Edit tour

Windows Analysis Report
https://incomestatementdocument.classical.it.com/NC6tS/

Overview

General Information

Sample URL:	https://incomestatementdocument.classical.it.com/NC6tS/
Analysis ID:	1644631
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected BlockedWebSite

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2068,i,3826316609623489893,17020259341464328853,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://incomestatementdocument.classical.it.com/NC6tS/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security
0.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /report/v4?s=u%2B2PAc8XzhPotqxNVd624znGEyTjTbFO2fl%2FTLIaQkUMEuWBr3MtXwQa%2FtGbKn%2BzZ6K7NKHVSqb1ZPeQ%2Bq4BMonzjYF9WL24hk8sIPPwAvfxCLl5OyIQED%2B%2FgNjyvhdjgVo3vBkGBFhUWFVbcQZOHD7ayRirvEIAR9QC HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 417Content-Type: application/reports+jsonOrigin: https://incomestatementdocument.classical.it.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 20 Mar 2025 17:46:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2B2PAc8XzhPotqxNVd624znGEyTjTbFO2fl%2FTLIaQkUMEuWBr3MtXwQa%2FtGbKn%2BzZ6K7NKHVSqb1ZPeQ%2Bq4BMonzjYF9WL24hk8sIPPwAvfxCLl5OyIQED%2B%2FgNjyvhdjgVo3vBkGBFhUWFVbcQZOHD7ayRirvEIAR9QC"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9237075e9ac34fb3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 17:46:26 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4tUuoXenu1DdSi3TLdWbYNPZSDRKN%2BdwUB21%2BaBSkIkHsLguiD8x1jub6kdz0Wn9xjW5Gc0XUNQeY4ylZu4Sqk%2Fj8rfId15BwKE669N9FY3KPOq%2BRefrEDtznxqltwfdyMOhDBS1adDx0mGB8dGnUPdxSYx166p5lMn"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 923707662dddc8b9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=104856&min_rtt=104022&rtt_var=40676&sent=6&recv=5&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1221&delivery_rate=33660&cwnd=250&unsent_bytes=0&cid=9966a26c7a00b483&ts=1468&x=0"

Source: chromecache_84.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_71.1.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_82.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_82.1.dr, chromecache_71.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_82.1.dr, chromecache_71.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: unknown	HTTPS traffic detected: 172.67.216.207:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.216.207:443 -> 192.168.2.16:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.216.207:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.187.19:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.58:443 -> 192.168.2.16:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.16:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.128.240.48:443 -> 192.168.2.16:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.24.46:443 -> 192.168.2.16:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.56.162.51:443 -> 192.168.2.16:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.56.162.51:443 -> 192.168.2.16:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.216.207:443 -> 192.168.2.16:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.16:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49778 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6244_970253750

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6244_970253750

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@24/44@44/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2068,i,3826316609623489893,17020259341464328853,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://incomestatementdocument.classical.it.com/NC6tS/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2068,i,3826316609623489893,17020259341464328853,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://incomestatementdocument.classical.it.com/NC6tS/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://incomestatementdocument.classical.it.com/cdn-cgi/phish-bypass?atok=qbZKTob1vc49eZEQNjBdlDAI03z6mL1m7vTSqeBdGpo-1742492784-0.0.1.1-%2FNC6tS%2F	0%	Avira URL Cloud	safe
https://incomestatementdocument.classical.it.com/cdn-cgi/styles/cf.errors.css	0%	Avira URL Cloud	safe
https://incomestatementdocument.classical.it.com/cdn-cgi/images/icon-exclamation.png?1376755637	0%	Avira URL Cloud	safe
https://incomestatementdocument.classical.it.com/favicon.ico	0%	Avira URL Cloud	safe
https://xzoe.classical.it.com/google.php	0%	Avira URL Cloud	safe
https://6438955191-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
mailmeteor.com	172.67.187.19	true	false	high
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	23.209.72.31	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0010.t-0009.t-msedge.net	13.107.246.38	true	false	high
cos.ap-tokyo.myqcloud.com	43.128.240.48	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
e1315.dsca.akamaiedge.net	23.56.162.51	true	false	high
incomestatementdocument.classical.it.com	172.67.216.207	true	false	high
www.google.com	142.250.80.100	true	false	high
xzoe.classical.it.com	104.21.24.46	true	false	high
res.cloudinary.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
6438955191-1317754460.cos.ap-tokyo.myqcloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://incomestatementdocument.classical.it.com/NC6tS/	true		unknown
https://6438955191-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://xzoe.classical.it.com/google.php	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/	false		high
https://incomestatementdocument.classical.it.com/cdn-cgi/images/icon-exclamation.png?1376755637	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/923707b7eceb8ce8/1742492800972/GKCgZTjmCvgxbop	false		high
https://incomestatementdocument.classical.it.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=5PG5rqBK5bQAGLYUpan1%2B38a8JZjHcW4KjnJSA%2BOf34tC5FkLhZoPsJabv%2BP%2FmoNc%2BMg35XES74tn4LAAu8W%2BnIboJnVwfp9W%2BQ4dFgGAYAfztXHazm2A7jz95Z6OY1sndl%2Faw74OUA5QdSaThYZmMOqYB8OYWrcUOrM	false		high
https://a.nel.cloudflare.com/report/v4?s=u%2B2PAc8XzhPotqxNVd624znGEyTjTbFO2fl%2FTLIaQkUMEuWBr3MtXwQa%2FtGbKn%2BzZ6K7NKHVSqb1ZPeQ%2Bq4BMonzjYF9WL24hk8sIPPwAvfxCLl5OyIQED%2B%2FgNjyvhdjgVo3vBkGBFhUWFVbcQZOHD7ayRirvEIAR9QC	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923707b7eceb8ce8&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://incomestatementdocument.classical.it.com/cdn-cgi/styles/cf.errors.css	false	Avira URL Cloud: safe	unknown
https://incomestatementdocument.classical.it.com/cdn-cgi/phish-bypass?atok=qbZKTob1vc49eZEQNjBdlDAI03z6mL1m7vTSqeBdGpo-1742492784-0.0.1.1-%2FNC6tS%2F	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/923707b7eceb8ce8/1742492800976/bde426b7923722d2c6f2630eebdab868e4e355ae0b52186206f78e4da8c7c454/OrJeW4tuWUw2AZ2	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://res.cloudinary.com/dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png	false		high
https://mailmeteor.com/logos/assets/PNG/Microsoft_Logo_512px.png	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/310346162:1742491115:9Ic98fm1bm6UZNqolicYeekvkrwSVIH1ayYCexa4QzM/923707b7eceb8ce8/2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_82.1.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_82.1.dr, chromecache_71.1.dr	false	high
https://getbootstrap.com)	chromecache_71.1.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_82.1.dr, chromecache_71.1.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_84.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
43.128.240.48	cos.ap-tokyo.myqcloud.com	Japan	4249	LILLY-ASUS	false
172.67.187.19	mailmeteor.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
23.56.162.51	e1315.dsca.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
23.209.72.31	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
104.21.92.58	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
23.209.72.9	unknown	United States	20940	AKAMAI-ASN1EU	false
142.250.80.100	www.google.com	United States	15169	GOOGLEUS	false
104.21.24.46	xzoe.classical.it.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
172.67.216.207	incomestatementdocument.classical.it.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644631
Start date and time:	2025-03-20 18:45:52 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://incomestatementdocument.classical.it.com/NC6tS/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@24/44@44/16

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.110, 142.250.68.35, 142.251.179.84, 142.251.40.174, 142.250.80.46, 142.251.40.110, 142.250.65.238, 142.250.65.206, 142.250.80.78, 142.250.64.99, 142.250.65.174, 142.250.65.163, 142.251.40.206, 142.251.40.142, 142.250.72.106, 172.217.165.138, 142.250.65.170, 142.250.80.74, 142.251.40.202, 142.251.41.10, 142.251.40.170, 142.251.40.138, 142.250.80.42, 142.250.80.10, 142.251.35.170, 142.250.80.106, 142.250.64.74, 142.251.40.106, 142.251.40.234, 142.250.176.202, 4.175.87.197, 184.30.55.36, 20.190.152.20, 23.219.82.9, 13.107.246.40, 13.107.246.38
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://incomestatementdocument.classical.it.com/NC6tS/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
Reputation:	low
URL:	https://incomestatementdocument.classical.it.com/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Source: https://incomestatementdocument.classical.it.com/NC6tS/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'incomestatementdocument.classical.it.com' does not match the legitimate domain 'microsoft.com'., The URL contains multiple subdomains and an unusual structure, which is often indicative of phishing., The domain 'it.com' is not typically associated with Microsoft, raising suspicion., The presence of generic terms like 'incomestatementdocument' and 'classical' in the URL is unusual for a Microsoft-related site. DOM: 0.2.pages.csv
Source: https://incomestatementdocument.classical.it.com/NC6tS/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'incomestatementdocument.classical.it.com' does not match the legitimate domain 'microsoft.com'., The URL contains multiple subdomains and an unusual structure, which is a common tactic in phishing attempts., The domain 'it.com' is not typically associated with Microsoft, raising suspicion., The presence of input fields for 'Email, phone, or Skype' is consistent with phishing attempts targeting Microsoft accounts. DOM: 0.6.pages.csv

Source: https://incomestatementdocument.classical.it.com/NC6tS/	HTTP Parser: No favicon
Source: https://incomestatementdocument.classical.it.com/NC6tS/	HTTP Parser: No favicon
Source: https://incomestatementdocument.classical.it.com/NC6tS/	HTTP Parser: No favicon
Source: https://incomestatementdocument.classical.it.com/NC6tS/	HTTP Parser: No favicon
Source: https://incomestatementdocument.classical.it.com/NC6tS/	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.3
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.3
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: incomestatementdocument.classical.it.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: mailmeteor.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6438955191-1317754460.cos.ap-tokyo.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: xzoe.classical.it.com
Source: global traffic	DNS traffic detected: DNS query: res.cloudinary.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 18:46:23.246920109 CET	53	59375	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:23.294606924 CET	53	65462	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:23.877377987 CET	62394	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:23.879129887 CET	50357	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:23.994872093 CET	53	50357	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:23.995440006 CET	53	62394	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:24.077419043 CET	53	55469	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:24.477133036 CET	52164	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:24.477426052 CET	50789	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:24.583462000 CET	53	50789	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:24.585470915 CET	53	52164	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:24.698050976 CET	53	51473	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:25.204941034 CET	54570	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:25.205225945 CET	54398	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:25.315830946 CET	53	54570	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:25.317500114 CET	53	54398	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:27.944526911 CET	62361	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:27.944637060 CET	52004	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:28.053801060 CET	53	52004	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:28.055424929 CET	53	62361	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:36.474741936 CET	58981	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:36.475054979 CET	55442	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:36.477981091 CET	64833	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:36.478137970 CET	54875	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:36.586940050 CET	53	55442	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:36.588584900 CET	53	58981	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:36.590461016 CET	53	54875	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:36.638334990 CET	53	64833	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:37.142913103 CET	58649	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:37.143116951 CET	56908	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:37.252963066 CET	53	56908	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:37.259754896 CET	53	58649	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:38.180330038 CET	64303	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:38.180387020 CET	60565	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:38.287946939 CET	53	64303	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:38.288085938 CET	53	60565	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:39.313868046 CET	60138	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:39.314069033 CET	58553	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:46:39.419802904 CET	53	60138	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:39.421278000 CET	53	58553	1.1.1.1	192.168.2.16
Mar 20, 2025 18:46:41.594908953 CET	53	60709	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:00.478761911 CET	53	58039	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:23.195370913 CET	53	64780	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:23.226551056 CET	53	57979	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:26.671113014 CET	53	63209	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:42.722004890 CET	138	138	192.168.2.16	192.168.2.255
Mar 20, 2025 18:47:50.767205954 CET	51600	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:50.767390013 CET	57801	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:50.874602079 CET	53	51600	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:50.875942945 CET	53	57801	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:51.608191013 CET	50769	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:51.608364105 CET	57369	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:51.712280035 CET	53	57369	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:51.715662956 CET	53	50769	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:53.346252918 CET	53	61262	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.130426884 CET	50993	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.130768061 CET	51410	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.131217003 CET	51778	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.131417036 CET	64764	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.131836891 CET	53750	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.132011890 CET	59505	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.133538008 CET	51060	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.133688927 CET	49227	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.134574890 CET	54053	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.134742022 CET	55406	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:54.235327959 CET	53	64764	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.236560106 CET	53	51410	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.237036943 CET	53	50993	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.237090111 CET	53	51778	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.237355947 CET	53	49227	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.237715006 CET	53	53750	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.237807989 CET	53	59505	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.238080978 CET	53	51060	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:54.252571106 CET	53	57952	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:55.053729057 CET	53	54053	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:55.346582890 CET	53	55406	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:57.810012102 CET	61815	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:57.810162067 CET	61252	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:57.812093019 CET	53507	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:57.812427044 CET	51867	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:57.920785904 CET	53	53507	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:57.920860052 CET	53	51867	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:57.939841986 CET	53	61252	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:57.949768066 CET	53	61815	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:58.637226105 CET	58199	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:58.637625933 CET	56498	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:47:58.747330904 CET	53	58199	1.1.1.1	192.168.2.16
Mar 20, 2025 18:47:58.749696016 CET	53	56498	1.1.1.1	192.168.2.16
Mar 20, 2025 18:48:02.805280924 CET	53154	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:48:02.805424929 CET	62133	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:48:02.919557095 CET	53	62133	1.1.1.1	192.168.2.16
Mar 20, 2025 18:48:02.926920891 CET	53	53154	1.1.1.1	192.168.2.16
Mar 20, 2025 18:48:05.831037998 CET	58337	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:48:05.831399918 CET	51017	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:48:05.952059984 CET	53	58337	1.1.1.1	192.168.2.16
Mar 20, 2025 18:48:06.018953085 CET	53	51017	1.1.1.1	192.168.2.16
Mar 20, 2025 18:48:06.049530983 CET	53	59941	1.1.1.1	192.168.2.16
Mar 20, 2025 18:48:06.501233101 CET	59471	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:48:06.501360893 CET	59100	53	192.168.2.16	1.1.1.1
Mar 20, 2025 18:48:06.607057095 CET	53	59100	1.1.1.1	192.168.2.16
Mar 20, 2025 18:48:06.609266996 CET	53	59471	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 20, 2025 18:47:55.346671104 CET	192.168.2.16	1.1.1.1	c24b	(Port unreachable)	Destination Unreachable
Mar 20, 2025 18:48:06.019140005 CET	192.168.2.16	1.1.1.1	c2ad	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:24 UTC	696	OUT	GET /NC6tS/ HTTP/1.1 Host: incomestatementdocument.classical.it.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:24 UTC	592	IN	HTTP/1.1 403 Forbidden Date: Thu, 20 Mar 2025 17:46:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2B2PAc8XzhPotqxNVd624znGEyTjTbFO2fl%2FTLIaQkUMEuWBr3MtXwQa%2FtGbKn%2BzZ6K7NKHVSqb1ZPeQ%2Bq4BMonzjYF9WL24hk8sIPPwAvfxCLl5OyIQED%2B%2FgNjyvhdjgVo3vBkGBFhUWFVbcQZOHD7ayRirvEIAR9QC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9237075e9ac34fb3-EWR
2025-03-20 17:46:24 UTC	777	IN	Data Raw: 31 31 63 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11c6<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 Data Ascii: 'cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <p> <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
2025-03-20 17:46:24 UTC	1043	IN	Data Raw: 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 36 31 2e 37 37 2e 31 33 2e 32 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 Data Ascii: button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">161.77.13.2</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-foote
2025-03-20 17:46:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:24 UTC	620	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: incomestatementdocument.classical.it.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://incomestatementdocument.classical.it.com/NC6tS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:24 UTC	411	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:24 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Fri, 14 Mar 2025 21:23:45 GMT ETag: "67d49e61-5df3" Server: cloudflare CF-RAY: 9237075f6bbb42a0-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 20 Mar 2025 19:46:24 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2025-03-20 17:46:24 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2025-03-20 17:46:24 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:24 UTC	605	OUT	OPTIONS /report/v4?s=u%2B2PAc8XzhPotqxNVd624znGEyTjTbFO2fl%2FTLIaQkUMEuWBr3MtXwQa%2FtGbKn%2BzZ6K7NKHVSqb1ZPeQ%2Bq4BMonzjYF9WL24hk8sIPPwAvfxCLl5OyIQED%2B%2FgNjyvhdjgVo3vBkGBFhUWFVbcQZOHD7ayRirvEIAR9QC HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://incomestatementdocument.classical.it.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:25 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 20 Mar 2025 17:46:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:24 UTC	706	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: incomestatementdocument.classical.it.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://incomestatementdocument.classical.it.com/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:25 UTC	409	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:25 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Fri, 14 Mar 2025 21:23:45 GMT ETag: "67d49e61-1c4" Server: cloudflare CF-RAY: 923707631ec4425c-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 20 Mar 2025 19:46:25 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2025-03-20 17:46:25 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:25 UTC	580	OUT	POST /report/v4?s=u%2B2PAc8XzhPotqxNVd624znGEyTjTbFO2fl%2FTLIaQkUMEuWBr3MtXwQa%2FtGbKn%2BzZ6K7NKHVSqb1ZPeQ%2Bq4BMonzjYF9WL24hk8sIPPwAvfxCLl5OyIQED%2B%2FgNjyvhdjgVo3vBkGBFhUWFVbcQZOHD7ayRirvEIAR9QC HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 417 Content-Type: application/reports+json Origin: https://incomestatementdocument.classical.it.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:25 UTC	417	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 38 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 36 2e 32 30 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 63 6f 6d 65 73 74 61 74 65 6d 65 6e 74 Data Ascii: [{"age":2,"body":{"elapsed_time":589,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.216.207","status_code":403,"type":"http.error"},"type":"network-error","url":"https://incomestatement
2025-03-20 17:46:25 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 20 Mar 2025 17:46:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:25 UTC	649	OUT	GET /favicon.ico HTTP/1.1 Host: incomestatementdocument.classical.it.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://incomestatementdocument.classical.it.com/NC6tS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:26 UTC	867	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 17:46:26 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4tUuoXenu1DdSi3TLdWbYNPZSDRKN%2BdwUB21%2BaBSkIkHsLguiD8x1jub6kdz0Wn9xjW5Gc0XUNQeY4ylZu4Sqk%2Fj8rfId15BwKE669N9FY3KPOq%2BRefrEDtznxqltwfdyMOhDBS1adDx0mGB8dGnUPdxSYx166p5lMn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 923707662dddc8b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104856&min_rtt=104022&rtt_var=40676&sent=6&recv=5&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1221&delivery_rate=33660&cwnd=250&unsent_bytes=0&cid=9966a26c7a00b483&ts=1468&x=0"
2025-03-20 17:46:26 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-03-20 17:46:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:34 UTC	863	OUT	GET /cdn-cgi/phish-bypass?atok=qbZKTob1vc49eZEQNjBdlDAI03z6mL1m7vTSqeBdGpo-1742492784-0.0.1.1-%2FNC6tS%2F HTTP/1.1 Host: incomestatementdocument.classical.it.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://incomestatementdocument.classical.it.com/NC6tS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:35 UTC	511	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 20 Mar 2025 17:46:35 GMT Content-Type: text/html Content-Length: 167 Connection: close Set-Cookie: __cf_mw_byp=qbZKTob1vc49eZEQNjBdlDAI03z6mL1m7vTSqeBdGpo-1742492784-0.0.1.1-/NC6tS/; Domain=incomestatementdocument.classical.it.com; Path=/; Max-Age=86400 Cache-Control: private, no-cache Location: https://incomestatementdocument.classical.it.com/NC6tS/ Server: cloudflare CF-RAY: 923707a1ea29da8d-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-03-20 17:46:35 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:36 UTC	861	OUT	GET /NC6tS/ HTTP/1.1 Host: incomestatementdocument.classical.it.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://incomestatementdocument.classical.it.com/NC6tS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_mw_byp=qbZKTob1vc49eZEQNjBdlDAI03z6mL1m7vTSqeBdGpo-1742492784-0.0.1.1-/NC6tS/
2025-03-20 17:46:36 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=u515kjbcksf5dviiqoem8t30ja; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5PG5rqBK5bQAGLYUpan1%2B38a8JZjHcW4KjnJSA%2BOf34tC5FkLhZoPsJabv%2BP%2FmoNc%2BMg35XES74tn4LAAu8W%2BnIboJnVwfp9W%2BQ4dFgGAYAfztXHazm2A7jz95Z6OY1sndl%2Faw74OUA5QdSaThYZmMOqYB8OYWrcUOrM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 923707a85e47cd7f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=107998&min_rtt=107974&rtt_var=22790&sent=6&recv=8&lost=0&retrans=1&sent_bytes=2842&recv_bytes=1433&delivery_rate=34495&cwnd=245&unsent_bytes=0&cid=134528b8b7944fb2&ts=459&x=0"
2025-03-20 17:46:36 UTC	343	IN	Data Raw: 31 30 61 34 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 66 69 72 65 66 6c 79 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 61 72 63 68 61 65 6f 6c 6f 67 69 73 74 20 64 69 73 63 6f 76 65 72 65 64 20 66 6f 73 73 69 6c 73 20 74 68 61 74 20 70 72 6f 76 69 64 65 64 20 69 6e 73 69 67 68 74 20 69 6e 74 6f 20 70 72 65 68 69 73 74 6f 72 69 63 20 6c 69 66 65 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: 10a4 <html lang="en"> <head> <meta charset="UTF-8"> <title>firefly</title> ... <span>The archaeologist discovered fossils that provided insight into prehistoric life.</span> --> <meta name="robots" content=
2025-03-20 17:46:36 UTC	1369	IN	Data Raw: 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 6e 20 61 6d 62 69 74 69 6f 75 73 20 65 6e 74 72 65 70 72 65 6e 65 75 72 20 66 6f 75 6e 64 65 64 20 61 20 63 6f 6d 70 61 6e 79 20 74 68 61 74 20 64 69 73 72 75 70 74 65 64 20 74 68 65 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 6e 64 75 73 74 72 79 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: -scale=1.0"> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>An ambitious entrepreneur founded a company that disrupted the technology industry.</p> --> <style> *
2025-03-20 17:46:36 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 41 20 6a 6f 75 72 6e 61 6c 69 73 74 20 65 78 70 6f 73 65 64 20 63 6f 72 72 75 70 74 69 6f 6e 20 77 69 74 68 69 6e 20 61 20 70 6f 77 65 72 66 75 6c 20 63 6f 72 70 6f 72 61 74 65 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 Data Ascii: /* A journalist exposed corruption within a powerful corporate organization. */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px; } @media (max-width
2025-03-20 17:46:36 UTC	1187	IN	Data Raw: 20 74 72 61 64 69 74 69 6f 6e 73 20 77 6f 72 6c 64 77 69 64 65 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 41 20 73 63 69 65 6e 74 69 73 74 20 66 6f 75 6e 64 20 65 76 69 64 65 6e 63 65 20 73 75 70 70 6f 72 74 69 6e 67 20 61 20 6c 6f 6e 67 2d 64 65 62 61 74 65 64 20 74 68 65 6f 72 79 20 69 6e 20 70 68 79 73 69 63 73 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 42 42 55 45 34 53 73 63 68 53 6f 56 5f 48 71 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 78 79 6c 6f 70 68 6f 6e 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f Data Ascii: traditions worldwide. --> ... A scientist found evidence supporting a long-debated theory in physics. --> <span class="cf-turnstile" data-sitekey="0x4AAAAAABBUE4SschSoV_Hq" data-callback="xylophone"> </
2025-03-20 17:46:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:36 UTC	609	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://incomestatementdocument.classical.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:37 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 20 Mar 2025 17:46:37 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 923707ad5ad48c87-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:36 UTC	680	OUT	GET /logos/assets/PNG/Microsoft_Logo_512px.png HTTP/1.1 Host: mailmeteor.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://incomestatementdocument.classical.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:37 UTC	1186	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:37 GMT Content-Type: image/png Content-Length: 2309 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: "fd1dd9eb8405629af71bda9e0fc8400c" content-security-policy: frame-ancestors 'self' *.mailmeteor.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P5rG6VBQ7RWuHPtXrNyaOLw4zuB6s59ONBR%2Bu5Y5bPBQJAkfNWvbCiwVprVsKC8QVzC18k%2BV52qslywb%2BwcBTqUEXL0Vrw%2FZaQZiCrM4MmXdUiCIbbyanCZ%2BmrC81%2BjufQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 3230 Accept-Ranges: bytes Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 923707adab367290-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105599&min_rtt=104601&rtt_var=23570&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1252&delivery_rate=34606&cwnd=245&unsent_bytes=0&cid=0b2db7570438b64c&ts=284&x=0"
2025-03-20 17:46:37 UTC	183	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 9a 49 44 41 54 78 01 ed d6 31 aa 5d 55 14 80 e1 b5 1f 8f 60 23 64 08 b7 b1 cf 10 14 c1 5e b0 b1 74 08 4e c0 c2 09 38 04 3b 3b b1 17 41 87 10 db 54 37 33 78 45 8a 40 20 3b 37 90 22 03 c8 39 24 f9 bf af d9 dd ea d6 5e ff 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRxpHYssRGBgAMAaIDATx1]U`#d^tN8;;AT73xE@ ;7"9$^
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c aa d6 1c e8 c5 0f 5f fd b6 f7 3c 19 e0 44 eb e1 cb 3f 9f 7d 3f 07 f8 f5 9f 47 bf df e6 5f 06 38 cf 7a fd f4 97 6f 5f fd 3c 1f d8 fd 1c e8 dd f1 ff 7a 80 d3 ac d9 d7 39 c8 5e b7 7d de fb 32 c0 69 d6 be 9b 23 1c 33 15 00 f8 a8 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 Data Ascii: \|_<D?}?G_8zo_<z9^}2i#3$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A
2025-03-20 17:46:37 UTC	757	IN	Data Raw: 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 Data Ascii: A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:37 UTC	624	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://incomestatementdocument.classical.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:37 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 923707b13d8b4217-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:46:37 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-20 17:46:37 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:38 UTC	865	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://incomestatementdocument.classical.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:38 UTC	1297	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:38 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28317 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-wIVKgsKoTQ8HrSsl' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-20 17:46:38 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-20 17:46:38 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 77 49 56 4b 67 73 4b 6f 54 51 38 48 72 53 73 6c 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-wIVKgsKoTQ8HrSsl' 'unsafe-
2025-03-20 17:46:38 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-20 17:46:38 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-20 17:46:38 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-20 17:46:38 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-20 17:46:38 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-20 17:46:38 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-20 17:46:38 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-20 17:46:38 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:39 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923707b7eceb8ce8&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:39 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:39 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119511 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 923707bb3ae74270-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:46:39 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflar
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 Data Ascii: 0is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 65 72 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 52 2c 65 53 2c 66 6c 2c 66 6d 2c 66 6e 2c 66 72 2c 66 73 2c 66 76 2c 66 79 2c 66 41 2c 66 42 2c 66 43 2c 66 Data Ascii: ere%3F","turnstile_timeout":"Timed%20out"},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_output_subtitle":false,"feedback_report_guideline":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eR,eS,fl,fm,fn,fr,fs,fv,fy,fA,fB,fC,f
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 35 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 68 72 2c 67 2c 68 29 7b 68 3d 28 68 72 3d 67 4a 2c 67 3d 7b 7d 2c 67 5b 68 72 28 31 34 33 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 26 6a 7d 2c 67 5b 68 72 28 31 37 36 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 2d 6a 7d 2c 67 29 3b 74 72 79 7b 69 66 28 68 72 28 37 36 30 29 3d 3d 3d 68 72 28 37 36 30 29 29 72 65 74 75 72 6e 20 66 6b 28 65 29 3b 65 6c 73 65 20 74 68 69 73 2e 68 5b 74 68 69 73 2e 68 5b 31 37 5e 74 68 69 73 2e 67 5d 5b 33 5d 5e 68 5b 68 72 28 31 34 33 37 29 5d 28 68 5b 68 72 28 31 37 36 31 29 5d 28 74 68 69 73 2e 68 5b 31 37 2e 30 38 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 68 72 28 35 35 30 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 Data Ascii: 57)]=function(e,hr,g,h){h=(hr=gJ,g={},g[hr(1437)]=function(i,j){return i&j},g[hr(1761)]=function(i,j){return i-j},g);try{if(hr(760)===hr(760))return fk(e);else this.h[this.h[17^this.g][3]^h[hr(1437)](h[hr(1761)](this.h[17.08^this.g][1][hr(550)](this.h[thi
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 72 6e 20 69 3d 3d 68 7d 2c 27 6e 55 6e 6f 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 44 67 58 48 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 61 54 4c 55 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 67 4f 78 55 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 66 55 64 6d 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6e 49 4c 47 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 41 62 63 76 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 4e 41 69 72 64 Data Ascii: rn i==h},'nUnoB':function(h,i){return i==h},'DgXHD':function(h,i){return ih},'aTLUE':function(h,i){return h>i},'gOxUR':function(h,i){return i&h},'fUdmN':function(h,i){return i==h},'nILGT':function(h,i){return h<i},'Abcvl':function(h,i){return ih},'NAird
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 31 29 2c 31 2e 33 34 26 4e 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 68 77 28 39 33 33 29 5d 28 64 5b 68 77 28 31 37 35 39 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 68 77 28 31 38 34 36 29 5d 28 49 3c 3c 31 2c 4e 29 2c 64 5b 68 77 28 31 36 34 34 29 5d 28 4a 2c 64 5b 68 77 28 31 33 36 35 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 68 77 28 39 33 33 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 68 77 28 35 35 30 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 68 77 28 31 37 32 33 29 5d 28 31 36 2c 78 29 3b 49 3d 49 3c 3c 31 7c 31 26 4e 2c 64 5b 68 77 28 31 33 38 35 29 5d 28 4a 2c Data Ascii: 1),1.34&N),j-1==J?(J=0,H[hw(933)](d[hw(1759)](o,I)),I=0):J++,N>>=1,x++);}else{for(N=1,x=0;x<G;I=d[hw(1846)](I<<1,N),d[hw(1644)](J,d[hw(1365)](j,1))?(J=0,H[hw(933)](o(I)),I=0):J++,N=0,x++);for(N=D[hw(550)](0),x=0;d[hw(1723)](16,x);I=I<<1\|1&N,d[hw(1385)](J,
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 45 2d 2d 2c 64 5b 68 77 28 38 31 38 29 5d 28 30 2c 45 29 26 26 47 2b 2b 7d 66 6f 72 28 4e 3d 32 2c 78 3d 30 3b 78 3c 47 3b 49 3d 49 3c 3c 31 2e 34 32 7c 64 5b 68 77 28 31 31 31 30 29 5d 28 4e 2c 31 29 2c 64 5b 68 77 28 39 32 35 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 68 77 28 39 33 33 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 64 5b 68 77 28 39 34 33 29 5d 28 4a 2c 6a 2d 31 29 29 7b 48 5b 68 77 28 39 33 33 29 5d 28 6f 28 49 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 4a 2b 2b 3b 72 65 74 75 72 6e 20 48 5b 68 77 28 38 35 38 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 68 7a 29 7b 72 65 Data Ascii: :J++,N>>=1,x++);E--,d[hw(818)](0,E)&&G++}for(N=2,x=0;x<G;I=I<<1.42\|d[hw(1110)](N,1),d[hw(925)](J,j-1)?(J=0,H[hw(933)](o(I)),I=0):J++,N>>=1,x++);for(;;)if(I<<=1,d[hw(943)](J,j-1)){H[hw(933)](o(I));break}else J++;return H[hw(858)]('')},'j':function(h,hz){re
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4f 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 42 28 31 39 30 38 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 42 28 31 30 39 37 29 5d 28 64 5b 68 42 28 31 38 31 39 29 5d 28 30 2c 4e 29 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 64 5b 68 42 28 31 33 35 35 29 5d 28 65 2c 4a 29 2c 4f 3d 64 5b 68 42 28 31 30 34 31 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 68 42 28 38 35 38 29 5d 28 27 27 29 7d 69 66 28 30 3d 3d Data Ascii: :0)*F,F<<=1);s[B++]=e(J),O=B-1,x--;break;case 1:for(J=0,K=Math[hB(1908)](2,16),F=1;K!=F;N=H&G,H>>=1,H==0&&(H=j,G=o(I++)),J\|=d[hB(1097)](d[hB(1819)](0,N)?1:0,F),F<<=1);s[B++]=d[hB(1355)](e,J),O=d[hB(1041)](B,1),x--;break;case 2:return D[hB(858)]('')}if(0==
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 29 5d 26 26 28 78 3d 78 5b 68 46 28 38 39 38 29 5d 28 67 5b 68 46 28 31 36 31 33 29 5d 5b 68 46 28 36 37 35 29 5d 28 68 29 29 29 2c 78 3d 67 5b 68 46 28 31 39 31 31 29 5d 5b 68 46 28 38 36 33 29 5d 26 26 67 5b 68 46 28 31 38 36 35 29 5d 3f 67 5b 68 46 28 31 39 31 31 29 5d 5b 68 46 28 38 36 33 29 5d 28 6e 65 77 20 67 5b 28 68 46 28 31 38 36 35 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 48 2c 48 29 7b 66 6f 72 28 68 48 3d 68 46 2c 47 5b 68 48 28 37 39 30 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 68 48 28 38 32 37 29 5d 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 68 48 28 39 30 30 29 5d 28 48 2c 31 29 5d 3f 47 5b 68 48 28 31 36 36 38 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 Data Ascii: )]&&(x=x[hF(898)](g[hF(1613)][hF(675)](h))),x=g[hF(1911)][hF(863)]&&g[hF(1865)]?g[hF(1911)][hF(863)](new g[(hF(1865))](x)):function(G,hH,H){for(hH=hF,G[hH(790)](),H=0;H<G[hH(827)];G[H]===G[o[hH(900)](H,1)]?G[hH(1668)](H+1,1):H+=1);return G}(x),B='nAsAaAb'
2025-03-20 17:46:39 UTC	1369	IN	Data Raw: 72 3d 67 4a 28 38 39 37 29 5b 67 4a 28 31 36 33 32 29 5d 28 27 3b 27 29 2c 66 73 3d 66 72 5b 67 4a 28 31 32 36 39 29 5d 5b 67 4a 28 31 31 39 32 29 5d 28 66 72 29 2c 65 4d 5b 67 4a 28 35 37 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 68 49 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 68 49 3d 67 4a 2c 69 3d 7b 27 67 6b 63 62 42 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 27 45 72 6c 49 45 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 2c 27 48 4c 4b 43 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 28 6f 29 7d 7d 2c 6a 3d 4f 62 6a 65 63 74 5b 68 49 28 31 39 30 39 29 5d 28 68 29 2c 6b 3d 30 3b 6b 3c 6a 5b 68 49 28 38 32 37 29 5d 3b 6b 2b 2b Data Ascii: r=gJ(897)[gJ(1632)](';'),fs=fr[gJ(1269)][gJ(1192)](fr),eM[gJ(574)]=function(g,h,hI,i,j,k,l,m){for(hI=gJ,i={'gkcbB':function(n,o){return n+o},'ErlIE':function(n,o){return o===n},'HLKCO':function(n,o){return n(o)}},j=Object[hI(1909)](h),k=0;k<j[hI(827)];k++

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:39 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:39 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:39 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 923707bb3d7b43ef-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:46:39 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://incomestatementdocument.classical.it.com/NC6tS/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Static File Info

Network Behavior

Windows Analysis Report
https://incomestatementdocument.classical.it.com/NC6tS/

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:40 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:40 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:40 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 923707c5888f0fa5-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:46:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:40 UTC	1190	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/310346162:1742491115:9Ic98fm1bm6UZNqolicYeekvkrwSVIH1ayYCexa4QzM/923707b7eceb8ce8/2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3700 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:40 UTC	3700	OUT	Data Raw: 69 57 68 33 34 33 2b 33 58 33 68 33 64 4f 49 52 4f 49 4a 33 4f 4b 77 4d 4c 50 4f 54 49 4c 49 6b 44 4b 42 43 73 49 51 72 4d 33 4e 73 77 72 49 32 49 35 73 4c 4d 61 73 2d 2b 38 61 49 54 73 42 61 49 41 49 69 55 33 49 34 72 33 49 75 42 49 75 39 57 2d 6e 49 58 68 7a 72 72 61 42 73 77 66 49 67 4b 77 6b 49 58 79 78 51 6f 49 6e 2b 50 2d 6e 6d 6f 5a 75 49 6e 4f 6f 4b 2d 43 42 6e 33 77 38 49 76 63 72 6f 63 72 38 49 46 5a 72 31 47 47 57 67 5a 51 49 68 4b 6d 49 68 56 56 52 58 33 70 6b 4f 72 33 49 6e 55 44 78 63 45 73 48 79 2d 2d 78 4c 77 51 38 75 5a 51 78 75 5a 67 42 2d 33 49 57 2b 49 56 50 38 63 51 49 68 68 70 69 42 33 75 49 42 39 42 49 42 56 49 71 33 49 66 65 45 2d 42 69 49 49 6b 77 49 4f 66 49 41 4d 49 38 45 2d 6e 49 4c 4d 7a 49 2d 34 63 75 6f 68 61 49 42 55 75 49 Data Ascii: iWh343+3X3h3dOIROIJ3OKwMLPOTILIkDKBCsIQrM3NswrI2I5sLMas-+8aITsBaIAIiU3I4r3IuBIu9W-nIXhzrraBswfIgKwkIXyxQoIn+P-nmoZuInOoK-CBn3w8Ivcrocr8IFZr1GGWgZQIhKmIhVVRX3pkOr3InUDxcEsHy--xLwQ8uZQxuZgB-3IW+IVP8cQIhhpiB3uIB9BIBVIq3IfeE-BiIIkwIOfIAMI8E-nILMzI-4cuohaIBUuI
2025-03-20 17:46:41 UTC	1091	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:41 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 230972 Connection: close cf-chl-gen: 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$HIuSbhYtV6rGtwztiebx1Q== Server: cloudflare CF-RAY: 923707c54948c484-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:46:41 UTC	278	IN	Data Raw: 57 47 4a 4b 55 56 35 51 52 6f 32 51 61 59 56 33 63 4a 42 56 65 6e 46 70 67 4a 52 77 6f 33 79 66 67 35 69 6a 61 5a 32 46 67 59 43 47 72 36 2b 53 6e 4a 43 56 66 61 4f 59 6c 59 53 53 72 4b 61 7a 6b 4c 4f 33 6e 35 6d 34 66 5a 2b 62 75 4c 36 78 6f 34 57 33 71 36 57 4a 69 61 65 6c 31 4b 44 48 71 4e 65 77 30 71 2f 4c 6d 38 57 37 30 62 6d 68 31 4a 71 30 30 62 6a 6e 30 38 66 44 79 71 58 49 78 4f 36 72 36 73 44 6d 31 62 2f 6a 31 37 66 69 79 38 58 45 39 63 37 75 39 76 54 55 75 2b 58 51 38 2b 6a 52 35 64 72 55 78 4f 6e 65 32 66 6f 44 37 39 33 73 45 2b 6a 55 45 2b 33 53 46 77 63 58 44 41 38 43 38 64 34 57 41 75 41 43 45 78 34 44 34 68 34 4f 37 53 45 4a 4c 79 4d 45 2f 51 45 69 42 2b 34 7a 4c 77 77 74 42 68 77 5a 46 69 49 4f 4c 78 44 2b 4a 2f 34 6f 4f 69 41 44 54 45 6f Data Ascii: WGJKUV5QRo2QaYV3cJBVenFpgJRwo3yfg5ijaZ2FgYCGr6+SnJCVfaOYlYSSrKazkLO3n5m4fZ+buL6xo4W3q6WJiael1KDHqNew0q/Lm8W70bmh1Jq00bjn08fDyqXIxO6r6sDm1b/j17fiy8XE9c7u9vTUu+XQ8+jR5drUxOne2foD793sE+jUE+3SFwcXDA8C8d4WAuACEx4D4h4O7SEJLyME/QEiB+4zLwwtBhwZFiIOLxD+J/4oOiADTEo
2025-03-20 17:46:41 UTC	1369	IN	Data Raw: 31 4c 53 6c 46 41 59 43 35 50 5a 44 74 68 58 54 38 33 50 32 46 44 53 30 4e 6c 52 6d 56 48 61 55 68 50 5a 6b 70 59 64 6e 74 63 57 6b 38 36 56 46 4e 50 55 57 35 57 65 49 4e 79 59 58 78 68 64 6c 39 2f 68 34 56 6c 54 48 5a 6e 68 48 6c 31 6a 6d 70 33 61 59 70 76 6a 35 69 65 64 34 52 64 6d 46 32 4a 5a 59 69 46 69 32 61 49 67 6e 71 52 6d 34 57 30 6f 4a 53 51 74 4a 71 48 70 34 69 2b 6e 6e 65 72 6f 70 4f 77 70 61 47 37 6c 62 69 70 74 4a 7a 4d 79 4b 79 6f 7a 4c 4b 66 76 36 44 57 74 6f 2f 44 75 71 6a 49 76 61 33 63 73 65 48 42 30 37 48 68 30 72 58 6b 34 37 48 49 78 4f 47 6d 78 63 4c 77 79 66 44 45 35 4f 2f 71 79 4d 4c 57 32 4e 62 4c 74 74 58 4f 38 4d 30 42 31 4d 37 5a 2f 74 6b 49 41 63 58 6d 39 2f 6e 45 78 77 50 79 30 67 59 47 33 52 44 73 43 65 30 44 32 39 73 4b 30 Data Ascii: 1LSlFAYC5PZDthXT83P2FDS0NlRmVHaUhPZkpYdntcWk86VFNPUW5WeINyYXxhdl9/h4VlTHZnhHl1jmp3aYpvj5ied4RdmF2JZYiFi2aIgnqRm4W0oJSQtJqHp4i+nneropOwpaG7lbiptJzMyKyozLKfv6DWto/DuqjIva3cseHB07Hh0rXk47HIxOGmxcLwyfDE5O/qyMLW2NbLttXO8M0B1M7Z/tkIAcXm9/nExwPy0gYG3RDsCe0D29sK0
2025-03-20 17:46:41 UTC	1369	IN	Data Raw: 6a 4a 47 49 39 4d 79 68 6d 51 54 59 73 61 6b 67 6f 4d 47 35 4d 4b 44 52 79 54 55 59 34 64 6c 46 4a 50 48 70 56 54 45 42 2b 57 56 64 45 67 6c 31 61 53 49 5a 68 58 45 79 4b 5a 57 5a 51 6a 6d 6c 70 59 57 6d 4f 65 49 4f 57 63 58 42 39 6b 33 79 61 6f 61 4b 53 63 6e 69 52 63 36 71 69 68 33 6d 75 70 6f 70 73 73 71 71 4f 6a 62 61 75 6b 6f 6d 36 73 70 61 55 65 4c 2b 4e 71 70 36 51 74 73 53 47 75 71 4b 53 6d 4a 79 38 74 34 75 34 79 4d 32 39 31 4d 62 50 74 4c 48 4e 6b 72 65 76 74 64 50 4b 73 36 71 35 31 61 4f 6a 30 5a 6a 6d 75 71 54 70 33 4d 72 49 72 75 54 74 33 73 54 51 37 38 33 55 30 65 32 79 31 39 54 59 75 50 6a 52 41 75 77 41 2b 38 43 2f 33 2b 48 33 36 74 6a 34 37 64 6b 48 34 2b 37 68 43 4f 49 46 38 51 44 6e 47 42 41 61 42 51 33 76 37 51 41 65 48 68 41 5a 48 66 Data Ascii: jJGI9MyhmQTYsakgoMG5MKDRyTUY4dlFJPHpVTEB+WVdEgl1aSIZhXEyKZWZQjmlpYWmOeIOWcXB9k3yaoaKScniRc6qih3mupopssqqOjbaukom6spaUeL+Nqp6QtsSGuqKSmJy8t4u4yM291MbPtLHNkrevtdPKs6q51aOj0ZjmuqTp3MrIruTt3sTQ783U0e2y19TYuPjRAuwA+8C/3+H36tj47dkH4+7hCOIF8QDnGBAaBQ3v7QAeHhAZHf
2025-03-20 17:46:41 UTC	1369	IN	Data Raw: 4f 6a 6f 2f 4b 58 49 73 63 30 63 79 4d 33 42 70 52 30 52 63 65 54 5a 74 64 7a 77 37 59 46 32 44 5a 6c 52 30 61 57 57 49 5a 57 5a 34 58 57 46 4a 52 30 79 55 55 6c 4e 75 6b 57 5a 36 67 6d 78 57 66 48 31 58 66 6c 78 68 63 4a 64 79 5a 70 71 44 63 6e 74 38 59 35 65 6e 6d 47 61 65 67 72 43 75 6e 35 53 52 68 33 4b 51 6a 62 75 7a 76 59 2b 77 6f 62 57 53 74 4c 2b 75 73 4c 69 35 6e 37 57 6a 7a 6f 6a 4f 77 37 71 75 6f 4d 61 32 6c 73 71 69 73 63 32 70 7a 61 6e 64 73 4b 75 75 77 4c 2b 39 34 4b 48 43 76 64 57 6e 6f 39 37 63 72 75 47 36 36 2b 54 4c 39 4d 33 77 78 65 6e 47 77 73 72 74 78 65 62 6f 38 4f 33 55 37 64 73 46 35 4f 50 6e 77 74 33 66 31 74 55 4f 34 41 48 51 44 50 49 55 44 42 62 72 38 76 45 61 46 4e 6a 58 2f 50 6b 69 44 2f 77 68 49 41 62 67 4b 50 76 6d 35 78 54 Data Ascii: Ojo/KXIsc0cyM3BpR0RceTZtdzw7YF2DZlR0aWWIZWZ4XWFJR0yUUlNukWZ6gmxWfH1XflxhcJdyZpqDcnt8Y5enmGaegrCun5SRh3KQjbuzvY+wobWStL+usLi5n7WjzojOw7quoMa2lsqisc2pzandsKuuwL+94KHCvdWno97cruG66+TL9M3wxenGwsrtxebo8O3U7dsF5OPnwt3f1tUO4AHQDPIUDBbr8vEaFNjX/PkiD/whIAbgKPvm5xT
2025-03-20 17:46:41 UTC	1369	IN	Data Raw: 7a 4d 77 63 57 52 45 61 6b 51 7a 4c 6b 70 64 57 6d 39 72 51 58 35 44 68 6b 34 2f 59 57 70 64 52 33 36 42 66 49 35 35 6b 6c 31 53 59 6f 69 57 68 32 78 73 65 56 70 71 6b 49 74 77 57 6e 53 42 70 4a 71 4e 5a 58 53 61 6e 70 36 44 6f 5a 79 41 72 36 75 45 6b 49 32 67 6c 6f 4a 33 64 36 6c 73 76 4c 32 71 6a 62 79 37 69 61 43 65 6d 71 61 53 68 34 65 35 66 4d 6d 37 72 71 4b 38 73 61 6d 45 70 4b 36 64 76 37 4f 79 6d 64 6e 48 71 4e 36 39 33 4b 44 43 74 74 44 45 70 62 72 45 32 75 50 6a 78 62 6a 4f 77 63 44 6f 76 4c 79 72 73 39 44 30 33 39 66 56 37 2b 58 33 36 74 66 39 32 77 44 67 33 41 48 6d 30 38 66 48 39 62 7a 43 33 73 67 4d 41 4d 72 67 30 66 41 48 42 41 44 55 45 2b 33 72 32 42 66 78 37 74 77 62 39 66 44 67 48 2f 6e 36 35 43 50 39 2f 66 58 39 49 77 30 59 4b 77 59 46 Data Ascii: zMwcWREakQzLkpdWm9rQX5Dhk4/YWpdR36BfI55kl1SYoiWh2xseVpqkItwWnSBpJqNZXSanp6DoZyAr6uEkI2gloJ3d6lsvL2qjby7iaCemqaSh4e5fMm7rqK8samEpK6dv7OymdnHqN693KDCttDEpbrE2uPjxbjOwcDovLyrs9D039fV7+X36tf92wDg3AHm08fH9bzC3sgMAMrg0fAHBADUE+3r2Bfx7twb9fDgH/n65CP9/fX9Iw0YKwYF
2025-03-20 17:46:41 UTC	1369	IN	Data Raw: 74 6f 58 55 6c 75 54 6e 42 37 63 46 51 37 56 57 35 56 69 47 6c 32 53 30 75 46 51 4a 42 4a 66 48 39 4c 55 35 46 32 68 47 53 4b 63 5a 65 59 61 6e 31 36 65 32 6c 68 6c 70 61 55 5a 70 71 46 6c 49 47 46 68 34 36 42 6c 36 32 65 68 70 43 76 6a 5a 53 52 63 6e 4b 54 69 36 74 34 74 34 2b 4b 72 49 79 52 73 37 2b 36 6c 72 75 71 6d 37 69 72 79 4d 4f 69 30 5a 32 36 6f 71 33 4c 31 61 75 6d 71 63 69 73 70 72 48 51 73 37 36 78 34 4c 4f 75 7a 38 36 33 31 2b 43 6d 79 75 76 6e 32 73 50 4b 34 4f 62 63 35 4e 50 48 31 36 36 79 35 74 6a 75 39 4c 37 79 79 74 48 75 31 51 58 4e 2b 39 58 35 31 4d 51 4c 7a 4f 44 61 44 4e 77 4c 38 38 6f 46 45 67 49 5a 35 4e 44 34 39 65 76 57 2b 50 6e 58 36 76 44 32 33 76 54 67 4b 66 55 54 42 2f 67 66 4b 65 34 69 43 77 49 66 42 6a 58 39 4c 42 41 6f 4d Data Ascii: toXUluTnB7cFQ7VW5ViGl2S0uFQJBJfH9LU5F2hGSKcZeYan16e2lhlpaUZpqFlIGFh46Bl62ehpCvjZSRcnKTi6t4t4+KrIyRs7+6lruqm7iryMOi0Z26oq3L1aumqcisprHQs76x4LOuz8631+Cmyuvn2sPK4Obc5NPH166y5tju9L7yytHu1QXN+9X51MQLzODaDNwL88oFEgIZ5ND49evW+PnX6vD23vTgKfUTB/gfKe4iCwIfBjX9LBAoM
2025-03-20 17:46:41 UTC	1369	IN	Data Raw: 4b 56 31 78 4f 65 32 56 53 51 56 5a 7a 65 32 42 44 62 47 46 47 68 6d 56 74 67 33 5a 6d 68 48 6c 32 61 58 53 4d 6a 48 56 36 6c 47 46 64 66 5a 2b 61 67 46 2b 61 6c 33 75 65 5a 35 68 70 72 48 75 45 71 59 65 42 6c 6f 61 6b 6d 5a 57 72 69 61 79 5a 71 4a 48 41 72 6e 7a 43 76 61 43 63 68 73 53 37 79 4b 69 2b 76 73 4b 6f 72 38 43 6b 30 38 2b 72 6f 71 6a 48 77 36 33 54 6d 37 53 38 75 62 6e 63 33 72 66 45 33 4e 69 64 75 61 6a 4b 77 4b 58 70 32 61 61 38 71 4b 7a 79 37 73 44 54 78 4f 72 36 37 74 54 6b 79 4d 75 33 2b 74 77 42 36 39 50 56 2b 2f 48 49 39 74 6b 4a 79 67 7a 73 36 65 62 79 33 51 44 67 44 2b 6a 4f 30 52 44 70 35 52 6b 55 37 65 6b 56 37 67 4c 38 33 51 44 6c 4b 50 7a 70 44 42 66 72 48 51 33 6e 2b 52 4d 48 49 52 59 53 4a 52 45 70 47 6a 41 53 4d 66 6b 37 46 43 Data Ascii: KV1xOe2VSQVZze2BDbGFGhmVtg3ZmhHl2aXSMjHV6lGFdfZ+agF+al3ueZ5hprHuEqYeBloakmZWriayZqJHArnzCvaCchsS7yKi+vsKor8Ck08+roqjHw63Tm7S8ubnc3rfE3NiduajKwKXp2aa8qKzy7sDTxOr67tTkyMu3+twB69PV+/HI9tkJygzs6eby3QDgD+jO0RDp5RkU7ekV7gL83QDlKPzpDBfrHQ3n+RMHIRYSJREpGjASMfk7FC
2025-03-20 17:46:41 UTC	1369	IN	Data Raw: 67 6c 31 5a 53 45 5a 4b 6a 48 64 66 5a 4a 42 37 63 32 6d 50 53 59 4b 45 62 47 69 50 62 4a 4a 34 62 59 4a 2f 58 35 5a 2b 68 49 52 2b 69 57 65 49 6e 6d 6c 75 6f 48 70 35 70 49 53 4f 72 35 36 49 6b 72 4e 34 6a 49 61 46 74 6f 2b 76 74 37 57 56 66 4b 61 5a 74 4b 69 41 74 4a 6d 38 78 34 75 66 7a 38 66 43 6f 63 53 78 7a 36 2b 7a 75 71 69 70 6c 4c 36 32 7a 4d 47 78 6e 37 54 55 34 35 6a 51 32 38 71 38 32 4d 79 39 32 4c 33 67 37 4c 76 45 76 75 76 70 78 66 6a 5a 37 63 72 49 78 65 2f 51 37 2f 66 31 31 62 7a 52 37 74 66 53 42 65 6a 6d 32 38 62 72 34 52 48 71 34 2b 2f 67 37 75 50 33 39 51 58 71 38 42 34 66 37 69 45 61 34 52 6b 50 41 41 44 38 4a 75 59 57 41 76 51 41 39 69 59 61 4c 76 6f 70 48 69 55 68 4f 4f 2f 33 4b 41 4d 70 43 7a 6f 71 51 51 30 38 2f 45 51 59 42 42 63 Data Ascii: gl1ZSEZKjHdfZJB7c2mPSYKEbGiPbJJ4bYJ/X5Z+hIR+iWeInmluoHp5pISOr56IkrN4jIaFto+vt7WVfKaZtKiAtJm8x4ufz8fCocSxz6+zuqiplL62zMGxn7TU45jQ28q82My92L3g7LvEvuvpxfjZ7crIxe/Q7/f11bzR7tfSBejm28br4RHq4+/g7uP39QXq8B4f7iEa4RkPAAD8JuYWAvQA9iYaLvopHiUhOO/3KAMpCzoqQQ08/EQYBBc
2025-03-20 17:46:41 UTC	1369	IN	Data Raw: 47 43 41 62 6f 4a 6a 6b 34 75 42 61 56 4b 4d 6c 6f 56 36 65 70 71 4a 65 6d 42 63 64 35 68 74 59 33 69 59 70 31 79 55 6f 58 6c 70 66 34 71 4a 73 59 47 7a 71 37 57 6a 6c 34 57 33 6b 48 52 38 76 4a 43 4b 6c 62 61 52 66 49 54 44 6d 62 6d 56 78 35 76 4c 78 49 6d 65 71 71 6e 46 70 59 32 6c 31 4b 6a 4a 79 38 4c 48 75 36 62 62 73 75 48 4d 6e 62 50 54 6f 4f 57 32 73 73 6e 64 79 39 7a 6e 34 4d 4b 71 35 50 48 63 72 62 54 7a 7a 4c 4c 6f 36 73 37 46 38 2b 33 52 79 75 48 37 34 2f 51 41 42 74 62 34 35 51 6e 61 35 75 55 4f 33 77 59 45 45 65 58 64 44 42 48 30 44 51 55 61 42 75 72 36 47 77 6e 75 47 53 45 4f 41 2b 48 67 39 53 67 67 46 51 30 69 48 52 38 41 49 51 72 75 46 43 55 77 4e 67 63 70 46 6a 6b 4c 46 78 59 2b 45 44 59 30 51 52 59 4f 50 45 45 6c 50 54 56 4b 4e 68 73 72 Data Ascii: GCAboJjk4uBaVKMloV6epqJemBcd5htY3iYp1yUoXlpf4qJsYGzq7Wjl4W3kHR8vJCKlbaRfITDmbmVx5vLxImeqqnFpY2l1KjJy8LHu6bbsuHMnbPToOW2ssndy9zn4MKq5PHcrbTzzLLo6s7F8+3RyuH74/QABtb45Qna5uUO3wYEEeXdDBH0DQUaBur6GwnuGSEOA+Hg9SggFQ0iHR8AIQruFCUwNgcpFjkLFxY+EDY0QRYOPEElPTVKNhsr

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:41 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/310346162:1742491115:9Ic98fm1bm6UZNqolicYeekvkrwSVIH1ayYCexa4QzM/923707b7eceb8ce8/2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:41 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 20 Mar 2025 17:46:41 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: +8H2l+/ryIZibMo+njnV8Y/KXPoip/hIHuh/zCLABlOq1zerPkKqf8pK+w06X/gF43ZzWkIit3VfxCVkNc9XeA==$+iDMduVtfvagIp6VkoO+og== Server: cloudflare CF-RAY: 923707cbca9a4286-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:46:41 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:41 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/923707b7eceb8ce8/1742492800972/GKCgZTjmCvgxbop HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:42 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:42 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 923707cd7967c351-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:46:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 57 08 02 00 00 00 98 f0 b2 6c 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRWlIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:42 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/923707b7eceb8ce8/1742492800976/bde426b7923722d2c6f2630eebdab868e4e355ae0b52186206f78e4da8c7c454/OrJeW4tuWUw2AZ2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:43 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 20 Mar 2025 17:46:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-20 17:46:43 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 76 65 51 6d 74 35 49 33 49 74 4c 47 38 6d 4d 4f 36 39 71 34 61 4f 54 6a 56 61 34 4c 55 68 68 69 42 76 65 4f 54 61 6a 48 78 46 51 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gveQmt5I3ItLG8mMO69q4aOTjVa4LUhhiBveOTajHxFQAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-20 17:46:43 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:46:44 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/310346162:1742491115:9Ic98fm1bm6UZNqolicYeekvkrwSVIH1ayYCexa4QzM/923707b7eceb8ce8/2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38627 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:46:44 UTC	16384	OUT	Data Raw: 69 57 68 33 63 4f 2d 38 56 58 68 72 4d 54 43 2d 66 49 70 35 68 77 36 2d 4c 6e 49 67 2d 49 71 71 33 35 57 77 66 36 49 4b 33 72 57 4f 66 49 71 75 6b 49 77 73 45 57 49 44 54 49 48 6e 33 73 35 4d 77 6e 46 72 35 73 2d 6f 49 6b 4b 77 44 49 67 73 2d 43 65 68 73 73 2d 35 6d 33 35 68 49 54 35 54 72 57 43 49 69 33 2d 6d 6e 49 64 73 2d 75 6d 49 75 4b 43 49 72 33 72 75 43 30 49 2d 76 76 68 51 37 34 4b 2d 36 36 77 2d 54 33 45 42 49 38 4b 49 41 73 4a 50 71 4d 78 72 67 75 32 75 70 49 72 32 48 49 54 75 49 50 50 33 49 5a 67 2d 4e 72 73 2d 51 54 33 2d 37 68 52 6b 73 49 42 50 70 47 45 6d 62 41 73 49 52 5a 4a 67 52 35 37 68 59 49 49 43 39 6b 49 49 6e 42 79 4b 49 73 73 2d 76 4d 33 49 34 49 42 55 50 49 42 61 49 4e 4b 49 74 75 67 50 6c 51 4b 2d 65 41 56 49 65 69 73 49 4f 49 49 Data Ascii: iWh3cO-8VXhrMTC-fIp5hw6-LnIg-Iqq35Wwf6IK3rWOfIqukIwsEWIDTIHn3s5MwnFr5s-oIkKwDIgs-Cehss-5m35hIT5TrWCIi3-mnIds-umIuKCIr3ruC0I-vvhQ74K-66w-T3EBI8KIAsJPqMxrgu2upIr2HITuIPP3IZg-Nrs-QT3-7hRksIBPpGEmbAsIRZJgR57hYIIC9kIInByKIss-vM3I4IBUPIBaINKItugPlQK-eAVIeisIOII
2025-03-20 17:46:44 UTC	16384	OUT	Data Raw: 72 42 54 69 77 31 4d 72 67 31 44 72 5a 62 4b 4c 30 31 31 4e 51 2d 38 55 33 2b 67 39 4c 57 69 78 79 4c 4a 71 54 4b 4b 2d 68 5a 46 2b 2d 49 2b 4d 41 77 49 77 41 54 30 67 71 71 2d 32 33 30 4a 61 46 33 24 77 64 4a 63 71 2d 49 72 68 31 46 6a 55 67 24 73 6f 4c 33 4f 47 50 49 46 33 4b 77 30 54 52 38 77 6c 67 31 73 52 38 4c 66 68 61 65 4e 54 37 49 4f 79 49 6a 49 75 4b 77 51 4b 52 38 54 4b 77 47 54 30 4c 63 4b 77 6c 4b 49 33 64 30 37 79 49 31 4c 77 7a 68 37 44 2d 70 77 7a 68 35 79 4d 64 62 2d 67 66 79 58 71 32 57 4f 4c 2b 4f 6a 4c 4b 33 75 56 6d 73 75 36 55 6e 65 42 61 2b 57 33 65 55 38 68 2d 61 4f 64 4b 5a 30 33 59 56 75 56 58 73 6e 50 33 72 73 4c 45 77 2b 4a 42 33 69 24 77 79 49 39 33 4d 51 77 2b 49 62 54 78 4d 72 5a 33 64 4b 72 4d 4c 54 2d 58 33 4d 2d 49 44 33 Data Ascii: rBTiw1Mrg1DrZbKL011NQ-8U3+g9LWixyLJqTKK-hZF+-I+MAwIwAT0gqq-230JaF3$wdJcq-Irh1FjUg$soL3OGPIF3Kw0TR8wlg1sR8LfhaeNT7IOyIjIuKwQKR8TKwGT0LcKwlKI3d07yI1Lwzh7D-pwzh5yMdb-gfyXq2WOL+OjLK3uVmsu6UneBa+W3eU8h-aOdKZ03YVuVXsnP3rsLEw+JB3i$wyI93MQw+IbTxMrZ3dKrMLT-X3M-ID3
2025-03-20 17:46:44 UTC	5859	OUT	Data Raw: 33 75 72 49 4b 2d 69 4e 4a 41 45 38 2b 4d 49 6c 43 4f 64 51 76 30 51 7a 45 2b 46 6d 35 33 66 66 2d 46 24 58 45 48 6e 68 71 24 58 48 39 36 38 34 6b 66 61 44 5a 56 2d 59 59 4b 4d 2d 39 6d 4b 38 34 6e 36 65 55 38 49 51 68 4f 56 49 5a 72 4c 59 64 73 71 47 78 56 4c 64 59 46 74 38 63 6b 4e 6a 70 71 6c 2b 73 4f 79 2b 64 36 61 38 6c 54 2d 46 24 37 30 34 65 38 65 6f 61 70 48 42 36 58 5a 7a 6f 36 37 74 36 4e 5a 56 43 6b 71 35 54 45 70 48 5a 34 68 54 24 7a 34 6a 5a 71 57 68 24 58 33 2d 32 5a 4a 73 72 32 36 73 72 6a 77 79 6d 71 7a 57 46 44 36 33 6b 77 5a 24 36 6e 69 36 5a 4a 43 6f 57 51 4d 56 50 44 4d 36 7a 74 5a 5a 24 6f 39 69 45 50 4a 39 6f 59 66 4d 51 69 72 52 64 79 34 41 5a 66 73 54 59 36 77 36 7a 55 34 59 74 6d 50 33 57 66 57 6d 33 48 61 6e 48 77 36 4a 72 39 38 Data Ascii: 3urIK-iNJAE8+MIlCOdQv0QzE+Fm53ff-F$XEHnhq$XH9684kfaDZV-YYKM-9mK84n6eU8IQhOVIZrLYdsqGxVLdYFt8ckNjpql+sOy+d6a8lT-F$704e8eoapHB6XZzo67t6NZVCkq5TEpHZ4hT$z4jZqWh$X3-2ZJsr26srjwymqzWFD63kwZ$6ni6ZJCoWQMVPDM6ztZZ$o9iEPJ9oYfMQirRdy4AZfsTY6w6zU4YtmP3WfWm3HanHw6Jr98
2025-03-20 17:46:44 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:46:44 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28188 Connection: close cf-chl-gen: rp/CZM5WenicsN4co3sVIOGWMhp8u0o5SFcpIhb42zKWyM/N6+7qq8zURjTv9fph$rafv6mlNVW1F8bmmlNGD7w== Server: cloudflare CF-RAY: 923707d9fe638c6b-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:46:44 UTC	1047	IN	Data Raw: 57 47 4a 4b 55 56 39 37 6c 49 6d 4e 65 4a 53 4c 6b 33 42 38 57 6f 75 41 61 58 31 79 62 46 79 42 64 6e 47 53 6d 6f 64 31 68 4b 71 41 5a 35 42 76 6e 35 53 52 6a 59 69 34 68 4b 32 4c 6c 4c 75 62 6c 6f 35 35 6d 4a 44 44 6e 4c 4f 59 74 35 69 78 6d 36 58 48 71 36 58 45 69 61 75 6d 6e 63 36 4f 70 74 62 50 74 37 47 56 6c 62 69 75 75 62 6a 4b 74 39 62 46 73 64 50 49 75 4e 4b 37 33 4f 4c 71 31 2b 4c 52 76 74 2f 55 30 63 44 4f 36 4f 4c 76 7a 4f 2f 7a 32 39 62 30 75 64 37 56 33 64 7a 32 31 74 49 41 43 4f 66 39 34 63 30 43 36 65 58 6b 36 68 51 55 39 67 45 41 45 2b 33 53 46 77 63 58 44 41 38 43 38 64 34 57 41 75 41 43 45 78 34 41 34 68 34 4f 37 53 45 4a 4c 79 4d 45 2f 51 45 69 42 2b 34 7a 4c 77 77 74 42 68 77 5a 46 69 49 4f 4c 78 44 2b 4a 2f 34 6f 4f 69 41 44 54 45 6f Data Ascii: WGJKUV97lImNeJSLk3B8WouAaX1ybFyBdnGSmod1hKqAZ5Bvn5SRjYi4hK2LlLublo55mJDDnLOYt5ixm6XHq6XEiaumnc6OptbPt7GVlbiuubjKt9bFsdPIuNK73OLq1+LRvt/U0cDO6OLvzO/z29b0ud7V3dz21tIACOf94c0C6eXk6hQU9gEAE+3SFwcXDA8C8d4WAuACEx4A4h4O7SEJLyME/QEiB+4zLwwtBhwZFiIOLxD+J/4oOiADTEo
2025-03-20 17:46:44 UTC	1369	IN	Data Raw: 38 6e 59 78 32 67 4b 4a 38 65 70 71 48 6c 58 35 34 73 47 71 77 71 32 6c 2b 67 71 69 75 65 4b 74 78 72 70 53 57 69 70 35 36 77 62 75 42 6b 4a 4b 34 76 6f 69 36 75 35 50 46 6f 61 69 76 77 36 43 63 73 37 2b 71 79 70 4c 58 79 4a 4f 75 6e 4e 4f 37 77 4c 54 4f 77 74 6e 53 74 72 44 44 34 62 66 61 78 2b 58 49 75 4d 2f 6a 76 2f 4c 4c 37 72 57 31 39 36 37 33 36 64 7a 55 36 74 2f 49 30 38 2f 7a 37 66 33 62 39 75 50 32 32 74 4d 47 39 4f 48 37 2f 4f 4c 4a 35 76 50 6f 36 2f 48 6b 45 39 45 4e 45 39 77 52 39 78 59 55 38 65 7a 37 44 76 4d 62 34 68 49 5a 34 2f 37 73 49 2b 59 52 2f 68 38 55 48 78 4d 51 42 76 41 57 43 6a 6f 79 4d 41 30 4a 4f 6a 59 43 41 78 73 6b 52 7a 59 70 47 54 63 73 4b 44 34 63 50 79 77 37 4a 46 4e 42 44 77 35 42 57 53 38 6e 54 6a 64 52 4e 7a 78 42 51 52 Data Ascii: 8nYx2gKJ8epqHlX54sGqwq2l+gqiueKtxrpSWip56wbuBkJK4voi6u5PFoaivw6Ccs7+qypLXyJOunNO7wLTOwtnStrDD4bfax+XIuM/jv/LL7rW196736dzU6t/I08/z7f3b9uP22tMG9OH7/OLJ5vPo6/HkE9ENE9wR9xYU8ez7DvMb4hIZ4/7sI+YR/h8UHxMQBvAWCjoyMA0JOjYCAxskRzYpGTcsKD4cPyw7JFNBDw5BWS8nTjdRNzxBQR
2025-03-20 17:46:44 UTC	1369	IN	Data Raw: 6f 57 4f 4b 71 6d 79 6d 69 36 2b 46 71 6f 2b 77 69 61 36 54 71 6f 32 79 6c 36 79 52 74 70 75 78 67 59 47 36 6f 6e 7a 46 71 4a 71 32 71 36 69 5a 71 4c 37 4e 79 61 61 4c 68 63 33 4b 77 4c 69 72 77 5a 61 56 71 37 69 33 77 4c 48 4f 77 36 2f 50 74 65 61 2f 34 73 6e 61 77 39 2b 37 33 37 76 76 32 75 4c 46 77 39 58 7a 38 2b 58 76 32 37 66 61 31 38 66 38 2b 41 41 42 2b 50 77 45 42 66 67 42 43 41 6e 30 42 51 77 4e 45 51 6b 51 45 51 37 6b 43 67 4c 34 45 52 67 5a 45 77 58 36 39 42 6e 72 36 69 51 50 47 4f 54 39 2b 52 7a 39 42 76 30 67 41 53 41 43 4a 41 50 39 42 69 67 47 4b 41 6f 73 43 6a 77 4f 4d 42 41 57 4c 51 38 66 50 68 67 6a 49 43 59 42 49 78 77 56 4f 79 77 68 43 41 68 4e 4a 51 35 50 56 41 77 6b 4f 53 6b 6f 44 56 55 6f 4a 6c 74 5a 4c 43 78 50 58 54 41 77 50 57 45 Data Ascii: oWOKqmymi6+Fqo+wia6Tqo2yl6yRtpuxgYG6onzFqJq2q6iZqL7NyaaLhc3KwLirwZaVq7i3wLHOw6/Ptea/4snaw9+737vv2uLFw9Xz8+Xv27fa18f8+AAB+PwEBfgBCAn0BQwNEQkQEQ7kCgL4ERgZEwX69Bnr6iQPGOT9+Rz9Bv0gASACJAP9BigGKAosCjwOMBAWLQ8fPhgjICYBIxwVOywhCAhNJQ5PVAwkOSkoDVUoJltZLCxPXTAwPWE
2025-03-20 17:46:44 UTC	1369	IN	Data Raw: 48 74 35 5a 4b 78 2f 66 62 4b 77 67 34 4f 6d 74 49 65 48 6c 4c 69 4c 69 72 36 38 6a 35 43 63 77 4a 4f 54 79 4c 75 74 68 63 4c 49 6d 35 76 46 79 72 43 53 30 4b 75 6e 74 73 61 34 32 73 66 57 75 39 2b 31 32 72 2f 67 75 64 37 44 32 72 33 69 78 39 7a 42 35 73 76 68 73 62 48 55 30 71 7a 31 32 4d 62 6d 32 39 65 31 31 4d 76 4c 36 4d 2f 32 77 62 34 46 78 4d 58 67 42 4e 6a 36 44 64 37 49 35 75 38 54 45 39 2f 54 34 67 6b 47 41 74 59 56 37 2b 33 61 47 66 50 77 33 68 33 33 38 75 49 68 2b 2f 7a 6d 4a 51 41 41 39 77 41 6c 44 78 6f 74 43 41 63 55 4b 68 4d 78 4f 44 6b 6f 4e 6a 4d 71 4b 78 51 50 4e 53 30 35 48 78 34 31 47 30 64 47 46 41 64 4f 49 67 34 62 48 30 56 54 46 55 63 4f 55 7a 41 77 58 42 67 37 4c 31 38 73 57 6c 67 33 51 30 56 6c 50 6a 46 67 56 46 74 58 62 53 59 75 Data Ascii: Ht5ZKx/fbKwg4OmtIeHlLiLir68j5CcwJOTyLuthcLIm5vFyrCS0Kuntsa42sfWu9+12r/gud7D2r3ix9zB5svhsbHU0qz12Mbm29e11MvL6M/2wb4FxMXgBNj6Dd7I5u8TE9/T4gkGAtYV7+3aGfPw3h338uIh+/zmJQAA9wAlDxotCAcUKhMxODkoNjMqKxQPNS05Hx41G0dGFAdOIg4bH0VTFUcOUzAwXBg7L18sWlg3Q0VlPjFgVFtXbSYu
2025-03-20 17:46:44 UTC	1369	IN	Data Raw: 43 4c 68 33 65 6d 6d 4c 71 6e 74 70 75 2f 6c 62 71 66 77 4a 6d 2b 6f 37 71 64 77 71 65 38 6f 63 61 72 78 70 75 6d 6b 4b 32 6e 31 4e 69 32 31 4c 6a 59 6d 4e 69 36 32 62 36 37 77 5a 79 2f 73 2b 57 69 34 62 6a 6e 32 4c 7a 71 36 4b 37 4f 7a 4d 47 73 7a 73 33 42 76 2b 6e 54 37 72 6d 32 2f 4c 33 4b 79 75 4b 38 31 75 4f 38 31 64 54 48 31 76 7a 73 7a 41 41 4f 43 76 7a 6a 45 74 48 4f 46 64 54 56 38 4f 59 4e 47 39 77 51 44 74 59 57 38 74 6e 6a 49 65 58 6c 47 4e 34 6f 4a 50 51 6b 47 51 6b 62 4d 65 6e 79 2f 44 58 72 42 54 51 6b 4f 51 63 79 47 78 63 30 2b 42 77 51 51 76 34 2b 46 55 51 31 47 30 64 47 46 43 73 6f 48 67 6b 72 49 53 30 2b 53 6a 45 51 46 68 4e 61 4d 43 38 7a 4b 31 46 66 49 56 52 56 58 7a 73 35 57 54 6c 69 4b 69 70 56 4e 57 78 66 58 31 78 42 51 6d 35 75 4b Data Ascii: CLh3emmLqntpu/lbqfwJm+o7qdwqe8ocarxpumkK2n1Ni21LjYmNi62b67wZy/s+Wi4bjn2Lzq6K7OzMGszs3Bv+nT7rm2/L3KyuK81uO81dTH1vzszAAOCvzjEtHOFdTV8OYNG9wQDtYW8tnjIeXlGN4oJPQkGQkbMeny/DXrBTQkOQcyGxc0+BwQQv4+FUQ1G0dGFCsoHgkrIS0+SjEQFhNaMC8zK1FfIVRVXzs5WTliKipVNWxfX1xBQm5uK
2025-03-20 17:46:44 UTC	1369	IN	Data Raw: 59 6e 6f 64 2f 77 5a 61 42 6a 49 4f 31 77 35 32 78 74 34 53 35 71 73 47 2b 6b 4d 4f 74 6d 37 79 6e 6a 64 48 4d 71 63 6e 52 7a 71 2f 4f 32 61 79 7a 30 63 32 39 33 72 69 31 75 4b 43 2f 31 4d 72 4a 74 71 6d 71 6f 36 37 55 38 4d 6e 4f 7a 4f 61 72 38 73 6d 32 39 62 54 7a 75 64 73 43 35 4e 4c 79 35 76 55 45 32 50 76 59 2b 64 76 47 31 38 33 68 42 51 73 4f 41 41 67 48 42 76 58 6d 46 2f 33 79 31 39 66 63 33 75 38 69 44 68 72 37 43 51 45 58 43 2b 63 65 41 43 45 4a 2f 67 51 4d 4b 79 34 69 46 44 6b 76 47 43 72 30 47 43 59 4d 50 69 6f 32 4c 69 55 64 4d 79 63 45 4d 79 6f 44 46 44 34 6d 47 67 77 4c 50 6a 42 56 53 7a 52 47 45 54 52 43 4b 46 70 47 55 52 39 42 4f 55 39 45 4d 55 39 47 48 31 4a 5a 52 79 4a 71 4c 46 68 4f 59 31 73 76 51 47 70 67 61 44 42 6e 59 30 67 31 64 56 Data Ascii: Ynod/wZaBjIO1w52xt4S5qsG+kMOtm7ynjdHMqcnRzq/O2ayz0c293ri1uKC/1MrJtqmqo67U8MnOzOar8sm29bTzudsC5NLy5vUE2PvY+dvG183hBQsOAAgHBvXmF/3y19fc3u8iDhr7CQEXC+ceACEJ/gQMKy4iFDkvGCr0GCYMPio2LiUdMycEMyoDFD4mGgwLPjBVSzRGETRCKFpGUR9BOU9EMU9GH1JZRyJqLFhOY1svQGpgaDBnY0g1dV
2025-03-20 17:46:44 UTC	1369	IN	Data Raw: 66 4c 43 6c 73 72 2b 71 68 4a 53 38 6f 4a 76 47 79 62 4c 46 69 39 43 39 79 72 69 54 72 62 50 52 31 61 2f 50 71 39 50 41 34 70 72 6b 78 75 57 65 34 4c 72 45 73 2b 57 2b 33 73 66 6a 30 76 50 6d 35 63 7a 71 31 37 50 4d 30 37 62 37 33 4c 58 4d 41 64 2f 51 76 77 48 75 2b 72 38 48 38 51 44 59 42 76 62 49 2b 67 4c 36 43 50 37 4e 41 51 73 54 45 67 50 6f 46 78 59 48 45 2f 51 66 43 39 73 66 33 52 44 31 39 43 63 53 34 79 73 70 44 75 6a 34 36 52 77 52 37 7a 49 66 38 42 6b 78 49 77 6f 46 4c 69 6b 7a 39 7a 30 74 4f 43 38 2f 4c 7a 73 41 52 79 6f 45 43 45 55 33 43 54 73 4b 4f 79 45 55 44 6b 46 4d 49 55 70 45 4f 56 64 56 53 43 30 59 58 30 70 58 59 31 35 52 49 44 31 6f 56 53 52 72 61 6c 63 39 4b 47 39 63 55 6b 46 78 56 6a 46 42 64 47 52 5a 64 33 74 70 4f 44 78 2b 62 54 78 Data Ascii: fLClsr+qhJS8oJvGybLFi9C9yriTrbPR1a/Pq9PA4prkxuWe4LrEs+W+3sfj0vPm5czq17PM07b73LXMAd/QvwHu+r8H8QDYBvbI+gL6CP7NAQsTEgPoFxYHE/QfC9sf3RD19CcS4yspDuj46RwR7zIf8BkxIwoFLikz9z0tOC8/LzsARyoECEU3CTsKOyEUDkFMIUpEOVdVSC0YX0pXY15RID1oVSRralc9KG9cUkFxVjFBdGRZd3tpODx+bTx

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:47:24 UTC	607	OUT	OPTIONS /report/v4?s=5PG5rqBK5bQAGLYUpan1%2B38a8JZjHcW4KjnJSA%2BOf34tC5FkLhZoPsJabv%2BP%2FmoNc%2BMg35XES74tn4LAAu8W%2BnIboJnVwfp9W%2BQ4dFgGAYAfztXHazm2A7jz95Z6OY1sndl%2Faw74OUA5QdSaThYZmMOqYB8OYWrcUOrM HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://incomestatementdocument.classical.it.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:47:24 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 20 Mar 2025 17:47:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:47:25 UTC	582	OUT	POST /report/v4?s=5PG5rqBK5bQAGLYUpan1%2B38a8JZjHcW4KjnJSA%2BOf34tC5FkLhZoPsJabv%2BP%2FmoNc%2BMg35XES74tn4LAAu8W%2BnIboJnVwfp9W%2BQ4dFgGAYAfztXHazm2A7jz95Z6OY1sndl%2Faw74OUA5QdSaThYZmMOqYB8OYWrcUOrM HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 482 Content-Type: application/reports+json Origin: https://incomestatementdocument.classical.it.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:47:25 UTC	482	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 37 36 30 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 36 37 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 63 6f 6d 65 73 74 61 74 65 6d 65 6e 74 64 6f 63 75 6d 65 6e 74 2e 63 6c 61 73 73 69 63 61 6c 2e 69 74 2e 63 6f 6d 2f 4e 43 36 74 53 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 36 2e 32 30 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 Data Ascii: [{"age":57601,"body":{"elapsed_time":1678,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://incomestatementdocument.classical.it.com/NC6tS/","sampling_fraction":1.0,"server_ip":"172.67.216.207","status_code":404,"type":"http.e
2025-03-20 17:47:25 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 20 Mar 2025 17:47:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:47:51 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/310346162:1742491115:9Ic98fm1bm6UZNqolicYeekvkrwSVIH1ayYCexa4QzM/923707b7eceb8ce8/2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41078 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/6kzry/0x4AAAAAABBUE4SschSoV_Hq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:47:51 UTC	16384	OUT	Data Raw: 69 57 68 33 63 4f 2d 38 56 58 68 72 4d 54 43 2d 66 49 70 35 68 77 36 2d 4c 6e 49 67 2d 49 71 71 33 35 57 77 66 36 49 4b 33 72 57 4f 66 49 71 75 6b 49 77 73 45 57 49 44 54 49 48 6e 33 73 35 4d 77 6e 46 72 35 73 2d 6f 49 6b 4b 77 44 49 67 73 2d 43 65 68 73 73 2d 35 6d 33 35 68 49 54 35 54 72 57 43 49 69 33 2d 6d 6e 49 64 73 2d 75 6d 49 75 4b 43 49 72 33 72 75 43 30 49 2d 76 76 68 51 37 34 4b 2d 36 36 77 2d 54 33 45 42 49 38 4b 49 41 73 4a 50 71 4d 78 72 67 75 32 75 70 49 72 32 48 49 54 75 49 50 50 33 49 5a 67 2d 4e 72 73 2d 51 54 33 2d 37 68 52 6b 73 49 42 50 70 47 45 6d 62 41 73 49 52 5a 4a 67 52 35 37 68 59 49 49 43 39 6b 49 49 6e 42 79 4b 49 73 73 2d 76 4d 33 49 34 49 42 55 50 49 42 61 49 4e 4b 49 74 75 67 50 6c 51 4b 2d 65 41 56 49 65 69 73 49 4f 49 49 Data Ascii: iWh3cO-8VXhrMTC-fIp5hw6-LnIg-Iqq35Wwf6IK3rWOfIqukIwsEWIDTIHn3s5MwnFr5s-oIkKwDIgs-Cehss-5m35hIT5TrWCIi3-mnIds-umIuKCIr3ruC0I-vvhQ74K-66w-T3EBI8KIAsJPqMxrgu2upIr2HITuIPP3IZg-Nrs-QT3-7hRksIBPpGEmbAsIRZJgR57hYIIC9kIInByKIss-vM3I4IBUPIBaINKItugPlQK-eAVIeisIOII
2025-03-20 17:47:51 UTC	16384	OUT	Data Raw: 72 42 54 69 77 31 4d 72 67 31 44 72 5a 62 4b 4c 30 31 31 4e 51 2d 38 55 33 2b 67 39 4c 57 69 78 79 4c 4a 71 54 4b 4b 2d 68 5a 46 2b 2d 49 2b 4d 41 77 49 77 41 54 30 67 71 71 2d 32 33 30 4a 61 46 33 24 77 64 4a 63 71 2d 49 72 68 31 46 6a 55 67 24 73 6f 4c 33 4f 47 50 49 46 33 4b 77 30 54 52 38 77 6c 67 31 73 52 38 4c 66 68 61 65 4e 54 37 49 4f 79 49 6a 49 75 4b 77 51 4b 52 38 54 4b 77 47 54 30 4c 63 4b 77 6c 4b 49 33 64 30 37 79 49 31 4c 77 7a 68 37 44 2d 70 77 7a 68 35 79 4d 64 62 2d 67 66 79 58 71 32 57 4f 4c 2b 4f 6a 4c 4b 33 75 56 6d 73 75 36 55 6e 65 42 61 2b 57 33 65 55 38 68 2d 61 4f 64 4b 5a 30 33 59 56 75 56 58 73 6e 50 33 72 73 4c 45 77 2b 4a 42 33 69 24 77 79 49 39 33 4d 51 77 2b 49 62 54 78 4d 72 5a 33 64 4b 72 4d 4c 54 2d 58 33 4d 2d 49 44 33 Data Ascii: rBTiw1Mrg1DrZbKL011NQ-8U3+g9LWixyLJqTKK-hZF+-I+MAwIwAT0gqq-230JaF3$wdJcq-Irh1FjUg$soL3OGPIF3Kw0TR8wlg1sR8LfhaeNT7IOyIjIuKwQKR8TKwGT0LcKwlKI3d07yI1Lwzh7D-pwzh5yMdb-gfyXq2WOL+OjLK3uVmsu6UneBa+W3eU8h-aOdKZ03YVuVXsnP3rsLEw+JB3i$wyI93MQw+IbTxMrZ3dKrMLT-X3M-ID3
2025-03-20 17:47:51 UTC	8310	OUT	Data Raw: 33 75 72 49 4b 2d 69 4e 4a 41 45 38 2b 4d 49 6c 43 4f 64 51 76 30 51 7a 45 2b 46 6d 35 33 66 66 2d 46 24 58 45 48 6e 68 71 24 58 48 39 36 38 34 6b 66 61 44 5a 56 2d 59 59 4b 4d 2d 39 6d 4b 38 34 6e 36 65 55 38 49 51 68 4f 56 49 5a 72 4c 59 64 73 71 47 78 56 4c 64 59 46 74 38 63 6b 4e 6a 70 71 6c 2b 73 4f 79 2b 64 36 61 38 6c 54 2d 46 24 37 30 34 65 38 65 6f 61 70 48 42 36 58 5a 7a 6f 36 37 74 36 4e 5a 56 43 6b 71 35 54 45 70 48 5a 34 68 54 24 7a 34 6a 5a 71 57 68 24 58 33 2d 32 5a 4a 73 72 32 36 73 72 6a 77 79 6d 71 7a 57 46 44 36 33 6b 77 5a 24 36 6e 69 36 5a 4a 43 6f 57 51 4d 56 50 44 4d 36 7a 74 5a 5a 24 6f 39 69 45 50 4a 39 6f 59 66 4d 51 69 72 52 64 79 34 41 5a 66 73 54 59 36 77 36 7a 55 34 59 74 6d 50 33 57 66 57 6d 33 48 61 6e 48 77 36 4a 72 39 38 Data Ascii: 3urIK-iNJAE8+MIlCOdQv0QzE+Fm53ff-F$XEHnhq$XH9684kfaDZV-YYKM-9mK84n6eU8IQhOVIZrLYdsqGxVLdYFt8ckNjpql+sOy+d6a8lT-F$704e8eoapHB6XZzo67t6NZVCkq5TEpHZ4hT$z4jZqWh$X3-2ZJsr26srjwymqzWFD63kwZ$6ni6ZJCoWQMVPDM6ztZZ$o9iEPJ9oYfMQirRdy4AZfsTY6w6zU4YtmP3WfWm3HanHw6Jr98
2025-03-20 17:47:51 UTC	282	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 17:47:51 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5004 Connection: close cf-chl-out: dYs34G1buMeFthK7uib5q4fbtZstulPKtJg/GrhZTdZxvih17mOhIAmgadyauTmOHnmI4oMkOeZPfkvvKjWI/x3YFuk3LrPp2ROMp1z5HaY=$6MEhlWu79aV5VjP/rRoSwg==
2025-03-20 17:47:51 UTC	1235	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 6d 76 54 38 59 41 4b 2b 55 32 68 70 42 4a 39 49 35 32 65 38 66 48 34 4b 37 6e 7a 42 79 6b 74 31 4a 38 56 50 75 52 2b 6e 50 78 5a 55 4c 42 57 4b 58 4f 72 69 76 75 7a 2f 59 30 6a 35 63 76 6b 66 4f 6b 44 49 4f 66 61 6b 49 7a 6b 5a 6e 7a 51 6f 63 30 4f 39 52 66 2b 4d 45 70 31 2b 76 46 41 76 30 62 43 46 35 43 2f 52 38 74 6e 4d 5a 30 51 31 37 38 34 34 42 79 6e 46 34 53 30 6b 69 4a 6a 64 6e 63 75 51 41 66 70 4f 38 57 76 61 39 64 45 62 72 43 4f 42 35 2b 7a 45 53 33 45 33 37 30 4f 51 78 34 70 2b 73 68 4b 6e 43 77 70 33 68 75 4f 54 72 51 62 46 75 56 66 6f 6d 50 4f 38 79 53 6a 55 45 6c 72 65 44 75 56 33 74 4a 51 66 67 30 49 51 52 42 58 66 6e 4a 73 48 54 75 31 37 64 4f 53 49 49 7a 36 37 39 51 6e 64 52 43 30 31 2b 46 36 6c 5a Data Ascii: cf-chl-out-s: mvT8YAK+U2hpBJ9I52e8fH4K7nzBykt1J8VPuR+nPxZULBWKXOrivuz/Y0j5cvkfOkDIOfakIzkZnzQoc0O9Rf+MEp1+vFAv0bCF5C/R8tnMZ0Q17844BynF4S0kiJjdncuQAfpO8Wva9dEbrCOB5+zES3E370OQx4p+shKnCwp3huOTrQbFuVfomPO8ySjUElreDuV3tJQfg0IQRBXfnJsHTu17dOSIIz679QndRC01+F6lZ
2025-03-20 17:47:51 UTC	1221	IN	Data Raw: 57 47 4a 4b 55 56 39 37 6c 49 6d 4e 65 4a 53 4c 6b 33 42 38 57 6f 75 41 66 4a 78 7a 62 58 69 54 66 4a 78 78 68 34 42 6c 5a 59 71 42 72 6d 75 77 67 4b 4f 51 72 70 4f 70 67 58 6d 73 69 4a 53 72 6a 5a 79 59 72 35 50 44 6d 61 47 58 6b 59 66 43 70 37 79 49 6a 62 2f 50 7a 73 57 67 30 74 4b 39 71 49 36 34 77 72 66 4d 6e 4a 33 52 75 64 2b 77 73 2b 53 78 73 63 2b 66 79 62 58 58 7a 4c 7a 6d 76 37 6e 65 32 63 50 51 31 63 4c 6a 32 4e 54 33 79 38 58 79 2f 4d 37 49 39 39 2f 61 2b 4c 33 65 32 74 44 2b 41 2b 51 4d 37 50 33 63 41 4f 67 4b 35 4d 76 31 34 41 54 34 34 42 66 72 35 75 51 58 39 67 38 58 49 50 62 73 33 78 44 30 4a 52 62 33 43 43 63 43 2b 51 4c 34 47 77 77 55 4d 43 30 47 4f 50 63 71 39 42 59 51 2b 68 67 71 2f 69 49 67 2b 55 4d 6d 46 44 51 70 4a 68 59 6b 4b 45 73 Data Ascii: WGJKUV97lImNeJSLk3B8WouAfJxzbXiTfJxxh4BlZYqBrmuwgKOQrpOpgXmsiJSrjZyYr5PDmaGXkYfCp7yIjb/PzsWg0tK9qI64wrfMnJ3Rud+ws+Sxsc+fybXXzLzmv7ne2cPQ1cLj2NT3y8Xy/M7I99/a+L3e2tD+A+QM7P3cAOgK5Mv14AT44Bfr5uQX9g8XIPbs3xD0JRb3CCcC+QL4GwwUMC0GOPcq9BYQ+hgq/iIg+UMmFDQpJhYkKEs
2025-03-20 17:47:51 UTC	1369	IN	Data Raw: 66 34 58 47 69 62 34 42 2b 49 67 47 50 67 46 36 67 2f 39 41 43 4d 4d 45 44 49 6e 43 52 55 37 42 78 55 4b 44 52 49 62 45 67 77 2b 46 69 4d 49 46 52 77 58 4f 6a 77 68 47 67 77 6c 4b 46 51 2b 45 53 59 79 4f 45 63 73 46 42 4e 52 52 31 41 62 55 54 77 2f 4f 46 63 31 57 6c 73 31 50 32 73 6b 50 6b 4e 6a 51 47 64 47 54 57 34 75 54 31 4a 69 4f 46 4a 46 61 6a 70 56 57 56 55 37 56 55 35 2b 51 56 6c 56 68 6e 4e 6b 56 6c 56 48 59 34 43 4b 65 33 75 54 55 47 46 6f 69 56 69 53 64 59 31 70 6c 33 6d 54 63 4a 61 4c 6b 31 78 30 65 6e 53 42 64 48 6d 46 67 58 57 41 6a 57 65 6a 6a 4c 4f 79 73 4a 2b 43 72 72 69 69 72 33 53 46 6b 4b 2b 59 65 70 7a 45 66 34 57 57 78 34 53 68 6f 36 65 36 66 37 65 72 79 34 71 68 78 63 65 50 72 63 65 6b 6c 72 61 35 6e 4c 43 73 7a 70 6a 5a 76 4c 33 6a Data Ascii: f4XGib4B+IgGPgF6g/9ACMMEDInCRU7BxUKDRIbEgw+FiMIFRwXOjwhGgwlKFQ+ESYyOEcsFBNRR1AbUTw/OFc1Wls1P2skPkNjQGdGTW4uT1JiOFJFajpVWVU7VU5+QVlVhnNkVlVHY4CKe3uTUGFoiViSdY1pl3mTcJaLk1x0enSBdHmFgXWAjWejjLOysJ+Crriir3SFkK+YepzEf4WWx4Sho6e6f7ery4qhxcePrceklra5nLCszpjZvL3j
2025-03-20 17:47:51 UTC	1369	IN	Data Raw: 6e 34 2f 68 6a 35 4d 53 6b 4f 41 44 55 74 45 66 49 35 4d 52 55 55 50 54 55 5a 45 6a 6f 4e 47 43 30 6b 48 78 45 2b 4b 42 64 4c 4a 45 55 35 44 6a 45 76 43 56 49 31 4a 6b 4d 34 4e 53 55 7a 4e 31 6f 58 4e 78 6b 74 50 7a 74 5a 59 79 42 42 50 46 6c 47 56 53 70 4e 53 79 56 75 55 55 4a 66 56 46 41 75 54 55 52 45 59 55 68 76 4f 46 74 58 64 58 38 38 58 56 68 31 59 6e 46 47 63 32 64 42 6a 48 6c 62 69 30 39 6f 62 32 78 79 54 57 39 6e 59 35 4b 4e 64 58 6c 55 6d 58 46 61 6d 36 42 59 65 70 46 30 67 36 4a 38 59 36 6d 6b 59 6f 6c 37 6f 61 4e 78 70 4b 4f 4d 71 49 2b 70 70 37 69 6a 71 32 36 51 71 4b 7a 42 65 38 47 32 72 61 43 62 68 72 52 37 67 72 53 56 77 37 69 2f 75 39 4b 4b 6b 36 44 56 72 61 4c 46 70 37 66 57 73 4a 66 65 73 70 36 2b 74 37 7a 55 77 38 43 32 6f 62 53 36 74 Data Ascii: n4/hj5MSkOADUtEfI5MRUUPTUZEjoNGC0kHxE+KBdLJEU5DjEvCVI1JkM4NSUzN1oXNxktPztZYyBBPFlGVSpNSyVuUUJfVFAuTUREYUhvOFtXdX88XVh1YnFGc2dBjHlbi09ob2xyTW9nY5KNdXlUmXFam6BYepF0g6J8Y6mkYol7oaNxpKOMqI+pp7ijq26QqKzBe8G2raCbhrR7grSVw7i/u9KKk6DVraLFp7fWsJfesp6+t7zUw8C2obS6t
2025-03-20 17:47:51 UTC	1045	IN	Data Raw: 51 2f 43 38 50 37 51 6a 32 46 79 6f 37 45 77 35 41 39 30 41 63 48 7a 34 74 49 42 4d 33 49 69 51 39 52 30 77 6c 52 42 78 4e 4c 30 56 4f 52 69 63 52 51 6b 34 76 46 53 68 61 4c 78 68 66 51 44 55 74 58 31 34 31 4d 31 63 7a 50 6b 68 4e 50 46 6b 6e 57 30 39 41 63 30 42 67 52 43 35 6e 53 46 64 48 65 7a 5a 50 53 58 5a 2b 61 32 42 64 55 6c 64 53 51 46 74 6c 5a 45 68 64 61 55 5a 70 61 47 4a 68 6b 6f 6c 78 6d 46 4f 4c 64 34 74 62 69 48 6d 55 69 70 5a 32 63 6d 79 6a 67 49 43 6a 65 70 4e 6b 71 34 36 4a 6f 32 2b 6a 67 47 71 6d 70 6f 57 70 67 62 57 58 69 4b 5a 39 6b 33 69 2b 72 4b 76 44 66 34 47 61 6f 35 58 46 6e 4a 65 70 71 36 37 42 7a 36 71 79 77 37 57 4f 71 71 4f 35 6f 61 75 35 6b 39 43 37 71 38 37 52 74 39 4f 31 31 63 2f 63 73 4e 2b 2f 33 65 61 73 32 65 48 6a 36 63 Data Ascii: Q/C8P7Qj2Fyo7Ew5A90AcHz4tIBM3IiQ9R0wlRBxNL0VORicRQk4vFShaLxhfQDUtX141M1czPkhNPFknW09Ac0BgRC5nSFdHezZPSXZ+a2BdUldSQFtlZEhdaUZpaGJhkolxmFOLd4tbiHmUipZ2cmyjgICjepNkq46Jo2+jgGqmpoWpgbWXiKZ9k3i+rKvDf4Gao5XFnJepq67Bz6qyw7WOqqO5oau5k9C7q87Rt9O11c/csN+/3eas2eHj6c

Timestamp	Bytes transferred	Direction	Data
2025-03-20 17:47:51 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/310346162:1742491115:9Ic98fm1bm6UZNqolicYeekvkrwSVIH1ayYCexa4QzM/923707b7eceb8ce8/2CNAH9JqFOOP8uA0lIBT02cSnv2QlQTl.ABIWgr0E1A-1742492798-1.1.1.1-aR2nHo7nsO9RghcdPok9EtURfSVO2zwh0rs3oVvye6ThxHDBNOawXnDFAvvWnA2Z HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 17:47:52 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 20 Mar 2025 17:47:52 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 38OxHVsbkbrgq2B52azhLkNabu1qrqn8FVTW5+Lx7ApIIC0+w0vEe1wdhZ0SRDJoEAQEvvxFmZ+mYr2sy1itAA==$EDpi4JiIeS0cNgZ/3VaflQ== Server: cloudflare CF-RAY: 923709821df79e08-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 17:47:52 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}