Create Interactive Tour

Windows Analysis Report
https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9

Overview

General Information

Sample URL:	https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9
Analysis ID:	1644640
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML title does not match URL

Invalid 'forgot password' link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,13399723414402558055,9170259818285576470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2144 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /security-check/signin/process HTTP/1.1Host: auth-3qgwfuyzxdhg.redirectme.netConnection: keep-aliveContent-Length: 37Cache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Origin: https://auth-3qgwfuyzxdhg.redirectme.netContent-Type: application/x-www-form-urlencodedUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 18:17:15 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 18:17:16 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 18:17:28 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_80.2.dr, chromecache_82.2.dr, chromecache_96.2.dr, chromecache_94.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_83.2.dr, chromecache_93.2.dr, chromecache_89.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_83.2.dr, chromecache_93.2.dr, chromecache_89.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_84.2.dr, chromecache_79.2.dr, chromecache_81.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_84.2.dr, chromecache_79.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_79.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_73.2.dr, chromecache_90.2.dr	String found in binary or memory: https://jqueryvalidation.org/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.6.200.64:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.6.200.64:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.6.169.206:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.6.169.206:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.170.208.209:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.170.208.209:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.170.208.209:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.170.208.209:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.11:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.122.11:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.216.217.108:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.6.169.206:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.6.169.206:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.6.169.206:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.6.169.206:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49777 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6036_1486802668

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6036_1486802668

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@22/48@18/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,13399723414402558055,9170259818285576470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2144 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,13399723414402558055,9170259818285576470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2144 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery.mask.min.js	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/spectrum-logo.svg	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/spec/vendor.fc05b896f9192ed4.js	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/validate.min.js	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/favicons/favicon.ico	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net//security-check/email/process	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery-3.3.1.min.js	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery.validate.min.js	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/img/logo-a.png	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery.creditCardValidator.js	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/favicon.ico	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/security-check/assets/icons/kite-icons-beam.svg	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/?verify	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin/process	0%	Avira URL Cloud	safe
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/spec/css/xx.css	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
veriqwyrfizxhsmh.serveirc.com	50.6.200.64	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
k8s-nginx-nginxalb-8f89383d6f-713074081.us-east-1.elb.amazonaws.com	35.170.208.209	true	false	unknown
drmzsysqbncm7.cloudfront.net	3.168.122.11	true	false	unknown
www.google.com	142.251.35.164	true	false	high
auth-3qgwfuyzxdhg.redirectme.net	50.6.169.206	true	true	unknown
cdn.spectrumflow.net	unknown	unknown	false	high
id.spectrum.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/favicons/favicon.ico	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625	true		unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://auth-3qgwfuyzxdhg.redirectme.net/security-check/billing?_id=e7603f8e83b677957bdf2249fd3ac141	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/css/bootstrap.min.css	false		high
https://id.spectrum.net/runtime.1adc1dc77e385cf3.js	false		high
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/spectrum-logo.svg	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/validate.min.js	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/js/all.min.js	false		high
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery-3.3.1.min.js	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/spec/vendor.fc05b896f9192ed4.js	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery.mask.min.js	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery.validate.min.js	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/img/logo-a.png	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js	false		high
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery.creditCardValidator.js	false	Avira URL Cloud: safe	unknown
https://id.spectrum.net/polyfills.4360eb27d8bb4a7c.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css	false		high
https://auth-3qgwfuyzxdhg.redirectme.net//security-check/email/process	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css	false		high
https://auth-3qgwfuyzxdhg.redirectme.net/security-check/assets/icons/kite-icons-beam.svg	false	Avira URL Cloud: safe	unknown
https://id.spectrum.net/main.f9ae223cc07b38d9.js	false		high
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/favicon.ico	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/?verify	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.min.js	false		high
https://cdn.spectrumflow.net/kite/fonts/rutledge/rutledge-medium.woff2	false		high
https://id.spectrum.net/assets/images/spectrum-logo.svg	false		high
https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin/process	false	Avira URL Cloud: safe	unknown
https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/spec/css/xx.css	false	Avira URL Cloud: safe	unknown
https://cdn.spectrumflow.net/kite/fonts/rutledge/rutledge-regular.woff2	false		high
https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://jqueryvalidation.org/	chromecache_73.2.dr, chromecache_90.2.dr	false	high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_84.2.dr, chromecache_79.2.dr, chromecache_81.2.dr	false	high
http://www.bohemiancoding.com/sketch	chromecache_80.2.dr, chromecache_82.2.dr, chromecache_96.2.dr, chromecache_94.2.dr	false	high
https://getbootstrap.com/)	chromecache_84.2.dr, chromecache_79.2.dr, chromecache_81.2.dr	false	high
https://fontawesome.com/license/free	chromecache_83.2.dr, chromecache_93.2.dr, chromecache_89.2.dr	false	high
https://fontawesome.com	chromecache_83.2.dr, chromecache_93.2.dr, chromecache_89.2.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_79.2.dr, chromecache_81.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
50.6.169.206	auth-3qgwfuyzxdhg.redirectme.net	United States	46606	UNIFIEDLAYER-AS-1US	true
3.168.122.11	drmzsysqbncm7.cloudfront.net	United States	16509	AMAZON-02US	false
3.216.217.108	unknown	United States	14618	AMAZON-AESUS	false
35.170.208.209	k8s-nginx-nginxalb-8f89383d6f-713074081.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
50.6.200.64	veriqwyrfizxhsmh.serveirc.com	United States	46606	UNIFIEDLAYER-AS-1US	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644640
Start date and time:	2025-03-20 19:16:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@22/48@18/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.131, 142.250.72.110, 142.251.40.206, 64.233.180.84, 142.251.40.142, 142.251.32.110, 142.251.40.174, 23.203.176.221, 142.250.80.10, 142.250.65.170, 142.251.40.202, 142.251.40.170, 142.250.80.42, 142.251.40.234, 142.250.64.106, 142.250.72.106, 142.250.80.74, 142.250.80.106, 142.250.65.234, 142.250.65.202, 142.250.64.74, 142.251.41.10, 142.251.40.138, 142.250.176.202, 142.250.80.46, 142.250.65.238, 142.251.35.174, 142.250.81.234, 142.251.32.106, 142.251.40.106, 142.251.35.170, 142.251.41.14, 142.250.65.195, 34.104.35.123, 172.217.12.142, 142.250.80.35, 184.31.69.3, 4.175.87.197
Excluded domains from analysis (whitelisted): a-ring-fallback.msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, passwordsleakcheck-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (829), with CRLF line terminators
Category:	downloaded
Size (bytes):	36756
Entropy (8bit):	4.500491663672276
Encrypted:	false
SSDEEP:	768:UjelKP3m5/1/3zrRwRfpM2gHvoOBKfGOiyOkH8DGt6ZkQQJ59/4:UKlKPE/N3HRwRfpM2zPiyOuwGYkQQ4
MD5:	1CDEEB8EACA2A1357DE0A82BD5E5526F
SHA1:	F0474EE246D33979152B20BFBEA49045581792F3
SHA-256:	1327E703FCF1311DE11818F1FEDCEF1EC0BA4F60734962C6955FDFFC408D5287
SHA-512:	46B7110E8C0A6D6AC5BACA79402E934582FCB901E4B976B9A2FB61AE57CA6E03DE1B35B2B8FBDF227A72E55D0752FE9A2213BA13D0728F4BF1A9D4D0F879896A
Malicious:	false
Reputation:	low
URL:	https://auth-3qgwfuyzxdhg.redirectme.net/FAMOUS/Gens/js/jquery.validate.min.js
Preview:	/! jQuery Validation Plugin - v1.19.0 - 11/28/2018.. https://jqueryvalidation.org/.. * Copyright (c) 2018 J.rn Zaefferer; Licensed MIT */..! function(a) {.. "function" == typeof define && define.amd ? define(["jquery"], a) : "object" == typeof module && module.exports ? module.exports = a(require("jquery")) : a(jQuery)..}(function(a) {.. a.extend(a.fn, {.. validate: function(b) {.. if (!this.length) return void(b && b.debug && window.console && console.warn("Nothing selected, can't validate, returning nothing."));.. var c = a.data(this[0], "validator");.. return c ? c : (this.attr("novalidate", "novalidate"), c = new a.validator(b, this[0]), a.data(this[0], "validator", c), c.settings.onsubmit && (this.on("click.validate", ":submit", function(b) {.. c.submitButton = b.currentTarget, a(this).hasClass("cancel") && (c.cancelSubmit = !0), void 0 !== a(this).attr("formnovalidate") && (c.cancelSubmit = !0).. }), this

Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625	Joe Sandbox AI: Score: 9 Reasons: The brand 'Spectrum' is a well-known telecommunications company., The legitimate domain for Spectrum is 'spectrum.com'., The URL 'auth-3qgwfuyzxdhg.redirectme.net' does not match the legitimate domain., The URL contains a subdomain and a domain 'redirectme.net' which is not associated with Spectrum., The use of 'redirectme.net' suggests a dynamic DNS service, which is often used in phishing attacks., The presence of input fields for 'Username' and 'Password' on a suspicious domain increases the risk of phishing. DOM: 0.0.pages.csv
Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba	Joe Sandbox AI: Score: 7 Reasons: The URL 'auth-3qgwfuyzxdhg.redirectme.net' does not match any known legitimate domain associated with a brand named 'logo'., The brand name 'logo' is too generic and does not correspond to a specific well-known brand., The domain 'redirectme.net' is a dynamic DNS service, which is often used for phishing and malicious activities., The presence of 'auth' and random characters in the subdomain is suspicious and indicative of phishing., The URL structure with hyphens and random characters is typical of phishing attempts. DOM: 1.1.pages.csv

Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625	HTTP Parser: Number of links: 0
Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba	HTTP Parser: Number of links: 0

Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625	HTTP Parser: Title: ID.Spectrum.net does not match URL
Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba	HTTP Parser: Title: Spectrum Account Center does not match URL

Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625	HTTP Parser: <input type="password" .../> found
Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba	HTTP Parser: <input type="password" .../> found

Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625	HTTP Parser: No <meta name="author".. found
Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba	HTTP Parser: No <meta name="author".. found

Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625	HTTP Parser: No <meta name="copyright".. found
Source: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.72.99
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.72.99
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.203.209
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: veriqwyrfizxhsmh.serveirc.com
Source: global traffic	DNS traffic detected: DNS query: auth-3qgwfuyzxdhg.redirectme.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: id.spectrum.net
Source: global traffic	DNS traffic detected: DNS query: cdn.spectrumflow.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 19:17:02.778038025 CET	53	57749	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:02.791377068 CET	53	62455	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:03.609457016 CET	53	57374	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:06.869200945 CET	49201	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:06.869267941 CET	60573	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:06.973850012 CET	53	49201	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:06.973975897 CET	53	60573	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:08.129523993 CET	64089	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:08.129590034 CET	52767	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:08.242203951 CET	53	64089	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:08.242521048 CET	53	52767	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:11.160932064 CET	54005	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:11.161079884 CET	53076	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:11.279594898 CET	53	53076	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:11.281954050 CET	53	54005	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:14.911931038 CET	53210	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:14.912075043 CET	50607	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:15.018870115 CET	53	53210	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:15.019491911 CET	53	50607	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:16.676033974 CET	59645	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:16.676095963 CET	59659	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:16.709089041 CET	56192	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:16.709189892 CET	50238	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:16.782171965 CET	53	59645	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:16.814595938 CET	53	50238	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:16.854679108 CET	53	56192	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:16.867724895 CET	53	59659	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:17.287739038 CET	58590	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:17.287920952 CET	53201	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:17.391371012 CET	61896	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:17.391685963 CET	64546	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:17.397574902 CET	53	53201	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:17.406624079 CET	53	58590	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:17.491170883 CET	53	51306	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:17.503480911 CET	53	61896	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:17.504771948 CET	53	64546	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:20.594912052 CET	53	59742	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:39.556508064 CET	53	53635	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:50.886697054 CET	54876	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:50.887115002 CET	57968	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:17:50.992767096 CET	53	57968	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:50.994760990 CET	53	54876	1.1.1.1	192.168.2.4
Mar 20, 2025 19:17:52.032674074 CET	53	55956	1.1.1.1	192.168.2.4
Mar 20, 2025 19:18:02.102291107 CET	53	57569	1.1.1.1	192.168.2.4
Mar 20, 2025 19:18:02.259469032 CET	53	55778	1.1.1.1	192.168.2.4
Mar 20, 2025 19:18:05.305474043 CET	53	55683	1.1.1.1	192.168.2.4
Mar 20, 2025 19:18:09.896323919 CET	138	138	192.168.2.4	192.168.2.255

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:08 UTC	686	OUT	GET /kabQ8B9 HTTP/1.1 Host: veriqwyrfizxhsmh.serveirc.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:11 UTC	286	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 20 Mar 2025 18:17:08 GMT Server: Apache X-Powered-By: PHP/7.4.33 Upgrade: h2,h2c Connection: Upgrade, close location: https://auth-3qgwfuyzxdhg.redirectme.net/?verify Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 18:17:11 UTC	102	IN	Data Raw: 35 62 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 61 75 74 68 2d 33 71 67 77 66 75 79 7a 78 64 68 67 2e 72 65 64 69 72 65 63 74 6d 65 2e 6e 65 74 2f 3f 76 65 72 69 66 79 3b 27 3c 2f 73 63 72 69 70 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5b<script>window.location.href = 'https://auth-3qgwfuyzxdhg.redirectme.net/?verify;'</script>0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20668, version 1.0
Category:	downloaded
Size (bytes):	20668
Entropy (8bit):	7.98490778199515
Encrypted:	false
SSDEEP:	384:hgwfTC1yTAfVV4w6cjpQdbH0emV8QgUzEufpJyZDplPvlY+:qnsT86wtVCUbS4EuRizG+
MD5:	A9C987D124CD29F28D5931084B433E12
SHA1:	98ABFC3D62CD670E640668303CB711D505638018
SHA-256:	A87C7623FF5D2BD72CAC2007266067E2B8F8B3B05ACD4AB23B8DE95B0674EA3F
SHA-512:	03C323887EE42DBEFE3AC0C5607DE8D6271A9ED6E593E99BC2F2175D9074E9EC0792B79D01D4548566B457323DDC95C649BC16F29C1B5ED9A021E529F0B0FD02
Malicious:	false
Reputation:	low
URL:	https://cdn.spectrumflow.net/kite/fonts/rutledge/rutledge-regular.woff2
Preview:	wOF2......P........8..PM........................?FFTM.. ..D. .`.."....s.....P....6.$..x..>.. .....x...?webf......z.5..X..d.O.;....m....[...........O.......?1..i:.v.DDD... #D.LG..$b..K.mjf.0..a.'..D.h...+H..3.h7.%..H.....6bc..6...f..8...R...{.\H....Ig.e......q...7_ ..M...qBd.Kx.....c..Z....Q.k...H3...#.3)GXY......'?.T&.f.....F.jV.;.q.r...4yG......(9......(...S....'MG6.....9......Q..V.h.~.vGQi.G...rD.l...S.U.%.-...q....?.7.../"u."...@eR...#Wq%V......F..`Ql,..a...n.0.G.66bT<..1._..........0f.].....W.k...Z......P.X.i.D.Y.J..3.....eE.EL......a.Xj.VO.{9...RU.c.U.T..(...I..&..Q(.x"F...v."....g.c[.%.).Tr.%..}N..S.iXhXh..0,4,.v.3....<,w.....^...hx.[..~...P.z.~.rP..q.s:..Hv..h...... {.nM..N...J_[!4...lok..a3.xKf..j..b.EQQ...F..I.?.\%.u.$.S.;y....W.y'....`...W.'..[.4.?n..-....l..->...Y...6bs..........h.W#..h.\.R..a....).~_p/b..k."vI.....J..!C...,.eK..?.?@.&...4.y.m...?W.R;.ew.2f.2...?0.....$.b.T.r9$..R......S.+..-.OY=.ik.5.mk..ZZ.};...t....2

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:11 UTC	689	OUT	GET /?verify HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:14 UTC	457	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 20 Mar 2025 18:17:11 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5; path=/ Upgrade: h2,h2c Connection: Upgrade, close Location: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625 Content-Length: 0 Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:14 UTC	772	OUT	GET /security-check/signin?secure=fms_99625 HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:14 UTC	295	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:14 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 18:17:14 UTC	7897	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6a 73 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 22 20 64 61 74 61 2d 6a 73 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 3d 22 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 63 6f 6e 66 69 67 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d Data Ascii: 2000<!DOCTYPE html><html lang="en" class="js-focus-visible" data-js-focus-visible=""> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" ><meta name="msapplication-config" content=""> <meta nam
2025-03-20 18:17:14 UTC	301	IN	Data Raw: 28 2d 2d 6b 69 74 65 2d 74 72 61 63 6b 69 6e 67 2d 73 6d 29 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 6d 2d 64 69 73 70 6c 61 79 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 6d 2d 64 69 73 70 6c 61 79 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 73 70 61 63 69 6e 67 2d 65 6c 65 6d 65 6e 74 2d 78 6c 29 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 6d 2d 74 69 74 6c 65 2d 31 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 6d 2d 74 69 74 6c 65 2d 31 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 62 6f 6c 64 29 3b 2d 2d 6b 69 74 65 2d 74 Data Ascii: (--kite-tracking-sm);--kite-typography-sm-display-line-height:1.25;--kite-typography-sm-display-margin-bottom:var(--kite-spacing-element-xl);--kite-typography-sm-title-1-size:2.5rem;--kite-typography-sm-title-1-weight:var(--kite-font-weight-bold);--kite-t
2025-03-20 18:17:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 18:17:14 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 69 6e 67 2d 73 6d 29 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 6d 2d 74 69 74 6c 65 2d 31 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 6d 2d 74 69 74 6c 65 2d 31 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 73 70 61 63 69 6e 67 2d 65 6c 65 6d 65 6e 74 2d 6d 64 29 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 6d 2d 74 69 74 6c 65 2d 32 2d 73 69 7a 65 3a 32 2e 32 35 72 65 6d 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 6d 2d 74 69 74 6c 65 2d 32 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 62 6f 6c 64 29 3b 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 Data Ascii: 2000ing-sm);--kite-typography-sm-title-1-line-height:1.3;--kite-typography-sm-title-1-margin-bottom:var(--kite-spacing-element-md);--kite-typography-sm-title-2-size:2.25rem;--kite-typography-sm-title-2-weight:var(--kite-font-weight-bold);--kite-typograp
2025-03-20 18:17:14 UTC	6	IN	Data Raw: 2d 6b 69 74 65 2d Data Ascii: -kite-
2025-03-20 18:17:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 18:17:15 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 61 6c 74 2d 74 79 70 6f 67 72 61 70 68 79 2d 78 78 73 2d 65 79 65 62 72 6f 77 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 73 70 61 63 69 6e 67 2d 65 6c 65 6d 65 6e 74 2d 78 73 29 3b 2d 2d 6b 69 74 65 2d 61 6c 74 2d 74 79 70 6f 67 72 61 70 68 79 2d 78 78 73 2d 63 61 70 74 69 6f 6e 2d 73 69 7a 65 3a 2e 37 35 72 65 6d 3b 2d 2d 6b 69 74 65 2d 61 6c 74 2d 74 79 70 6f 67 72 61 70 68 79 2d 78 78 73 2d 63 61 70 74 69 6f 6e 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 72 65 67 75 6c 61 72 29 3b 2d 2d 6b 69 74 65 2d 61 6c 74 2d 74 79 70 6f 67 72 61 70 68 79 2d 78 78 73 2d 63 61 70 74 69 6f 6e 2d 74 72 61 63 6b 69 6e 67 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 74 72 61 63 Data Ascii: 2000alt-typography-xxs-eyebrow-margin-bottom:var(--kite-spacing-element-xs);--kite-alt-typography-xxs-caption-size:.75rem;--kite-alt-typography-xxs-caption-weight:var(--kite-font-weight-regular);--kite-alt-typography-xxs-caption-tracking:var(--kite-trac
2025-03-20 18:17:15 UTC	6	IN	Data Raw: 2d 6b 69 74 65 2d Data Ascii: -kite-
2025-03-20 18:17:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 18:17:15 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 73 70 61 63 69 6e 67 2d 65 6c 65 6d 65 6e 74 2d 78 6c 29 3b 2d 2d 6b 69 74 65 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 65 72 72 6f 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 29 3b 2d 2d 6b 69 74 65 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 65 72 72 6f 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 64 61 72 6b 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 2d 64 61 72 6b 29 3b 2d 2d 6b 69 74 65 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 65 72 72 6f 72 2d 74 65 78 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 6b 69 74 65 2d 74 79 70 6f 67 72 61 70 68 79 2d 6c 67 2d 62 6f 64 79 2d 73 69 7a 65 29 3b 2d 2d 6b 69 74 65 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 65 72 72 6f 72 Data Ascii: 2000spacing-element-xl);--kite-form-control-error-text-color:var(--kite-color-error);--kite-form-control-error-text-color-dark:var(--kite-color-error-dark);--kite-form-control-error-text-size:var(--kite-typography-lg-body-size);--kite-form-control-error

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:15 UTC	638	OUT	GET /ajax/libs/bootstrap/5.3.3/css/bootstrap.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:15 UTC	956	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:15 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 9237348f7f0ca0fb-EWR Server: cloudflare Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 Etag: W/"65d4c5f6-77bb" Last-Modified: Tue, 20 Feb 2024 15:32:06 GMT Cf-Cdnjs-Via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff Cf-Cache-Status: HIT Age: 627447 Expires: Tue, 10 Mar 2026 18:17:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1HglzaREeTWFbdgLKJ8WLIXE%2F1iQ5WbCCzTrcbaafMSgl3ieYkXnqKTrTc%2Bo%2F4oivCFSNbU6%2FTVTZuRkiuGLJwlPkT8x17VFMEoUIILMA%2BhTDA%2BxV5b8K8E%2B1FJ%2FQTcivmx7%2FHIe"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 alt-svc: h3=":443"; ma=86400
2025-03-20 18:17:15 UTC	413	IN	Data Raw: 35 62 66 35 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 Data Ascii: 5bf5@charset "UTF-8";/! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indi
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 66 30 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 67 72 61 79 2d 32 30 30 3a 23 65 39 65 63 65 66 3b 2d 2d 62 73 2d 67 72 61 79 2d 33 30 30 3a 23 64 65 65 32 65 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 34 30 30 3a 23 63 65 64 34 64 61 3b 2d 2d 62 73 2d 67 72 61 79 2d 35 30 30 3a 23 61 64 62 35 62 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 36 30 30 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 37 30 30 3a 23 34 39 35 30 35 37 3b 2d 2d 62 73 2d 67 72 61 79 2d 38 30 30 3a 23 33 34 33 61 34 30 3b 2d 2d 62 Data Ascii: f0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--b
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 35 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 65 39 65 63 65 66 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 61 64 62 35 62 64 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 32 35 35 2c 32 35 35 2c 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 30 2c 30 2c 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e 73 2d 73 65 72 69 66 3a 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 22 53 65 67 6f 65 20 55 49 22 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4e 6f 74 6f 20 53 61 6e 73 22 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 53 61 6e 73 22 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 Data Ascii: 5;--bs-light-border-subtle:#e9ecef;--bs-dark-border-subtle:#adb5bd;--bs-white-rgb:255,255,255;--bs-black-rgb:0,0,0;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue","Noto Sans","Liberation Sans",Arial,sans-serif,"Apple Color
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 72 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 37 35 29 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 2e 33 37 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 73 6d 3a 30 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6c 67 3a 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 78 6c 3a 31 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 78 78 6c 3a 32 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 32 78 6c 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d Data Ascii: r-color:#dee2e6;--bs-border-color-translucent:rgba(0, 0, 0, 0.175);--bs-border-radius:0.375rem;--bs-border-radius-sm:0.25rem;--bs-border-radius-lg:0.5rem;--bs-border-radius-xl:1rem;--bs-border-radius-xxl:2rem;--bs-border-radius-2xl:var(--bs-border-radius-
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 66 66 36 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 66 66 64 61 36 61 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 65 61 38 36 38 66 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 64 61 72 6b 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 64 65 65 32 65 36 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 23 30 33 31 36 33 33 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 23 31 36 31 37 31 39 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 23 30 35 31 62 31 31 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 23 30 Data Ascii: ff6;--bs-warning-text-emphasis:#ffda6a;--bs-danger-text-emphasis:#ea868f;--bs-light-text-emphasis:#f8f9fa;--bs-dark-text-emphasis:#dee2e6;--bs-primary-bg-subtle:#031633;--bs-secondary-bg-subtle:#161719;--bs-success-bg-subtle:#051b11;--bs-info-bg-subtle:#0
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 64 79 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 74 65 78 74 2d 61 6c 69 67 6e 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 68 72 7b 6d 61 72 67 69 6e 3a 31 72 65 6d 20 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 Data Ascii: dy-line-height);color:var(--bs-body-color);text-align:var(--bs-body-text-align);background-color:var(--bs-body-bg);-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}hr{margin:1rem 0;color:inherit;border:0;border-top:var(--bs-border-wid
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 29 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 61 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 29 2c 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 6f 70 61 63 69 74 79 2c 31 29 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 Data Ascii: bs-highlight-color);background-color:var(--bs-highlight-bg)}sub,sup{position:relative;font-size:.75em;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:rgba(var(--bs-link-color-rgb),var(--bs-link-opacity,1));text-decoration:und
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 73 65 6c 65 63 74 3a 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 31 7d 5b 6c 69 73 74 5d 3a 6e 6f 74 28 5b 74 79 70 65 3d 64 61 74 65 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 77 65 65 6b 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 74 69 6d 65 5d Data Ascii: it;font-size:inherit;line-height:inherit}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}select:disabled{opacity:1}[list]:not([type=date]):not([type=datetime-local]):not([type=month]):not([type=week]):not([type=time]
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 6f 75 74 70 75 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 3a 30 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 36 32 35 72 65 6d 20 2b 20 34 2e 35 76 77 29 3b Data Ascii: it-appearance:button}output{display:inline-block}iframe{border:0}summary{display:list-item;cursor:pointer}progress{vertical-align:baseline}[hidden]{display:none!important}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:calc(1.625rem + 4.5vw);
2025-03-20 18:17:15 UTC	1369	IN	Data Raw: 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 e2 80 94 c2 a0 22 7d 2e 69 6d 67 2d 66 6c 75 69 64 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 Data Ascii: em;font-size:.875em;color:#6c757d}.blockquote-footer::before{content:""}.img-fluid{max-width:100%;height:auto}.img-thumbnail{padding:.25rem;background-color:var(--bs-body-bg);border:var(--bs-border-width) solid var(--bs-border-color);border-radius:va

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:15 UTC	687	OUT	GET /FAMOUS/Gens/spec/css/xx.css HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:15 UTC	164	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 18:17:15 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-20 18:17:15 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	736	OUT	GET /FAMOUS/Gens/spec/vendor.fc05b896f9192ed4.js HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive Origin: https://auth-3qgwfuyzxdhg.redirectme.net sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:17 UTC	164	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 18:17:16 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-20 18:17:17 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	646	OUT	GET /runtime.1adc1dc77e385cf3.js HTTP/1.1 Host: id.spectrum.net Connection: keep-alive Origin: https://auth-3qgwfuyzxdhg.redirectme.net sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:17 UTC	689	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:17 GMT Content-Type: text/html Content-Length: 278072 Connection: close Last-Modified: Fri, 28 Feb 2025 21:29:24 GMT Vary: Accept-Encoding ETag: "67c22ab4-43e38" Set-Cookie: XSRF-TOKEN=751757e0653011008e03e5dd90ca8175;Domain=.spectrum.net;Path=/;Max-Age=100000 Content-Security-Policy: frame-ancestors .dev-spectrum.net .qa-spectrum.net .uat-spectrum.net .spectrumflow.net .stage-spectrum.net .spectrum.net capacitor://.dev-spectrum.net capacitor://.qa-spectrum.net capacitor://.uat-spectrum.net capacitor://.spectrumflow.net; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-20 18:17:17 UTC	15675	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 63 72 69 74 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 70 65 63 74 72 75 6d 49 64 65 6e 74 69 74 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <!doctype html><html lang="en" data-critters-container> <head> <meta charset="utf-8"> <title>SpectrumIdentity</title> <base href="/"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width
2025-03-20 18:17:17 UTC	16384	IN	Data Raw: 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 2d 6b 69 74 65 2d 62 75 74 74 6f 6e 2d 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 2d 2d 6b 69 74 65 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 36 32 35 72 65 6d 3b 2d 2d 6b 69 74 65 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 36 32 35 72 65 6d 3b 2d 2d 6b 69 74 65 2d 62 75 74 74 6f 6e 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 6b 69 74 65 2d 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 6b 69 74 65 2d 62 75 74 74 6f 6e 2d 62 6f 72 64 65 72 6c 65 73 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 6b 69 74 65 2d 62 75 Data Ascii: argin-bottom:0;--kite-button-margin-left:0;--kite-button-padding-top:.625rem;--kite-button-padding-bottom:.625rem;--kite-button-width:100%;--kite-button-secondary-background-color:transparent;--kite-button-borderless-background-color:transparent;--kite-bu

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	648	OUT	GET /polyfills.4360eb27d8bb4a7c.js HTTP/1.1 Host: id.spectrum.net Connection: keep-alive Origin: https://auth-3qgwfuyzxdhg.redirectme.net sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:17 UTC	689	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:17 GMT Content-Type: text/html Content-Length: 278072 Connection: close Last-Modified: Fri, 28 Feb 2025 21:29:24 GMT Vary: Accept-Encoding ETag: "67c22ab4-43e38" Set-Cookie: XSRF-TOKEN=63d6dc7c4582162a35f246de13739d71;Domain=.spectrum.net;Path=/;Max-Age=100000 Content-Security-Policy: frame-ancestors .dev-spectrum.net .qa-spectrum.net .uat-spectrum.net .spectrumflow.net .stage-spectrum.net .spectrum.net capacitor://.dev-spectrum.net capacitor://.qa-spectrum.net capacitor://.uat-spectrum.net capacitor://.spectrumflow.net; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-20 18:17:17 UTC	11579	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 63 72 69 74 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 70 65 63 74 72 75 6d 49 64 65 6e 74 69 74 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <!doctype html><html lang="en" data-critters-container> <head> <meta charset="utf-8"> <title>SpectrumIdentity</title> <base href="/"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	643	OUT	GET /main.f9ae223cc07b38d9.js HTTP/1.1 Host: id.spectrum.net Connection: keep-alive Origin: https://auth-3qgwfuyzxdhg.redirectme.net sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:17 UTC	689	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:17 GMT Content-Type: text/html Content-Length: 278072 Connection: close Last-Modified: Fri, 28 Feb 2025 21:29:24 GMT Vary: Accept-Encoding ETag: "67c22ab4-43e38" Set-Cookie: XSRF-TOKEN=17c77e07976c6b3c673c737c912d4b61;Domain=.spectrum.net;Path=/;Max-Age=100000 Content-Security-Policy: frame-ancestors .dev-spectrum.net .qa-spectrum.net .uat-spectrum.net .spectrumflow.net .stage-spectrum.net .spectrum.net capacitor://.dev-spectrum.net capacitor://.qa-spectrum.net capacitor://.uat-spectrum.net capacitor://.spectrumflow.net; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-20 18:17:17 UTC	3387	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 63 72 69 74 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 70 65 63 74 72 75 6d 49 64 65 6e 74 69 74 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <!doctype html><html lang="en" data-critters-container> <head> <meta charset="utf-8"> <title>SpectrumIdentity</title> <base href="/"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	663	OUT	GET /assets/images/spectrum-logo.svg HTTP/1.1 Host: id.spectrum.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:17 UTC	691	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:17 GMT Content-Type: image/svg+xml Content-Length: 10256 Connection: close Last-Modified: Fri, 28 Feb 2025 21:29:24 GMT Vary: Accept-Encoding ETag: "67c22ab4-2810" Set-Cookie: XSRF-TOKEN=1fb0ee589076a1c0ade9c8536681f06b;Domain=.spectrum.net;Path=/;Max-Age=100000 Content-Security-Policy: frame-ancestors .dev-spectrum.net .qa-spectrum.net .uat-spectrum.net .spectrumflow.net .stage-spectrum.net .spectrum.net capacitor://.dev-spectrum.net capacitor://.qa-spectrum.net capacitor://.uat-spectrum.net capacitor://.spectrumflow.net; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-20 18:17:17 UTC	7481	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 33 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 33 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 34 38 2e 32 20 28 34 37 33 32 37 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="113px" height="24px" viewBox="0 0 113 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 48.2 (47327) - http://www.
2025-03-20 18:17:17 UTC	2775	IN	Data Raw: 34 36 32 32 32 35 32 31 20 34 38 2e 30 37 35 32 34 36 38 2c 37 2e 34 36 32 32 32 35 32 31 20 43 34 38 2e 38 39 39 36 32 34 2c 37 2e 34 36 32 32 32 35 32 31 20 34 39 2e 35 34 33 30 34 30 34 2c 37 2e 37 30 34 32 34 32 30 32 20 34 39 2e 39 38 35 33 38 39 31 2c 38 2e 31 38 38 32 37 35 36 33 20 43 35 30 2e 31 36 36 33 35 2c 38 2e 33 36 39 37 38 38 32 34 20 35 30 2e 33 32 37 32 30 34 31 2c 38 2e 36 31 31 38 30 35 30 34 20 35 30 2e 35 30 38 31 36 34 39 2c 38 2e 39 37 34 38 33 30 32 35 20 4c 35 34 2e 31 32 37 33 38 32 2c 38 2e 39 37 34 38 33 30 32 35 20 43 35 33 2e 38 34 35 38 38 37 34 2c 37 2e 39 36 36 34 32 36 38 39 20 35 33 2e 34 34 33 37 35 32 31 2c 37 2e 30 33 38 36 39 35 38 20 35 32 2e 37 38 30 32 32 39 2c 36 2e 33 33 32 38 31 33 34 35 20 43 35 31 2e 36 31 Data Ascii: 46222521 48.0752468,7.46222521 C48.899624,7.46222521 49.5430404,7.70424202 49.9853891,8.18827563 C50.16635,8.36978824 50.3272041,8.61180504 50.5081649,8.97483025 L54.127382,8.97483025 C53.8458874,7.96642689 53.4437521,7.0386958 52.780229,6.33281345 C51.61

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	622	OUT	GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:17 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"65d4c5f6-40b9" Last-Modified: Tue, 20 Feb 2024 15:32:06 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 83671 Expires: Tue, 10 Mar 2026 18:17:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8iWWxLYT%2Fu%2FQ9Nml9l5QpiRi%2Fuuk%2BHyqxqPZLW%2FHX4JDfj9TJqoliGxOWUposYb%2F8RHgPXq%2FRnnfkI1FUkSzTWs56JsooQcLmQm6%2BY27FgI0M%2BaTdYDzupO9seJkhOnqZ8UYm2dc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9237349aef34c327-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:17:17 UTC	400	IN	Data Raw: 37 62 65 38 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7be8/! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 5b 22 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 22 5d 2c 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 65 28 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 2c 7b 5b 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 5d 3a 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 7d 29 3b 69 66 28 74 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 74 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 69 29 7b 63 6f 6e Data Ascii: ["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){con
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 7d 2c 64 3d 74 3d 3e 21 74 7c 7c 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 21 21 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 74 2e 64 69 73 61 62 6c 65 64 3a 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 29 2c 75 3d 74 3d 3e 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 53 68 61 64 6f 77 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: },d=t=>!t\|\|t.nodeType!==Node.ELEMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),u=t=>{if(!document.documentElement.attachShadow)return null;if("function"==typ
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 3d 74 2e 6c 65 6e 67 74 68 3b 6c 65 74 20 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 6f 3f 21 69 26 26 73 3f 74 5b 6e 2d 31 5d 3a 74 5b 30 5d 3a 28 6f 2b 3d 69 3f 31 3a 2d 31 2c 73 26 26 28 6f 3d 28 6f 2b 6e 29 25 6e 29 2c 74 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 6f 2c 6e 2d 31 29 29 5d 29 7d 2c 41 3d 2f 5b 5e 2e 5d 2a 28 3f 3d 5c 2e 2e 2a 29 5c 2e 7c 2e 2a 2f 2c 45 3d 2f 5c 2e 2e 2a 2f 2c 43 3d 2f 3a 3a 5c 64 2b 24 2f 2c 54 3d 7b 7d 3b 6c 65 74 20 6b 3d 31 3b 63 6f 6e 73 74 20 24 3d 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 22 6d 6f 75 73 65 6f 75 74 22 7d 2c 53 3d 6e 65 77 20 53 65 74 28 5b 22 63 6c 69 63 6b 22 2c 22 64 62 6c 63 6c Data Ascii: =t.length;let o=t.indexOf(e);return-1===o?!i&&s?t[n-1]:t[0]:(o+=i?1:-1,s&&(o=(o+n)%n),t[Math.max(0,Math.min(o,n-1))])},A=/[^.](?=\..)\.\|./,E=/\../,C=/::\d+$/,T={};let k=1;const $={mouseenter:"mouseover",mouseleave:"mouseout"},S=new Set(["click","dblcl
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 61 5d 3d 7b 7d 29 2c 68 3d 49 28 63 2c 72 2c 6f 3f 69 3a 6e 75 6c 6c 29 3b 69 66 28 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 68 2e 6f 6e 65 4f 66 66 3d 68 2e 6f 6e 65 4f 66 66 26 26 6e 29 3b 63 6f 6e 73 74 20 64 3d 4c 28 72 2c 65 2e 72 65 70 6c 61 63 65 28 41 2c 22 22 29 29 2c 75 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 6c 65 74 7b 74 61 72 67 65 74 3a 72 7d 3d 6e 3b 72 26 26 72 21 3d 3d 74 68 69 73 3b 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 29 66 6f 72 28 63 6f 6e 73 74 20 61 20 6f 66 20 6f 29 69 66 28 61 3d 3d 3d 72 29 72 65 74 75 72 6e 20 46 28 6e 2c 7b 64 65 6c 65 67 61 Data Ascii: a]={}),h=I(c,r,o?i:null);if(h)return void(h.oneOff=h.oneOff&&n);const d=L(r,e.replace(A,"")),u=o?function(t,e,i){return function s(n){const o=t.querySelectorAll(e);for(let{target:r}=n;r&&r!==this;r=r.parentNode)for(const a of o)if(a===r)return F(n,{delega
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 29 2c 73 28 74 29 2e 74 72 69 67 67 65 72 28 6e 29 2c 6f 3d 21 6e 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 72 3d 21 6e 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 61 3d 6e 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 3b 63 6f 6e 73 74 20 6c 3d 46 28 6e 65 77 20 45 76 65 6e 74 28 65 2c 7b 62 75 62 62 6c 65 73 3a 6f 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 2c 69 29 3b 72 65 74 75 72 6e 20 61 26 26 6c 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 26 26 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6c 29 2c 6c 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 26 26 6e 26 26 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c Data Ascii: ),s(t).trigger(n),o=!n.isPropagationStopped(),r=!n.isImmediatePropagationStopped(),a=n.isDefaultPrevented());const l=F(new Event(e,{bubbles:o,cancelable:!0}),i);return a&&l.preventDefault(),r&&t.dispatchEvent(l),l.defaultPrevented&&n&&n.preventDefault(),l
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 65 29 7b 63 6f 6e 73 74 20 69 3d 6c 28 65 29 3f 42 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 28 65 2c 22 63 6f 6e 66 69 67 22 29 3a 7b 7d 3b 72 65 74 75 72 6e 7b 2e 2e 2e 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 3a 7b 7d 2c 2e 2e 2e 6c 28 65 29 3f 42 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 28 65 29 3a 7b 7d 2c 2e 2e 2e Data Ascii: t),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}_configAfterMerge(t){return t}_mergeConfigObj(t,e){const i=l(e)?B.getDataAttribute(e,"config"):{};return{...this.constructor.Default,..."object"==typeof i?i:{},...l(e)?B.getDataAttributes(e):{},...
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 45 4e 54 5f 4b 45 59 28 29 7b 72 65 74 75 72 6e 60 2e 24 7b 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 7d 60 7d 73 74 61 74 69 63 20 65 76 65 6e 74 4e 61 6d 65 28 74 29 7b 72 65 74 75 72 6e 60 24 7b 74 7d 24 7b 74 68 69 73 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 7d 7d 63 6f 6e 73 74 20 52 3d 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 6c 65 74 20 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 69 66 28 21 69 7c 7c 21 69 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 26 26 21 69 2e 73 74 61 72 74 73 57 69 74 68 28 22 2e 22 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 26 Data Ascii: ENT_KEY(){return`.${this.DATA_KEY}`}static eventName(t){return`${t}${this.EVENT_KEY}`}}const R=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 2e 66 69 6e 64 28 65 29 3a 5b 5d 7d 7d 2c 56 3d 28 74 2c 65 3d 22 68 69 64 65 22 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 60 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 24 7b 74 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 2c 73 3d 74 2e 4e 41 4d 45 3b 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 69 2c 60 5b 64 61 74 61 2d 62 73 2d 64 69 73 6d 69 73 73 3d 22 24 7b 73 7d 22 5d 60 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 5b 22 41 22 2c 22 41 52 45 41 22 5d 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 74 61 67 4e 61 6d 65 29 26 26 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 64 28 74 68 69 73 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6e 3d 4b 2e 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 68 69 73 29 7c 7c 74 68 69 73 2e 63 6c Data Ascii: .find(e):[]}},V=(t,e="hide")=>{const i=`click.dismiss${t.EVENT_KEY}`,s=t.NAME;j.on(document,i,`[data-bs-dismiss="${s}"]`,(function(i){if(["A","AREA"].includes(this.tagName)&&i.preventDefault(),d(this))return;const n=K.getElementFromSelector(this)\|\|this.cl
2025-03-20 18:17:17 UTC	1369	IN	Data Raw: 7d 29 29 2c 62 28 4a 29 3b 63 6f 6e 73 74 20 5a 3d 22 2e 62 73 2e 73 77 69 70 65 22 2c 74 74 3d 60 74 6f 75 63 68 73 74 61 72 74 24 7b 5a 7d 60 2c 65 74 3d 60 74 6f 75 63 68 6d 6f 76 65 24 7b 5a 7d 60 2c 69 74 3d 60 74 6f 75 63 68 65 6e 64 24 7b 5a 7d 60 2c 73 74 3d 60 70 6f 69 6e 74 65 72 64 6f 77 6e 24 7b 5a 7d 60 2c 6e 74 3d 60 70 6f 69 6e 74 65 72 75 70 24 7b 5a 7d 60 2c 6f 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 7d 2c 72 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 72 69 67 68 74 Data Ascii: })),b(J);const Z=".bs.swipe",tt=`touchstart${Z}`,et=`touchmove${Z}`,it=`touchend${Z}`,st=`pointerdown${Z}`,nt=`pointerup${Z}`,ot={endCallback:null,leftCallback:null,rightCallback:null},rt={endCallback:"(function\|null)",leftCallback:"(function\|null)",right

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://veriqwyrfizxhsmh.serveirc.com/kabQ8B9

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	629	OUT	GET /kite/fonts/rutledge/rutledge-medium.woff2 HTTP/1.1 Host: cdn.spectrumflow.net Connection: keep-alive Origin: https://auth-3qgwfuyzxdhg.redirectme.net sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:17 UTC	632	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 20208 Connection: close Date: Thu, 20 Mar 2025 18:17:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Wed, 20 Oct 2021 19:57:30 GMT ETag: "788caabf245633b1c2de4ee994ce5ed5" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3a689aadb5700d6900d339291d232698.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: fcoyiHcz-vztbHi9VFBnKcIJHZnkH_S0NLhEJQSklmytOyqYFdlTow==
2025-03-20 18:17:17 UTC	8192	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4e f0 00 13 00 00 00 00 e9 88 00 00 4e 82 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 1b 95 44 1c 20 06 60 00 85 32 08 1e 09 82 73 11 08 0a 83 97 08 82 f4 73 01 36 02 24 03 87 04 0b 83 44 00 04 20 05 89 10 07 83 7e 0c 81 16 3f 77 65 62 66 06 1b 65 d5 09 6e 9b 86 c1 58 f7 af 37 ab 72 dc b0 e8 07 9d 6c dc 81 ce 5b a5 fa 63 80 ab 98 8d 88 3d 0e 08 97 c3 d9 ff ff ff ff 69 4b 45 c6 4c 03 3c 69 b7 21 22 a0 5c 83 88 0d 47 65 39 51 42 22 cd 6c b4 5e c8 a0 30 d6 c7 68 2d 6c 09 c3 8a 4f a8 43 d8 f1 aa fd 38 7b 68 15 6b bb ea 1d 3f 30 1c 0d a3 f7 8f 56 0c 94 c2 3d 06 7a 38 20 1c 7c 87 2e 62 63 d3 11 ff 1d 77 74 bc c5 f2 3b 57 26 ad fe 87 14 ef d7 72 36 dc b3 6c f1 16 7d 89 6b 96 ef b4 Data Ascii: wOF2NN?FFTM D `2ss6$D ~?webfenX7rl[c=iKEL<i!"\Ge9QB"l^0h-lOC8{hk?0V=z8 \|.bcwt;W&r6l}k
2025-03-20 18:17:17 UTC	188	IN	Data Raw: d4 18 5b 3f 41 4a 7f f5 49 e3 fc 66 95 1e 5b 7a 73 76 f1 11 53 88 d7 7f fc 24 13 cf fc 35 b8 d9 37 e4 2f 7c 1e 09 dd 14 99 84 e2 ca 14 50 9c 32 89 9b 22 14 7a e4 f3 9d 82 4c 8a 6b 17 1e 8a 40 4f de b3 a1 9d 42 69 ef de 43 be 75 dd af a3 0d 7b 42 4c ca 6f c2 e4 e2 76 23 81 c3 31 e0 af 86 fb 0f 49 03 3c f0 8f 4c e4 03 5f 74 6c 78 db 83 e0 9c 14 d4 48 cb 2f 13 de ae 24 76 5d 86 33 46 c7 95 87 78 80 e1 1d 5e 70 f8 1b 1d 9e c3 33 12 1a 93 8b 85 73 5b a7 d6 20 14 b9 e5 d3 8a b0 ad 2b df b7 3c 40 b1 80 d3 f2 c1 b1 b6 89 b1 4c f8 60 27 71 47 28 e7 f0 d6 3c ef 27 99 Data Ascii: [?AJIf[zsvS$57/\|P2"zLk@OBiCu{BLov#1I<L_tlxH/$v]3Fx^p3s[ +<@L`'qG(<'
2025-03-20 18:17:17 UTC	9000	IN	Data Raw: d0 64 cc bc cf a9 86 f1 3f 80 51 97 8c d7 67 7f ff 9a 38 f2 02 fa 8e 8c 1d 37 2c 43 a7 73 7c e8 f5 30 db 63 5b 2a 8b a5 4c c1 b1 2d 6b 56 41 c1 c4 c4 e4 55 12 34 87 65 44 8c 43 cb 6d 8d c0 3d 68 ee 96 a4 28 16 21 10 52 cf 86 c6 10 08 b9 7f 0e 1b 90 7f 8c 53 8d db e4 05 f7 9c 20 92 7e e0 3f c3 03 d3 bc bd 25 c3 7e 19 a8 21 e9 6d c7 96 98 6e ee 28 6b ba 01 75 c8 22 6c 3a be e7 ee 29 ce 0f ab 86 2b 2e 0e 9b ce cf 58 8b dc e2 53 c3 e5 fd c3 ae 49 79 69 71 ae 06 94 4f 73 b7 bb 0d 1d ee 89 bf 0e f7 bc ea 7b dd 3c 71 27 96 26 2a fb 5e 35 4f d8 c1 2f 17 dc 6b 86 2b cf 3f 1c c4 2a 32 c4 da 8c 1d 18 cb ad 87 ba 30 d4 f9 47 81 ef 4b c5 1b 55 3c f5 3a 93 48 ca 52 2d b4 08 b8 71 4a 96 30 6d 8e 42 21 2d 32 ab b2 84 87 32 a7 b1 fe fc 3f f4 e7 f1 34 e1 ad cc 2c b5 b9 48 Data Ascii: d?Qg87,Cs\|0c[L-kVAU4eDCm=h(!RS ~?%~!mn(ku"l:)+.XSIyiqOs{<q'&^5O/k+?*20GKU<:HR-qJ0mB!-22?4,H
2025-03-20 18:17:17 UTC	2828	IN	Data Raw: 57 19 54 ea 32 cc 33 80 32 ba 7d c0 65 24 df c2 d4 01 e2 67 72 9f 07 82 55 5a 28 10 81 9b 86 4d d0 8c 04 02 53 ec ca 7b b5 be 15 ca ba 6d 99 d6 62 bd bc f6 52 1c 20 ab 2a 66 28 59 fa cb d5 6d ea 74 f1 69 c5 00 d0 1a c4 ea f9 59 35 ec 6b 48 94 fa 5f 06 47 d5 31 7b 15 80 e5 77 63 2f e6 8a dd be ae 62 80 1f eb 1f 4c 37 db 55 08 b7 08 da 5d 4c 3c 73 a6 9b 92 3c c5 f6 a1 c5 62 b1 90 24 19 92 1d 6d 2c fc b5 ea 57 b2 8f 45 1d b6 57 e1 25 6d 93 cb f6 60 1b 5b 59 96 65 04 41 0a ff 25 10 a0 6a 75 05 3a 8e a2 e0 19 fe bf e4 99 ae 80 ac b6 00 f4 04 24 40 cd f0 d7 49 86 98 59 87 ae d6 7f 1c d9 45 c0 57 7f 9d f1 cb fa 8f 7f af f8 25 0a d7 da 39 b7 c8 67 38 41 fb cc 0b a0 78 1c bb 7c ca cb 91 04 1d 09 d5 a0 0f 7c ea 8e 34 ac 8d 13 e9 0c cd 62 05 9a 9f 6d 0c 1a 1c 37 31 Data Ascii: WT232}e$grUZ(MS{mbR *f(YmtiY5kH_G1{wc/bL7U]L<s<b$m,WEW%m`[YeA%ju:$@IYEW%9g8Ax\|\|4bm71

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	630	OUT	GET /kite/fonts/rutledge/rutledge-regular.woff2 HTTP/1.1 Host: cdn.spectrumflow.net Connection: keep-alive Origin: https://auth-3qgwfuyzxdhg.redirectme.net sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:17 UTC	632	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 20668 Connection: close Date: Thu, 20 Mar 2025 18:17:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Mon, 20 Jul 2020 20:28:23 GMT ETag: "a9c987d124cd29f28d5931084b433e12" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 614c2f49ee02e59ee41dd908e64f7376.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P7 X-Amz-Cf-Id: 5MZaHv7lPkKE52lFDkbxWwuj3rBbCPcOclOVATxp0pLJLkCMGdRpoA==
2025-03-20 18:17:17 UTC	8412	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 50 bc 00 13 00 00 00 00 f6 38 00 00 50 4d 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 1b 95 44 1c 20 06 60 00 85 22 08 1e 09 82 73 11 08 0a 83 b0 50 83 8e 1a 01 36 02 24 03 86 78 0b 83 3e 00 04 20 05 89 1e 07 83 78 0c 81 16 3f 77 65 62 66 06 1b f8 e1 99 f0 9f e3 7a d5 35 be dd a9 58 03 dd 64 f0 4f d3 3b c5 ac c8 7f b0 6d d8 eb cd 0a 5b c7 e2 05 9d 8d 88 dc 0e 02 aa a8 4f cd fe ff ff ff ff ff 3f 31 a9 c8 98 69 3a d2 76 c0 44 44 44 f9 8d 98 20 23 44 a2 4c 47 98 ea 24 62 16 12 4b 14 2a 6d 6a 66 eb 30 0f b3 61 b0 27 c4 06 44 87 68 ca bd 8b d6 2b 48 87 d8 33 c2 68 37 8f 25 cd 86 c4 48 0c 93 c7 fb e8 36 62 63 e1 d9 36 ac 10 1e 66 97 1d 38 07 89 c4 52 0f fb 09 7b da 5c 48 a1 a8 dc Data Ascii: wOF2P8PM?FFTM D `"sP6$x> x?webfz5XdO;m[O?1i:vDDD #DLG$bK*mjf0a'Dh+H3h7%H6bc6f8R{\H
2025-03-20 18:17:17 UTC	12256	IN	Data Raw: f1 46 5c 4b 2b b2 32 d3 fb 8a 01 13 f3 f8 41 e8 0c 44 60 68 eb 29 0d 0b cd 3c 46 59 e8 29 10 bf 88 8e ba bf 69 be 1f 02 8d df 1d b9 90 e5 37 61 a7 11 bb f9 19 f2 cb b5 df ce 91 d1 96 ce 77 f1 4c 47 94 23 44 46 57 91 d9 cc a7 d4 98 e3 31 9b 5a 7f ff 44 8a 08 2a 7d 94 48 d7 44 9a 93 9b 96 7d 99 8a c2 a6 bb da 83 a1 66 79 bb e7 f8 b5 ad 01 cc b9 ac 48 dc fe 73 d7 ce 61 92 8e 5f 2e 47 fa f0 42 ab fb 14 b0 ee 39 49 e7 b6 ad 09 b7 60 63 f0 e8 8c 5a eb 68 99 72 98 b5 e5 04 67 17 06 6d 53 58 b5 62 e5 95 65 43 aa 0b 43 19 ca d7 ac 6b 96 ba 3b bf 6b 48 31 af 20 8d f2 b2 2b 17 36 c3 98 a1 08 ad 7d 43 47 de fd f8 ce b2 a0 17 46 cb a4 db 6e 99 7f 82 27 3a 77 d3 90 f6 f1 f7 33 0f 0e 77 af cf e8 1b 30 f9 42 af dc d7 6e 6d 93 b6 a5 88 53 db 25 e2 3c 6e f2 14 59 12 2f dc Data Ascii: F\K+2AD`h)<FY)i7awLG#DFW1ZD*}HD}fyHsa_.GB9I`cZhrgmSXbeCCk;kH1 +6}CGFn':w3w0BnmS%<nY/

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	757	OUT	GET /security-check/assets/icons/kite-icons-beam.svg HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: image Referer: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:17 UTC	295	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:16 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 18:17:17 UTC	521	IN	Data Raw: 31 66 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 61 72 63 68 69 76 65 2c 20 6e 6f 73 6e 69 70 70 65 74 2c 20 6e 6f 6f 64 70 2c 20 6e 6f 79 64 69 72 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 6f 64 65 3e 55 6e 6b 6e 6f 77 6e 20 43 6f 6e 74 72 6f 6c 6c 65 72 20 41 73 73 65 74 73 3c 2f 63 6f 64 65 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c Data Ascii: 1fd<!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="robots" content="noindex, nofollow, noarchive, nosnippet, noodp, noydir"> <title>404</title></head><body><code>Unknown Controller Assets</code></body></html

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:17 UTC	729	OUT	GET /FAMOUS/Gens/favicon.ico HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:17 UTC	235	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 09 Mar 2025 04:44:01 GMT Accept-Ranges: bytes Content-Length: 3865 Content-Type: image/x-icon
2025-03-20 18:17:17 UTC	3865	IN	Data Raw: 00 00 01 00 01 00 00 00 00 00 01 00 20 00 03 0f 00 00 16 00 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 0e ca 49 44 41 54 78 da ed dd 79 8c 5d 65 19 c7 f1 ef bd 33 9d 56 2a 05 aa 35 54 11 05 51 dc 70 c1 88 92 b8 2f 88 0b 68 04 37 5c 2a 5d 54 34 ee 20 a2 a6 42 01 5b 04 6c 81 52 ca 4c a7 b4 50 90 45 0b 11 41 45 83 88 c1 88 88 c1 15 45 4b a9 02 8a c5 a1 b4 b6 4c db 99 7b fd e3 99 7b 18 0a 42 81 b9 33 f7 9e e7 fb 49 48 d3 33 10 32 e7 9e f7 77 9f f7 3d ef 02 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 9a ac 92 f6 37 9f b1 e4 81 7f ef 9d e9 d3 a0 74 aa c9 7f ff 0e 60 ef 22 10 b6 0d 05 c9 00 28 ab 0a c0 04 60 36 f0 d6 a1 30 30 04 64 00 a4 Data Ascii: PNGIHDR\rfIDATxy]e3V5TQp/h7\]T4 B[lRLPEAEEKL{{B3IH32w=$I$I$I$I$I$I$I$I$I$I$I7t`"(`600d

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:18 UTC	495	OUT	GET /security-check/assets/icons/kite-icons-beam.svg HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:18 UTC	295	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:17 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 18:17:18 UTC	521	IN	Data Raw: 31 66 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 61 72 63 68 69 76 65 2c 20 6e 6f 73 6e 69 70 70 65 74 2c 20 6e 6f 6f 64 70 2c 20 6e 6f 79 64 69 72 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 6f 64 65 3e 55 6e 6b 6e 6f 77 6e 20 43 6f 6e 74 72 6f 6c 6c 65 72 20 41 73 73 65 74 73 3c 2f 63 6f 64 65 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c Data Ascii: 1fd<!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="robots" content="noindex, nofollow, noarchive, nosnippet, noodp, noydir"> <title>404</title></head><body><code>Unknown Controller Assets</code></body></html

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:28 UTC	1006	OUT	POST /security-check/signin/process HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive Content-Length: 37 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://auth-3qgwfuyzxdhg.redirectme.net Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:28 UTC	37	OUT	Data Raw: 75 73 65 72 3d 26 70 61 73 73 77 6f 72 64 3d 75 25 33 43 25 32 34 25 32 34 4e 4e 76 25 33 46 41 62 78 46 70 49 Data Ascii: user=&password=u%3C%24%24NNv%3FAbxFpI
2025-03-20 18:17:28 UTC	402	IN	HTTP/1.1 303 See Other Date: Thu, 20 Mar 2025 18:17:27 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Location: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba Content-Length: 0 Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:28 UTC	913	OUT	GET /security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/signin?secure=fms_99625 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:28 UTC	295	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:28 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 18:17:28 UTC	3597	IN	Data Raw: 65 30 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 70 65 63 74 72 75 6d 20 41 63 63 6f 75 6e 74 20 43 65 6e 74 65 72 3c 2f 74 69 74 6c 65 3e 0d 0a Data Ascii: e01<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Spectrum Account Center</title>

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:29 UTC	750	OUT	GET /FAMOUS/Gens/img/logo-a.png HTTP/1.1 Host: auth-3qgwfuyzxdhg.redirectme.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth-3qgwfuyzxdhg.redirectme.net/security-check/email?_idc4d2303fa78f0fcc48741966d3f2e8ba Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de50a9e71af4b8cc1b1391fb3df408c5
2025-03-20 18:17:29 UTC	164	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 18:17:28 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-20 18:17:29 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:29 UTC	619	OUT	GET /ajax/libs/font-awesome/6.6.0/js/all.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:29 UTC	957	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:29 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6696a8d8-83799" Last-Modified: Tue, 16 Jul 2024 17:07:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 586871 Expires: Tue, 10 Mar 2026 18:17:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LBGQbCNlfNQKv2eVHV9Ydy7QRq5w6PAuPPCmRt3BOMuyal6SCymJ4K4HqgX4P653MGHk4Mn6B3FvvMtupNv7nkMtyL2EmPyFRYpV4IsoQ8RmnMMwzgynGqJTkTGUB%2F%2BJ6xPBH4mv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 923734e73e01659d-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:17:29 UTC	412	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 36 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 Data Ascii: 7bec/! Font Awesome Free 6.6.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2024 Fonticons, Inc. */!function(){"use strict";let c
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 28 7a 2e 64 6f 63 75 6d 65 6e 74 2c 21 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 21 61 2e 68 65 61 64 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7c 7c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 7e 73 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 22 29 7c 7c 73 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 2c 22 63 6c 61 73 73 69 63 22 29 2c 4c 3d 7b 66 61 6b 3a 22 6b 69 74 22 2c 22 66 61 2d 6b 69 74 22 3a 22 6b 69 74 22 7d 2c 4d 3d 7b 66 61 6b 64 3a 22 6b 69 74 2d 64 75 6f 74 6f 6e 65 22 2c 22 66 61 2d 6b 69 74 2d 64 75 6f 74 6f 6e 65 22 3a 22 6b 69 74 2d 64 75 6f 74 6f 6e 65 22 7d 2c 74 3d 7b 63 6c 61 73 73 69 63 3a 7b 66 61 3a 22 73 6f 6c 69 64 22 2c Data Ascii: (z.document,!a.documentElement\|\|!a.head\|\|"function"!=typeof a.addEventListener\|\|a.createElement,~s.indexOf("MSIE")\|\|s.indexOf("Trident/"),"classic"),L={fak:"kit","fa-kit":"kit"},M={fakd:"kit-duotone","fa-kit-duotone":"kit-duotone"},t={classic:{fa:"solid",
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 3b 63 6f 6e 73 74 20 68 3d 7b 63 6c 61 73 73 69 63 3a 7b 22 66 61 2d 62 72 61 6e 64 73 22 3a 22 66 61 62 22 2c 22 66 61 2d 64 75 6f 74 6f 6e 65 22 3a 22 66 61 64 22 2c 22 66 61 2d 6c 69 67 68 74 22 3a 22 66 61 6c 22 2c 22 66 61 2d 72 65 67 75 6c 61 72 22 3a 22 66 61 72 22 2c 22 66 61 2d 73 6f 6c 69 64 22 3a 22 66 61 73 22 2c 22 66 61 2d 74 68 69 6e 22 3a 22 66 61 74 22 7d 2c 73 68 61 72 70 3a 7b 22 66 61 2d 73 6f 6c 69 64 22 3a 22 66 61 73 73 22 2c 22 66 61 2d 72 65 67 75 6c 61 72 22 3a 22 66 61 73 72 22 2c 22 66 61 2d 6c 69 67 68 74 22 3a 22 66 61 73 6c 22 2c 22 66 61 2d 74 68 69 6e 22 3a 22 66 61 73 74 22 7d 2c 22 73 68 61 72 70 2d 64 75 6f 74 6f 6e 65 22 3a 7b 22 66 61 2d 73 6f 6c 69 64 22 3a 22 66 61 73 64 73 22 7d 7d 3b 68 5b 65 5d 3d 7b 2e 2e 2e 68 Data Ascii: ;const h={classic:{"fa-brands":"fab","fa-duotone":"fad","fa-light":"fal","fa-regular":"far","fa-solid":"fas","fa-thin":"fat"},sharp:{"fa-solid":"fass","fa-regular":"fasr","fa-light":"fasl","fa-thin":"fast"},"sharp-duotone":{"fa-solid":"fasds"}};h[e]={...h
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 20 36 39 2e 39 20 31 34 2e 32 20 39 34 2e 37 20 37 2e 32 2d 31 39 2e 39 2e 32 2d 34 35 2e 38 2d 32 2e 36 2d 37 35 2e 33 2d 31 33 2e 33 7a 6d 34 30 38 2e 39 2d 31 31 35 2e 32 63 31 35 2e 39 20 30 20 32 38 2e 39 2d 31 32 2e 39 20 32 38 2e 39 2d 32 38 2e 39 73 2d 31 32 2e 39 2d 32 34 2e 35 2d 32 38 2e 39 2d 32 34 2e 35 63 2d 31 35 2e 39 20 30 2d 32 38 2e 39 20 38 2e 36 2d 32 38 2e 39 20 32 34 2e 35 73 31 32 2e 39 20 32 38 2e 39 20 32 38 2e 39 20 32 38 2e 39 7a 6d 2d 32 39 20 31 32 30 2e 35 48 36 34 30 56 32 34 31 2e 35 68 2d 35 37 2e 39 7a 6d 2d 37 33 2e 37 20 30 68 35 37 2e 39 56 31 35 36 2e 37 4c 35 30 38 2e 34 20 31 38 34 7a 6d 2d 33 31 2d 31 31 39 2e 34 63 2d 31 38 2e 32 2d 31 38 2e 32 2d 35 30 2e 34 2d 31 37 2e 31 2d 35 30 2e 34 2d 31 37 2e 31 73 2d 33 Data Ascii: 69.9 14.2 94.7 7.2-19.9.2-45.8-2.6-75.3-13.3zm408.9-115.2c15.9 0 28.9-12.9 28.9-28.9s-12.9-24.5-28.9-24.5c-15.9 0-28.9 8.6-28.9 24.5s12.9 28.9 28.9 28.9zm-29 120.5H640V241.5h-57.9zm-73.7 0h57.9V156.7L508.4 184zm-31-119.4c-18.2-18.2-50.4-17.1-50.4-17.1s-3
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 6c 39 39 2e 36 32 20 34 38 2e 36 31 63 31 39 2e 32 20 39 2e 34 20 31 36 2e 32 20 33 37 2e 35 31 2d 34 2e 35 20 34 32 2e 37 31 4c 33 30 2e 35 20 33 35 38 2e 34 35 61 32 32 2e 37 39 20 32 32 2e 37 39 20 30 20 30 20 31 2d 32 38 2e 32 31 2d 31 39 2e 36 20 31 39 37 2e 31 36 20 31 39 37 2e 31 36 20 30 20 30 20 31 20 39 2d 38 35 2e 33 32 20 32 32 2e 38 20 32 32 2e 38 20 30 20 30 20 31 20 33 31 2e 36 31 2d 31 33 2e 32 31 7a 6d 34 34 20 32 33 39 2e 32 35 61 31 39 39 2e 34 35 20 31 39 39 2e 34 35 20 30 20 30 20 30 20 37 39 2e 34 32 20 33 32 2e 31 31 41 32 32 2e 37 38 20 32 32 2e 37 38 20 30 20 30 20 30 20 31 39 32 2e 39 34 20 34 39 30 6c 33 2e 39 2d 31 31 30 2e 38 32 63 2e 37 2d 32 31 2e 33 2d 32 35 2e 35 2d 33 31 2e 39 31 2d 33 39 2e 38 31 2d 31 36 2e 31 6c 2d 37 Data Ascii: l99.62 48.61c19.2 9.4 16.2 37.51-4.5 42.71L30.5 358.45a22.79 22.79 0 0 1-28.21-19.6 197.16 197.16 0 0 1 9-85.32 22.8 22.8 0 0 1 31.61-13.21zm44 239.25a199.45 199.45 0 0 0 79.42 32.11A22.78 22.78 0 0 0 192.94 490l3.9-110.82c.7-21.3-25.5-31.91-39.81-16.1l-7
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 35 20 37 2e 36 20 32 30 2e 38 20 31 32 2e 36 20 32 30 2e 38 20 31 39 2e 33 2d 2e 32 20 31 30 2e 34 2d 31 32 2e 36 20 31 35 2e 32 2d 32 34 2e 31 20 31 35 2e 32 2d 31 36 20 30 2d 32 34 2e 36 2d 32 2e 35 2d 33 37 2e 37 2d 38 2e 33 6c 2d 35 2e 33 2d 32 2e 35 2d 35 2e 36 20 33 34 2e 39 63 39 2e 34 20 34 2e 33 20 32 36 2e 38 20 38 2e 31 20 34 34 2e 38 20 38 2e 33 20 34 32 2e 32 2e 31 20 36 39 2e 37 2d 32 30 2e 38 20 37 30 2d 35 33 7a 4d 35 32 38 20 33 33 31 2e 34 4c 34 39 35 2e 36 20 31 37 36 68 2d 33 31 2e 31 63 2d 39 2e 36 20 30 2d 31 36 2e 39 20 32 2e 38 2d 32 31 20 31 32 2e 39 6c 2d 35 39 2e 37 20 31 34 32 2e 35 48 34 32 36 73 36 2e 39 2d 31 39 2e 32 20 38 2e 34 2d 32 33 2e 33 48 34 38 36 63 31 2e 32 20 35 2e 35 20 34 2e 38 20 32 33 2e 33 20 34 2e 38 20 32 Data Ascii: 5 7.6 20.8 12.6 20.8 19.3-.2 10.4-12.6 15.2-24.1 15.2-16 0-24.6-2.5-37.7-8.3l-5.3-2.5-5.6 34.9c9.4 4.3 26.8 8.1 44.8 8.3 42.2.1 69.7-20.8 70-53zM528 331.4L495.6 176h-31.1c-9.6 0-16.9 2.8-21 12.9l-59.7 142.5H426s6.9-19.2 8.4-23.3H486c1.2 5.5 4.8 23.3 4.8 2
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 30 20 30 20 35 2d 31 2e 38 32 41 32 34 39 20 32 34 39 20 30 20 30 20 30 20 35 30 33 20 32 33 33 2e 30 39 7a 22 5d 2c 22 63 72 65 61 74 69 76 65 2d 63 6f 6d 6d 6f 6e 73 2d 6e 63 22 3a 5b 34 39 36 2c 35 31 32 2c 5b 5d 2c 22 66 34 65 38 22 2c 22 4d 32 34 37 2e 36 20 38 43 33 38 37 2e 34 20 38 20 34 39 36 20 31 31 35 2e 39 20 34 39 36 20 32 35 36 63 30 20 31 34 37 2e 32 2d 31 31 38 2e 35 20 32 34 38 2d 32 34 38 2e 34 20 32 34 38 43 31 31 33 2e 31 20 35 30 34 20 30 20 33 39 33 2e 32 20 30 20 32 35 36 20 30 20 31 32 33 2e 31 20 31 30 34 2e 37 20 38 20 32 34 37 2e 36 20 38 7a 4d 35 35 2e 38 20 31 38 39 2e 31 63 2d 37 2e 34 20 32 30 2e 34 2d 31 31 2e 31 20 34 32 2e 37 2d 31 31 2e 31 20 36 36 2e 39 20 30 20 31 31 30 2e 39 20 39 32 2e 31 20 32 30 32 2e 34 20 32 30 Data Ascii: 0 0 5-1.82A249 249 0 0 0 503 233.09z"],"creative-commons-nc":[496,512,[],"f4e8","M247.6 8C387.4 8 496 115.9 496 256c0 147.2-118.5 248-248.4 248C113.1 504 0 393.2 0 256 0 123.1 104.7 8 247.6 8zM55.8 189.1c-7.4 20.4-11.1 42.7-11.1 66.9 0 110.9 92.1 202.4 20
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 2d 34 2e 38 35 2d 33 39 2e 35 36 2d 34 2e 38 37 2d 31 35 2e 31 35 2d 31 2e 31 34 2d 34 32 2e 38 32 20 35 2e 36 33 2d 34 31 2e 37 34 20 33 32 2e 32 36 2d 31 2e 32 34 20 31 36 2e 37 39 20 31 31 2e 31 32 20 33 31 2e 34 20 32 39 2e 39 36 20 33 30 2e 34 38 7a 6d 31 37 30 2e 39 32 20 32 33 2e 30 35 63 2d 37 2e 38 36 2e 37 32 2d 31 31 2e 35 32 2d 34 2e 38 36 2d 31 32 2e 36 38 2d 31 30 2e 33 37 6c 2d 34 39 2e 38 2d 31 36 34 2e 36 35 63 2d 2e 39 37 2d 32 2e 37 38 2d 31 2e 36 31 2d 35 2e 36 35 2d 31 2e 39 32 2d 38 2e 35 38 61 34 2e 36 31 20 34 2e 36 31 20 30 20 30 20 31 20 33 2e 38 36 2d 35 2e 32 35 63 2e 32 34 2d 2e 30 34 2d 32 2e 31 33 20 30 20 32 32 2e 32 35 20 30 20 38 2e 37 38 2d 2e 38 38 20 31 31 2e 36 34 20 36 2e 30 33 20 31 32 2e 35 35 20 31 30 2e 33 37 6c Data Ascii: -4.85-39.56-4.87-15.15-1.14-42.82 5.63-41.74 32.26-1.24 16.79 11.12 31.4 29.96 30.48zm170.92 23.05c-7.86.72-11.52-4.86-12.68-10.37l-49.8-164.65c-.97-2.78-1.61-5.65-1.92-8.58a4.61 4.61 0 0 1 3.86-5.25c.24-.04-2.13 0 22.25 0 8.78-.88 11.64 6.03 12.55 10.37l
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 32 32 20 30 20 30 20 30 20 32 34 31 2e 35 39 2d 34 39 2e 35 35 63 31 31 2e 37 38 2d 35 20 32 31 2e 37 37 20 37 2e 38 20 31 30 2e 31 32 20 31 36 2e 33 38 7a 6d 32 39 2e 31 39 2d 33 33 2e 32 39 63 2d 38 2e 39 36 2d 31 31 2e 35 32 2d 35 39 2e 32 38 2d 35 2e 33 38 2d 38 31 2e 38 31 2d 32 2e 36 39 2d 36 2e 37 39 2e 37 37 2d 37 2e 39 34 2d 35 2e 31 32 2d 31 2e 37 39 2d 39 2e 34 37 20 34 30 2e 30 37 2d 32 38 2e 31 37 20 31 30 35 2e 38 38 2d 32 30 2e 31 20 31 31 33 2e 34 34 2d 31 30 2e 36 33 20 37 2e 35 35 20 39 2e 34 37 2d 32 2e 30 35 20 37 35 2e 34 31 2d 33 39 2e 35 36 20 31 30 36 2e 39 31 2d 35 2e 37 36 20 34 2e 38 37 2d 31 31 2e 32 37 20 32 2e 33 2d 38 2e 37 31 2d 34 2e 31 20 38 2e 34 34 2d 32 31 2e 32 35 20 32 37 2e 33 39 2d 36 38 2e 34 39 20 31 38 2e 34 33 Data Ascii: 22 0 0 0 241.59-49.55c11.78-5 21.77 7.8 10.12 16.38zm29.19-33.29c-8.96-11.52-59.28-5.38-81.81-2.69-6.79.77-7.94-5.12-1.79-9.47 40.07-28.17 105.88-20.1 113.44-10.63 7.55 9.47-2.05 75.41-39.56 106.91-5.76 4.87-11.27 2.3-8.71-4.1 8.44-21.25 27.39-68.49 18.43
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 39 2e 39 31 33 6c 2d 32 33 30 2e 38 2d 32 2e 39 32 38 61 34 2e 35 38 2c 34 2e 35 38 2c 30 2c 30 2c 31 2d 33 2e 36 33 32 2d 31 2e 39 32 36 2c 34 2e 36 34 38 2c 34 2e 36 34 38 2c 30 2c 30 2c 31 2d 2e 34 39 34 2d 34 2e 31 34 37 2c 36 2e 31 34 33 2c 36 2e 31 34 33 2c 30 2c 30 2c 31 2c 35 2e 33 36 31 2d 34 2e 30 37 36 4c 34 31 31 2e 32 38 31 2c 33 30 33 2e 39 63 32 37 2e 36 33 31 2d 31 2e 32 36 2c 35 37 2e 35 34 36 2d 32 33 2e 35 37 34 2c 36 38 2e 30 32 32 2d 35 30 2e 37 38 34 6c 31 33 2e 32 38 36 2d 33 34 2e 35 34 32 61 37 2e 39 34 34 2c 37 2e 39 34 34 2c 30 2c 30 2c 30 2c 2e 35 32 34 2d 32 2e 39 33 36 2c 37 2e 37 33 35 2c 37 2e 37 33 35 2c 30 2c 30 2c 30 2d 2e 31 36 34 2d 31 2e 36 33 31 41 31 35 31 2e 39 31 2c 31 35 31 2e 39 31 2c 30 2c 30 2c 30 2c 32 30 31 Data Ascii: 9.913l-230.8-2.928a4.58,4.58,0,0,1-3.632-1.926,4.648,4.648,0,0,1-.494-4.147,6.143,6.143,0,0,1,5.361-4.076L411.281,303.9c27.631-1.26,57.546-23.574,68.022-50.784l13.286-34.542a7.944,7.944,0,0,0,.524-2.936,7.735,7.735,0,0,0-.164-1.631A151.91,151.91,0,0,0,201

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:17:29 UTC	635	OUT	GET /ajax/libs/font-awesome/6.6.0/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://auth-3qgwfuyzxdhg.redirectme.net/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:17:29 UTC	952	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:17:29 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6696a8d8-546c" Last-Modified: Tue, 16 Jul 2024 17:07:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 204860 Expires: Tue, 10 Mar 2026 18:17:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pfVzK4XT%2BP%2FSKeTv7UBpmgD%2FvQvYg71NsJwKxHN%2BNtHhsmzUHf%2BU4bBvIxtr610%2FF3Qaf6F0ox1ymCrKycmPi0JaVRzeI2j5oz1ecrBZTZFPfteBmCcFB2EbZrkr9%2BiC13GDZ31L"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 923734e76f8980d0-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:17:29 UTC	417	IN	Data Raw: 37 62 66 38 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 36 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 Data Ascii: 7bf8/! Font Awesome Free 6.6.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2024 Fonticons, Inc. */.fa{font-family:var(--fa-style
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 63 6c 61 73 73 69 63 2c 2e 66 61 2d 72 65 67 75 6c 61 72 2c 2e 66 61 2d 73 6f 6c 69 64 2c 2e 66 61 72 2c 2e 66 61 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 46 72 65 65 22 7d 2e 66 61 2d 62 72 61 6e 64 73 2c 2e 66 61 62 7b Data Ascii: hing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 31 35 65 6d 29 7d 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 Data Ascii: 15em)}.fa-pull-left{float:left;margin-right:var(--fa-pull-margin,.3em)}.fa-pull-right{float:right;margin-left:var(--fa-pull-margin,.3em)}.fa-beat{animation-name:fa-beat;animation-delay:var(--fa-animation-delay,0s);animation-direction:var(--fa-animation-di
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 66 61 2d 66 6c 69 70 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 Data Ascii: fa-flip;animation-delay:var(--fa-animation-delay,0s);animation-direction:var(--fa-animation-direction,normal);animation-duration:var(--fa-animation-duration,1s);animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-timing-functi
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 6f 75 6e 63 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 31 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d Data Ascii: mation-iteration-count:1;transition-delay:0s;transition-duration:0s}}@keyframes fa-beat{0%,90%{transform:scale(1)}45%{transform:scale(var(--fa-beat-scale,1.25))}}@keyframes fa-bounce{0%{transform:scale(1) translateY(0)}10%{transform:scale(var(--fa-bounce-
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 7d 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 7d 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 7d 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 2c 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e Data Ascii: o{transform:rotate(1turn)}}.fa-rotate-90{transform:rotate(90deg)}.fa-rotate-180{transform:rotate(180deg)}.fa-rotate-270{transform:rotate(270deg)}.fa-flip-horizontal{transform:scaleX(-1)}.fa-flip-vertical{transform:scaleY(-1)}.fa-flip-both,.fa-flip-horizon
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 61 22 7d 2e 66 61 2d 69 6e 66 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 39 22 7d 2e 66 61 2d 63 6f 6d 70 72 65 73 73 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 64 6f 77 6e 2d 6c 65 66 74 2d 61 6e 64 2d 75 70 2d 72 69 67 68 74 2d 74 6f 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 32 22 7d 2e 66 61 2d 65 78 70 6c 6f 73 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 65 39 22 7d 2e 66 61 2d 66 69 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 6c 69 6e 65 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 74 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 Data Ascii: age:before{content:"\f27a"}.fa-info:before{content:"\f129"}.fa-compress-alt:before,.fa-down-left-and-up-right-to-center:before{content:"\f422"}.fa-explosion:before{content:"\e4e9"}.fa-file-alt:before,.fa-file-lines:before,.fa-file-text:before{content:"\f1
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 22 5c 66 36 38 39 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 2d 73 74 65 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 31 22 7d 2e 66 61 2d 66 61 63 65 2d 73 6d 69 6c 65 2d 62 65 61 6d 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6d 69 6c 65 2d 62 65 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 38 22 7d 2e 66 61 2d 66 6c 61 67 2d 63 68 65 63 6b 65 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 65 22 7d 2e 66 61 2d 66 6f 6f 74 62 61 6c 6c 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6f 6f 74 62 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 34 65 22 7d 2e 66 61 2d 73 63 68 6f 6f 6c 2d 63 69 72 63 Data Ascii: "\f689"}.fa-forward-step:before,.fa-step-forward:before{content:"\f051"}.fa-face-smile-beam:before,.fa-smile-beam:before{content:"\f5b8"}.fa-flag-checkered:before{content:"\f11e"}.fa-football-ball:before,.fa-football:before{content:"\f44e"}.fa-school-circ
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 2d 66 69 6c 65 2d 63 69 72 63 6c 65 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 65 62 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 6f 73 70 69 74 61 6c 2d 73 79 6d 62 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 65 22 7d 2e 66 61 2d 70 61 67 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 31 35 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 6e 74 61 63 74 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 39 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 6b 3a Data Ascii: -file-circle-exclamation:before{content:"\e4eb"}.fa-circle-h:before,.fa-hospital-symbol:before{content:"\f47e"}.fa-pager:before{content:"\f815"}.fa-address-book:before,.fa-contact-book:before{content:"\f2b9"}.fa-strikethrough:before{content:"\f0cc"}.fa-k:
2025-03-20 18:17:29 UTC	1369	IN	Data Raw: 69 6e 2d 74 6f 6e 67 75 65 2d 73 71 75 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 61 22 7d 2e 66 61 2d 73 70 72 61 79 2d 63 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 64 22 7d 2e 66 61 2d 74 72 75 63 6b 2d 6d 6f 6e 73 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 33 62 22 7d 2e 66 61 2d 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 35 37 22 7d 2e 66 61 2d 65 61 72 74 68 2d 61 66 72 69 63 61 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 6c 6f 62 65 2d 61 66 72 69 63 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 63 22 7d 2e 66 61 2d 72 61 69 6e 62 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 35 62 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d Data Ascii: in-tongue-squint:before{content:"\f58a"}.fa-spray-can:before{content:"\f5bd"}.fa-truck-monster:before{content:"\f63b"}.fa-w:before{content:"\57"}.fa-earth-africa:before,.fa-globe-africa:before{content:"\f57c"}.fa-rainbow:before{content:"\f75b"}.fa-circle-