Raw: 61 6e 67 75 6c 61 72 0a 20 20 2e 6d 6f 64 75 6c 65 28 22 72 76 2e 64 69 72 65 63 74 69 76 65 73 22 29 0a 20 20 2e 64 69 72 65 63 74 69 76 65 28 22 62 61 63 68 42 61 63 6b 67 72 6f 75 6e 64 56 69 64 65 6f 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 59 6f 75 74 75 62 65 41 50 49 2c 20 24 74 69 6d 65 6f 75 74 2c 20 24 6c 6f 67 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 62 61 63 6b 67 72 6f 75 6e 64 56 69 64 65 6f 22 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 72 65 73 74 72 69 63 74 3a 20 22 41 22 2c 0a 20 20 20 20 20 20 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 24 73 63 6f 70 65 2c 20 24 65 6c 65 6d 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 41 53 50 45 43 54 5f 52 41 54 49 4f 20 3d Data Ascii: angular .module("rv.directives") .directive("bachBackgroundVideo", function (YoutubeAPI, $timeout, $log) { console.log("backgroundVideo"); return { restrict: "A", controller: function ($scope, $element) { var ASPECT_RATIO =

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:05 UTC	601	OUT	GET /core/filters/filters.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:05 UTC	514	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 33 Connection: close Date: Wed, 19 Mar 2025 21:01:06 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "a2a4c06f71db6dbb29883ffe9e69f416" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 90707ba4ec932f1b72abfb5c4f1add2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: pkrs61trQkE1TqFdZnxk5NUtkgiDqAwvpP8WHI0oO65tEbQ-_PVGNA==
2025-03-19 21:01:05 UTC	33	IN	Data Raw: 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 72 76 2e 66 69 6c 74 65 72 73 27 2c 20 5b 5d 29 3b Data Ascii: angular.module('rv.filters', []);

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:05 UTC	607	OUT	GET /core/animations/animations.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:05 UTC	514	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 36 Connection: close Date: Wed, 19 Mar 2025 21:01:06 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "ffac4764c657d58c3b46710ad1bc9639" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ff278a71a35448622a3b931c58f6a0ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 395ZGuncEBzDIcOIx-10c_q_xyjQru1cMESP7miz5lYuj2MZ669y6g==
2025-03-19 21:01:05 UTC	36	IN	Data Raw: 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 72 76 2e 61 6e 69 6d 61 74 69 6f 6e 73 27 2c 20 5b 5d 29 3b Data Ascii: angular.module('rv.animations', []);

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:05 UTC	600	OUT	GET /analytics/analytics.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:05 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2304 Connection: close Date: Wed, 19 Mar 2025 21:01:06 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "442f0930b01e3309902c64f5f4fae3b3" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 38d213e81ab517fd857234c4eccd4632.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: BmBnK70iDdAXTADNm2dXZGS2Pjqm6azBUOZWLCLJhTInoScqFcfN6g==
2025-03-19 21:01:05 UTC	2304	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 43 6c 69 63 6b 28 65 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 7b 20 63 6c 61 73 73 4e 61 6d 65 2c 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 20 7d 20 3d 20 65 2e 74 61 72 67 65 74 3b 0a 20 20 20 20 63 6f 6e 73 74 20 62 75 74 74 6f 6e 43 6c 69 63 6b 65 64 20 3d 20 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 27 62 61 63 68 2d 62 75 74 74 6f 6e 2d 74 72 61 63 6b 69 6e 67 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 6c 69 6e 6b 43 6c 69 63 6b 65 64 20 3d 20 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 27 62 61 63 68 2d 6c 69 6e 6b 2d 74 72 61 63 6b 69 6e 67 27 29 3b 0a 20 20 20 20 6c 65 74 20 62 75 74 74 6f 6e 54 65 78 74 43 6c 69 63 6b 65 64 2c 20 6c 69 6e 6b 54 65 78 74 43 6c 69 63 6b 65 64 Data Ascii: function handleClick(e) { const { className, parentElement } = e.target; const buttonClicked = className.includes('bach-button-tracking'); const linkClicked = className.includes('bach-link-tracking'); let buttonTextClicked, linkTextClicked

Timestamp	Bytes transferred	Direction	Data
2025-03-19 21:01:05 UTC	588	OUT	GET /app/app.js HTTP/1.1 Host: landing-pages-cdn.app-us1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://polestubllin.ac-page.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 21:01:05 UTC	515	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 217 Connection: close Date: Wed, 19 Mar 2025 21:01:06 GMT Last-Modified: Tue, 15 Oct 2024 18:11:08 GMT ETag: "8172184a62c591a672567a43e75e9460" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7737ef6f12229d4564d45a2b0c059e2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: SeTbIhPyAR98bNF_RNq8xik3c3Hj_i8yTlzGjTX-3bcewcm8e_-a5Q==
2025-03-19 21:01:05 UTC	217	IN	Data Raw: 69 66 20 28 21 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 29 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 20 3d 20 7b 7d 3b 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 7d 3b 0a 0a 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 72 76 2e 61 70 70 22 2c 20 5b 0a 20 20 2f 2f 22 6e 67 41 6e 69 6d 61 74 65 22 2c 0a 20 20 2f 2f 22 6e 67 43 6f 6f 6b 69 65 73 22 2c 0a 20 20 2f 2f 22 6e 67 53 74 6f 72 61 67 65 22 2c 0a 20 20 22 72 76 2e 63 6f 72 65 22 2c 0a 20 20 2f 2f 22 72 76 2e 63 6f 6e 66 69 67 22 2c 0a 5d 29 3b 0a Data Ascii: if (!window.console) window.console = {};if (!window.console.log) window.console.log = function () {};angular.module("rv.app", [ //"ngAnimate", //"ngCookies", //"ngStorage", "rv.core", //"rv.config",]);