Edit tour

Windows Analysis Report
https://madisonoffice.carrd.co/

Overview

General Information

Sample URL:	https://madisonoffice.carrd.co/
Analysis ID:	1644641
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML page contains hidden javascript code

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2020,i,4020797685224634710,12025954801188222938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2052 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://madisonoffice.carrd.co/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
4.9.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://dua-tech.us/cdn-cgi/challenge-platform/scripts/jsd/main.js	Avira URL Cloud: Label: phishing
Source: https://dua-tech.us/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://dua-tech.us/cdn-cgi/challenge-platform/h/b/flow/ov1/1947870396:1742491020:1jqXBjzQRZSWPZsksybQbiE6VzL6rSB0ySXD8XgO4AY/92373879c9cec8b9/5w5DLpyshDE2ZCbBRuPqZW48GRPd661niG9Fclr4KLI-1742494795-1.2.1.1-zM6oZSCQNjDWpXv4O89cosg1ak1hFhAiCHlMrzSYczZGEWZGIwR3Zn9AlliRZgl6	Avira URL Cloud: Label: phishing
Source: https://dua-tech.us/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=92373879c9cec8b9	Avira URL Cloud: Label: phishing
Source: https://dua-tech.us/cdn-cgi/challenge-platform/h/b/jsd/r/0.1590354890566994:1742490908:-Yx4P2a46S0JvsZq-RGbtv9qUiSrhg6kXRsKaLu7IMk/923738e7083a4211	Avira URL Cloud: Label: phishing
Source: https://dua-tech.us/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?	Avira URL Cloud: Label: phishing
Source: https://dua-tech.us/cdn-cgi/challenge-platform/h/b/jsd/r/0.1590354890566994:1742490908:-Yx4P2a46S0JvsZq-RGbtv9qUiSrhg6kXRsKaLu7IMk/923738d469fc4399	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://dua-tech.us/uiw920/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Adobe' is well-known and typically associated with the domain 'adobe.com'., The URL 'dua-tech.us' does not match the legitimate domain name for Adobe., The domain 'dua-tech.us' does not contain any recognizable association with Adobe., The use of a different domain extension '.us' and the unrelated domain name 'dua-tech' are suspicious., There is no indication that 'dua-tech.us' is a trusted service provider for Adobe. DOM: 4.9.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 4.9.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://madisonoffice.carrd.co/

Joe Sandbox AI: Page contains button: 'View Shared Document' Source: '0.0.pages.csv'

AI detected suspicious Javascript

Source: 2.6..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: blob:https://dua-tech.us/d67fbca6-cc59-4131-90b6-2... This script demonstrates high-risk behavior by using the `eval()` function to execute dynamic code received from an untrusted source. The use of `eval()` allows for the execution of arbitrary JavaScript, which poses a significant security risk. Additionally, the lack of origin verification and the absence of a message source indicate that this script is vulnerable to cross-origin attacks and could be used to execute malicious code on the client-side.
Source: 2.29..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://dua-tech.us/uiw920... This script demonstrates several high-risk behaviors, including dynamic code execution via `eval()` and obfuscated code. It also sets a persistent cookie with an expiration date in the future, which could be used for data exfiltration or other malicious purposes. The script appears to be testing for the presence of various browser automation and testing frameworks, which suggests it may be attempting to evade detection. Overall, this script exhibits a high level of suspicious activity and should be considered a significant security risk.

Source: https://dua-tech.us/uiw920/

HTTP Parser: Number of links: 0

Source: https://dua-tech.us/uiw920

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://dua-tech.us/uiw920/

HTTP Parser: Form action: auth.php

Source: https://madisonoffice.carrd.co/	HTTP Parser: No favicon
Source: https://dua-tech.us/uiw920	HTTP Parser: No favicon
Source: https://dua-tech.us/uiw920	HTTP Parser: No favicon
Source: https://dua-tech.us/uiw920	HTTP Parser: No favicon
Source: https://dua-tech.us/uiw920?__cf_chl_tk=Va_OWVXUIj.Xw9TmbIHEuZVGP_CW3a6fNINp9vPww00-1742494795-1.0.1.1-MBM38wpiUZvpWiVA_pL9hOXnb8Ip5v6.BoshxLRoDJM	HTTP Parser: No favicon
Source: https://dua-tech.us/uiw920/	HTTP Parser: No favicon

Source: https://dua-tech.us/uiw920/

HTTP Parser: No <meta name="author".. found

Source: https://dua-tech.us/uiw920/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.41.4:443 -> 192.168.2.4:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.147.222:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.147.222:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.34:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.252:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.252:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.51.90:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.132:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.59:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.252:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.152.139:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.152.139:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.152.139:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49805 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: madisonoffice.carrd.coConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/bg.png?v=2cf0723d HTTP/1.1Host: madisonoffice.carrd.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://madisonoffice.carrd.co/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: madisonoffice.carrd.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://madisonoffice.carrd.co/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/bg.png?v=2cf0723d HTTP/1.1Host: madisonoffice.carrd.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJWhywEInP7MAQiFoM0BCL7VzgEIgdbOAQjI3M4BCIrgzgEIxuHOAQiu5M4BCIvlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uiw920 HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://madisonoffice.carrd.co/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uiw920 HTTP/1.1Host: dua-tech.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://madisonoffice.carrd.co/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=92373879c9cec8b9 HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dua-tech.us/uiw920?__cf_chl_rt_tk=Va_OWVXUIj.Xw9TmbIHEuZVGP_CW3a6fNINp9vPww00-1742494795-1.0.1.1-MBM38wpiUZvpWiVA_pL9hOXnb8Ip5v6.BoshxLRoDJMAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js?onload=mvlRL4&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveOrigin: https://dua-tech.ussec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dua-tech.us/uiw920Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1947870396:1742491020:1jqXBjzQRZSWPZsksybQbiE6VzL6rSB0ySXD8XgO4AY/92373879c9cec8b9/5w5DLpyshDE2ZCbBRuPqZW48GRPd661niG9Fclr4KLI-1742494795-1.2.1.1-zM6oZSCQNjDWpXv4O89cosg1ak1hFhAiCHlMrzSYczZGEWZGIwR3Zn9AlliRZgl6 HTTP/1.1Host: dua-tech.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9237388ec9f70c7a&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dua-tech.us/uiw920Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/869891523:1742491163:n-4Rg3Aygap6VtR-fWRcbia8Z54B97VvtXRwrCcHfgI/9237388ec9f70c7a/oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9237388ec9f70c7a/1742494801141/cyim_YO4uubLE2T HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9237388ec9f70c7a/1742494801143/3d0ba50d1e82bbbe37b3f86ac33886386df0272a08767940fd392922f48abb4c/RstJqDV9e8vJwHI HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9237388ec9f70c7a/1742494801141/cyim_YO4uubLE2T HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/869891523:1742491163:n-4Rg3Aygap6VtR-fWRcbia8Z54B97VvtXRwrCcHfgI/9237388ec9f70c7a/oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/869891523:1742491163:n-4Rg3Aygap6VtR-fWRcbia8Z54B97VvtXRwrCcHfgI/9237388ec9f70c7a/oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dua-tech.us/uiw920?__cf_chl_tk=Va_OWVXUIj.Xw9TmbIHEuZVGP_CW3a6fNINp9vPww00-1742494795-1.0.1.1-MBM38wpiUZvpWiVA_pL9hOXnb8Ip5v6.BoshxLRoDJMAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1947870396:1742491020:1jqXBjzQRZSWPZsksybQbiE6VzL6rSB0ySXD8XgO4AY/92373879c9cec8b9/5w5DLpyshDE2ZCbBRuPqZW48GRPd661niG9Fclr4KLI-1742494795-1.2.1.1-zM6oZSCQNjDWpXv4O89cosg1ak1hFhAiCHlMrzSYczZGEWZGIwR3Zn9AlliRZgl6 HTTP/1.1Host: dua-tech.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dua-tech.us/uiw920Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk
Source: global traffic	HTTP traffic detected: GET /uiw920 HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://dua-tech.us/uiw920Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk; XnTxcz3uMTqOivNGhqPywr-YdT8=1742494811; K2xuG5zeRkWwt_p0NkM7eaov5HU=1742581211; wv2C-BNPI_nby_2evFgR3M154hE=a4GHYabhhqdH5qDzL9de6osxh8s
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1Host: dua-tech.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk; XnTxcz3uMTqOivNGhqPywr-YdT8=1742494811; K2xuG5zeRkWwt_p0NkM7eaov5HU=1742581211; wv2C-BNPI_nby_2evFgR3M154hE=a4GHYabhhqdH5qDzL9de6osxh8s
Source: global traffic	HTTP traffic detected: GET /uiw920/ HTTP/1.1Host: dua-tech.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk; XnTxcz3uMTqOivNGhqPywr-YdT8=1742494811; K2xuG5zeRkWwt_p0NkM7eaov5HU=1742581211; wv2C-BNPI_nby_2evFgR3M154hE=a4GHYabhhqdH5qDzL9de6osxh8s
Source: global traffic	HTTP traffic detected: GET /4984e3f6-8817-4504-a98f-a1714aa726a0/adobe_logo_black.svg HTTP/1.1Host: cdn.glitch.globalConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npUwpaj.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /urLcPok.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oruJUrQ.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npUwpaj.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /urLcPok.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oruJUrQ.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.23802016.css HTTP/1.1Host: wtrt62.glitch.meConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IYgobIx.gif HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /af/40207f/0000000000000000000176ff/27/l?subset_id=2&fvd=n3&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-aliveOrigin: https://dua-tech.ussec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /af/eaf09c/000000000000000000017703/27/l?subset_id=2&fvd=n7&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-aliveOrigin: https://dua-tech.ussec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /af/cb695f/000000000000000000017701/27/l?subset_id=2&fvd=n4&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-aliveOrigin: https://dua-tech.ussec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dua-tech.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.1590354890566994:1742490908:-Yx4P2a46S0JvsZq-RGbtv9qUiSrhg6kXRsKaLu7IMk/923738e7083a4211 HTTP/1.1Host: dua-tech.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk; XnTxcz3uMTqOivNGhqPywr-YdT8=1742494811; K2xuG5zeRkWwt_p0NkM7eaov5HU=1742581211; wv2C-BNPI_nby_2evFgR3M154hE=a4GHYabhhqdH5qDzL9de6osxh8s
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: madisonoffice.carrd.co
Source: global traffic	DNS traffic detected: DNS query: dua-tech.us
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: wtrt62.glitch.me
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: cdn.glitch.global
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=RIJ5KqcXJBKtQE67HNLPigb7FMQMmFThgChFv%2BUqiPez%2Fu2BMHxRX6WV5xIdwk3Gw09FPI1Qw92mnc4IHEKMARtpGOF%2FTvNlyQe7Ck9CYXgyAjiJYm3MX5rWtdzA8A%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 419Content-Type: application/reports+jsonOrigin: https://dua-tech.usUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 18:19:42 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: EXPIREDExpires: Thu, 20 Mar 2025 22:19:42 GMTCache-Control: public, max-age=14400Server: cloudflareCF-RAY: 923738242cbf420d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 20 Mar 2025 18:19:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 92373878fe4855d7-EWRServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="92373878fe4855d7"X-Content-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 20 Mar 2025 18:19:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="92373879c9cec8b9"x-content-options: nosniffx-frame-options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 20 Mar 2025 18:19:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 923738869c3cc439-EWRServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="923738869c3cc439"X-Content-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 20 Mar 2025 18:20:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9237389859fd58af-EWRServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9237389859fd58af"X-Content-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 18:20:11 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCf-Ray: 923738dcce8c0caa-EWRServer: cloudflareVary: Accept-EncodingX-Content-Type-Options: nosniffX-Content-Type-Options: nosniffX-Xss-Protection: 1; mode=blockX-Xss-Protection: 1; mode=blockCache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutablePragma: publicCf-Cache-Status: HITAge: 18352Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7fCmYZ1ZeyQvP2viFtl7nWwTYy221rytOjUkeQCoU0InXlvcxxb%2BapUnmzqZJUJ5z0IHoKqbd6G%2FGMgEWupLtDbh1Ngw0DKNpI5QSa%2BstHbrLp1mK3BzJRBLbKGuqg%3D%3D"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=108174&min_rtt=108093&rtt_var=22847&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2154&delivery_rate=34450&cwnd=233&unsent_bytes=0&cid=5f6812d79302fc9c&ts=263&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closex-amz-request-id: W5VJG8PTZEZZHQE7x-amz-id-2: 8sW9X2aOh4C1ncGGm6jmUOXJ2S8PblLbQP+OGB8eB2dPoJFEXsB3nxzKgFl6uq7kq1R8xtmsTEkiYGaookI5SS2sLsQvoEelContent-Type: application/xmlServer: AmazonS3Accept-Ranges: bytesVia: 1.1 varnish, 1.1 varnishAccess-Control-Allow-Methods: GET, HEAD, POSTAccess-Control-Allow-Origin: *Content-Security-Policy: script-src 'none'Date: Thu, 20 Mar 2025 18:20:14 GMTX-Served-By: cache-iad-kcgs7200023-IAD, cache-lga21938-LGAX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1742494815.590496,VS0,VE39transfer-encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1927content-type: text/html; charset=utf-8cache-control: max-age=0etag: W/"787-pJhZ4JTR8waL2N8BV3zxA/IU+q8"Accept-Ranges: bytesDate: Thu, 20 Mar 2025 18:20:15 GMTVia: 1.1 varnishX-Served-By: cache-lga21992-LGA, cache-lga21992-LGAX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1742494816.602089,VS0,VE23

Source: chromecache_77.2.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_code_f7ab697e65b83ce9870a4736085de
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.glitch.global/4984e3f6-8817-4504-a98f-a1714aa726a0/adobe_logo_black.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://i.imgur.com/0lLvIlu.png
Source: chromecache_77.2.dr	String found in binary or memory: https://i.imgur.com/EfQjPuW.png
Source: chromecache_77.2.dr	String found in binary or memory: https://i.imgur.com/iRGIVox.png
Source: chromecache_77.2.dr	String found in binary or memory: https://i.imgur.com/oruJUrQ.png
Source: chromecache_77.2.dr	String found in binary or memory: https://i.imgur.com/urLcPok.png
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/a?subset_id=2&fvd=n3&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/d?subset_id=2&fvd=n3&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/l?subset_id=2&fvd=n3&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/a?subset_id=2&fvd=n4&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/d?subset_id=2&fvd=n4&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/l?subset_id=2&fvd=n4&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/a?subset_id=2&fvd=n7&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/d?subset_id=2&fvd=n7&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/l?subset_id=2&fvd=n7&v=3)
Source: chromecache_77.2.dr	String found in binary or memory: https://wtrt62.glitch.me/styles.23802016.css
Source: chromecache_77.2.dr	String found in binary or memory: https://www.behance.net/leonardoworx

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.251.41.4:443 -> 192.168.2.4:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.147.222:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.147.222:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.34:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.252:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.252:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.51.90:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.132:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.193:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.59:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.252:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.152.139:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.152.139:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.152.139:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49805 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2224_487436309

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2224_487436309

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@26/50@31/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2020,i,4020797685224634710,12025954801188222938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2052 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://madisonoffice.carrd.co/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2020,i,4020797685224634710,12025954801188222938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2052 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://madisonoffice.carrd.co/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://dua-tech.us/cdn-cgi/challenge-platform/scripts/jsd/main.js	100%	Avira URL Cloud	phishing
https://dua-tech.us/favicon.ico	100%	Avira URL Cloud	phishing
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/flow/ov1/1947870396:1742491020:1jqXBjzQRZSWPZsksybQbiE6VzL6rSB0ySXD8XgO4AY/92373879c9cec8b9/5w5DLpyshDE2ZCbBRuPqZW48GRPd661niG9Fclr4KLI-1742494795-1.2.1.1-zM6oZSCQNjDWpXv4O89cosg1ak1hFhAiCHlMrzSYczZGEWZGIwR3Zn9AlliRZgl6	100%	Avira URL Cloud	phishing
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=92373879c9cec8b9	100%	Avira URL Cloud	phishing
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/jsd/r/0.1590354890566994:1742490908:-Yx4P2a46S0JvsZq-RGbtv9qUiSrhg6kXRsKaLu7IMk/923738e7083a4211	100%	Avira URL Cloud	phishing
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?	100%	Avira URL Cloud	phishing
https://madisonoffice.carrd.co/favicon.ico	0%	Avira URL Cloud	safe
https://wtrt62.glitch.me/styles.23802016.css	0%	Avira URL Cloud	safe
https://madisonoffice.carrd.co/assets/images/bg.png?v=2cf0723d	0%	Avira URL Cloud	safe
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/jsd/r/0.1590354890566994:1742490908:-Yx4P2a46S0JvsZq-RGbtv9qUiSrhg6kXRsKaLu7IMk/923738d469fc4399	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
dua-tech.us	172.67.177.252	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
j.sni.global.fastly.net	151.101.2.132	true	false	high
glitch-custom-domains.map.fastly.net	151.101.2.59	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	142.251.41.4	true	false	high
auth.services.adobe.com.cdn.cloudflare.net	172.64.155.179	true	false	high
madisonoffice.carrd.co	172.64.147.222	true	false	unknown
a1988.dscg1.akamai.net	23.204.152.139	true	false	high
ipv4.imgur.map.fastly.net	199.232.196.193	true	false	high
wtrt62.glitch.me	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	high
i.imgur.com	unknown	unknown	false	high
cdn.glitch.global	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://i.imgur.com/npUwpaj.png	false		high
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=92373879c9cec8b9	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9237388ec9f70c7a&lang=auto	false		high
https://dua-tech.us/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9237388ec9f70c7a/1742494801141/cyim_YO4uubLE2T	false		high
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/jsd/r/0.1590354890566994:1742490908:-Yx4P2a46S0JvsZq-RGbtv9qUiSrhg6kXRsKaLu7IMk/923738d469fc4399	false	Avira URL Cloud: phishing	unknown
https://i.imgur.com/IYgobIx.gif	false		high
https://a.nel.cloudflare.com/report/v4?s=pLYwtQMi7UngoTya1UheGTnOt8JRg34T1L9ofk24%2BxtQoJrov%2FIoPzA7xqJ2OKfnpieFqQGGYpsJtsfwqLijKMjUQS2jHjrunANPX%2FZqQcB03GInbGa2L1pbgBoT6A%3D%3D	false		high
https://a.nel.cloudflare.com/report/v4?s=RIJ5KqcXJBKtQE67HNLPigb7FMQMmFThgChFv%2BUqiPez%2Fu2BMHxRX6WV5xIdwk3Gw09FPI1Qw92mnc4IHEKMARtpGOF%2FTvNlyQe7Ck9CYXgyAjiJYm3MX5rWtdzA8A%3D%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/	false		high
https://i.imgur.com/oruJUrQ.png	false		high
https://dua-tech.us/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/869891523:1742491163:n-4Rg3Aygap6VtR-fWRcbia8Z54B97VvtXRwrCcHfgI/9237388ec9f70c7a/oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe	false		high
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/flow/ov1/1947870396:1742491020:1jqXBjzQRZSWPZsksybQbiE6VzL6rSB0ySXD8XgO4AY/92373879c9cec8b9/5w5DLpyshDE2ZCbBRuPqZW48GRPd661niG9Fclr4KLI-1742494795-1.2.1.1-zM6oZSCQNjDWpXv4O89cosg1ak1hFhAiCHlMrzSYczZGEWZGIwR3Zn9AlliRZgl6	false	Avira URL Cloud: phishing	unknown
https://i.imgur.com/urLcPok.png	false		high
https://madisonoffice.carrd.co/	true		unknown
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?	false	Avira URL Cloud: phishing	unknown
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/l?subset_id=2&fvd=n3&v=3	false		high
https://dua-tech.us/uiw920	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://madisonoffice.carrd.co/favicon.ico	true	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/cb695f/000000000000000000017701/27/l?subset_id=2&fvd=n4&v=3	false		high
https://cdn.glitch.global/4984e3f6-8817-4504-a98f-a1714aa726a0/adobe_logo_black.svg	false		high
https://a.nel.cloudflare.com/report/v4?s=VXnxNCgXiZyEEEdTe5lJmGKaEgMm9s8xZ5du6N4lj%2BkcQkTF1%2FRQnfFKKHX7j07mVwHbD3Sjiuuf4g%2FFydz37oTaHKPjAOBq3wEUGJq5RPs3NLXtADZ3NlGSx64pPQ%3D%3D	false		high
https://dua-tech.us/uiw920?__cf_chl_tk=Va_OWVXUIj.Xw9TmbIHEuZVGP_CW3a6fNINp9vPww00-1742494795-1.0.1.1-MBM38wpiUZvpWiVA_pL9hOXnb8Ip5v6.BoshxLRoDJM	false		unknown
https://wtrt62.glitch.me/styles.23802016.css	false	Avira URL Cloud: safe	unknown
https://dua-tech.us/cdn-cgi/challenge-platform/h/b/jsd/r/0.1590354890566994:1742490908:-Yx4P2a46S0JvsZq-RGbtv9qUiSrhg6kXRsKaLu7IMk/923738e7083a4211	false	Avira URL Cloud: phishing	unknown
https://dua-tech.us/uiw920/	true		unknown
https://madisonoffice.carrd.co/assets/images/bg.png?v=2cf0723d	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9237388ec9f70c7a/1742494801143/3d0ba50d1e82bbbe37b3f86ac33886386df0272a08767940fd392922f48abb4c/RstJqDV9e8vJwHI	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/l?subset_id=2&fvd=n7&v=3	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/d?subset_id=2&fvd=n7&v=3)	chromecache_77.2.dr	false	high
https://i.imgur.com/EfQjPuW.png	chromecache_77.2.dr	false	high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/l?subset_id=2&fvd=n7&v=3)	chromecache_77.2.dr	false	high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/d?subset_id=2&fvd=n3&v=3)	chromecache_77.2.dr	false	high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/l?subset_id=2&fvd=n3&v=3)	chromecache_77.2.dr	false	high
https://i.imgur.com/iRGIVox.png	chromecache_77.2.dr	false	high
https://use.typekit.net/af/cb695f/000000000000000000017701/27/l?subset_id=2&fvd=n4&v=3)	chromecache_77.2.dr	false	high
https://use.typekit.net/af/cb695f/000000000000000000017701/27/d?subset_id=2&fvd=n4&v=3)	chromecache_77.2.dr	false	high
https://i.imgur.com/0lLvIlu.png	chromecache_77.2.dr	false	high
https://use.typekit.net/af/cb695f/000000000000000000017701/27/a?subset_id=2&fvd=n4&v=3)	chromecache_77.2.dr	false	high
https://www.behance.net/leonardoworx	chromecache_77.2.dr	false	high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/a?subset_id=2&fvd=n3&v=3)	chromecache_77.2.dr	false	high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/a?subset_id=2&fvd=n7&v=3)	chromecache_77.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.64.147.222	madisonoffice.carrd.co	United States	13335	CLOUDFLARENETUS	false
104.18.40.34	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.59	glitch-custom-domains.map.fastly.net	United States	54113	FASTLYUS	false
199.232.196.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
23.204.152.139	a1988.dscg1.akamai.net	United States	20940	AKAMAI-ASN1EU	false
172.67.177.252	dua-tech.us	United States	13335	CLOUDFLARENETUS	true
104.21.51.90	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.2.132	j.sni.global.fastly.net	United States	54113	FASTLYUS	false
142.251.41.4	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644641
Start date and time:	2025-03-20 19:18:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://madisonoffice.carrd.co/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@26/50@31/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.176.195, 142.250.81.238, 142.250.65.206, 172.253.122.84, 142.251.40.238, 142.251.40.110, 142.251.40.206, 142.251.41.14, 208.89.73.25, 142.250.80.110, 142.251.40.142, 142.250.64.106, 142.250.65.234, 142.250.81.234, 172.217.165.138, 142.251.41.10, 142.250.65.170, 142.251.32.106, 142.251.35.170, 142.251.40.170, 142.251.40.138, 142.251.40.234, 142.250.176.202, 142.251.40.106, 142.250.64.74, 142.251.40.202, 142.250.65.202, 142.250.64.67, 142.250.80.46, 184.30.55.36, 4.245.163.56, 172.64.155.179
Excluded domains from analysis (whitelisted): auth.services.adobe.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://madisonoffice.carrd.co/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 163 x 138, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6954
Entropy (8bit):	7.956697943737854
Encrypted:	false
SSDEEP:	192:2oONgOLPXsAYn574weqSzA5935PqPEXC5q4:bOWOLv5qR4Dk9353Qq4
MD5:	66E51E84F1B6E0AD8FC38B7AFB32C4AF
SHA1:	19AD8E38BE7250E30EEBA756CE4374C541D3B12F
SHA-256:	60588A645D7592B709F14B4F651909FD10073938820BA440A590477F4AC2B796
SHA-512:	8EBF7E1D340F376B3D50E481476474316A364B04D3B4A6A34325086F85CF0049502193A12B2CAC96CF89C7FBBBD2216F3FF43E02203964CD6F099E2D094F94D0
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/oruJUrQ.png
Preview:	.PNG........IHDR................~....gAMA....\|.Q.... cHRM...........R...@..}y.....<.....s<.w...9iCCPPhotoshop ICC profile..H..wTT....wz..0.R.....{.^Ea..`(..34.!...ED."HP..P$VD...T..$.(1.ET,oF.........o......Z..../...K......<....Qt.....`.).LVF._.{......!r._...zX..p..3.N....Y.\|......9.,...8%K.......,f.%f.(A..9a..>.,....<...9..S.b...L!G....3..,....F.0.+.7..T.3...Il.pX."6.1...."....H._q.W,.d..rIK..s...t......A..d.p....&+..g.].R.......Y2...EE.4...4432..P.u.oJ..Ez...g.........`.j..-....-....b.8....o....M</..A...qVV....2.....O.....g$>...]9.La.....+-%M.g.3Y.......u..A.x....E.....K.......i<:...............Pc...u@~..(.. ...]..o..0 ~y...s..7.g...%...9.%(....3........H....@...C`...-p.n.......V..H.....@....A1....jP..A3h..A'8..K....n..`.L.g`......a!2D..!.H... .d..A.P....B....By.f.....z....:....@..]h...~....L.............C.Up.......p%....;...5.6<.?.........."....G..x...G.....iE..>.&2.. oQ...EG..lQ..P......U..F.Fu.zQ7Qc.Y.G4....G......t...].nB../.o.'.1.......xb"1I.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 19:19:34.519310951 CET	53	52350	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:35.346103907 CET	53	60416	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:35.538976908 CET	53	59832	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:38.375252962 CET	53004	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:38.375463963 CET	51383	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:38.483115911 CET	53	53004	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:38.487165928 CET	53	51383	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:40.119327068 CET	63405	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:40.119421959 CET	61050	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:40.233622074 CET	53	61050	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:40.233978987 CET	53	63405	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:41.498542070 CET	57388	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:41.498600960 CET	55960	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:41.613097906 CET	53	55960	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:41.622817993 CET	53	57388	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:52.663069010 CET	53	58267	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:55.111323118 CET	63036	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:55.111475945 CET	62112	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:55.228966951 CET	53	62112	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:55.246417046 CET	53	63036	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:55.753365993 CET	60995	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:55.753726006 CET	52257	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:55.861033916 CET	53	52257	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:55.861732960 CET	53	60995	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:57.254951954 CET	60832	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:57.255135059 CET	55414	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:57.363090038 CET	53	60832	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:58.109458923 CET	64771	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:58.110018969 CET	60175	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:58.215548992 CET	53	60175	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:58.216238976 CET	53	64771	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:58.347786903 CET	50131	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:58.347944021 CET	53401	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:58.462349892 CET	53	50131	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:58.462528944 CET	53	53401	1.1.1.1	192.168.2.4
Mar 20, 2025 19:19:59.932600021 CET	58928	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:19:59.932748079 CET	64249	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:00.038897991 CET	53	64249	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:00.039591074 CET	53	58928	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:11.401726007 CET	53	62285	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:14.093467951 CET	52714	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:14.093595028 CET	52348	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:14.098448038 CET	63323	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:14.098620892 CET	63305	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:14.099610090 CET	57922	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:14.099725962 CET	61453	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:14.204854012 CET	53	63305	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:14.208972931 CET	53	63323	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:14.210046053 CET	53	57922	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:14.232778072 CET	53	52348	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:14.626612902 CET	60503	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:14.626687050 CET	63179	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:14.736619949 CET	53	60503	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:14.736669064 CET	53	63179	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:15.108202934 CET	63109	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:15.249005079 CET	53	63109	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:15.820770025 CET	65465	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:15.820871115 CET	49509	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:15.932571888 CET	53	49509	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:15.934402943 CET	53	64207	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:15.941687107 CET	53	65465	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:33.980221033 CET	53	61355	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:34.070287943 CET	53	59344	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:42.371773958 CET	138	138	192.168.2.4	192.168.2.255
Mar 20, 2025 19:20:55.756726980 CET	65524	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:55.756901026 CET	64498	53	192.168.2.4	1.1.1.1
Mar 20, 2025 19:20:55.858809948 CET	53	64498	1.1.1.1	192.168.2.4
Mar 20, 2025 19:20:55.859668016 CET	53	65524	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 19:19:49.349728107 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 19:19:49.449554920 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 17:53:27 GMT Expires: Thu, 20 Mar 2025 18:43:27 GMT Age: 1582 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 20, 2025 19:19:49.454425097 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 19:19:49.552722931 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 17:53:30 GMT Expires: Thu, 20 Mar 2025 18:43:30 GMT Age: 1579 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:40 UTC	672	OUT	GET / HTTP/1.1 Host: madisonoffice.carrd.co Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:40 UTC	339	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:19:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 20 Mar 2025 16:01:05 GMT Cache-Control: max-age=0 Expires: Thu, 20 Mar 2025 18:19:40 GMT Vary: Accept-Encoding cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 9237381b3dbbb29e-EWR
2025-03-20 18:19:40 UTC	1030	IN	Data Raw: 34 61 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 75 62 6c 69 73 68 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 69 67 68 74 20 6f 6e 6c 79 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 77 6f 72 6b 69 6e 67 22 20 2f 3e 3c 6d 65 Data Ascii: 4ac4<!DOCTYPE HTML><html lang="en"><head><title>Publish</title><meta charset="utf-8" /><meta name="viewport" content="width=device-width,initial-scale=1" /><meta name="color-scheme" content="light only" /><meta name="description" content="working" /><me
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 62 64 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 62 2c 75 2c 69 2c 63 65 6e 74 65 72 2c 64 6c 2c 64 74 2c 64 64 2c 6f 6c 2c 75 6c 2c 6c 69 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 74 61 62 6c 65 2c 63 61 70 74 69 6f 6e 2c 74 62 6f 64 79 2c 74 66 6f 6f 74 2c 74 68 65 61 64 2c 74 72 2c 74 68 2c 74 64 2c 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 63 61 6e 76 61 73 2c 64 65 74 61 69 6c 73 2c 65 6d 62 65 64 2c 66 69 67 75 72 65 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 6f 75 74 70 75 74 2c 72 75 62 79 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 Data Ascii: bd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summar
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 65 70 65 61 74 3a 20 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 7d 3a 72 6f 6f 74 20 7b 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 2d 2d 73 69 74 65 2d 6c 61 6e 67 75 61 67 65 2d 61 6c 69 67 6e 6d 65 6e 74 3a 20 6c 65 66 74 3b 2d 2d 73 69 74 65 2d 6c 61 6e 67 75 61 67 65 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6c 74 72 3b 2d 2d 73 69 74 65 2d 6c 61 6e 67 75 61 67 65 2d 66 6c 65 78 2d 61 6c 69 67 6e 6d 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 2d 2d 73 69 74 65 2d 6c 61 6e 67 75 61 67 65 2d 69 6e 64 65 6e 74 2d 6c 65 66 74 3a 20 31 3b 2d 2d 73 69 74 65 2d 6c 61 6e 67 75 61 67 65 2d 69 6e 64 65 Data Ascii: epeat: repeat;background-size: cover;background-color: #FFFFFF;}:root {--background-height: 100vh;--site-language-alignment: left;--site-language-direction: ltr;--site-language-flex-alignment: flex-start;--site-language-indent-left: 1;--site-language-inde
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 29 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 20 32 3b 70 61 64 64 69 6e 67 3a 20 31 2e 35 72 65 6d 20 31 2e 35 72 65 6d 20 31 2e 35 72 65 6d 20 31 2e 35 72 65 6d 3b 7d 23 6d 61 69 6e 20 7b 2d 2d 61 6c 69 67 6e 6d 65 6e 74 3a 20 76 61 72 28 2d 2d 73 69 74 65 2d 6c 61 6e 67 75 61 67 65 2d 61 6c 69 67 6e 6d 65 6e 74 29 3b 2d 2d 66 6c 65 78 2d 61 6c 69 67 6e 6d 65 6e 74 3a 20 76 61 72 28 2d 2d 73 69 74 65 2d 6c 61 6e 67 75 61 67 65 2d 66 6c 65 78 2d 61 6c 69 67 6e 6d 65 6e 74 29 3b 2d 2d 69 6e 64 65 6e Data Ascii: ustify-content: center;min-height: var(--viewport-height);overflow: hidden;position: relative;z-index: 2;padding: 1.5rem 1.5rem 1.5rem 1.5rem;}#main {--alignment: var(--site-language-alignment);--flex-alignment: var(--site-language-flex-alignment);--inden
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 68 6f 72 69 7a 6f 6e 74 61 6c 29 20 2a 20 32 29 20 2b 20 30 2e 34 37 32 35 70 78 29 3b 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2b 20 63 61 6c 63 28 76 61 72 28 2d 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 29 20 2a 20 32 29 20 2b 20 30 2e 34 37 32 35 70 78 29 3b 7d 23 6d 61 69 6e 20 3e 20 2e 69 6e 6e 65 72 20 3e 20 2e 66 75 6c 6c 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 70 61 64 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 29 20 2a 20 2d 31 29 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: horizontal) * 2) + 0.4725px);width: calc(100% + calc(var(--padding-horizontal) * 2) + 0.4725px);}#main > .inner > .full:first-child {border-top-left-radius: inherit;border-top-right-radius: inherit;margin-top: calc(var(--padding-vertical) * -1) !important
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 27 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 27 2c 20 27 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 27 2c 20 27 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 27 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 7d 23 74 65 78 74 30 31 20 61 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 7d 23 74 65 78 74 30 31 20 61 3a 68 6f 76 65 72 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 23 74 65 78 74 30 31 20 73 70 61 6e 2e 70 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 20 2b 20 32 29 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 72 65 6d 3b 7d 23 74 65 78 74 Data Ascii: sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 1em;line-height: 1.5;font-weight: 700;}#text01 a {text-decoration: underline;}#text01 a:hover {text-decoration: none;}#text01 span.p:nth-child(n + 2) {margin-top: 1rem;}#text
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 65 6d 3b 64 69 72 65 63 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 73 69 74 65 2d 6c 61 6e 67 75 61 67 65 2d 64 69 72 65 63 74 69 6f 6e 29 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 63 6f 6c 6f 72 20 30 2e 32 35 73 20 65 61 73 65 2c 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 32 35 73 20 65 61 73 65 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 32 35 73 20 65 61 73 65 3b 7d 23 62 75 74 74 6f 6e 73 30 31 20 2e 62 75 74 74 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 7d 2e 69 63 63 2d 63 72 65 64 69 74 73 20 7b 64 69 73 70 6c 61 79 3a 20 Data Ascii: em;direction: var(--site-language-direction);overflow: hidden;text-overflow: ellipsis;transition: color 0.25s ease, background-color 0.25s ease, border-color 0.25s ease;}#buttons01 .button {background-color: #000000;color: #FFFFFF;}.icc-credits {display:
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 30 2e 30 35 72 65 6d 29 3b 7d 2e 69 63 63 2d 63 72 65 64 69 74 73 20 73 70 61 6e 3a 68 6f 76 65 72 20 61 3a 62 65 66 6f 72 65 20 7b 6f 70 61 63 69 74 79 3a 20 30 3b 7d 2e 69 63 63 2d 63 72 65 64 69 74 73 20 73 70 61 6e 3a 68 6f 76 65 72 20 61 3a 61 66 74 65 72 20 7b 6f 70 61 63 69 74 79 3a 20 30 3b 7d 2e 69 63 63 2d 63 72 65 64 69 74 73 20 73 70 61 6e 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 6f 70 61 63 69 74 79 3a 20 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 30 2e 30 35 72 65 6d 29 3b 7d 23 63 72 65 64 69 74 73 20 73 70 61 6e 20 7b 63 6f 6c Data Ascii: fff !important;transform: scale(1.1) translateY(-0.05rem);}.icc-credits span:hover a:before {opacity: 0;}.icc-credits span:hover a:after {opacity: 0;}.icc-credits span:hover::after {opacity: 1;transform: scale(1.1) translateY(-0.05rem);}#credits span {col
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: c2 a0 43 6f 75 6e 74 79 20 53 68 65 72 69 66 66 e2 80 99 73 20 4f 66 66 69 63 65 3c 2f 68 31 3e 3c 70 20 69 64 3d 22 74 65 78 74 30 32 22 3e 4d 61 6a 6f 72 20 42 65 61 74 72 69 63 65 20 4c 69 76 69 6e 67 73 74 6f 6e 20 73 65 6e 74 20 79 6f 75 20 61 20 73 65 63 75 72 65 20 64 6f 63 75 6d 65 6e 74 20 77 69 74 68 20 79 6f 75 2e 20 43 6c 69 63 6b 20 6f 6e 20 26 71 75 6f 74 3b 56 69 65 77 20 53 68 61 72 65 64 20 44 6f 63 75 6d 65 6e 74 26 71 75 6f 74 3b 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 73 68 61 72 65 64 20 64 6f 63 75 6d 65 6e 74 2e 3c 2f 70 3e 3c 75 6c 20 69 64 3d 22 62 75 74 74 6f 6e 73 30 31 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 73 22 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 75 61 2d 74 65 63 68 2e 75 73 2f 75 Data Ascii: County Sheriffs Office</h1><p id="text02">Major Beatrice Livingston sent you a secure document with you. Click on "View Shared Document" to access the shared document.</p><ul id="buttons01" class="buttons"><li><a href="https://dua-tech.us/u
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 2d 39 5f 5d 2b 29 20 6c 69 6b 65 20 4d 61 63 20 4f 53 20 58 2f 2c 66 75 6e 63 74 69 6f 6e 28 76 29 20 7b 20 72 65 74 75 72 6e 20 76 2e 72 65 70 6c 61 63 65 28 27 5f 27 2c 20 27 2e 27 29 2e 72 65 70 6c 61 63 65 28 27 5f 27 2c 20 27 27 29 3b 20 7d 5d 2c 5b 27 69 6f 73 27 2c 2f 43 50 55 20 6c 69 6b 65 20 4d 61 63 20 4f 53 20 58 2f 2c 66 75 6e 63 74 69 6f 6e 28 76 29 20 7b 20 72 65 74 75 72 6e 20 30 20 7d 5d 2c 5b 27 69 6f 73 27 2c 2f 69 50 61 64 3b 20 43 50 55 2f 2c 66 75 6e 63 74 69 6f 6e 28 76 29 20 7b 20 72 65 74 75 72 6e 20 30 20 7d 5d 2c 5b 27 61 6e 64 72 6f 69 64 27 2c 2f 41 6e 64 72 6f 69 64 20 28 5b 30 2d 39 5c 2e 5d 2b 29 2f 2c 6e 75 6c 6c 5d 2c 5b 27 6d 61 63 27 2c 2f 4d 61 63 69 6e 74 6f 73 68 2e 2b 4d 61 63 20 4f 53 20 58 20 28 5b 30 2d 39 5f 5d Data Ascii: -9_]+) like Mac OS X/,function(v) { return v.replace('_', '.').replace('_', ''); }],['ios',/CPU like Mac OS X/,function(v) { return 0 }],['ios',/iPad; CPU/,function(v) { return 0 }],['android',/Android ([0-9\.]+)/,null],['mac',/Macintosh.+Mac OS X ([0-9_]

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:40 UTC	627	OUT	GET /assets/images/bg.png?v=2cf0723d HTTP/1.1 Host: madisonoffice.carrd.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://madisonoffice.carrd.co/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:40 UTC	383	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:19:40 GMT Content-Type: image/png Content-Length: 258005 Connection: close Cf-Ray: 9237381cbc0b577b-EWR Server: cloudflare Last-Modified: Thu, 20 Mar 2025 16:01:05 GMT Etag: "3efd5-630c83ec6db20" Cache-Control: public, max-age=604800 Expires: Thu, 27 Mar 2025 18:19:40 GMT Cf-Cache-Status: HIT Age: 2460 Accept-Ranges: bytes
2025-03-20 18:19:40 UTC	986	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 a0 00 00 03 60 08 06 00 00 00 da 98 cf 46 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e9 03 14 06 01 04 7f bf d3 18 00 00 80 00 49 44 41 54 78 da ec fd 77 9c 24 d9 59 27 7a ff 9e 13 11 99 59 a6 ab da bb 71 3d ae 67 34 33 f2 d2 8c 0c 42 c8 0b 10 08 99 c5 08 21 16 84 c4 15 76 17 bf b0 f7 72 77 df 7d 77 ef cb 0a 76 ef 82 24 40 c0 2e 8b 76 85 91 90 47 12 c8 0b 49 33 1a f9 b1 dd 3d d3 de db 72 69 23 e2 3c ef 1f e1 4e 44 46 66 55 f7 74 8d e9 fe 7d f5 a9 e9 ac c8 88 13 51 59 ad ce 88 5f 3e f1 Data Ascii: PNGIHDR`FgAMAa cHRMz&u0`:pQ<bKGDtIMEIDATxw$Y'zYq=g43B!vrw}wv$@.vGI3=ri#<NDFfUt}QY_>
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 88 88 88 88 88 88 88 88 88 56 05 03 68 22 22 22 22 22 22 22 22 22 22 5a 15 0c a0 89 88 88 88 88 88 88 88 88 88 68 55 30 80 26 22 22 22 22 22 22 22 22 22 a2 55 c1 00 9a 88 88 88 88 88 88 88 88 88 88 56 05 03 68 22 22 22 22 22 22 22 22 22 22 5a 15 0c a0 89 88 88 88 88 88 88 88 88 88 68 55 30 80 26 22 22 22 22 22 22 22 22 22 a2 55 c1 00 9a 88 88 88 88 88 88 88 88 88 88 56 05 03 68 22 22 22 22 22 22 22 22 22 22 5a 15 0c a0 89 88 88 88 88 88 88 88 88 88 68 55 30 80 26 22 22 22 22 22 22 22 22 22 a2 55 c1 00 9a 88 88 88 88 88 88 88 88 88 88 56 05 03 68 22 22 22 22 22 22 22 22 22 22 5a 15 0c a0 89 88 88 88 88 88 88 88 88 88 68 55 30 80 26 22 22 22 22 22 22 22 22 22 a2 55 c1 00 9a 88 88 88 88 88 88 88 88 88 88 56 05 03 68 22 22 22 22 22 22 22 22 22 22 5a 15 0c a0 Data Ascii: Vh""""""""""ZhU0&"""""""""UVh""""""""""ZhU0&"""""""""UVh""""""""""ZhU0&"""""""""UVh""""""""""ZhU0&"""""""""UVh""""""""""Z
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: aa 18 40 13 11 11 11 11 11 11 11 3d 26 92 62 e1 e5 d7 b3 4e 9b 0b 0b a8 05 a0 92 54 22 03 80 01 c4 a8 8a a7 30 9e aa f8 c9 b3 6e 98 ec c1 5a 0f aa 06 d6 0a 14 0a 40 14 5e 04 e3 f7 25 f0 fb 3d df 6f 9f 68 f8 fd 73 81 df 3f 1b 78 83 b3 8d a0 7b 62 c2 ef 1e 9f f2 bb a7 a6 fd de 99 69 6f 30 37 ed 85 0b 53 26 6c 4f 4b d4 9d 34 51 6f 52 a2 fe 84 d8 41 0b 71 d8 12 1b b6 d2 a8 1a 10 6f 60 4d ab 1d 07 d3 67 a3 c9 6d 47 3a 9b 6f 7f 60 ee c6 37 ec 9e bb e1 b9 a7 d4 88 36 e7 fb 2d 89 fb a2 5e 53 55 d2 96 1e ac 88 26 ba 24 c9 c7 ce f4 7f 18 02 3f 6d e1 43 44 44 44 44 44 44 44 44 8f 54 1a a8 6a d6 2b 39 6d 6f 91 56 22 8b 94 da 5a 28 00 41 12 c0 0a 00 81 8a 28 c4 24 15 ca a6 68 71 a1 9e 58 eb c3 5a 03 6b 93 fc 59 44 20 5e a4 c6 1b 88 67 42 eb 79 61 c7 33 e1 a2 e7 f7 4e Data Ascii: @=&bNT"0nZ@^%=ohs?x{bio07S&lOK4QoRAqo`MgmG:o`76-^SU&$?mCDDDDDDDDTj+9moV"Z(A($hqXZkYD ^gBya3N
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 77 3f 6d fb bd 49 f8 7e 16 cb e6 f3 02 4a 5a f7 9c 3c 96 52 d1 71 16 c1 14 cf 67 b9 ac 42 04 88 62 41 38 10 5c 73 43 0f 2f fc fe 79 ac df 1c 63 d0 2f 42 68 54 a2 58 ad 54 3b af 24 74 46 fa bd 8c 08 86 6b fb 36 3b fb ad 7b be 2e 74 06 96 09 bb 51 1a 57 11 43 e2 89 b5 47 f6 bf f1 43 ff be 73 d5 77 cf 79 dd 4e a0 9e 67 d3 be 27 8f f5 5f 05 22 3a 2f 49 05 b4 79 e4 03 11 11 11 11 11 11 11 11 5d 9a 8a f0 59 05 36 42 b0 79 4d ff e1 1f f9 89 d7 cf fd cd 7b 7e 01 d1 60 d2 0b 02 95 24 1a 15 51 81 a8 c0 28 90 3f 4e e3 e7 ec cb 40 d3 65 c9 73 d9 63 41 12 54 c3 0a 7c a3 98 9c b0 38 f4 70 0b 1f f9 ab 0d 38 b2 3f 40 a3 99 b4 e3 00 8a e0 5a 93 8d 8a 0a e5 2c 24 b6 c5 9f 79 30 6c cb 7f 66 cf b9 eb bb cf a9 33 9e da 22 ac 16 4d a6 3e cc f7 e5 3c af e9 73 52 b3 ed b2 cf 5b Data Ascii: w?mI~JZ<RqgBbA8\sC/yc/BhTXT;$tFk6;{.tQWCGCswyNg'_":/Iy]Y6ByM{~`$Q(?N@escAT\|8p8?@Z,$y0lf3"M><sR[
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 86 e6 a1 b0 c9 a7 0a 44 25 68 2e 7a 42 17 5f ee c4 82 c3 2d 3b aa db 48 da b6 23 1f d7 a9 90 ce fb 47 43 b0 f7 de 29 c4 83 a2 0a 7a 54 df e5 52 75 71 35 74 b6 23 aa 9d ab 7d 99 6b aa 95 51 57 c9 3c 62 1f d5 30 ba 32 e1 60 79 42 c2 72 3b 0e 01 00 6f e9 d4 75 eb 3f ff 07 3b 07 eb 9b 3d 89 06 02 16 40 11 3d a1 30 80 26 a2 21 59 a5 b3 08 d4 aa 8a 55 c8 9a 96 e9 5f bd d1 5f 58 3b 69 7a 56 21 a1 55 33 11 98 e8 ca f5 fe e2 e6 59 af d3 0a 24 12 11 8d 2d 4c 14 c3 68 5e 21 5d 54 49 13 11 11 11 11 11 3d 1e 29 92 42 1b ed f5 bc e0 8a b5 ed b9 b7 ff d1 53 7b 1f f8 fb 9f 49 7a 3d 1b 15 05 b2 ea 67 71 aa 9d dd 70 59 9c 50 ba f8 6f b1 4d 3e 51 61 29 c0 2e 6f 53 ae 98 2e 26 36 cc fa 41 0b 92 ea e8 c0 07 4e 1f 69 e1 ec 89 00 9e 57 53 cd 3c a2 ef f3 50 30 5d 33 21 60 56 89 Data Ascii: D%h.zB_-;H#GC)zTRuq5t#}kQW<b02`yBr;ou?;=@=0&!YU__X;izV!U3Y$-Lh^!]TI=)BS{Iz=gqpYPoM>Qa).oS.&6ANiWS<P0]3!`V
2025-03-20 18:19:40 UTC	1256	IN	Data Raw: 8a ef 43 00 83 34 50 16 00 2a 95 ea e5 4a a5 73 11 2c 97 ab 97 81 ca 75 0c ca 61 6b 36 7e 31 56 11 4c 4b 4d c5 73 a9 12 28 dd 59 10 28 4e 1d 9a 40 67 6e 1e ad 69 0b 1b 97 7e c6 95 57 1a 3b cb ab a1 74 b6 bd 8e 08 a5 c7 ed 63 e4 f3 d5 36 1f c0 70 35 35 2a c7 00 a8 84 51 73 f6 2b ff fd 59 67 bf fb 75 fb fd 38 6c aa 09 ec 6a fe 55 21 a2 8b 83 01 34 11 95 ce bf 3c 4f ec e7 1f ec bf 76 10 e9 ac 67 dc f0 b9 7a ca 53 de 1a f9 18 e5 6f 92 fa 00 81 91 a2 a6 d9 aa fa ed be ee 58 ea db 1d 27 e6 a3 97 dc 7b 58 06 93 0d d9 bf 76 c2 ec da 3c eb ed d9 b9 2d 78 f8 da 4d fe 99 99 09 19 a8 22 09 a4 23 f5 35 3d 0b 31 69 1d 36 db 75 10 11 11 11 11 d1 f9 53 81 88 6a b7 e7 99 2b 66 3b dd ff fc 47 4f 8d 3e f8 c1 b7 88 a4 2d 35 54 d3 70 38 ab 45 2e 1a 62 24 75 39 c3 ad 31 4a 13 Data Ascii: C4PJs,uak6~1VLKMs(Y(N@gni~W;tc6p55Qs+Ygu8ljU!4<OvgzSoX'{Xv<-xM"#5=1i6uSj+f;GO>-5Tp8E.b$u91J
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: 1b 3a 8f 9a 30 b0 fa 7c dd f6 f9 f2 4a 78 5c 3b e1 20 ea 03 e5 15 07 d3 c3 e3 08 04 ea b5 17 37 cf 7e f6 9d 4f 3e fa 73 7f f2 b9 e6 52 38 a9 c6 e3 75 1d d1 e3 18 03 68 a2 cb 9c 08 10 c7 90 a9 49 89 be b8 2b da 11 46 58 5f 1f 3c 8f fa d4 bf ee f1 72 eb eb 32 cb 86 c6 cc ee 56 93 2c 3c ce ce b7 54 d5 6f 0f f4 da a5 be bd f6 f8 3c 5e 76 df 91 b0 df 0a e4 e0 ba 49 f3 e0 d6 b5 de ee 1b b7 06 7b af dd ec 9f 9e 6e 4a 08 00 8b 3d db e8 0e 9c fe d1 ca 40 9a 88 88 88 88 e8 92 a5 ce 75 4d af 67 cc f6 99 a5 f0 6d bf fa 72 dc f9 95 d7 8a ef 03 80 41 e9 42 a0 1c 2c 97 5b 6c 0c 17 cf 48 de 3e 43 47 04 ce d5 f0 b9 68 f0 21 ce b2 f2 fd a7 d9 c5 0e 9c 11 31 7a 62 43 00 be af 58 3a d7 c0 b9 13 4d 6c be b2 87 c8 3a 47 ba 4c e8 3c 6e c2 c0 da 30 d8 0d 8c b5 72 45 37 6a 0c 77 Data Ascii: :0\|Jx\; 7~O>sR8uhI+FX_<r2V,<To<^vI{nJ=@uMgmrAB,[lH>CGh!1zbCX:Ml:GL<n0rE7jw
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: db 91 1f 7a e3 1b f1 d0 ee e7 a3 d1 b0 50 35 f9 e4 32 5a 73 ba 2e 6e 57 66 a0 7e 9e 9b 95 b5 ec a8 6f ac 31 6a fb ba f5 75 68 fb ac fd 46 29 7c 56 2b b0 0a ff 79 df f5 c1 a9 0f fd f5 7b 96 8e 3c 3c b5 e1 3f ff fd 6b 4c 77 71 b3 1a 28 6c de 26 3a ef 0b 9d 05 bc 2b 69 8d 91 ff a1 ce d5 9e 0e 87 c4 63 5b 75 54 c6 1c 55 35 3d b2 87 74 dd 38 10 2b 91 9a a9 bb df ff dc d3 3f f6 5b df 11 b5 9c 88 90 e8 71 8a 01 34 d1 65 ce f7 60 4f cc db c9 f9 b6 ee 4c 96 ac b4 07 da f9 54 31 af e4 33 e8 71 e3 3f d2 09 0d 87 c7 5e 7e 42 43 35 b1 c5 c4 52 5f 77 2e f6 ec ce 43 67 81 6f 1d 08 e7 27 02 39 b4 61 da dc 7f d5 06 ef c1 1d 1b 83 a3 37 6c f5 4f b7 02 89 bb a1 7a bd ca 84 86 a6 bc 3f 9e 04 11 11 11 11 11 ad 26 75 aa 8e fb 7d a3 db 66 97 e4 6d bf f6 72 f9 ca 57 5e 0b 3f 80 Data Ascii: zP52Zs.nWf~o1juhF)\|V+y{<<?kLwq(l&:+ic[uTU5=t8+?[q4e`OLT13q?^~BC5R_w.Cgo'9a7lOz?&u}fmrW^?
2025-03-20 18:19:40 UTC	1369	IN	Data Raw: e2 b4 d4 a8 a9 1a 71 43 e9 bc 7c a6 d4 47 7a 74 b5 b3 7b 2d 52 ee ff ac e9 64 83 a2 b0 36 a9 59 79 c1 0b df d7 7c ef ff fc 5b 0c 42 63 cf 2c 35 a5 d5 8c 55 35 bb 6c 50 35 be fa 03 04 f3 b7 ff e4 37 a6 ee fb f8 eb 24 ec 4f 6b 3a 68 5d 88 bb a2 be ce ce f3 2b 19 a7 3a a6 2c 13 3a bb 41 f8 f9 57 67 8b 95 5e 38 39 f5 85 bf 7a c6 fc 4b 5f 7f c0 b7 b1 58 bf c1 36 1c 44 8f 23 0c a0 89 2e 53 56 21 b3 13 66 70 e7 9e f0 fa 7e 24 5b f2 14 b5 f2 a9 7f 71 7e e6 86 d2 32 fc 31 39 6a d6 1b e9 7c 02 e9 8b dd 3f fa 62 87 dd 43 2f 52 cd 84 86 30 b1 d5 c9 a5 be de b8 d8 b3 37 1e 3a 13 e2 9b 07 64 6e a2 21 07 d7 4f 99 07 af de e0 3f 78 ed 66 ff f0 f5 5b fc b3 13 81 44 4b 7d 0d 7a a1 fa 83 48 3d ab 2a 26 6d d7 91 9f 84 f2 93 7c 22 22 22 22 22 a4 6d 35 92 ea de 28 14 bb 75 a6 Data Ascii: qC\|Gzt{-Rd6Yy\|[Bc,5U5lP57$Ok:h]+:,:AWg^89zK_X6D#.SV!fp~$[q~219j\|?bC/R07:dn!O?xf[DK}zH=*&m\|"""""m5(u
2025-03-20 18:19:41 UTC	1369	IN	Data Raw: c0 b8 ba fd 6a 8d 3f 7c da 39 7e fc 15 f5 8f 16 91 a4 42 da 88 a8 88 40 55 bd 30 d6 b5 0b 5d 7b c3 89 f9 f8 8e 3d c7 a3 17 7c 63 df e0 59 f7 1c 0e af 3c 36 67 1b aa 12 6d 99 f5 16 37 ae 31 bd c0 13 0b 40 c2 18 5e 1c c3 38 9f 15 3c 26 7f df 88 88 88 88 88 2e aa 2c 7c 0e 43 a3 33 53 91 d9 7f 64 72 ea 67 7f e1 57 cd b9 b3 57 a5 7d 9f f3 73 5e 49 e3 63 c9 ff 9b fd 0f 95 ef 8b a8 b9 7c 16 2f ce f7 3a b4 1d 2a 8f ca 63 66 15 d0 c5 a5 52 be 6e 36 51 61 72 de 0f 49 57 ca ae 03 d2 9e ce 90 17 be e8 6f e5 ef ff fa 7f c8 c4 04 74 be 1f 48 33 e9 f7 9c 0f 3c 8e 08 a0 56 74 aa 69 fd f9 a5 de d4 83 9f 7c b1 a4 3d a0 4b d5 c5 95 30 38 ab 2a 1e d7 fa 22 eb ac 5c 9d 44 d0 6d a1 51 37 4e 35 bc 1e b7 9f 6c 9c fc f1 a8 f5 4b 3f 33 60 fa e1 a4 c4 83 03 0b 2f fa 81 87 fc 85 76 Data Ascii: j?\|9~B@U0]{=\|cY<6gm71@^8<&.,\|C3SdrgWW}s^Ic\|/:cfRn6QarIWotH3<Vti\|=K08"\DmQ7N5lK?3`/v

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:41 UTC	607	OUT	GET /favicon.ico HTTP/1.1 Host: madisonoffice.carrd.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://madisonoffice.carrd.co/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:42 UTC	309	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 18:19:42 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close CF-Cache-Status: EXPIRED Expires: Thu, 20 Mar 2025 22:19:42 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 923738242cbf420d-EWR
2025-03-20 18:19:42 UTC	644	IN	Data Raw: 32 37 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 3e 20 68 74 6d 6c 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 74 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 7d 20 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 34 32 35 32 64 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c Data Ascii: 27d<!DOCTYPE HTML> <html lang="en"> <head> <meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no" /> <title>Page not found</title> <style> html {font-size: 15pt; height: 100%; } body {background: #24252d; font-family: Arial,
2025-03-20 18:19:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:43 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJWhywEInP7MAQiFoM0BCL7VzgEIgdbOAQjI3M4BCIrgzgEIxuHOAQiu5M4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:43 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:19:43 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-u2ylKEYJiNFaiVJfpFVY8g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 18:19:43 UTC	1303	IN	Data Raw: 65 33 35 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 79 74 20 63 72 6f 73 73 77 6f 72 64 20 63 6c 75 65 73 22 2c 22 62 61 62 79 20 66 6f 72 6d 75 6c 61 73 20 77 69 74 68 20 68 65 61 76 79 20 6d 65 74 61 6c 73 22 2c 22 67 6f 6c 64 65 6e 20 73 74 61 74 65 20 77 61 72 72 69 6f 72 73 22 2c 22 72 6f 63 6b 73 74 61 72 20 67 61 6d 65 73 20 67 74 61 20 36 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 2c 22 62 65 73 74 20 67 61 6d 65 73 20 73 74 65 61 6d 20 73 61 6c 65 22 2c 22 73 70 72 69 6e 67 20 65 71 75 69 6e 6f 78 20 6e 6f 72 74 68 65 72 6e 20 68 65 6d 69 73 70 68 65 72 65 22 2c 22 69 6e 74 65 72 65 73 74 20 72 61 74 65 73 20 66 65 64 65 72 61 6c 20 72 65 73 65 72 76 65 22 2c 22 62 65 6e 67 61 6c 73 20 74 72 65 79 20 68 65 6e 64 72 69 63 6b 73 6f 6e 22 5d 2c 5b 22 Data Ascii: e35)]}'["",["nyt crossword clues","baby formulas with heavy metals","golden state warriors","rockstar games gta 6 release date","best games steam sale","spring equinox northern hemisphere","interest rates federal reserve","bengals trey hendrickson"],["
2025-03-20 18:19:43 UTC	1303	IN	Data Raw: 30 74 36 4d 6c 45 35 54 57 46 6f 5a 30 59 32 5a 7a 4e 4e 51 32 5a 4d 64 6e 56 72 4e 7a 52 68 4f 58 6b 77 4e 44 4e 49 55 30 74 45 64 56 51 32 53 46 6c 43 55 33 6b 79 51 6e 42 33 62 47 45 72 4f 54 6c 53 51 53 74 43 61 45 46 75 4e 7a 68 79 56 54 41 30 61 46 64 78 51 6c 6b 79 56 6b 70 4e 63 6d 46 6a 53 55 78 45 63 57 6c 31 61 47 35 73 64 6b 31 69 53 58 70 55 4f 57 68 73 62 32 68 30 51 57 46 54 4d 57 70 68 4e 55 70 5a 53 46 56 69 61 57 39 7a 4f 47 39 4d 51 54 67 31 61 47 4a 53 52 54 5a 52 57 46 6c 73 4f 57 67 78 52 6b 64 36 5a 6d 35 4d 56 33 67 76 54 6e 56 51 63 30 59 72 55 6e 6c 31 61 33 4e 45 59 56 6c 46 53 47 78 32 61 33 64 57 65 55 70 33 52 7a 4a 52 52 30 67 30 53 31 68 5a 62 32 63 35 62 56 56 6b 4f 55 39 54 4d 47 49 33 4d 55 4e 68 4e 54 64 50 4d 30 6c 4f Data Ascii: 0t6MlE5TWFoZ0Y2ZzNNQ2ZMdnVrNzRhOXkwNDNIU0tEdVQ2SFlCU3kyQnB3bGErOTlSQStCaEFuNzhyVTA0aFdxQlkyVkpNcmFjSUxEcWl1aG5sdk1iSXpUOWhsb2h0QWFTMWphNUpZSFViaW9zOG9MQTg1aGJSRTZRWFlsOWgxRkd6Zm5MV3gvTnVQc0YrUnl1a3NEYVlFSGx2a3dWeUp3RzJRR0g0S1hZb2c5bVVkOU9TMGI3MUNhNTdPM0lO
2025-03-20 18:19:43 UTC	1038	IN	Data Raw: 5a 56 42 31 53 6a 4e 52 4e 55 74 6a 57 6b 31 6c 55 6a 68 76 65 48 4e 47 52 44 5a 51 64 31 51 72 4d 6c 4a 48 4e 6b 31 45 4f 47 78 52 62 48 42 4e 63 6c 6c 6a 56 58 45 77 63 47 46 56 61 6e 68 30 4e 30 68 35 55 6c 68 75 63 56 5a 34 61 30 6b 72 4d 55 68 4a 4f 56 5a 4f 5a 55 35 6f 4f 58 46 4c 52 30 56 49 52 32 31 5a 61 33 4a 6e 63 32 64 35 54 30 4e 7a 5a 57 4a 59 52 45 52 59 53 44 49 7a 62 46 46 70 65 55 68 52 51 30 74 49 4f 58 4e 68 57 58 49 30 52 56 64 4c 64 6b 4e 56 52 6a 46 70 53 55 39 4a 4c 7a 56 50 51 6d 46 57 65 47 56 5a 62 32 45 72 54 6b 59 33 56 30 51 78 59 31 70 68 62 6c 4a 70 4e 45 52 46 4d 46 52 61 57 45 64 57 4e 6a 42 77 63 45 52 53 53 56 6b 33 62 6e 4a 75 61 45 31 50 57 45 35 71 53 31 56 7a 4d 45 35 46 53 53 74 4b 57 47 78 4a 5a 6d 35 7a 63 33 6c Data Ascii: ZVB1SjNRNUtjWk1lUjhveHNGRDZQd1QrMlJHNk1EOGxRbHBNclljVXEwcGFVanh0N0h5UlhucVZ4a0krMUhJOVZOZU5oOXFLR0VIR21Za3Jnc2d5T0NzZWJYRERYSDIzbFFpeUhRQ0tIOXNhWXI0RVdLdkNVRjFpSU9JLzVPQmFWeGVZb2ErTkY3V0QxY1phblJpNERFMFRaWEdWNjBwcERSSVk3bnJuaE1PWE5qS1VzME5FSStKWGxJZm5zc3l
2025-03-20 18:19:43 UTC	1220	IN	Data Raw: 64 62 31 0d 0a 4e 57 4a 4c 53 43 74 76 59 58 68 4d 5a 31 70 32 53 32 5a 77 64 56 63 7a 64 6b 64 30 51 32 39 45 65 6d 6b 33 52 31 45 78 55 47 45 31 65 6c 56 55 62 47 4e 58 53 30 64 34 5a 79 73 77 52 6a 5a 6e 64 6a 4e 57 63 31 67 33 57 44 6c 4b 55 6e 6b 30 4f 55 30 79 59 32 52 52 54 6a 6b 7a 4c 32 5a 61 51 6e 67 72 62 30 63 30 52 47 39 45 55 30 64 73 4e 6d 56 77 64 6b 39 6b 63 47 4a 47 5a 48 5a 33 5a 6b 64 6c 62 6c 70 73 62 55 4a 42 53 6a 5a 57 54 45 4e 68 4d 48 5a 6f 61 58 4a 46 62 44 49 79 57 46 52 48 64 30 45 30 65 69 74 4f 61 46 6c 5a 59 55 52 73 4d 48 4a 30 51 56 4e 73 62 44 64 68 56 7a 4e 69 4b 7a 46 75 5a 54 4a 30 55 56 55 33 4f 55 39 56 51 56 42 69 5a 6c 5a 43 55 46 64 4e 54 55 52 55 54 7a 4e 61 65 44 42 42 51 6e 6f 78 51 6a 64 45 4f 44 56 50 4d 33 Data Ascii: db1NWJLSCtvYXhMZ1p2S2ZwdVczdkd0Q29Eemk3R1ExUGE1elVUbGNXS0d4ZyswRjZndjNWc1g3WDlKUnk0OU0yY2RRTjkzL2ZaQngrb0c0RG9EU0dsNmVwdk9kcGJGZHZ3ZkdlblpsbUJBSjZWTENhMHZoaXJFbDIyWFRHd0E0eitOaFlZYURsMHJ0QVNsbDdhVzNiKzFuZTJ0UVU3OU9VQVBiZlZCUFdNTURUTzNaeDBBQnoxQjdEODVPM3
2025-03-20 18:19:43 UTC	1220	IN	Data Raw: 52 51 55 52 42 55 55 56 43 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 33 55 55 4e 43 55 55 67 76 65 45 46 42 61 30 56 52 51 55 4e 42 5a 30 56 45 51 57 64 6a 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 52 53 55 52 46 55 56 46 54 54 56 4e 49 64 30 6c 72 52 6d 68 6a 57 6b 64 6f 4d 47 59 76 59 55 46 42 64 30 52 42 55 55 46 44 52 56 46 4e 55 6b 46 45 4f 45 46 6c 54 6b 5a 47 52 6b 46 43 55 6c 56 6a 4f 44 42 6b 64 6b 4a 4b 55 45 38 30 55 30 74 4b 55 7a 64 31 5a 57 6c 78 51 6d 74 74 61 31 5a 31 5a 6e 52 59 4d 57 35 56 54 44 4a 54 55 46 4a 61 55 44 5a 6b 57 54 56 34 52 56 46 6e 54 58 4e 6e 4f 44 4a 4b 65 6e 63 31 4f 47 67 77 4f 48 70 52 5a 58 42 45 4e 57 39 79 65 6d 78 77 64 6d 46 71 64 56 68 54 4e 55 45 33 57 48 59 30 4e 6b Data Ascii: RQURBUUVCQUFBQUFBQUFBQUFBQUFBQUF3UUNCUUgveEFBa0VRQUNBZ0VEQWdjQUFBQUFBQUFBQUFBQUFRSURFUVFTTVNId0lrRmhjWkdoMGYvYUFBd0RBUUFDRVFNUkFEOEFlTkZGRkFCUlVjODBkdkJKUE80U0tKUzd1ZWlxQmtta1Z1ZnRYMW5VTDJTUFJaUDZkWTV4RVFnTXNnODJKenc1OGgwOHpRZXBENW9yemxwdmFqdVhTNUE3WHY0Nk
2025-03-20 18:19:43 UTC	1072	IN	Data Raw: 75 4c 31 5a 6a 54 6a 52 33 64 33 6b 32 4d 46 6f 33 59 32 70 6f 62 6d 68 54 57 45 6b 34 59 32 6f 72 51 55 74 55 51 31 52 6a 4c 31 49 76 56 30 39 54 64 54 4a 78 52 57 46 7a 54 47 31 4d 4b 31 55 72 52 31 6f 77 53 7a 4a 52 55 6e 64 71 4d 6b 4a 4f 59 54 4e 61 56 7a 64 61 64 45 52 72 55 33 6c 31 4e 44 56 4d 62 6c 52 75 59 6b 68 33 4d 55 64 59 61 45 70 51 56 6c 42 4e 5a 6a 49 76 56 44 46 36 53 48 64 56 51 6e 6c 53 62 58 41 33 57 6d 31 6e 64 55 6c 77 62 7a 46 59 61 57 6c 6b 57 46 56 46 59 33 4e 6e 4e 55 64 53 56 48 42 53 56 57 78 6f 61 33 4e 61 54 30 78 35 61 47 67 33 63 7a 4d 30 62 47 39 45 57 6a 5a 49 51 53 39 33 51 56 46 79 62 6a 68 57 59 31 46 73 51 55 46 6d 52 6c 56 50 51 32 5a 6a 4f 48 4e 71 62 32 46 58 5a 48 68 51 53 6d 52 54 64 6b 78 4f 53 6b 70 4b 53 54 Data Ascii: uL1ZjTjR3d3k2MFo3Y2pobmhTWEk4Y2orQUtUQ1RjL1IvV09TdTJxRWFzTG1MK1UrR1owSzJRUndqMkJOYTNaVzdadERrU3l1NDVMblRuYkh3MUdYaEpQVlBNZjIvVDF6SHdVQnlSbXA3Wm1ndUlwbzFYaWlkWFVFY3NnNUdSVHBSVWxoa3NaT0x5aGg3czM0bG9EWjZIQS93QVFybjhWY1FsQUFmRlVPQ2ZjOHNqb2FXZHhQSmRTdkxOSkpKST
2025-03-20 18:19:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:55 UTC	715	OUT	GET /uiw920 HTTP/1.1 Host: dua-tech.us Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://madisonoffice.carrd.co/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:55 UTC	1353	IN	HTTP/1.1 403 Forbidden Date: Thu, 20 Mar 2025 18:19:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 92373878fe4855d7-EWR Server: cloudflare Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cf-Mitigated: challenge Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin Server-Timing: chlray;desc="92373878fe4855d7" X-Content-Options: nosniff
2025-03-20 18:19:55 UTC	932	IN	Data Raw: 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 66 2d 43 68 6c 2d 4f 75 74 3a 20 72 2f 47 4d 62 57 30 76 74 42 64 62 46 62 53 66 47 48 57 76 48 50 39 38 57 48 53 48 2b 51 67 37 45 6e 43 36 41 45 70 31 56 41 47 62 37 36 78 50 44 4f 6c 4e 4d 57 76 57 2f 42 69 51 2b 36 6f 52 4e 49 34 46 63 63 52 43 72 43 64 59 31 47 64 52 6b 7a 48 76 41 58 76 62 4f 7a 78 31 49 32 67 77 64 4b 64 62 41 59 35 4e 77 69 78 2f 72 59 68 53 4b 77 6f 62 34 6f 76 44 74 54 49 71 72 2b 4b 61 6d 79 76 48 49 4a 7a 30 62 43 55 56 44 42 73 35 49 37 50 6b 79 41 3d 3d 24 74 56 75 46 48 6a 44 53 5a 4d 6f 69 4b 55 4d 4f 5a 71 2b 6d 39 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 Data Ascii: X-Frame-Options: SAMEORIGINCf-Chl-Out: r/GMbW0vtBdbFbSfGHWvHP98WHSH+Qg7EnC6AEp1VAGb76xPDOlNMWvW/BiQ+6oRNI4FccRCrCdY1GdRkzHvAXvbOzx1I2gwdKdbAY5Nwix/rYhSKwob4ovDtTIqr+KamyvHIJz0bCUVDBs5I7PkyA==$tVuFHjDSZMoiKUMOZq+m9g==Cache-Control: private, max-age=0,
2025-03-20 18:19:55 UTC	453	IN	Data Raw: 31 64 63 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 1dca<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-03-20 18:19:55 UTC	1369	IN	Data Raw: 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d Data Ascii: le-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;m
2025-03-20 18:19:55 UTC	1369	IN	Data Raw: 73 3d 22 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 32 22 3e 3c 73 70 61 6e 20 69 64 3d 22 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 22 3e 45 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 61 6e 64 20 63 6f 6f 6b 69 65 73 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 64 75 61 2d 74 65 63 68 2e 75 73 22 2c 63 54 79 70 65 3a 20 27 69 6e 74 65 72 61 63 74 69 76 65 27 2c 63 52 61 79 3a 20 27 39 32 33 37 Data Ascii: s="main-content"><noscript><div class="h2"><span id="challenge-error-text">Enable JavaScript and cookies to continue</span></div></noscript></div></div><script>(function(){window._cf_chl_opt={cvId: '3',cZone: "dua-tech.us",cType: 'interactive',cRay: '9237
2025-03-20 18:19:55 UTC	1369	IN	Data Raw: 51 38 64 77 2e 4e 76 65 4d 68 73 33 68 52 45 32 38 4c 33 32 55 67 6f 52 42 65 78 5f 65 44 57 4a 70 4d 31 64 42 54 72 31 73 36 42 6e 47 52 69 32 6f 2e 39 56 6f 42 62 63 56 37 53 72 34 30 76 5a 61 70 47 43 44 52 39 55 74 6a 32 47 47 7a 32 46 69 32 33 51 50 31 57 5a 65 65 42 50 47 2e 7a 70 36 50 79 6a 5a 61 65 43 6e 6a 52 57 6b 2e 4c 47 43 36 56 45 6b 50 79 63 35 55 6b 5f 48 75 65 54 44 65 4f 68 39 53 70 43 49 57 36 6a 59 72 5a 65 35 64 79 63 79 71 46 75 51 7a 69 56 57 63 4a 76 31 6e 42 63 6a 59 35 71 43 45 36 4f 49 6a 6f 4b 7a 73 72 78 6a 66 39 66 41 55 75 42 63 79 49 4a 31 57 61 30 6e 6d 48 44 4a 41 59 5f 47 67 67 47 51 4e 4b 6d 39 55 2e 75 75 70 59 2e 4c 51 6f 68 6d 46 73 78 57 38 4f 4f 71 2e 70 7a 5f 64 77 35 50 4c 4a 42 32 75 6e 6b 67 75 4a 44 52 52 34 Data Ascii: Q8dw.NveMhs3hRE28L32UgoRBex_eDWJpM1dBTr1s6BnGRi2o.9VoBbcV7Sr40vZapGCDR9Utj2GGz2Fi23QP1WZeeBPG.zp6PyjZaeCnjRWk.LGC6VEkPyc5Uk_HueTDeOh9SpCIW6jYrZe5dycyqFuQziVWcJv1nBcjY5qCE6OIjoKzsrxjf9fAUuBcyIJ1Wa0nmHDJAY_GggGQNKm9U.uupY.LQohmFsxW8OOq.pz_dw5PLJB2unkguJDRR4
2025-03-20 18:19:55 UTC	1369	IN	Data Raw: 36 33 49 6e 34 41 74 75 33 66 4f 49 78 4c 70 4b 64 55 42 73 36 67 38 74 75 4a 50 71 46 6c 38 68 4a 5a 41 68 78 46 47 52 55 30 73 6f 56 79 55 72 64 4c 41 31 41 42 50 70 38 50 70 55 4b 7a 73 5a 4a 50 53 32 37 63 67 5f 55 44 4c 56 59 34 77 47 69 65 52 4f 35 41 45 54 53 4c 68 4b 34 67 62 46 56 58 66 55 5f 4c 4c 59 6d 70 32 31 72 43 48 6e 59 67 31 6c 30 75 5f 38 6b 58 48 39 61 7a 48 72 7a 7a 63 30 41 44 4b 78 4d 48 63 7a 74 61 64 7a 7a 56 52 64 73 4a 76 36 53 57 5a 74 71 57 36 42 33 6a 67 79 35 4b 66 67 6a 4e 45 63 4c 42 68 45 64 33 6c 4b 6d 52 50 74 56 4d 79 74 4a 39 56 31 52 50 34 64 76 46 68 72 56 62 4d 57 58 77 50 37 55 6a 43 35 34 49 4a 75 6b 51 69 69 4c 4e 63 51 2e 69 61 68 65 51 50 51 4a 4a 69 64 73 45 67 39 74 4a 2e 56 70 59 30 6e 5f 69 37 46 71 56 77 Data Ascii: 63In4Atu3fOIxLpKdUBs6g8tuJPqFl8hJZAhxFGRU0soVyUrdLA1ABPp8PpUKzsZJPS27cg_UDLVY4wGieRO5AETSLhK4gbFVXfU_LLYmp21rCHnYg1l0u_8kXH9azHrzzc0ADKxMHcztadzzVRdsJv6SWZtqW6B3jgy5KfgjNEcLBhEd3lKmRPtVMytJ9V1RP4dvFhrVbMWXwP7UjC54IJukQiiLNcQ.iaheQPQJJidsEg9tJ.VpY0n_i7FqVw
2025-03-20 18:19:55 UTC	1369	IN	Data Raw: 49 65 59 48 37 50 46 4c 64 5f 74 6a 56 4b 43 71 56 4a 35 6e 6c 74 6e 55 70 33 56 71 69 64 2e 30 4b 33 78 65 30 52 30 49 6d 38 64 72 2e 4e 63 4e 6a 59 64 68 63 39 58 53 41 78 57 71 6f 6d 69 44 37 5f 68 70 34 61 4d 76 30 4f 79 62 4b 43 77 61 30 4e 6a 6a 79 6e 38 68 48 34 72 4c 32 55 63 41 70 6d 4f 37 65 39 54 2e 43 4c 50 4f 39 48 59 73 66 66 58 2e 71 76 36 71 75 68 73 53 4c 42 6c 76 37 70 53 70 68 35 31 51 63 61 70 4a 54 57 68 33 63 53 51 39 73 48 66 63 33 33 78 61 54 6d 4b 4f 62 4f 42 6e 4b 63 7a 72 61 4a 73 5a 76 4c 72 35 65 75 43 78 64 62 39 58 64 65 76 4b 7a 74 50 46 62 46 76 47 6f 43 31 47 49 74 73 34 50 65 71 5f 57 49 58 42 73 45 79 55 66 49 7a 6d 7a 5f 49 35 52 54 6f 61 66 62 4c 39 46 79 6b 42 79 56 42 66 51 48 34 45 55 54 45 37 52 57 45 4e 67 56 58 Data Ascii: IeYH7PFLd_tjVKCqVJ5nltnUp3Vqid.0K3xe0R0Im8dr.NcNjYdhc9XSAxWqomiD7_hp4aMv0OybKCwa0Njjyn8hH4rL2UcApmO7e9T.CLPO9HYsffX.qv6quhsSLBlv7pSph51QcapJTWh3cSQ9sHfc33xaTmKObOBnKczraJsZvLr5euCxdb9XdevKztPFbFvGoC1GIts4Peq_WIXBsEyUfIzmz_I5RToafbL9FykByVBfQH4EUTE7RWENgVX
2025-03-20 18:19:55 UTC	336	IN	Data Raw: 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 75 69 77 39 32 30 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 30 5f 63 74 43 74 6b 6d 30 74 6a 5f 35 75 42 31 36 4b 42 66 33 56 38 4b 59 61 57 45 67 6a 62 66 33 6e 76 58 69 68 4e 56 72 32 59 2d 31 37 34 32 34 39 34 37 39 35 2d 31 2e 30 2e 31 2e 31 2d 6e 38 53 4f 31 45 38 6a 34 36 54 56 6f 36 52 51 5a 59 4a 4c 51 67 55 78 36 68 5a 43 41 39 79 47 4e 44 4e 6e 37 2e 64 52 53 33 55 22 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 29 3b 63 70 6f 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 6f 67 55 29 3b 7d 7d 64 6f 63 75 6d 65 6e Data Ascii: eState(null, null, "\/uiw920?__cf_chl_rt_tk=0_ctCtkm0tj_5uB16KBf3V8KYaWEgjbf3nvXihNVr2Y-1742494795-1.0.1.1-n8SO1E8j46TVo6RQZYJLQgUx6hZCA9yGNDNn7.dRS3U" + window._cf_chl_opt.cOgUHash);cpo.onload = function() {history.replaceState(null, null, ogU);}}documen
2025-03-20 18:19:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:56 UTC	536	OUT	OPTIONS /report/v4?s=RIJ5KqcXJBKtQE67HNLPigb7FMQMmFThgChFv%2BUqiPez%2Fu2BMHxRX6WV5xIdwk3Gw09FPI1Qw92mnc4IHEKMARtpGOF%2FTvNlyQe7Ck9CYXgyAjiJYm3MX5rWtdzA8A%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://dua-tech.us Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:56 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 20 Mar 2025 18:19:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:56 UTC	987	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=92373879c9cec8b9 HTTP/1.1 Host: dua-tech.us Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dua-tech.us/uiw920?__cf_chl_rt_tk=Va_OWVXUIj.Xw9TmbIHEuZVGP_CW3a6fNINp9vPww00-1742494795-1.0.1.1-MBM38wpiUZvpWiVA_pL9hOXnb8Ip5v6.BoshxLRoDJM Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:56 UTC	875	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:19:56 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 97768 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dqsyS7RGnPZay6Pr4xQB161vJBrsobRqe0qtXEGRGF5dmuFndEFrjAfl0YT4vDNoXUs0%2FXkTcn%2BOoR%2BZ2FfrpoEpsZvRDxwNH7uP0%2Fv0z9594%2B2ZIK1K8B9QlhGTOw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9237387ecd310f68-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=108638&min_rtt=108493&rtt_var=23107&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1581&delivery_rate=34196&cwnd=239&unsent_bytes=0&cid=c7ddc5260c8af22a&ts=276&x=0"
2025-03-20 18:19:56 UTC	494	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 Data Ascii: window._cf_chl_opt.uaSR=true;window._cf_chl_opt.CuUS7={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"},"translations":{"stuck_helper
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 73 73 69 73 74 61 6e 63 65 25 32 43 25 32 30 63 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 73 69 74 65 25 32 30 6f 77 6e 65 72 73 2e 22 2c 22 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 68 65 6c 70 65 72 5f 65 78 70 6c 61 69 6e 65 72 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 75 73 65 73 25 32 30 61 25 32 30 73 65 63 75 72 69 74 79 25 32 30 73 65 72 76 69 63 65 25 32 30 74 6f 25 32 30 70 72 6f 74 65 63 74 25 32 30 61 67 61 69 6e 73 74 25 32 30 6d 61 6c 69 63 69 6f 75 73 25 32 30 62 6f 74 73 2e 25 32 30 59 6f 75 25 32 30 6d 61 79 25 32 30 73 65 65 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 32 30 77 68 69 6c 65 25 32 30 74 68 65 25 32 30 73 69 74 65 25 32 30 76 65 72 69 66 69 65 73 25 32 30 79 6f 75 25 32 37 72 Data Ascii: ssistance%2C%20contact%20the%20site%20owners.","interstitial_helper_explainer":"%25%7Bplaceholder.com%7D%20uses%20a%20security%20service%20to%20protect%20against%20malicious%20bots.%20You%20may%20see%20this%20page%20while%20the%20site%20verifies%20you%27r
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 22 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 25 32 30 67 75 69 64 65 6c 69 6e 65 73 22 2c 22 66 6f 6f 74 65 72 5f 74 65 78 74 22 3a 22 50 65 72 66 6f 72 6d 61 6e 63 65 25 32 30 25 32 36 61 6d 70 25 33 42 25 32 30 73 65 63 75 72 69 74 79 25 32 30 62 79 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 22 2c 22 72 65 76 69 65 77 5f 63 6f 6e 6e 65 63 74 69 6f 6e 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 6e 65 65 64 73 25 32 30 74 6f 25 32 30 72 65 76 69 65 77 25 32 30 74 68 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 6f 66 25 32 30 79 6f 75 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 Data Ascii: ","feedback_report_guideline":"Troubleshooting%20guidelines","footer_text":"Performance%20%26amp%3B%20security%20by%20Cloudflare","review_connection":"%25%7Bplaceholder.com%7D%20needs%20to%20review%20the%20security%20of%20your%20connection%20before%20proc
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 25 32 30 59 6f 75 72 25 32 30 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 37 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 25 32 37 25 33 45 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 75 6e 73 75 70 70 6f 72 74 65 64 25 33 43 25 32 46 61 25 33 45 25 32 30 61 6e 64 25 32 30 75 6e 61 62 6c 65 25 32 30 74 6f 25 32 30 63 6f 6d 70 6c 65 74 65 25 32 30 76 65 72 69 66 69 63 61 74 69 6f 6e 2e 25 32 30 54 72 79 25 32 30 61 25 32 30 64 69 66 66 65 72 65 6e 74 25 32 30 62 72 6f 77 73 65 Data Ascii: before%20proceeding.%20Your%20%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%27challenge.supported_browsers%27%3Ebrowser%20is%20unsupported%3C%2Fa%3E%20and%20unable%20to%20complete%20verification.%20Try%20a%20different%20browse
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 79 25 32 30 61 67 61 69 6e 2e 25 32 30 49 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 25 32 30 61 74 74 65 6d 70 74 25 32 30 61 25 32 30 64 69 66 66 65 72 65 6e 74 25 32 30 6c 69 6e 6b 25 32 30 74 6f 25 32 30 67 65 74 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 64 65 73 69 72 65 64 25 32 30 70 61 67 65 2e 25 32 30 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 25 32 43 25 32 30 74 72 79 25 32 30 67 6f 69 6e 67 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 72 6f 6f 74 25 32 30 6f 66 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 Data Ascii: y%20again.%20If%20the%20issue%20persists%20attempt%20a%20different%20link%20to%20get%20to%20the%20desired%20page.%20Alternatively%2C%20try%20going%20to%20the%20root%20of%20%25%7Bplaceholder.com%7D."},"polyfills":{"feedback_report_guideline":false,"turnsti
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 74 54 69 6d 65 6f 75 74 28 65 5a 2c 30 29 2c 65 4d 5b 67 46 28 31 31 35 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 36 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 68 36 3d 67 46 2c 63 3d 7b 27 49 66 64 54 53 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 63 6f 65 67 4e 27 3a 68 36 28 38 36 33 29 2c 27 78 79 46 41 4d 27 3a 68 36 28 31 32 34 31 29 2c 27 73 65 4c 50 64 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 67 28 68 2c 69 2c 6a 29 7d 2c 27 75 4a 53 4b 64 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 2a 68 7d 7d 2c 64 3d 66 30 28 29 2c 65 3d 65 4d 5b 68 36 28 31 32 32 37 29 5d 28 63 5b 68 36 28 35 39 38 29 5d 28 66 32 2c 64 29 29 2c 63 5b 68 36 28 35 39 38 Data Ascii: tTimeout(eZ,0),eM[gF(1157)]=function(h6,c,d,e,f){if(h6=gF,c={'IfdTS':function(g,h){return g(h)},'coegN':h6(863),'xyFAM':h6(1241),'seLPd':function(g,h,i,j){return g(h,i,j)},'uJSKd':function(g,h){return g*h}},d=f0(),e=eM[h6(1227)](c[h6(598)](f2,d)),c[h6(598
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 4f 27 3a 68 39 28 31 30 30 38 29 2c 27 45 63 71 42 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 3f 28 66 3d 64 5b 68 39 28 31 33 37 39 29 5d 2c 64 5b 68 39 28 35 32 33 29 5d 26 26 74 79 70 65 6f 66 20 64 5b 68 39 28 35 32 33 29 5d 3d 3d 3d 65 5b 68 39 28 36 37 39 29 5d 29 26 26 28 6a 3d 64 5b 68 39 28 35 32 33 29 5d 5b 68 39 28 31 33 32 34 29 5d 28 27 5c 6e 27 29 2c 6a 5b 68 39 28 36 32 33 29 5d 3e 31 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 68 39 28 39 38 37 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 68 39 28 37 36 36 29 5d 28 70 61 72 73 Data Ascii: O':h9(1008),'EcqBO':function(n,o,s){return n(o,s)}},d instanceof Error)?(f=d[h9(1379)],d[h9(523)]&&typeof d[h9(523)]===e[h9(679)])&&(j=d[h9(523)][h9(1324)]('\n'),j[h9(623)]>1)&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][h9(987)](k),l&&(g=l[1],h=e[h9(766)](pars
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 28 29 7d 7d 2c 64 3d 65 4d 5b 69 37 28 38 38 30 29 5d 5b 69 37 28 38 34 30 29 5d 7c 7c 31 65 34 2c 65 3d 63 5b 69 37 28 31 30 34 31 29 5d 28 66 56 29 2c 21 65 4d 5b 69 37 28 38 37 36 29 5d 26 26 21 66 4a 28 29 26 26 21 65 4d 5b 69 37 28 31 32 30 32 29 5d 5b 69 37 28 31 34 32 36 29 5d 26 26 65 2d 66 55 3e 64 3f 63 5b 69 37 28 31 30 34 31 29 5d 28 66 72 29 3a 63 5b 69 37 28 31 31 30 34 29 5d 28 66 73 29 7d 2c 31 65 33 29 29 2c 66 59 3d 7b 7d 2c 66 59 5b 67 46 28 31 34 32 36 29 5d 3d 21 5b 5d 2c 66 59 5b 67 46 28 36 31 37 29 5d 3d 66 61 2c 66 59 5b 67 46 28 35 34 32 29 5d 3d 66 70 2c 66 59 5b 67 46 28 31 33 39 31 29 5d 3d 66 54 2c 66 59 5b 67 46 28 39 31 32 29 5d 3d 66 53 2c 66 59 5b 67 46 28 31 31 32 35 29 5d 3d 66 66 2c 66 59 5b 67 46 28 36 39 36 29 5d 3d Data Ascii: ()}},d=eM[i7(880)][i7(840)]\|\|1e4,e=c[i7(1041)](fV),!eM[i7(876)]&&!fJ()&&!eM[i7(1202)][i7(1426)]&&e-fU>d?c[i7(1041)](fr):c[i7(1104)](fs)},1e3)),fY={},fY[gF(1426)]=![],fY[gF(617)]=fa,fY[gF(542)]=fp,fY[gF(1391)]=fT,fY[gF(912)]=fS,fY[gF(1125)]=ff,fY[gF(696)]=
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 28 65 5b 69 54 28 35 37 38 29 5d 28 65 5b 69 54 28 31 34 35 31 29 5d 2c 69 54 28 36 36 34 29 29 29 64 28 69 54 28 39 31 37 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 65 5b 69 54 28 31 33 38 32 29 5d 28 67 76 2c 63 29 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 20 65 5b 69 54 28 35 37 38 29 5d 28 65 5b 69 54 28 31 31 38 35 29 5d 2c 65 5b 69 54 28 31 31 38 35 29 5d 29 3f 69 54 28 31 34 31 38 29 3a 67 74 28 65 5b 69 54 28 31 33 38 32 29 5d 28 67 75 2c 63 29 29 7d 7d 2c 67 77 3d 66 75 6e 63 74 69 6f 6e 28 69 55 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 55 3d 67 46 2c 64 3d 7b 27 54 4b 66 53 66 27 3a 69 55 28 31 35 30 30 29 2c 27 53 71 51 74 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 73 49 Data Ascii: (e[iT(578)](e[iT(1451)],iT(664)))d(iT(917));else return e[iT(1382)](gv,c)}catch(h){return e[iT(578)](e[iT(1185)],e[iT(1185)])?iT(1418):gt(e[iT(1382)](gu,c))}},gw=function(iU,d,e,f,g){return iU=gF,d={'TKfSf':iU(1500),'SqQth':function(h,i){return i===h},'sI
2025-03-20 18:19:56 UTC	1369	IN	Data Raw: 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 6d 53 49 42 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 65 56 5a 64 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 56 52 41 47 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 6b 49 74 78 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4f 50 7a 72 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4e 71 70 55 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 57 50 57 44 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 Data Ascii: (h,i){return h&i},'mSIBp':function(h,i){return h(i)},'eVZdJ':function(h,i){return h>i},'VRAGA':function(h,i){return i&h},'kItxv':function(h,i){return h-i},'OPzrk':function(h,i){return i==h},'NqpUV':function(h,i){return h(i)},'WPWDg':function(h,i){return h

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:56 UTC	511	OUT	POST /report/v4?s=RIJ5KqcXJBKtQE67HNLPigb7FMQMmFThgChFv%2BUqiPez%2Fu2BMHxRX6WV5xIdwk3Gw09FPI1Qw92mnc4IHEKMARtpGOF%2FTvNlyQe7Ck9CYXgyAjiJYm3MX5rWtdzA8A%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 419 Content-Type: application/reports+json Origin: https://dua-tech.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:56 UTC	419	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 32 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 64 69 73 6f 6e 6f 66 66 69 63 65 2e 63 61 72 72 64 2e 63 6f 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 37 2e 32 35 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":626,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://madisonoffice.carrd.co/","sampling_fraction":1.0,"server_ip":"172.67.177.252","status_code":403,"type":"http.error"},"type":"network-error"
2025-03-20 18:19:56 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 20 Mar 2025 18:19:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:57 UTC	1279	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1947870396:1742491020:1jqXBjzQRZSWPZsksybQbiE6VzL6rSB0ySXD8XgO4AY/92373879c9cec8b9/5w5DLpyshDE2ZCbBRuPqZW48GRPd661niG9Fclr4KLI-1742494795-1.2.1.1-zM6oZSCQNjDWpXv4O89cosg1ak1hFhAiCHlMrzSYczZGEWZGIwR3Zn9AlliRZgl6 HTTP/1.1 Host: dua-tech.us Connection: keep-alive Content-Length: 2146 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" cf-chl-ra: 0 sec-ch-ua-mobile: ?0 sec-ch-ua-model: "" sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 cf-chl: 5w5DLpyshDE2ZCbBRuPqZW48GRPd661niG9Fclr4KLI-1742494795-1.2.1.1-zM6oZSCQNjDWpXv4O89cosg1ak1hFhAiCHlMrzSYczZGEWZGIwR3Zn9AlliRZgl6 sec-ch-ua-platform-version: "10.0.0" Accept: / Origin: https://dua-tech.us Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://dua-tech.us/uiw920 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:57 UTC	2146	OUT	Data Raw: 35 73 69 4c 43 4c 77 4c 6f 4c 69 4c 4a 49 75 61 49 75 68 4c 51 5a 49 73 62 76 42 51 42 39 75 32 5a 55 72 39 6b 74 72 75 59 36 75 6a 5a 4e 67 75 55 75 35 72 49 67 42 6d 6f 36 75 70 67 6e 75 42 67 42 70 75 42 73 42 43 76 75 62 32 67 75 42 24 63 42 41 75 75 37 49 44 75 48 61 59 6f 6e 69 6a 4c 4e 34 75 79 4c 7a 67 75 30 36 68 70 5a 75 4d 6f 35 70 79 6f 38 31 2b 69 49 76 50 4c 7a 55 5a 66 79 76 79 62 65 30 36 32 74 6c 63 49 6b 6c 4c 69 49 75 39 24 39 51 42 4f 63 75 46 72 6f 47 75 75 74 75 7a 4f 49 67 6a 4f 63 75 6b 4f 34 74 57 49 52 57 36 62 50 79 71 30 52 71 51 62 70 71 49 48 63 73 4c 4e 36 5a 75 67 30 67 6a 67 73 34 5a 46 72 2b 49 62 6e 47 36 64 4c 4e 38 4c 75 54 35 42 24 44 61 4c 75 68 75 62 34 75 32 30 4c 75 30 5a 42 46 61 55 69 30 51 61 48 75 39 38 63 75 Data Ascii: 5siLCLwLoLiLJIuaIuhLQZIsbvBQB9u2ZUr9ktruY6ujZNguUu5rIgBmo6upgnuBgBpuBsBCvub2guB$cBAuu7IDuHaYonijLN4uyLzgu06hpZuMo5pyo81+iIvPLzUZfyvybe062tlcIklLiIu9$9QBOcuFroGuutuzOIgjOcukO4tWIRW6bPyq0RqQbpqIHcsLN6Zug0gjgs4ZFr+IbnG6dLN8LuT5B$DaLuhub4u20Lu0ZBFaUi0QaHu98cu
2025-03-20 18:19:57 UTC	846	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:19:57 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 17040 Connection: close cf-chl-gen: h9lcFYiVAiAxoTMOg+FxTazA1IYfVwmJyJKkzvpttwo=$db23SnawxB3efa2qyAw6RA== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6jA7JJjXSxQqN%2FTbQt8IwxyNLl62DgFWdhRhUoKpFzlcoZgIT4%2FUmrt7%2BfSAk02aAavAUKM0p48bYIh1ZZaGpT33uSxhOfPo0k9AsPae9mzGJSFuM0Z0tjueeqBl%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92373884fcde556e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=107912&min_rtt=105581&rtt_var=24693&sent=7&recv=10&lost=0&retrans=0&sent_bytes=2822&recv_bytes=4041&delivery_rate=35266&cwnd=248&unsent_bytes=0&cid=8792be404c7e5fad&ts=239&x=0"
2025-03-20 18:19:57 UTC	523	IN	Data Raw: 67 6d 4b 42 63 59 39 6a 6a 33 56 32 65 49 64 33 65 4a 61 52 58 58 39 73 56 70 56 67 6f 70 79 5a 5a 4b 61 44 68 4b 53 71 67 34 53 78 73 71 56 7a 6b 34 47 35 69 6e 47 31 63 71 6d 36 6a 33 75 68 65 4a 43 63 76 37 2b 46 6b 35 53 43 78 62 79 64 6e 4b 61 49 72 61 57 6e 68 73 72 50 6c 74 44 4d 79 37 54 4e 6a 37 75 70 73 38 43 5a 33 71 4b 31 6e 62 7a 5a 77 75 6e 71 33 65 72 4c 75 73 50 64 71 62 4b 6d 74 50 61 33 30 75 36 79 30 4d 66 64 74 66 6e 78 30 50 37 59 30 2f 47 39 41 76 6e 69 43 73 76 39 34 73 66 6b 2b 76 48 52 38 4f 77 52 45 51 4c 52 47 68 7a 57 45 2f 33 64 45 2f 67 64 4a 42 34 53 38 53 6a 6e 46 77 72 71 2b 41 55 63 4d 43 73 69 41 53 72 7a 45 41 37 76 44 51 77 4b 4f 6a 77 6c 47 7a 4d 68 4f 41 78 45 4c 6a 54 39 49 55 45 69 42 30 64 4a 4e 52 6b 2f 48 6a 34 Data Ascii: gmKBcY9jj3V2eId3eJaRXX9sVpVgopyZZKaDhKSqg4SxsqVzk4G5inG1cqm6j3uheJCcv7+Fk5SCxbydnKaIraWnhsrPltDMy7TNj7ups8CZ3qK1nbzZwunq3erLusPdqbKmtPa30u6y0Mfdtfnx0P7Y0/G9AvniCsv94sfk+vHR8OwREQLRGhzWE/3dE/gdJB4S8SjnFwrq+AUcMCsiASrzEA7vDQwKOjwlGzMhOAxELjT9IUEiB0dJNRk/Hj4
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 53 46 39 50 75 48 2b 41 54 33 79 41 68 46 67 50 77 42 78 37 2b 48 69 77 66 4a 41 33 36 48 77 4c 71 4c 7a 41 58 39 41 30 77 38 65 30 32 4e 7a 55 7a 43 52 38 36 4e 52 59 61 4a 77 51 42 49 6b 64 4e 44 54 38 77 54 31 42 44 53 56 52 47 4d 52 52 55 56 55 6f 33 4a 54 74 53 4d 31 4a 67 55 31 68 42 4c 32 64 53 48 32 4d 6b 53 69 56 42 4a 55 38 74 50 6b 70 76 4b 32 42 4a 55 44 46 51 63 6a 67 35 54 6c 5a 4d 61 47 47 43 58 6c 4a 62 63 57 4e 59 58 58 39 6e 6a 59 68 70 65 6b 68 6c 53 47 2b 54 56 47 35 33 56 57 5a 79 6c 56 4e 64 65 58 35 59 59 5a 4e 38 56 70 36 66 6e 5a 74 35 6d 57 52 6b 66 36 6d 46 6a 33 35 2f 6b 70 4f 53 68 34 4b 73 6a 36 57 58 6b 71 69 2f 6c 73 47 42 6c 5a 57 32 6d 59 53 78 66 35 36 36 6f 34 50 48 69 4b 75 4a 7a 4b 32 73 68 73 37 4c 6a 38 72 58 74 39 Data Ascii: SF9PuH+AT3yAhFgPwBx7+HiwfJA36HwLqLzAX9A0w8e02NzUzCR86NRYaJwQBIkdNDT8wT1BDSVRGMRRUVUo3JTtSM1JgU1hBL2dSH2MkSiVBJU8tPkpvK2BJUDFQcjg5TlZMaGGCXlJbcWNYXX9njYhpekhlSG+TVG53VWZylVNdeX5YYZN8Vp6fnZt5mWRkf6mFj35/kpOSh4Ksj6WXkqi/lsGBlZW2mYSxf566o4PHiKuJzK2shs7Lj8rXt9
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 45 74 37 38 41 2b 38 6b 43 52 30 61 35 67 55 58 49 67 76 34 41 53 4c 74 36 79 48 79 39 66 59 72 48 42 67 4f 4c 79 41 62 49 69 45 37 48 6a 51 44 4a 77 67 38 49 6b 59 45 53 44 5a 41 55 41 78 45 4c 69 51 4d 53 43 51 55 52 30 6b 54 50 43 30 74 54 69 34 76 4d 56 49 74 51 54 51 6a 57 45 63 35 57 6a 56 70 53 30 4d 34 58 55 46 67 51 44 56 70 54 6d 78 4f 62 56 4e 77 55 6e 46 55 64 46 5a 31 57 58 70 74 55 46 2b 48 67 47 68 73 67 45 6c 75 66 56 35 4d 59 6e 46 68 62 6f 68 78 5a 5a 47 45 66 49 71 56 65 31 61 52 63 70 61 41 59 58 32 6b 66 5a 2b 68 64 49 56 30 68 34 74 6d 73 4b 68 75 67 61 36 73 72 70 5a 7a 6c 36 69 55 6a 49 57 33 65 6f 43 37 75 48 57 51 78 5a 2b 69 6b 48 75 6a 69 4c 69 74 71 38 66 51 79 49 2b 77 6c 4a 33 55 76 38 79 76 79 62 65 76 78 74 62 5a 6c 37 57 Data Ascii: Et78A+8kCR0a5gUXIgv4ASLt6yHy9fYrHBgOLyAbIiE7HjQDJwg8IkYESDZAUAxELiQMSCQUR0kTPC0tTi4vMVItQTQjWEc5WjVpS0M4XUFgQDVpTmxObVNwUnFUdFZ1WXptUF+HgGhsgElufV5MYnFhbohxZZGEfIqVe1aRcpaAYX2kfZ+hdIV0h4tmsKhuga6srpZzl6iUjIW3eoC7uHWQxZ+ikHujiLitq8fQyI+wlJ3Uv8yvybevxtbZl7W
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 53 6a 7a 35 68 6a 6a 35 41 6e 2b 49 65 72 72 42 79 45 50 45 79 77 78 39 7a 4c 79 4a 68 45 77 45 43 45 66 4f 2f 73 31 48 43 4d 44 51 6a 77 4d 52 42 77 66 4f 7a 77 73 54 53 38 4e 4c 7a 41 32 4a 43 63 31 53 46 55 31 47 46 45 63 55 52 73 63 4e 7a 64 54 52 46 73 71 4f 30 67 36 4f 6d 35 4d 5a 6d 70 6b 4e 47 78 55 52 32 4e 6b 56 48 5a 61 53 54 5a 55 58 48 4d 36 51 48 6f 37 62 6d 4e 63 59 31 4a 6d 5a 59 56 59 61 6c 69 42 62 35 53 55 6a 46 4a 6c 6b 46 57 53 68 6c 52 70 63 6e 68 77 61 6e 6c 65 59 47 53 63 57 58 53 70 68 34 64 30 58 34 64 73 6b 59 47 50 71 37 53 73 63 35 52 33 74 37 69 6a 73 4a 4f 78 6d 35 4f 71 75 72 31 37 6d 58 2b 61 6c 70 2b 31 70 36 43 69 6f 61 4c 51 6b 61 57 6f 30 35 54 48 73 4a 43 74 6d 4b 71 55 73 70 75 33 6d 74 79 31 76 4f 4f 6c 77 63 44 6f Data Ascii: Sjz5hjj5An+IerrByEPEywx9zLyJhEwECEfO/s1HCMDQjwMRBwfOzwsTS8NLzA2JCc1SFU1GFEcURscNzdTRFsqO0g6Om5MZmpkNGxUR2NkVHZaSTZUXHM6QHo7bmNcY1JmZYVYaliBb5SUjFJlkFWShlRpcnhwanleYGScWXSph4d0X4dskYGPq7Ssc5R3t7ijsJOxm5Oqur17mX+alp+1p6CioaLQkaWo05THsJCtmKqUspu3mty1vOOlwcDo
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 59 47 42 51 54 73 2f 53 66 75 46 51 4d 5a 45 54 7a 38 50 79 76 34 46 66 6f 62 2f 54 41 5a 46 6b 63 4a 48 53 4d 59 54 53 63 68 48 69 63 76 45 45 4d 30 4d 53 6c 4c 57 45 74 52 4f 53 63 39 4d 32 41 32 55 7a 68 6a 4e 79 52 48 61 53 6c 62 56 32 73 74 51 55 51 2b 53 46 4e 50 52 6a 45 30 58 7a 4a 6a 4e 45 6f 7a 58 54 6c 61 56 6c 35 57 59 6b 42 6b 65 46 64 7a 68 47 52 36 61 33 39 4f 65 57 75 44 54 5a 42 78 59 56 4a 6d 5a 59 5a 79 62 32 64 5a 6a 35 56 39 61 36 4e 34 58 58 70 78 67 61 69 55 6d 49 74 73 6f 49 61 64 73 61 75 76 6e 57 36 77 70 34 79 71 6a 61 65 56 76 4c 79 53 65 35 7a 41 72 37 61 77 72 70 4b 30 6b 72 61 37 67 34 65 56 6e 62 36 64 69 71 48 43 6f 71 4f 6c 78 71 47 31 71 4a 66 4d 75 36 33 4f 71 64 32 2f 74 36 7a 52 74 64 54 65 77 64 32 68 78 72 72 6a 78 Data Ascii: YGBQTs/SfuFQMZETz8Pyv4Ffob/TAZFkcJHSMYTSchHicvEEM0MSlLWEtROSc9M2A2UzhjNyRHaSlbV2stQUQ+SFNPRjE0XzJjNEozXTlaVl5WYkBkeFdzhGR6a39OeWuDTZBxYVJmZYZyb2dZj5V9a6N4XXpxgaiUmItsoIadsauvnW6wp4yqjaeVvLySe5zAr7awrpK0kra7g4eVnb6diqHCoqOlxqG1qJfMu63Oqd2/t6zRtdTewd2hxrrjx
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 72 47 44 50 32 45 66 45 55 47 6a 76 78 39 69 74 43 4a 43 59 7a 4e 67 4d 69 4f 54 6f 48 4a 53 73 59 54 44 46 46 51 67 38 74 50 30 6f 7a 49 53 6c 4b 46 6c 34 73 4d 42 59 67 55 55 51 62 4c 6c 64 49 51 30 70 62 54 45 64 6b 58 31 42 4b 4c 57 4e 55 54 6b 39 65 56 47 78 5a 63 47 35 6b 64 33 5a 72 54 6c 68 6a 58 31 64 59 50 34 53 46 67 6f 4e 69 66 57 78 66 5a 31 75 4e 5a 59 68 6e 6b 57 57 4e 59 6f 71 4e 55 32 68 59 65 35 65 67 6d 46 32 44 59 46 31 2b 6f 61 47 6a 6c 71 61 6b 61 33 78 36 6f 35 32 6b 68 33 2b 77 63 6e 57 6a 73 71 57 6e 73 4c 53 64 74 4a 79 35 73 58 75 6b 6c 5a 57 32 6c 35 65 5a 75 70 72 42 6e 62 36 64 69 71 48 43 6f 71 4f 6c 78 71 47 31 71 4a 66 4d 75 36 33 4f 71 64 32 2f 74 36 7a 52 74 64 53 6f 31 65 47 39 75 2b 54 66 35 63 32 37 38 75 2f 7a 73 71 Data Ascii: rGDP2EfEUGjvx9itCJCYzNgMiOToHJSsYTDFFQg8tP0ozISlKFl4sMBYgUUQbLldIQ0pbTEdkX1BKLWNUTk9eVGxZcG5kd3ZrTlhjX1dYP4SFgoNifWxfZ1uNZYhnkWWNYoqNU2hYe5egmF2DYF1+oaGjlqaka3x6o52kh3+wcnWjsqWnsLSdtJy5sXuklZW2l5eZuprBnb6diqHCoqOlxqG1qJfMu63Oqd2/t6zRtdSo1eG9u+Tf5c278u/zsq
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 48 55 41 4d 43 54 6b 41 51 45 45 32 49 78 45 6f 4a 52 31 42 52 43 31 51 48 45 42 4b 4d 78 45 79 4c 6c 4a 5a 4b 30 59 55 57 68 67 79 4f 6a 41 5a 4f 6b 73 67 56 79 51 6c 4a 47 70 56 56 32 42 6a 5a 7a 70 41 59 44 34 6c 50 6c 5a 75 4e 48 42 69 52 33 74 46 58 46 56 52 63 34 42 7a 65 6d 46 50 5a 56 75 49 58 6e 74 67 69 31 39 4d 62 35 46 52 67 33 2b 54 56 57 6c 73 5a 6d 2b 46 64 32 35 5a 57 31 2b 58 58 32 79 55 6e 58 57 59 67 6e 36 47 67 70 4e 6f 69 34 5a 2f 6d 49 61 4d 6f 70 4f 6e 64 71 47 54 71 33 57 34 6d 59 6c 36 6a 6f 32 75 6d 70 65 50 70 72 65 39 70 5a 4f 33 74 59 53 4e 75 4b 2b 51 72 71 72 47 31 63 2f 54 77 5a 4c 55 79 37 44 4f 73 70 69 35 33 36 44 50 76 5a 75 75 75 74 72 45 36 4e 66 65 32 4f 50 4c 38 50 44 6f 33 4e 4f 78 30 73 37 71 2b 63 33 72 32 2f 33 Data Ascii: HUAMCTkAQEE2IxEoJR1BRC1QHEBKMxEyLlJZK0YUWhgyOjAZOksgVyQlJGpVV2BjZzpAYD4lPlZuNHBiR3tFXFVRc4BzemFPZVuIXntgi19Mb5FRg3+TVWlsZm+Fd25ZW1+XX2yUnXWYgn6GgpNoi4Z/mIaMopOndqGTq3W4mYl6jo2umpePpre9pZO3tYSNuK+QrqrG1c/TwZLUy7DOspi536DPvZuuutrE6Nfe2OPL8PDo3NOx0s7q+c3r2/3
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 53 38 32 46 6a 67 47 53 67 59 37 43 44 73 63 42 30 73 50 4a 30 77 2f 44 43 67 50 52 46 49 75 57 55 63 38 45 56 74 63 4e 47 42 6c 4f 69 4d 32 5a 69 5a 6d 4a 53 56 57 62 30 59 6e 61 33 4a 6d 64 47 31 55 4e 6d 70 6a 4e 7a 52 38 55 6e 64 4d 4f 6c 61 43 50 34 52 74 67 6f 61 45 58 57 53 47 52 48 68 73 6a 55 6c 68 6b 6c 4f 4c 55 6b 78 6f 6b 6e 6d 47 6d 35 56 77 6c 6e 47 62 63 59 35 64 6e 33 65 69 6d 6c 39 2b 5a 48 75 63 70 48 78 70 73 47 78 76 74 4b 32 77 70 71 79 6f 6a 62 4f 5a 74 4c 65 2b 64 38 46 2b 74 70 5a 37 73 4b 43 2f 76 73 43 59 77 63 65 64 68 34 76 4a 75 62 37 46 79 35 43 54 6c 4e 69 58 7a 74 6e 4e 31 5a 43 78 31 74 65 39 75 65 53 6b 77 4f 58 5a 31 4d 53 39 35 74 57 6e 76 2f 44 52 73 4d 50 74 37 62 44 58 38 4f 4b 33 37 76 54 51 75 2f 32 33 36 74 6e 72 Data Ascii: S82FjgGSgY7CDscB0sPJ0w/DCgPRFIuWUc8EVtcNGBlOiM2ZiZmJSVWb0Yna3JmdG1UNmpjNzR8UndMOlaCP4RtgoaEXWSGRHhsjUlhklOLUkxoknmGm5VwlnGbcY5dn3eiml9+ZHucpHxpsGxvtK2wpqyojbOZtLe+d8F+tpZ7sKC/vsCYwcedh4vJub7Fy5CTlNiXztnN1ZCx1te9ueSkwOXZ1MS95tWnv/DRsMPt7bDX8OK37vTQu/236tnr
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 63 65 44 55 63 76 54 77 34 2f 4c 77 73 71 52 44 63 6d 4a 6a 4a 4c 56 7a 42 50 4b 31 74 61 4e 55 49 63 54 6c 42 48 4a 6c 78 43 57 6d 73 74 58 30 51 6e 52 6b 31 4d 4c 6b 6c 6a 56 30 5a 50 52 31 64 4d 4f 55 6c 62 4f 46 45 37 51 33 4e 5a 59 49 57 4a 58 58 74 7a 69 33 69 43 68 49 78 61 67 34 42 78 58 32 31 73 55 57 32 50 64 56 53 59 6a 70 39 61 6a 49 47 44 58 70 2b 53 6e 61 47 52 61 59 74 35 5a 59 5a 73 71 48 46 76 62 4b 53 74 61 48 53 6e 6a 71 75 4e 76 59 32 36 6b 38 43 33 73 36 2b 79 6a 72 66 43 70 5a 53 79 70 59 62 49 75 36 6a 43 70 70 43 37 6a 4b 61 70 77 34 2b 5a 32 37 4c 64 6e 63 2b 34 6d 64 7a 53 75 2b 53 6b 6e 4e 48 6e 71 64 2f 46 37 64 69 34 79 62 37 48 77 38 2f 4c 74 62 44 4d 36 4c 66 37 32 2b 7a 65 79 4c 62 34 36 77 50 54 41 4d 50 55 76 2f 6a 78 76 Data Ascii: ceDUcvTw4/LwsqRDcmJjJLVzBPK1taNUIcTlBHJlxCWmstX0QnRk1MLkljV0ZPR1dMOUlbOFE7Q3NZYIWJXXtzi3iChIxag4BxX21sUW2PdVSYjp9ajIGDXp+SnaGRaYt5ZYZsqHFvbKStaHSnjquNvY26k8C3s6+yjrfCpZSypYbIu6jCppC7jKapw4+Z27Ldnc+4mdzSu+SknNHnqd/F7di4yb7Hw8/LtbDM6Lf72+zeyLb46wPTAMPUv/jxv

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:57 UTC	586	OUT	GET /turnstile/v0/b/708f7a809116/api.js?onload=mvlRL4&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Origin: https://dua-tech.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:57 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:19:57 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 923738865ac9b886-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:19:57 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:57 UTC	861	OUT	GET /favicon.ico HTTP/1.1 Host: dua-tech.us Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dua-tech.us/uiw920 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:57 UTC	1353	IN	HTTP/1.1 403 Forbidden Date: Thu, 20 Mar 2025 18:19:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 923738869c3cc439-EWR Server: cloudflare Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cf-Mitigated: challenge Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin Server-Timing: chlray;desc="923738869c3cc439" X-Content-Options: nosniff
2025-03-20 18:19:57 UTC	932	IN	Data Raw: 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 66 2d 43 68 6c 2d 4f 75 74 3a 20 71 68 62 51 4c 79 4e 4e 35 70 49 35 36 4a 65 5a 55 42 38 33 34 6e 44 53 66 72 4b 6c 6d 38 4d 78 58 72 51 69 61 31 4f 56 2f 67 55 63 4b 6a 39 4c 4e 79 4a 68 2f 62 4f 74 66 54 56 61 75 32 6d 43 55 2b 57 31 72 37 67 4e 75 54 42 36 6b 59 5a 6a 58 6e 4f 34 34 70 6b 6b 47 6a 55 69 30 6d 2f 71 74 45 78 55 51 75 78 6b 45 57 57 36 68 51 55 6e 6d 72 4a 5a 73 45 31 4d 30 4c 61 77 69 58 64 71 30 57 4b 6e 4e 69 52 75 6c 5a 6f 77 71 34 44 48 78 5a 6c 56 32 41 3d 3d 24 46 61 66 4b 5a 6e 48 5a 32 41 37 6a 4d 43 78 52 43 46 70 4f 6f 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 Data Ascii: X-Frame-Options: SAMEORIGINCf-Chl-Out: qhbQLyNN5pI56JeZUB834nDSfrKlm8MxXrQia1OV/gUcKj9LNyJh/bOtfTVau2mCU+W1r7gNuTB6kYZjXnO44pkkGjUi0m/qtExUQuxkEWW6hQUnmrJZsE1M0LawiXdq0WKnNiRulZowq4DHxZlV2A==$FafKZnHZ2A7jMCxRCFpOog==Cache-Control: private, max-age=0,
2025-03-20 18:19:57 UTC	453	IN	Data Raw: 31 65 31 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 1e19<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d Data Ascii: le-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;m
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 73 3d 22 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 32 22 3e 3c 73 70 61 6e 20 69 64 3d 22 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 22 3e 45 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 61 6e 64 20 63 6f 6f 6b 69 65 73 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 64 75 61 2d 74 65 63 68 2e 75 73 22 2c 63 54 79 70 65 3a 20 27 69 6e 74 65 72 61 63 74 69 76 65 27 2c 63 52 61 79 3a 20 27 39 32 33 37 Data Ascii: s="main-content"><noscript><div class="h2"><span id="challenge-error-text">Enable JavaScript and cookies to continue</span></div></noscript></div></div><script>(function(){window._cf_chl_opt={cvId: '3',cZone: "dua-tech.us",cType: 'interactive',cRay: '9237
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 78 36 35 30 66 7a 72 70 49 53 6c 33 78 63 31 6f 61 4d 4c 67 5f 54 74 6f 4a 69 66 38 4c 2e 43 44 2e 7a 55 75 36 65 78 46 4b 36 57 36 5a 63 73 44 70 73 2e 63 35 46 6b 78 46 56 57 69 30 74 34 52 70 5a 6a 42 55 30 62 31 56 49 45 5f 67 55 64 54 4a 5a 35 47 63 66 66 44 74 4d 74 46 41 44 72 6e 62 4f 48 33 56 65 65 47 63 56 33 2e 4e 68 45 6e 64 4f 57 65 62 54 52 59 67 52 31 39 6e 32 74 31 72 37 43 39 34 5a 74 78 45 34 59 68 6d 4c 30 6c 57 72 34 7a 7a 30 67 6d 4e 79 6f 46 43 7a 6f 6c 4a 33 62 36 44 32 41 51 69 76 74 78 51 78 68 43 66 48 72 4e 65 49 67 77 50 78 44 76 67 43 4c 61 44 74 33 50 41 52 51 33 68 4e 63 2e 44 67 6d 46 73 41 77 54 59 74 6c 52 50 4a 63 6a 66 33 2e 38 32 4d 79 62 76 42 2e 62 69 38 31 76 6c 65 61 67 58 58 7a 41 6c 2e 30 35 67 46 42 56 33 6b 6f Data Ascii: x650fzrpISl3xc1oaMLg_TtoJif8L.CD.zUu6exFK6W6ZcsDps.c5FkxFVWi0t4RpZjBU0b1VIE_gUdTJZ5GcffDtMtFADrnbOH3VeeGcV3.NhEndOWebTRYgR19n2t1r7C94ZtxE4YhmL0lWr4zz0gmNyoFCzolJ3b6D2AQivtxQxhCfHrNeIgwPxDvgCLaDt3PARQ3hNc.DgmFsAwTYtlRPJcjf3.82MybvB.bi81vleagXXzAl.05gFBV3ko
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 79 30 45 38 30 55 5a 46 6b 71 74 33 64 62 4f 64 47 66 50 6e 49 42 79 78 33 36 4a 6d 51 70 6c 57 4b 59 50 33 6c 33 4a 47 74 76 31 4d 54 4d 79 75 46 38 76 68 43 7a 35 33 5f 66 45 64 54 67 4e 58 77 36 6e 59 66 77 71 41 4c 47 6c 61 63 66 52 48 57 6d 2e 43 70 75 33 6a 5f 68 50 6f 38 79 47 77 76 43 41 77 77 71 50 66 44 54 32 72 4b 53 6f 6d 4b 55 36 2e 57 46 48 63 77 52 49 4e 39 4b 6e 54 5f 70 35 79 67 5a 7a 50 54 56 52 52 76 68 62 5f 70 59 67 48 65 6e 6c 37 57 39 56 45 33 4f 46 62 36 36 47 56 33 50 50 52 71 4e 50 43 73 2e 6b 73 49 6a 4c 76 66 47 77 5f 51 39 43 6f 5a 62 46 31 4f 41 64 7a 35 43 49 78 57 71 53 46 70 30 70 59 78 66 70 43 4c 4c 5f 57 43 66 56 4a 57 59 61 43 6c 55 74 5a 39 32 73 33 6a 41 4b 34 46 51 41 6e 43 67 6d 64 45 37 72 35 61 71 62 35 57 63 58 Data Ascii: y0E80UZFkqt3dbOdGfPnIByx36JmQplWKYP3l3JGtv1MTMyuF8vhCz53_fEdTgNXw6nYfwqALGlacfRHWm.Cpu3j_hPo8yGwvCAwwqPfDT2rKSomKU6.WFHcwRIN9KnT_p5ygZzPTVRRvhb_pYgHenl7W9VE3OFb66GV3PPRqNPCs.ksIjLvfGw_Q9CoZbF1OAdz5CIxWqSFp0pYxfpCLL_WCfVJWYaClUtZ92s3jAK4FQAnCgmdE7r5aqb5WcX
2025-03-20 18:19:57 UTC	1369	IN	Data Raw: 51 69 38 35 42 36 68 5a 45 6b 38 4a 4c 36 77 64 30 47 61 37 5a 38 33 68 43 74 34 36 42 77 61 51 67 5f 7a 7a 4a 31 5f 68 64 37 52 58 74 6f 6b 67 48 4c 6b 67 7a 44 71 38 72 77 5a 52 50 59 59 50 6f 6d 37 49 45 75 74 78 31 4f 48 72 4b 36 46 77 6c 59 74 63 5f 77 46 66 33 70 4e 73 2e 6b 5a 6f 66 61 38 35 44 6c 45 44 6e 63 57 71 74 4d 49 55 4d 58 44 48 33 49 4d 38 52 30 51 4a 72 74 43 36 6c 6a 50 32 72 49 56 6d 64 49 48 6a 51 4b 43 67 6a 41 5a 48 7a 68 77 4e 64 4f 64 34 48 41 43 42 52 73 4c 54 77 51 30 77 70 6c 55 4e 62 77 49 47 72 76 7a 58 4f 47 43 58 72 38 42 49 5a 56 5f 33 49 77 62 6e 61 56 6d 6d 4e 6c 45 6d 53 55 4f 49 51 4c 4e 50 47 63 4b 39 79 74 63 51 31 47 6c 4a 35 39 49 4f 30 45 64 7a 50 31 30 77 65 73 43 4b 6e 39 6f 4b 59 4b 69 50 35 33 39 72 57 59 67 Data Ascii: Qi85B6hZEk8JL6wd0Ga7Z83hCt46BwaQg_zzJ1_hd7RXtokgHLkgzDq8rwZRPYYPom7IEutx1OHrK6FwlYtc_wFf3pNs.kZofa85DlEDncWqtMIUMXDH3IM8R0QJrtC6ljP2rIVmdIHjQKCgjAZHzhwNdOd4HACBRsLTwQ0wplUNbwIGrvzXOGCXr8BIZV_3IwbnaVmmNlEmSUOIQLNPGcK9ytcQ1GlJ59IO0EdzP10wesCKn9oKYKiP539rWYg
2025-03-20 18:19:57 UTC	415	IN	Data Raw: 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 31 54 58 56 48 47 73 37 31 54 5a 42 42 43 4b 34 30 71 44 77 46 34 79 4d 35 4d 41 2e 5a 69 39 65 52 72 46 47 2e 6f 49 54 6a 77 49 2d 31 37 34 32 34 39 34 37 39 37 2d 31 2e 30 2e 31 2e 31 2d 37 2e 46 6e 50 4a 6a 76 45 64 54 68 68 78 54 35 46 42 57 6a 4d 4f 5a 4f 67 66 51 66 6e 70 57 74 34 78 4e 45 37 48 52 6b 72 55 51 22 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 Data Ascii: window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/favicon.ico?__cf_chl_rt_tk=1TXVHGs71TZBBCK40qDwF4yM5MA.Zi9eRrFG.oITjwI-1742494797-1.0.1.1-7.FnPJjvEdThhxT5FBWjMOZOgfQfnpWt4xNE7HRkrUQ" + window._cf_chl_opt.cOg
2025-03-20 18:19:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:58 UTC	625	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1947870396:1742491020:1jqXBjzQRZSWPZsksybQbiE6VzL6rSB0ySXD8XgO4AY/92373879c9cec8b9/5w5DLpyshDE2ZCbBRuPqZW48GRPd661niG9Fclr4KLI-1742494795-1.2.1.1-zM6oZSCQNjDWpXv4O89cosg1ak1hFhAiCHlMrzSYczZGEWZGIwR3Zn9AlliRZgl6 HTTP/1.1 Host: dua-tech.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:58 UTC	987	IN	HTTP/1.1 400 Bad Request Date: Thu, 20 Mar 2025 18:19:58 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: hRhwH9tDgSfJ7UObUupiQRcipnP8emeKtJz303nMEak7jmOE9aqI+/GWi2ZIzN6RvO/Aezc+HzTlWeSMGpQXQQ==$t5uwZNsRgphYGG2lqJGsaw== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zgWV8Gm5hDeemt4ylW2RQT1ItuCWydpWRbCKAvF5ui%2FpSQ1yp%2B830qTwco1l7aPlZ%2Fnm8reVCxn1TGK0e7%2FGC0Db6up9HInzr3%2F3onuTCchcy5UkUVocc9iCeoLVSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9237388d297d0c82-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=112300&min_rtt=110536&rtt_var=25153&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1197&delivery_rate=33696&cwnd=245&unsent_bytes=0&cid=f01d5b4c9b77b3a9&ts=292&x=0"
2025-03-20 18:19:58 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:58 UTC	806	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:59 UTC	1297	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:19:59 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28083 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-57MRx4no7nG8FNU9' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-20 18:19:59 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-20 18:19:59 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 35 37 4d 52 78 34 6e 6f 37 6e 47 38 46 4e 55 39 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-57MRx4no7nG8FNU9' 'unsafe-
2025-03-20 18:19:59 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-20 18:19:59 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-20 18:19:59 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-20 18:19:59 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-20 18:19:59 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-20 18:19:59 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-20 18:19:59 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-20 18:19:59 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:19:59 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:19:59 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:19:59 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 923738930ec24b06-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:19:59 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:00 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:20:00 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:20:00 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 92373896d9308c5d-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:20:00 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:00 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/869891523:1742491163:n-4Rg3Aygap6VtR-fWRcbia8Z54B97VvtXRwrCcHfgI/9237388ec9f70c7a/oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4168 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:20:00 UTC	4168	OUT	Data Raw: 39 49 7a 44 56 44 64 44 74 44 7a 44 75 70 73 77 70 73 6e 44 70 43 6d 78 52 36 70 33 73 52 73 48 69 43 45 62 6a 73 57 47 78 44 50 6a 6d 47 73 59 73 79 6a 52 78 4b 6a 2d 64 65 4b 73 33 6a 45 4b 73 53 73 39 4e 44 73 56 47 44 73 55 45 73 55 37 49 2d 6b 73 74 7a 42 47 47 4b 45 6a 6d 6c 73 58 43 6d 48 73 74 34 58 55 49 73 6b 44 73 65 73 39 51 44 2d 6b 48 59 65 42 34 2b 37 34 30 6a 2d 38 73 46 6e 34 31 58 34 65 43 71 39 43 6e 71 4a 4a 63 57 31 39 66 33 45 73 70 79 79 45 69 78 58 4b 44 73 51 2d 6a 73 37 30 75 6b 6b 45 73 50 7a 75 52 6f 4f 32 4e 43 2b 74 57 65 33 73 6d 34 78 70 44 6e 69 73 2d 4f 4b 38 78 73 72 44 73 48 6e 61 7a 73 2b 44 58 43 73 79 66 32 56 50 4e 44 41 44 6a 73 67 62 7a 73 48 44 6d 79 64 44 70 50 72 41 44 73 33 44 2d 64 70 6a 4e 46 4b 43 2d 69 2b Data Ascii: 9IzDVDdDtDzDupswpsnDpCmxR6p3sRsHiCEbjsWGxDPjmGsYsyjRxKj-deKs3jEKsSs9NDsVGDsUEsU7I-kstzBGGKEjmlsXCmHst4XUIskDses9QD-kHYeB4+740j-8sFn41X4eCq9CnqJJcW19f3EspyyEixXKDsQ-js70ukkEsPzuRoO2NC+tWe3sm4xpDnis-OK8xsrDsHnazs+DXCsyf2VPNDADjsgbzsHDmydDpPrADs3D-dpjNFKC-i+
2025-03-20 18:20:01 UTC	1071	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:20:01 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 238648 Connection: close cf-chl-gen: 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$iZtMvFP7ShrUrLngNM3yRA== Server: cloudflare CF-RAY: 9237389a4ca2427f-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:20:01 UTC	298	IN	Data Raw: 59 6c 78 39 67 70 4a 71 54 58 4a 51 63 49 68 34 63 6f 39 70 6d 4a 42 78 68 47 53 50 59 4b 64 30 6d 48 4b 64 64 47 61 6f 72 49 74 75 63 49 36 56 6e 35 2b 52 6d 4b 75 47 73 58 71 54 73 71 71 67 6f 62 4b 55 74 6f 4c 43 6b 6f 69 57 75 4a 75 38 6c 6f 61 35 72 49 65 2f 6e 73 50 53 6c 61 57 58 31 35 6a 63 70 39 7a 58 6b 65 44 67 74 75 53 73 74 4c 44 67 6d 71 6a 6f 32 4b 50 49 70 72 6e 45 32 36 32 77 35 65 66 75 30 65 54 76 78 63 54 74 35 73 7a 49 32 75 6e 32 31 41 44 68 76 75 45 49 42 4e 50 4b 42 38 7a 6c 36 77 76 51 36 51 48 53 36 4f 30 5a 7a 75 48 5a 36 64 72 31 36 75 30 4d 45 67 44 78 46 42 45 50 35 2f 6f 42 48 78 6b 5a 4c 76 6b 69 37 79 6f 6f 49 7a 49 67 42 75 2f 31 49 2f 63 6e 50 69 67 31 51 42 45 76 46 54 55 2b 49 66 67 58 47 53 52 43 49 68 6b 4d 44 53 4a Data Ascii: Ylx9gpJqTXJQcIh4co9pmJBxhGSPYKd0mHKddGaorItucI6Vn5+RmKuGsXqTsqqgobKUtoLCkoiWuJu8loa5rIe/nsPSlaWX15jcp9zXkeDgtuSstLDgmqjo2KPIprnE262w5efu0eTvxcTt5szI2un21ADhvuEIBNPKB8zl6wvQ6QHS6O0ZzuHZ6dr16u0MEgDxFBEP5/oBHxkZLvki7yooIzIgBu/1I/cnPig1QBEvFTU+IfgXGSRCIhkMDSJ
2025-03-20 18:20:01 UTC	1369	IN	Data Raw: 70 64 4c 47 41 39 55 6d 31 54 65 44 56 7a 56 46 6f 37 64 33 74 4e 57 30 39 4f 59 6e 52 57 56 6c 4e 33 67 47 4a 58 68 49 57 4d 57 34 4b 4a 5a 6d 71 41 55 58 4e 30 55 57 4f 53 65 32 74 35 62 48 64 77 6b 6e 53 4f 65 6d 2b 45 71 4a 53 54 68 6f 68 36 65 49 64 2f 62 48 4e 75 6a 58 47 4d 75 61 61 71 73 72 6d 65 6e 35 4f 58 75 61 70 36 72 63 53 46 77 37 69 4a 78 4a 37 4d 79 63 75 35 6e 6f 50 42 6a 37 32 2f 74 73 4c 49 32 4b 36 6f 75 4c 32 74 79 61 76 63 6e 74 2b 37 75 35 36 67 76 4b 6a 70 31 4b 76 6d 35 65 66 71 72 39 48 41 74 4e 37 58 31 4f 66 73 32 62 4f 34 33 50 79 39 76 39 6a 4b 38 4d 49 44 30 41 59 4b 77 63 72 54 36 41 67 48 33 2b 6a 62 34 52 41 43 44 74 51 58 44 2f 72 6e 35 65 67 55 45 76 58 31 43 67 48 79 41 41 50 64 37 78 4d 62 2b 66 54 72 49 41 41 48 43 Data Ascii: pdLGA9Um1TeDVzVFo7d3tNW09OYnRWVlN3gGJXhIWMW4KJZmqAUXN0UWOSe2t5bHdwknSOem+EqJSThoh6eId/bHNujXGMuaaqsrmen5OXuap6rcSFw7iJxJ7Mycu5noPBj72/tsLI2K6ouL2tyavcnt+7u56gvKjp1Kvm5efqr9HAtN7X1Ofs2bO43Py9v9jK8MID0AYKwcrT6AgH3+jb4RACDtQXD/rn5egUEvX1CgHyAAPd7xMb+fTrIAAHC
2025-03-20 18:20:01 UTC	1369	IN	Data Raw: 32 4f 58 46 50 65 6e 6b 36 65 48 64 54 4f 31 6c 7a 5a 49 5a 39 63 55 53 44 58 6d 52 44 6a 33 31 69 5a 47 4a 63 58 6e 56 56 69 56 5a 35 61 6f 35 39 66 70 68 74 61 35 78 73 59 4b 4a 32 6f 34 68 6d 6e 35 4f 4b 6f 36 53 49 70 70 46 2f 6f 47 75 42 61 34 53 4c 73 71 4e 33 6b 34 65 34 69 37 69 53 6c 4b 79 31 65 35 47 42 66 59 65 55 67 37 57 6a 79 4d 2b 35 30 63 43 39 77 4b 62 4d 6e 72 62 4b 79 36 66 4c 70 70 71 56 79 37 50 4e 6d 62 6e 6c 34 4d 50 59 78 37 33 6c 78 4b 54 74 36 36 6e 45 38 74 48 75 38 65 62 46 31 4e 48 36 36 39 72 52 39 4e 76 7a 33 4c 66 61 7a 77 50 52 39 41 48 37 33 38 66 38 35 4f 72 61 34 73 34 43 7a 66 51 4f 39 42 67 54 30 76 54 54 32 2b 38 4e 31 39 6f 65 37 52 4d 6b 35 42 4d 49 39 66 6b 46 42 79 7a 38 41 78 63 62 48 41 58 76 36 79 59 48 4a 43 Data Ascii: 2OXFPenk6eHdTO1lzZIZ9cUSDXmRDj31iZGJcXnVViVZ5ao59fphta5xsYKJ2o4hmn5OKo6SIppF/oGuBa4SLsqN3k4e4i7iSlKy1e5GBfYeUg7WjyM+50cC9wKbMnrbKy6fLppqVy7PNmbnl4MPYx73lxKTt66nE8tHu8ebF1NH669rR9Nvz3LfazwPR9AH738f85Ora4s4CzfQO9BgT0vTT2+8N19oe7RMk5BMI9fkFByz8AxcbHAXv6yYHJC
2025-03-20 18:20:01 UTC	1369	IN	Data Raw: 62 30 2b 42 66 33 46 69 65 46 4e 6e 64 30 56 33 57 45 68 68 61 32 70 6c 62 47 75 52 6b 56 2b 54 54 6d 46 6a 6a 35 78 30 69 56 64 76 62 4a 56 31 64 6c 71 50 62 71 46 2b 59 6e 74 7a 6a 49 52 74 69 48 79 47 6a 4a 4e 2f 72 4a 47 72 74 33 53 56 68 37 79 6f 71 58 71 68 67 61 2b 35 6c 6f 36 32 76 4c 53 58 74 34 69 62 78 4d 4b 73 30 49 6d 37 73 34 71 7a 69 4c 48 57 30 4e 54 58 75 38 2b 62 6e 39 48 42 6e 73 37 56 30 4e 4b 36 77 64 33 65 79 61 65 2b 75 38 61 37 37 36 79 79 79 72 53 76 74 66 6e 46 39 50 58 4c 31 66 66 35 79 67 4c 2b 41 38 54 32 30 2f 4c 53 43 2b 50 38 34 76 72 38 79 65 62 62 41 50 50 75 33 52 4c 6d 35 75 4d 4a 45 51 6e 6e 39 68 30 56 41 2f 51 52 42 52 51 67 2b 51 44 35 47 52 6b 4e 2f 50 73 63 49 75 6b 64 44 69 72 30 36 43 51 4c 4e 7a 59 50 4e 66 73 Data Ascii: b0+Bf3FieFNnd0V3WEhha2plbGuRkV+TTmFjj5x0iVdvbJV1dlqPbqF+YntzjIRtiHyGjJN/rJGrt3SVh7yoqXqhga+5lo62vLSXt4ibxMKs0Im7s4qziLHW0NTXu8+bn9HBns7V0NK6wd3eyae+u8a776yyyrSvtfnF9PXL1ff5ygL+A8T20/LSC+P84vr8yebbAPPu3RLm5uMJEQnn9h0VA/QRBRQg+QD5GRkN/PscIukdDir06CQLNzYPNfs
2025-03-20 18:20:01 UTC	1369	IN	Data Raw: 33 70 6c 52 59 64 71 64 6c 65 4d 58 57 6d 52 54 57 35 54 69 30 31 66 58 35 57 48 69 6c 4b 62 61 6c 75 62 64 49 31 68 6e 47 46 30 6d 61 4b 6a 6d 47 4e 70 70 71 75 4c 69 4a 43 43 6a 4b 65 49 63 72 57 68 68 71 68 33 72 70 47 57 71 35 6d 50 77 4a 61 32 76 37 57 41 73 72 48 4b 69 49 47 6a 76 73 76 4b 68 71 69 4f 76 36 66 42 30 73 4f 76 75 63 4f 58 79 72 75 51 31 4c 48 64 79 75 54 61 6e 37 2b 67 77 4c 53 2f 31 75 71 31 76 39 2b 36 36 75 2f 78 77 4f 76 6b 31 2b 50 31 30 50 4f 32 2b 38 37 64 31 64 54 39 7a 37 7a 55 2b 39 6a 54 2f 50 7a 44 36 41 72 48 43 41 33 64 2b 2b 67 4d 34 38 38 4d 44 64 54 6b 36 2b 67 57 46 67 2f 64 39 51 44 34 47 78 54 31 38 43 51 71 4c 42 38 6f 37 66 73 6c 4c 42 76 36 41 66 54 77 47 50 45 36 43 77 6f 6d 39 50 59 6f 44 7a 72 33 2b 67 77 5a Data Ascii: 3plRYdqdleMXWmRTW5Ti01fX5WHilKbalubdI1hnGF0maKjmGNppquLiJCCjKeIcrWhhqh3rpGWq5mPwJa2v7WAsrHKiIGjvsvKhqiOv6fB0sOvucOXyruQ1LHdyuTan7+gwLS/1uq1v9+66u/xwOvk1+P10PO2+87d1dT9z7zU+9jT/PzD6ArHCA3d++gM488MDdTk6+gWFg/d9QD4GxT18CQqLB8o7fslLBv6AfTwGPE6Cwom9PYoDzr3+gwZ
2025-03-20 18:20:01 UTC	1369	IN	Data Raw: 4a 45 57 33 70 62 58 55 6c 6b 5a 35 4e 50 6b 33 4e 55 61 59 70 6f 6a 57 2b 65 61 6d 6d 64 66 6d 36 55 6e 58 4b 58 67 4a 4a 6b 6f 34 6c 6e 6f 59 46 73 73 49 32 6d 73 4a 53 6e 74 61 36 33 6a 72 4f 7a 75 4c 61 77 6d 72 57 42 6f 70 6d 56 6b 59 53 42 68 6f 4b 70 6e 73 65 73 6a 5a 33 41 79 62 57 6f 73 35 44 53 73 38 54 4a 72 4c 72 4f 74 5a 61 63 76 75 48 6a 6e 63 2b 6a 79 64 6a 59 6f 63 79 39 33 71 7a 4b 36 36 54 70 76 4b 79 73 78 73 6d 77 73 75 62 45 7a 37 36 31 34 4f 47 34 75 63 44 79 75 41 6e 41 34 73 66 65 34 41 72 35 7a 41 30 41 42 2b 55 4a 41 42 44 32 45 78 62 53 32 78 50 6c 36 76 67 50 2b 4f 38 55 46 77 4d 65 38 41 6a 39 49 2f 67 59 35 43 55 6b 48 6a 49 44 37 41 51 67 36 41 45 70 46 66 41 52 4f 43 34 6f 4c 66 73 36 4e 68 55 50 52 42 34 58 42 78 6b 64 48 Data Ascii: JEW3pbXUlkZ5NPk3NUaYpojW+eammdfm6UnXKXgJJko4lnoYFssI2msJSnta63jrOzuLawmrWBopmVkYSBhoKpnsesjZ3AybWos5DSs8TJrLrOtZacvuHjnc+jydjYocy93qzK66TpvKysxsmwsubEz7614OG4ucDyuAnA4sfe4Ar5zA0AB+UJABD2ExbS2xPl6vgP+O8UFwMe8Aj9I/gY5CUkHjID7AQg6AEpFfAROC4oLfs6NhUPRB4XBxkdH
2025-03-20 18:20:01 UTC	1369	IN	Data Raw: 68 53 32 61 46 5a 57 6c 6f 56 34 2b 46 56 56 5a 64 61 49 36 64 62 58 4a 64 64 34 56 6b 6d 35 53 6f 6d 61 64 67 59 61 35 2b 62 34 46 74 66 72 4b 49 6b 61 32 4a 65 6f 57 57 6d 34 2b 6f 75 61 79 54 6f 70 75 33 77 35 6a 42 6e 72 57 39 6e 35 2b 4c 78 4d 2b 52 70 4e 58 52 6a 4e 53 71 6d 4b 6a 4a 6d 4d 71 34 73 4d 37 56 7a 74 6a 45 75 74 75 78 77 75 53 67 34 4c 2b 71 34 4c 2b 34 76 2b 33 4b 76 2f 4c 70 38 2b 2f 6d 36 4e 6e 4f 73 2f 32 37 32 73 76 2b 34 50 58 38 32 39 44 6b 31 65 48 45 39 50 33 64 32 50 44 4d 33 76 76 38 45 65 37 73 34 2f 58 6a 30 66 54 35 36 51 38 50 48 65 2f 78 48 2f 7a 78 2f 50 4c 6b 4a 43 63 67 4c 77 50 68 45 65 63 47 36 77 6e 79 4b 4f 30 58 42 52 77 7a 50 54 6a 37 48 6a 52 41 49 77 38 51 52 78 55 32 46 67 55 33 44 45 77 4e 46 30 30 50 54 43 Data Ascii: hS2aFZWloV4+FVVZdaI6dbXJdd4Vkm5SomadgYa5+b4FtfrKIka2JeoWWm4+ouayTopu3w5jBnrW9n5+LxM+RpNXRjNSqmKjJmMq4sM7VztjEutuxwuSg4L+q4L+4v+3Kv/Lp8+/m6NnOs/272sv+4PX829Dk1eHE9P3d2PDM3vv8Ee7s4/Xj0fT56Q8PHe/xH/zx/PLkJCcgLwPhEecG6wnyKO0XBRwzPTj7HjRAIw8QRxU2FgU3DEwNF00PTC
2025-03-20 18:20:01 UTC	1369	IN	Data Raw: 62 58 57 55 61 47 5a 61 67 5a 65 66 67 4a 4f 62 5a 56 6c 79 64 6f 61 68 65 48 65 76 72 47 74 76 71 6f 36 67 6a 59 36 34 6a 71 61 77 75 58 75 6c 70 71 71 50 76 35 53 4d 72 72 4f 5a 6f 4b 69 36 6d 71 57 56 78 59 36 70 79 37 36 66 6d 38 2f 43 6c 71 32 59 7a 4a 6a 50 72 39 6d 2b 6d 4e 6e 64 72 38 2b 66 30 4d 66 54 70 71 47 36 74 65 62 4c 76 75 37 65 35 74 72 6a 71 2b 54 48 35 2b 58 31 75 4b 32 33 36 4e 2f 72 75 39 6a 6a 38 72 72 2b 77 72 6b 47 42 39 6a 56 2f 76 62 63 32 64 6e 71 34 2b 44 65 37 51 62 76 35 42 4d 4a 2b 64 6b 4f 46 78 6a 61 32 65 49 51 45 67 50 6a 49 53 58 6c 35 53 49 42 4b 42 38 6c 36 52 73 6e 46 66 41 75 48 79 30 44 42 53 67 63 4d 51 6f 31 4f 2f 72 34 45 68 55 6b 2f 6a 63 32 47 30 41 68 48 67 67 69 48 52 6b 38 54 6a 4e 51 50 79 64 54 53 30 59 Data Ascii: bXWUaGZagZefgJObZVlydoaheHevrGtvqo6gjY64jqawuXulpqqPv5SMrrOZoKi6mqWVxY6py76fm8/Clq2YzJjPr9m+mNndr8+f0MfTpqG6tebLvu7e5trjq+TH5+X1uK236N/ru9jj8rr+wrkGB9jV/vbc2dnq4+De7Qbv5BMJ+dkOFxja2eIQEgPjISXl5SIBKB8l6RsnFfAuHy0DBSgcMQo1O/r4EhUk/jc2G0AhHggiHRk8TjNQPydTS0Y
2025-03-20 18:20:01 UTC	1369	IN	Data Raw: 48 46 55 64 4a 35 79 70 35 36 6d 69 71 52 71 6e 6f 70 33 64 35 70 38 66 47 78 71 6f 4a 53 56 6b 6f 6d 69 6c 59 32 79 74 6f 2b 4a 65 5a 69 62 72 73 4f 79 68 48 2b 41 69 63 69 43 72 4c 36 36 7a 4a 75 6b 73 35 4f 6b 78 35 4b 59 72 72 48 4e 72 63 71 79 30 4a 2f 52 77 62 65 68 30 35 37 6d 77 4c 4f 6f 32 75 58 44 37 4f 69 37 32 63 2f 73 30 62 2f 53 32 4f 76 4b 31 4e 7a 53 78 2b 36 36 32 74 62 75 2b 4d 49 44 35 73 48 31 35 39 33 65 78 67 4c 64 44 41 6f 4b 78 42 51 54 2f 75 63 48 42 77 6a 73 35 4e 76 2b 37 42 66 37 45 77 41 58 32 79 55 5a 2f 69 58 32 2b 51 67 4b 2b 69 4c 72 43 77 6f 65 48 50 34 54 4d 51 67 5a 46 68 73 72 39 68 51 39 44 53 49 32 45 76 34 7a 4d 43 51 6e 41 77 6f 55 42 45 77 70 44 53 38 67 45 46 49 6e 4b 6a 59 52 54 56 56 4b 4b 44 73 74 55 7a 6f 33 Data Ascii: HFUdJ5yp56miqRqnop3d5p8fGxqoJSVkomilY2yto+JeZibrsOyhH+AiciCrL66zJuks5Okx5KYrrHNrcqy0J/Rwbeh057mwLOo2uXD7Oi72c/s0b/S2OvK1NzSx+662tbu+MID5sH1593exgLdDAoKxBQT/ucHBwjs5Nv+7Bf7EwAX2yUZ/iX2+QgK+iLrCwoeHP4TMQgZFhsr9hQ9DSI2Ev4zMCQnAwoUBEwpDS8gEFInKjYRTVVKKDstUzo3

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:02 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/869891523:1742491163:n-4Rg3Aygap6VtR-fWRcbia8Z54B97VvtXRwrCcHfgI/9237388ec9f70c7a/oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:20:02 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 20 Mar 2025 18:20:02 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: J0q2ucRqZtuRZu53iYNRLlYPoEUSyUAr6L0Aik+COGFYZoDJdZmgu+fFrxdq9xZDe9y1EZn0DvqJRJvLRnyNEQ==$ShEwSVm6B/RdgLqGjk7G7g== Server: cloudflare CF-RAY: 923738a63b827d02-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:20:02 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:03 UTC	828	OUT	GET /cdn-cgi/challenge-platform/h/b/d/9237388ec9f70c7a/1742494801141/cyim_YO4uubLE2T HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:20:03 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:20:03 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 923738aa8ba1eeee-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:20:03 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 37 00 00 00 0a 08 02 00 00 00 9f 5d 51 62 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7]QbIDAT$IENDB`

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://madisonoffice.carrd.co/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Windows Analysis Report
https://madisonoffice.carrd.co/

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:04 UTC	857	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/9237388ec9f70c7a/1742494801143/3d0ba50d1e82bbbe37b3f86ac33886386df0272a08767940fd392922f48abb4c/RstJqDV9e8vJwHI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:20:04 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 20 Mar 2025 18:20:04 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-20 18:20:04 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 50 51 75 6c 44 52 36 43 75 37 34 33 73 5f 68 71 77 7a 69 47 4f 47 33 77 4a 79 6f 49 64 6e 6c 41 5f 54 6b 70 49 76 53 4b 75 30 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gPQulDR6Cu743s_hqwziGOG3wJyoIdnlA_TkpIvSKu0wAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-20 18:20:04 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:04 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/869891523:1742491163:n-4Rg3Aygap6VtR-fWRcbia8Z54B97VvtXRwrCcHfgI/9237388ec9f70c7a/oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 39772 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:20:04 UTC	16384	OUT	Data Raw: 39 49 7a 44 51 70 2d 65 72 74 7a 47 78 33 62 2d 6c 73 61 79 7a 6d 38 2d 61 73 62 44 2b 6a 43 73 65 78 73 4e 31 73 2d 44 47 47 73 42 73 70 6a 52 62 2d 50 47 73 33 32 6d 44 2d 47 69 2d 4f 4c 73 2b 43 70 64 73 4e 59 78 44 73 6f 44 6d 62 73 68 44 52 4b 73 34 44 6d 4e 36 72 24 44 70 46 37 73 46 77 74 6a 73 2b 45 51 78 73 31 73 70 66 68 6c 6b 6c 73 33 78 4f 42 73 7a 78 2d 52 73 47 49 73 39 39 74 52 74 62 2d 73 39 43 49 78 7a 36 47 79 72 73 37 44 73 50 59 73 57 38 49 68 7a 48 45 38 4e 62 50 47 49 73 6e 62 52 64 4b 73 6d 57 7a 73 7a 48 73 75 6a 73 6c 44 6d 79 72 66 4b 44 73 75 66 62 6a 32 6c 50 58 44 73 38 71 34 44 50 6d 64 74 33 73 2d 4e 79 4b 73 73 65 31 52 57 46 73 39 7a 73 56 44 2d 61 61 6b 44 49 35 73 2d 50 46 44 78 33 39 44 6d 36 61 73 2d 36 37 73 73 47 73 Data Ascii: 9IzDQp-ertzGx3b-lsayzm8-asbD+jCsexsN1s-DGGsBspjRb-PGs32mD-Gi-OLs+CpdsNYxDsoDmbshDRKs4DmN6r$DpF7sFwtjs+EQxs1spfhlkls3xOBszx-RsGIs99tRtb-s9CIxz6Gyrs7DsPYsW8IhzHE8NbPGIsnbRdKsmWzszHsujslDmyrfKDsufbj2lPXDs8q4DPmdt3s-NyKsse1RWFs9zsVD-aakDI5s-PFDx39Dm6as-67ssGs
2025-03-20 18:20:04 UTC	16384	OUT	Data Raw: 62 42 70 55 73 42 77 30 53 58 6e 43 43 4f 70 50 59 70 75 41 6a 44 36 74 7a 42 73 32 55 45 38 75 53 37 44 2d 7a 71 32 6b 6c 6a 2d 78 46 6b 49 6e 32 55 7a 77 56 49 43 41 47 4a 51 45 53 2b 41 50 65 43 6b 73 47 73 78 70 77 2d 7a 4e 7a 2d 30 62 6b 62 6d 35 57 52 6a 51 49 41 6c 55 65 43 55 73 51 77 4d 44 2b 75 6d 43 64 43 33 73 67 59 56 78 2d 6f 51 73 50 70 50 72 6a 78 73 50 2d 57 47 51 6d 72 35 2b 43 2d 61 73 78 44 47 36 2d 6e 73 48 44 45 4b 2d 42 59 6b 5a 6d 72 2d 63 59 66 44 47 37 43 59 73 57 6d 44 57 4b 49 66 53 58 44 67 43 55 58 55 68 6f 6a 72 76 58 52 41 63 79 43 65 43 45 76 41 77 44 58 47 45 68 2d 69 2d 61 70 66 5a 2b 49 4b 71 47 75 41 74 58 73 6c 44 58 63 48 57 62 71 47 2d 6c 69 50 36 59 49 53 70 2d 76 7a 51 61 7a 62 73 71 43 70 6a 52 55 70 51 6a 65 43 Data Ascii: bBpUsBw0SXnCCOpPYpuAjD6tzBs2UE8uS7D-zq2klj-xFkIn2UzwVICAGJQES+APeCksGsxpw-zNz-0bkbm5WRjQIAlUeCUsQwMD+umCdC3sgYVx-oQsPpPrjxsP-WGQmr5+C-asxDG6-nsHDEK-BYkZmr-cYfDG7CYsWmDWKIfSXDgCUXUhojrvXRAcyCeCEvAwDXGEh-i-apfZ+IKqGuAtXslDXcHWbqG-liP6YISp-vzQazbsqCpjRUpQjeC
2025-03-20 18:20:04 UTC	7004	OUT	Data Raw: 46 45 4c 39 4b 73 50 4c 4e 6e 6d 32 75 4f 74 35 36 70 33 67 6d 57 4c 47 43 38 6a 6f 34 76 68 59 53 37 76 79 57 49 4c 65 6e 70 62 67 68 33 5a 6e 44 47 7a 38 42 4b 76 38 77 78 47 70 48 56 68 73 39 48 64 36 73 48 38 6a 35 42 65 66 77 64 46 74 51 73 43 42 7a 4f 68 67 62 31 35 73 39 71 52 48 4e 2d 6b 4f 4c 78 53 37 68 65 50 6a 70 6c 73 6d 44 7a 66 65 68 42 35 72 63 43 4b 47 5a 4c 57 6e 78 70 52 51 35 4b 67 2b 68 7a 6e 75 78 52 78 51 5a 41 38 43 2d 34 6d 43 73 6a 50 50 78 71 68 58 47 34 72 62 42 4d 37 70 62 50 53 24 36 73 64 6b 67 2b 59 71 36 52 39 65 34 64 4d 6d 43 4f 53 36 73 37 73 6c 6b 71 36 61 51 62 53 37 78 34 64 4c 63 31 46 50 43 50 34 6a 4f 36 67 6b 4c 42 73 5a 73 52 2d 30 61 4f 61 38 67 72 51 4c 6e 6a 44 47 51 71 56 35 48 6c 77 77 37 35 44 46 78 5a 68 Data Ascii: FEL9KsPLNnm2uOt56p3gmWLGC8jo4vhYS7vyWILenpbgh3ZnDGz8BKv8wxGpHVhs9Hd6sH8j5BefwdFtQsCBzOhgb15s9qRHN-kOLxS7hePjplsmDzfehB5rcCKGZLWnxpRQ5Kg+hznuxRxQZA8C-4mCsjPPxqhXG4rbBM7pbPS$6sdkg+Yq6R9e4dMmCOS6s7slkq6aQbS7x4dLc1FPCP4jO6gkLBsZsR-0aOa8grQLnjDGQqV5Hlww75DFxZh
2025-03-20 18:20:05 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:20:05 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28176 Connection: close cf-chl-gen: KRFJHubCTaRNBlCVo6YNpNUvmYYeCoVrjFAyisjZWyJsvNEeIL/2rzCueO/Wk47k$pJaT6Gm+7OUli04SZehCSQ== Server: cloudflare CF-RAY: 923738b2dbf8e0ee-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:20:05 UTC	1047	IN	Data Raw: 59 6c 78 39 67 70 47 52 63 6f 78 58 68 6e 4b 57 56 58 4e 33 57 58 56 7a 56 5a 36 50 64 59 57 69 6b 33 6d 57 61 71 5a 39 72 6d 61 66 62 59 75 46 66 59 75 77 6b 4c 4e 34 69 6f 71 2b 71 4a 6c 33 74 5a 4f 4d 6a 4b 46 2b 78 71 43 70 76 63 4b 6d 72 4b 79 6b 77 6f 37 4f 6e 70 53 68 6e 36 75 32 71 39 71 72 75 4a 50 4c 71 74 72 62 79 2b 50 6c 35 4f 44 43 76 4f 65 7a 6f 72 65 32 33 73 4c 74 78 4f 2f 4d 79 39 48 47 37 72 62 6c 38 75 66 63 38 2f 72 52 38 76 62 36 79 38 48 69 35 41 63 43 36 64 62 62 35 4f 72 68 33 51 2f 6a 45 41 34 47 34 78 58 76 45 50 45 46 36 64 72 31 36 75 30 4d 45 67 44 78 46 42 45 50 35 2f 6f 42 48 78 6b 61 4c 76 6b 69 37 79 6f 6f 49 7a 49 67 42 75 2f 31 49 2f 63 6e 50 69 67 31 51 42 45 76 46 54 55 2b 49 66 67 58 47 53 52 43 49 68 6b 4d 44 53 4a Data Ascii: Ylx9gpGRcoxXhnKWVXN3WXVzVZ6PdYWik3mWaqZ9rmafbYuFfYuwkLN4ioq+qJl3tZOMjKF+xqCpvcKmrKykwo7OnpShn6u2q9qruJPLqtrby+Pl5ODCvOezore23sLtxO/My9HG7rbl8ufc8/rR8vb6y8Hi5AcC6dbb5Orh3Q/jEA4G4xXvEPEF6dr16u0MEgDxFBEP5/oBHxkaLvki7yooIzIgBu/1I/cnPig1QBEvFTU+IfgXGSRCIhkMDSJ
2025-03-20 18:20:05 UTC	1369	IN	Data Raw: 77 59 61 52 2b 64 47 61 61 67 71 36 63 71 34 61 4e 67 59 61 48 64 4a 2b 46 69 48 64 30 68 6f 6d 39 74 4a 71 52 77 61 4f 44 73 72 4b 7a 65 58 2b 69 74 4c 72 47 6f 70 32 70 68 36 65 2f 7a 5a 44 42 77 38 6d 51 69 39 4f 75 78 35 75 6d 73 61 36 37 30 73 50 5a 73 64 6e 52 78 4c 61 33 34 4d 6e 67 75 2b 54 4b 76 73 50 4d 30 61 32 2f 37 62 50 78 30 75 7a 4d 76 4f 62 50 36 76 58 66 38 74 6a 52 76 74 44 6b 31 50 51 4d 34 66 37 61 44 75 6a 51 45 65 63 47 35 51 49 46 47 4e 58 69 31 52 4c 62 37 65 37 74 2b 64 6e 74 37 53 54 36 2b 2f 4d 43 42 75 55 44 47 75 77 45 36 53 34 54 43 77 45 77 4d 43 51 4c 4b 6a 4d 36 39 79 6f 77 4c 66 77 39 4f 44 63 69 44 78 45 31 50 69 55 6a 4a 42 6b 69 53 44 6b 49 54 51 30 77 45 42 5a 43 54 45 74 61 4f 30 56 58 56 31 42 49 56 54 6c 62 4c 6c Data Ascii: wYaR+dGaagq6cq4aNgYaHdJ+FiHd0hom9tJqRwaODsrKzeX+itLrGop2ph6e/zZDBw8mQi9Oux5umsa670sPZsdnRxLa34Mngu+TKvsPM0a2/7bPx0uzMvObP6vXf8tjRvtDk1PQM4f7aDujQEecG5QIFGNXi1RLb7e7t+dnt7ST6+/MCBuUDGuwE6S4TCwEwMCQLKjM69yowLfw9ODciDxE1PiUjJBkiSDkITQ0wEBZCTEtaO0VXV1BIVTlbLl
2025-03-20 18:20:05 UTC	1369	IN	Data Raw: 6e 6f 53 4e 6e 32 2b 4d 68 4a 2b 48 71 62 46 7a 6d 58 53 44 6c 71 75 55 6a 5a 2b 41 71 6e 32 37 6f 4d 50 43 66 37 57 6d 78 5a 69 69 69 70 79 6c 79 62 47 2b 6f 38 4f 70 31 61 6d 30 77 36 65 6b 71 72 58 4f 77 4b 2f 42 76 39 66 4e 78 4f 4c 64 33 65 47 34 7a 4b 61 71 76 4e 33 6e 72 66 4c 64 36 65 33 52 38 4f 2f 47 36 63 76 58 32 66 69 2b 73 73 33 31 37 2f 62 31 33 77 62 59 32 74 37 56 32 77 62 34 32 38 37 66 37 65 48 79 45 65 34 4d 43 52 44 52 44 76 66 78 36 67 30 4e 36 74 7a 66 42 53 49 43 41 64 34 6c 42 78 67 6e 48 67 41 6c 48 68 41 77 48 76 33 31 4a 53 4d 30 41 79 2f 34 43 44 63 6e 51 51 34 31 2f 68 49 77 47 55 55 77 46 69 49 4a 48 77 56 4a 4f 43 45 4d 4f 69 6f 2f 54 68 45 70 44 78 68 4a 4b 6b 74 50 4c 55 78 4e 50 54 59 2f 4c 55 35 6d 50 46 6b 67 4e 6a 68 Data Ascii: noSNn2+MhJ+HqbFzmXSDlquUjZ+Aqn27oMPCf7WmxZiiipylybG+o8Op1am0w6ekqrXOwK/Bv9fNxOLd3eG4zKaqvN3nrfLd6e3R8O/G6cvX2fi+ss317/b13wbY2t7V2wb4287f7eHyEe4MCRDRDvfx6g0N6tzfBSICAd4lBxgnHgAlHhAwHv31JSM0Ay/4CDcnQQ41/hIwGUUwFiIJHwVJOCEMOio/ThEpDxhJKktPLUxNPTY/LU5mPFkgNjh
2025-03-20 18:20:05 UTC	1369	IN	Data Raw: 6f 68 71 6e 61 47 4f 63 34 53 59 75 70 4e 39 6b 35 70 37 6a 49 2b 51 78 5a 4b 46 76 4c 33 48 67 73 4b 47 7a 49 69 73 68 38 4c 4d 76 4d 58 47 6e 6f 2b 50 72 61 54 45 78 74 72 4c 31 5a 4b 54 34 35 36 68 73 35 36 68 30 4d 58 69 7a 4d 58 6a 77 2b 66 64 38 4f 4b 71 35 64 37 53 78 73 2b 32 79 4e 66 75 32 66 6e 30 31 64 33 4c 33 75 41 46 76 50 7a 69 33 4e 67 4e 31 77 4d 49 36 74 7a 51 79 67 48 31 30 77 76 68 38 74 67 57 32 42 41 4a 36 77 30 62 32 2f 62 72 46 77 51 47 49 67 44 67 46 2b 45 57 42 69 4c 6c 43 42 38 53 4e 43 6e 7a 4d 54 51 72 44 78 63 36 39 77 30 37 4f 30 49 51 2f 43 34 64 49 53 41 37 47 44 67 33 51 52 6b 6e 49 77 67 4f 48 68 4d 77 51 54 34 51 54 79 38 32 52 56 6b 33 4b 30 6f 78 4f 43 31 69 4c 55 31 5a 59 68 35 67 4a 7a 6c 41 4a 31 30 72 53 57 31 46 Data Ascii: ohqnaGOc4SYupN9k5p7jI+QxZKFvL3HgsKGzIish8LMvMXGno+PraTExtrL1ZKT456hs56h0MXizMXjw+fd8OKq5d7Sxs+2yNfu2fn01d3L3uAFvPzi3NgN1wMI6tzQygH10wvh8tgW2BAJ6w0b2/brFwQGIgDgF+EWBiLlCB8SNCnzMTQrDxc69w07O0IQ/C4dISA7GDg3QRknIwgOHhMwQT4QTy82RVk3K0oxOC1iLU1ZYh5gJzlAJ10rSW1F
2025-03-20 18:20:05 UTC	1369	IN	Data Raw: 35 34 70 6e 52 37 68 71 79 37 69 35 42 37 6c 61 4f 43 75 62 4c 47 74 38 56 2b 66 38 79 63 6a 5a 2b 4c 6d 38 50 49 6a 72 2b 71 6b 4d 37 62 6b 37 62 56 32 74 62 65 73 4e 33 55 6f 4e 58 44 77 71 44 4b 71 63 58 6c 72 4b 33 66 77 62 76 72 76 50 4b 30 34 4c 4c 78 75 4e 43 30 7a 4d 61 36 79 37 37 2b 2f 76 36 2b 37 72 30 4a 30 2f 7a 34 79 62 2f 33 43 63 34 53 41 51 2f 69 33 38 2f 30 34 51 37 61 30 2f 72 39 31 2f 44 39 37 53 48 56 2b 78 6b 51 34 53 4c 6c 35 52 54 36 4a 78 67 66 49 67 34 74 49 43 54 77 41 44 41 4f 4c 66 55 76 4a 75 2f 37 4e 67 38 62 52 41 7a 38 42 6b 41 39 41 6a 34 62 4b 6b 4d 67 49 42 34 51 54 79 5a 4a 54 68 51 51 47 42 55 36 4e 44 42 4f 53 68 30 59 47 79 74 68 52 47 52 51 5a 44 59 6c 59 7a 31 6c 54 47 42 58 62 32 6f 6f 62 56 56 77 51 30 64 77 5a Data Ascii: 54pnR7hqy7i5B7laOCubLGt8V+f8ycjZ+Lm8PIjr+qkM7bk7bV2tbesN3UoNXDwqDKqcXlrK3fwbvrvPK04LLxuNC0zMa6y77+/v6+7r0J0/z4yb/3Cc4SAQ/i38/04Q7a0/r91/D97SHV+xkQ4SLl5RT6JxgfIg4tICTwADAOLfUvJu/7Ng8bRAz8BkA9Aj4bKkMgIB4QTyZJThQQGBU6NDBOSh0YGythRGRQZDYlYz1lTGBXb2oobVVwQ0dwZ
2025-03-20 18:20:05 UTC	1369	IN	Data Raw: 34 75 62 79 44 6a 5a 57 46 6e 35 61 41 6d 70 69 6d 6e 4a 79 38 77 74 43 52 72 74 50 42 72 62 43 54 72 61 58 47 6c 63 69 74 76 70 76 4e 71 37 4c 46 77 64 47 77 75 62 71 6e 79 72 66 4d 33 61 33 51 33 4d 62 6b 74 4c 44 49 7a 38 6a 53 78 74 4f 32 75 39 58 54 74 67 4c 56 39 39 6b 43 33 62 6e 51 75 77 73 49 44 50 62 67 32 77 2f 6d 36 51 4d 56 41 65 4d 57 42 51 4d 58 35 39 50 64 36 51 67 65 37 39 37 67 4a 69 41 44 49 78 49 6e 39 51 72 6f 42 51 77 6c 2b 79 41 68 42 67 67 50 38 67 38 59 47 41 59 37 4c 42 7a 33 51 42 34 52 50 68 39 47 49 69 63 59 43 45 59 67 53 44 6b 36 49 51 77 49 54 53 30 70 52 51 38 56 52 55 6b 54 4d 52 73 37 56 56 46 66 47 55 42 6a 5a 47 55 76 53 44 78 42 61 43 6f 32 4f 47 31 74 61 6b 64 4e 51 45 68 45 55 6b 56 76 4e 33 46 46 4d 6b 34 35 67 49 Data Ascii: 4ubyDjZWFn5aAmpimnJy8wtCRrtPBrbCTraXGlcitvpvNq7LFwdGwubqnyrfM3a3Q3MbktLDIz8jSxtO2u9XTtgLV99kC3bnQuwsIDPbg2w/m6QMVAeMWBQMX59Pd6Qge797gJiADIxIn9QroBQwl+yAhBggP8g8YGAY7LBz3QB4RPh9GIicYCEYgSDk6IQwITS0pRQ8VRUkTMRs7VVFfGUBjZGUvSDxBaCo2OG1takdNQEhEUkVvN3FFMk45gI
2025-03-20 18:20:05 UTC	1369	IN	Data Raw: 79 49 64 2f 6d 59 47 55 75 71 36 62 70 72 2f 54 6b 35 79 64 30 35 4b 4f 6f 61 58 58 73 5a 54 63 6e 37 65 73 7a 61 36 75 77 4f 43 65 73 4d 58 6b 71 73 53 6b 7a 71 2f 49 76 63 4f 2b 76 4d 2b 31 78 4f 44 42 77 76 66 53 74 4f 79 35 79 74 2f 76 75 74 38 44 39 38 4b 36 34 41 6a 45 77 75 54 37 7a 38 4c 2b 33 75 44 47 37 4f 55 57 31 2f 44 55 32 38 34 62 32 4e 2f 53 36 51 4c 63 31 68 50 67 4a 75 67 6e 47 4f 54 69 47 79 6a 71 2b 52 38 63 4d 76 54 72 4b 50 50 71 4a 77 62 36 37 6a 73 66 44 51 41 5a 51 50 34 45 48 52 59 46 2b 69 46 49 42 52 59 37 51 41 38 44 50 79 4a 53 42 31 4e 4d 56 68 67 78 4f 79 6b 64 46 42 6b 66 49 56 39 67 48 52 73 39 59 43 67 6f 51 6b 6f 6d 4c 46 74 6f 4c 43 4e 76 63 43 30 31 4c 47 51 7a 51 6d 64 6b 4f 6a 30 30 4f 54 6c 41 62 33 52 41 52 48 4e Data Ascii: yId/mYGUuq6bpr/Tk5yd05KOoaXXsZTcn7esza6uwOCesMXkqsSkzq/IvcO+vM+1xODBwvfStOy5yt/vut8D98K64AjEwuT7z8L+3uDG7OUW1/DU284b2N/S6QLc1hPgJugnGOTiGyjq+R8cMvTrKPPqJwb67jsfDQAZQP4EHRYF+iFIBRY7QA8DPyJSB1NMVhgxOykdFBkfIV9gHRs9YCgoQkomLFtoLCNvcC01LGQzQmdkOj00OTlAb3RARHN

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:08 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/869891523:1742491163:n-4Rg3Aygap6VtR-fWRcbia8Z54B97VvtXRwrCcHfgI/9237388ec9f70c7a/oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 42212 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: oLSfnvmGgjX5.b4b4ISfrepTW9es3lJjgKl4k16IRxw-1742494799-1.1.1.1-sYSeXOoBEqyh3lqm49QNcPjt7.sbBkskAFlu.pNUgMLoOZS7NPe9UKI_rChhAFHe cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/cgij8/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:20:08 UTC	16384	OUT	Data Raw: 39 49 7a 44 51 70 2d 65 72 74 7a 47 78 33 62 2d 6c 73 61 79 7a 6d 38 2d 61 73 62 44 2b 6a 43 73 65 78 73 4e 31 73 2d 44 47 47 73 42 73 70 6a 52 62 2d 50 47 73 33 32 6d 44 2d 47 69 2d 4f 4c 73 2b 43 70 64 73 4e 59 78 44 73 6f 44 6d 62 73 68 44 52 4b 73 34 44 6d 4e 36 72 24 44 70 46 37 73 46 77 74 6a 73 2b 45 51 78 73 31 73 70 66 68 6c 6b 6c 73 33 78 4f 42 73 7a 78 2d 52 73 47 49 73 39 39 74 52 74 62 2d 73 39 43 49 78 7a 36 47 79 72 73 37 44 73 50 59 73 57 38 49 68 7a 48 45 38 4e 62 50 47 49 73 6e 62 52 64 4b 73 6d 57 7a 73 7a 48 73 75 6a 73 6c 44 6d 79 72 66 4b 44 73 75 66 62 6a 32 6c 50 58 44 73 38 71 34 44 50 6d 64 74 33 73 2d 4e 79 4b 73 73 65 31 52 57 46 73 39 7a 73 56 44 2d 61 61 6b 44 49 35 73 2d 50 46 44 78 33 39 44 6d 36 61 73 2d 36 37 73 73 47 73 Data Ascii: 9IzDQp-ertzGx3b-lsayzm8-asbD+jCsexsN1s-DGGsBspjRb-PGs32mD-Gi-OLs+CpdsNYxDsoDmbshDRKs4DmN6r$DpF7sFwtjs+EQxs1spfhlkls3xOBszx-RsGIs99tRtb-s9CIxz6Gyrs7DsPYsW8IhzHE8NbPGIsnbRdKsmWzszHsujslDmyrfKDsufbj2lPXDs8q4DPmdt3s-NyKsse1RWFs9zsVD-aakDI5s-PFDx39Dm6as-67ssGs
2025-03-20 18:20:08 UTC	16384	OUT	Data Raw: 62 42 70 55 73 42 77 30 53 58 6e 43 43 4f 70 50 59 70 75 41 6a 44 36 74 7a 42 73 32 55 45 38 75 53 37 44 2d 7a 71 32 6b 6c 6a 2d 78 46 6b 49 6e 32 55 7a 77 56 49 43 41 47 4a 51 45 53 2b 41 50 65 43 6b 73 47 73 78 70 77 2d 7a 4e 7a 2d 30 62 6b 62 6d 35 57 52 6a 51 49 41 6c 55 65 43 55 73 51 77 4d 44 2b 75 6d 43 64 43 33 73 67 59 56 78 2d 6f 51 73 50 70 50 72 6a 78 73 50 2d 57 47 51 6d 72 35 2b 43 2d 61 73 78 44 47 36 2d 6e 73 48 44 45 4b 2d 42 59 6b 5a 6d 72 2d 63 59 66 44 47 37 43 59 73 57 6d 44 57 4b 49 66 53 58 44 67 43 55 58 55 68 6f 6a 72 76 58 52 41 63 79 43 65 43 45 76 41 77 44 58 47 45 68 2d 69 2d 61 70 66 5a 2b 49 4b 71 47 75 41 74 58 73 6c 44 58 63 48 57 62 71 47 2d 6c 69 50 36 59 49 53 70 2d 76 7a 51 61 7a 62 73 71 43 70 6a 52 55 70 51 6a 65 43 Data Ascii: bBpUsBw0SXnCCOpPYpuAjD6tzBs2UE8uS7D-zq2klj-xFkIn2UzwVICAGJQES+APeCksGsxpw-zNz-0bkbm5WRjQIAlUeCUsQwMD+umCdC3sgYVx-oQsPpPrjxsP-WGQmr5+C-asxDG6-nsHDEK-BYkZmr-cYfDG7CYsWmDWKIfSXDgCUXUhojrvXRAcyCeCEvAwDXGEh-i-apfZ+IKqGuAtXslDXcHWbqG-liP6YISp-vzQazbsqCpjRUpQjeC
2025-03-20 18:20:08 UTC	9444	OUT	Data Raw: 46 45 4c 39 4b 73 50 4c 4e 6e 6d 32 75 4f 74 35 36 70 33 67 6d 57 4c 47 43 38 6a 6f 34 76 68 59 53 37 76 79 57 49 4c 65 6e 70 62 67 68 33 5a 6e 44 47 7a 38 42 4b 76 38 77 78 47 70 48 56 68 73 39 48 64 36 73 48 38 6a 35 42 65 66 77 64 46 74 51 73 43 42 7a 4f 68 67 62 31 35 73 39 71 52 48 4e 2d 6b 4f 4c 78 53 37 68 65 50 6a 70 6c 73 6d 44 7a 66 65 68 42 35 72 63 43 4b 47 5a 4c 57 6e 78 70 52 51 35 4b 67 2b 68 7a 6e 75 78 52 78 51 5a 41 38 43 2d 34 6d 43 73 6a 50 50 78 71 68 58 47 34 72 62 42 4d 37 70 62 50 53 24 36 73 64 6b 67 2b 59 71 36 52 39 65 34 64 4d 6d 43 4f 53 36 73 37 73 6c 6b 71 36 61 51 62 53 37 78 34 64 4c 63 31 46 50 43 50 34 6a 4f 36 67 6b 4c 42 73 5a 73 52 2d 30 61 4f 61 38 67 72 51 4c 6e 6a 44 47 51 71 56 35 48 6c 77 77 37 35 44 46 78 5a 68 Data Ascii: FEL9KsPLNnm2uOt56p3gmWLGC8jo4vhYS7vyWILenpbgh3ZnDGz8BKv8wxGpHVhs9Hd6sH8j5BefwdFtQsCBzOhgb15s9qRHN-kOLxS7hePjplsmDzfehB5rcCKGZLWnxpRQ5Kg+hznuxRxQZA8C-4mCsjPPxqhXG4rbBM7pbPS$6sdkg+Yq6R9e4dMmCOS6s7slkq6aQbS7x4dLc1FPCP4jO6gkLBsZsR-0aOa8grQLnjDGQqV5Hlww75DFxZh
2025-03-20 18:20:09 UTC	282	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:20:09 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5004 Connection: close cf-chl-out: AUm0qVW3yw81yhJBYCeKmtQ0yp3GDqdhZqI6VwWnkkepsx9ZJjxC77eeB51p1PLZZuj/JOeVbSuUiPMVBBch/vfrtv6w/yM6wjBK8WhDaBk=$U2TKH0sRoxG+pTIr3/ormA==
2025-03-20 18:20:09 UTC	1555	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 4d 52 2f 56 4d 74 77 6d 6a 6d 34 6b 74 61 33 56 6e 5a 52 51 30 76 6a 73 42 51 44 6b 67 30 67 73 4f 68 39 75 30 68 5a 46 6b 4f 4c 64 4a 68 6f 64 54 61 70 33 70 5a 65 72 4d 31 69 2b 4e 6c 2f 53 62 2f 5a 42 4b 77 49 55 49 51 6b 4c 79 75 4d 37 6f 43 4b 32 4f 63 6e 39 4c 67 59 38 77 47 50 35 2f 69 67 7a 46 4d 49 54 58 44 62 49 52 65 65 6c 78 76 76 73 5a 65 4e 4d 4c 63 38 2b 42 35 68 73 48 4d 71 34 4b 48 77 34 73 38 6e 48 55 57 77 73 63 69 75 65 6e 34 2b 65 45 53 67 2f 4f 41 59 32 6f 36 64 5a 51 72 4e 70 69 44 6d 5a 6d 48 6c 76 2b 53 4b 64 71 2b 79 7a 65 62 36 49 7a 56 38 67 61 65 56 50 69 34 61 2f 4d 6f 43 4b 6f 47 47 46 76 6e 38 31 71 56 4c 44 76 7a 56 31 33 35 75 76 6d 39 52 67 4f 43 4e 34 62 79 6d 66 36 36 4e 65 65 Data Ascii: cf-chl-out-s: MR/VMtwmjm4kta3VnZRQ0vjsBQDkg0gsOh9u0hZFkOLdJhodTap3pZerM1i+Nl/Sb/ZBKwIUIQkLyuM7oCK2Ocn9LgY8wGP5/igzFMITXDbIReelxvvsZeNMLc8+B5hsHMq4KHw4s8nHUWwsciuen4+eESg/OAY2o6dZQrNpiDmZmHlv+SKdq+yzeb6IzV8gaeVPi4a/MoCKoGGFvn81qVLDvzV135uvm9RgOCN4bymf66Nee
2025-03-20 18:20:09 UTC	901	IN	Data Raw: 59 6c 78 39 67 70 47 52 63 6f 78 58 68 6e 4b 57 56 58 4e 33 57 58 56 30 6d 33 47 53 64 61 4b 6d 6d 36 52 31 65 48 65 47 65 70 69 71 63 48 43 7a 73 37 42 77 75 62 53 4c 71 35 53 55 64 62 36 59 6e 70 37 43 6e 4b 4a 2b 77 70 79 6f 6c 34 75 39 72 71 54 49 76 70 43 62 71 38 69 6c 31 71 2f 49 70 64 69 37 7a 61 71 31 6d 64 36 65 33 4c 37 44 34 4b 57 32 30 74 61 70 78 73 44 72 74 36 6e 78 76 4c 72 68 76 73 44 6a 30 4d 2f 56 79 76 50 71 38 74 44 52 37 2f 50 54 31 66 62 36 2f 73 38 46 35 64 6a 63 35 2b 48 48 38 41 6e 78 42 78 50 75 38 63 37 78 47 42 54 6a 30 64 4c 54 35 75 66 72 37 79 44 7a 37 4f 33 38 35 64 2f 6f 49 51 33 65 42 51 59 49 37 51 6f 52 46 53 34 78 4e 67 48 78 41 7a 41 73 4c 41 77 57 4b 7a 30 50 51 6b 45 30 50 69 4d 7a 49 79 55 47 42 41 73 36 52 53 5a Data Ascii: Ylx9gpGRcoxXhnKWVXN3WXV0m3GSdaKmm6R1eHeGepiqcHCzs7BwubSLq5SUdb6Ynp7CnKJ+wpyol4u9rqTIvpCbq8il1q/Ipdi7zaq1md6e3L7D4KW20tapxsDrt6nxvLrhvsDj0M/VyvPq8tDR7/PT1fb6/s8F5djc5+HH8AnxBxPu8c7xGBTj0dLT5ufr7yDz7O385d/oIQ3eBQYI7QoRFS4xNgHxAzAsLAwWKz0PQkE0PiMzIyUGBAs6RSZ
2025-03-20 18:20:09 UTC	1369	IN	Data Raw: 69 6f 61 43 41 77 30 4b 43 59 64 4c 79 4c 2b 44 30 55 39 4f 55 4d 7a 47 52 51 6e 51 6a 55 68 4c 44 30 67 55 56 4e 47 44 79 67 71 54 78 4d 70 4e 52 6c 53 4e 45 31 4c 48 6a 73 69 55 6b 59 6a 59 56 5a 6b 52 46 34 6a 53 79 6f 6d 59 6b 4e 75 5a 32 4a 72 61 6e 42 71 57 56 63 33 66 58 51 37 55 32 39 52 67 6c 42 31 5a 58 64 69 64 32 6c 47 69 6e 35 64 58 47 5a 2b 68 33 74 78 6c 59 78 66 6d 49 39 53 56 70 79 47 57 48 64 57 6b 46 79 41 65 70 4e 69 64 4a 69 5a 65 58 69 46 6d 36 4f 57 69 36 69 73 66 49 6d 69 69 58 61 7a 70 6f 6d 69 6b 4c 57 63 6a 49 70 34 6b 49 79 32 73 37 75 63 76 4c 69 6f 70 4a 75 32 6a 5a 75 42 77 6f 75 2b 71 38 7a 4e 72 4e 48 4b 7a 38 61 6e 7a 71 32 34 72 75 48 57 72 4e 32 63 7a 62 43 31 31 71 54 61 76 4e 6d 2f 77 2f 44 64 35 36 7a 52 33 38 54 56 Data Ascii: ioaCAw0KCYdLyL+D0U9OUMzGRQnQjUhLD0gUVNGDygqTxMpNRlSNE1LHjsiUkYjYVZkRF4jSyomYkNuZ2JranBqWVc3fXQ7U29RglB1ZXdid2lGin5dXGZ+h3txlYxfmI9SVpyGWHdWkFyAepNidJiZeXiFm6OWi6isfImiiXazpomikLWcjIp4kIy2s7ucvLiopJu2jZuBwou+q8zNrNHKz8anzq24ruHWrN2czbC11qTavNm/w/Dd56zR38TV
2025-03-20 18:20:09 UTC	1369	IN	Data Raw: 66 39 4b 54 63 71 49 44 73 42 47 44 34 37 51 53 41 57 50 6b 67 36 48 6a 34 4d 48 31 52 4c 4a 55 6b 4f 52 6b 30 61 57 52 70 49 50 45 42 4f 48 6b 30 62 5a 56 6b 6a 52 6c 5a 52 4f 32 78 57 5a 44 38 70 5a 57 63 72 50 6c 38 31 58 6c 68 78 53 6c 56 32 4e 47 56 52 56 6f 46 38 57 56 73 38 63 47 42 32 50 34 46 68 5a 34 32 49 57 57 65 47 54 6c 31 79 53 34 31 6b 68 56 43 45 63 58 64 54 57 6e 56 36 6c 70 78 31 65 56 79 4e 65 59 56 66 66 6f 69 62 59 36 69 4d 6d 32 64 75 68 59 35 73 72 5a 57 4f 62 36 53 4e 6b 58 53 53 6b 5a 57 32 67 59 79 32 66 4a 71 76 70 6f 43 62 6e 4c 7a 42 79 4c 65 6c 69 4d 66 4d 7a 70 36 6c 71 37 61 79 72 4e 61 5a 71 71 62 62 71 64 4c 63 72 64 62 58 75 38 4c 55 70 75 62 49 75 2b 72 61 7a 75 75 69 78 4b 7a 50 72 4d 44 6f 2b 4d 48 4a 75 65 33 4e 78 Data Ascii: f9KTcqIDsBGD47QSAWPkg6Hj4MH1RLJUkORk0aWRpIPEBOHk0bZVkjRlZRO2xWZD8pZWcrPl81XlhxSlV2NGVRVoF8WVs8cGB2P4FhZ42IWWeGTl1yS41khVCEcXdTWnV6lpx1eVyNeYVffoibY6iMm2duhY5srZWOb6SNkXSSkZW2gYy2fJqvpoCbnLzByLeliMfMzp6lq7ayrNaZqqbbqdLcrdbXu8LUpubIu+razuuixKzPrMDo+MHJue3Nx
2025-03-20 18:20:09 UTC	1365	IN	Data Raw: 39 50 6a 41 41 52 45 6f 56 51 43 77 32 48 30 64 49 42 44 4a 4b 46 55 34 77 53 54 6f 54 4d 46 42 53 4c 55 6c 55 4d 6a 46 56 57 45 59 6a 57 6c 39 68 61 6c 64 6a 50 53 42 6e 58 31 4a 6c 4d 46 35 77 51 48 42 73 53 58 4a 73 4e 54 63 36 4f 57 6b 38 58 48 56 77 66 57 46 66 65 6d 71 47 65 6f 46 66 66 55 69 4a 63 6d 42 69 53 33 32 47 64 6f 46 5a 55 6c 6c 56 57 6d 69 55 57 46 35 31 67 5a 68 36 6e 6e 39 68 65 4b 6c 70 6d 33 35 6e 65 47 6d 44 72 6e 31 73 71 34 53 71 70 5a 6d 70 65 61 6d 64 6b 33 57 32 67 62 47 41 73 5a 62 46 78 72 71 78 6f 4b 43 37 6f 73 6e 4e 78 72 4c 4f 6e 4d 4f 51 74 4c 62 4f 71 39 4c 4d 6c 72 37 4f 73 63 33 42 76 4e 66 63 74 71 54 5a 33 2b 48 49 78 4b 57 2b 33 75 72 6e 77 65 32 70 35 2f 44 41 36 65 33 5a 78 4f 50 6d 33 4f 32 31 37 72 76 32 7a 66 Data Ascii: 9PjAAREoVQCw2H0dIBDJKFU4wSToTMFBSLUlUMjFVWEYjWl9haldjPSBnX1JlMF5wQHBsSXJsNTc6OWk8XHVwfWFfemqGeoFffUiJcmBiS32GdoFZUllVWmiUWF51gZh6nn9heKlpm35neGmDrn1sq4SqpZmpeamdk3W2gbGAsZbFxrqxoKC7osnNxrLOnMOQtLbOq9LMlr7Osc3BvNfctqTZ3+HIxKW+3urnwe2p5/DA6e3ZxOPm3O217rv2zf

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:10 UTC	1697	OUT	POST /uiw920 HTTP/1.1 Host: dua-tech.us Connection: keep-alive Content-Length: 4740 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "134.0.6998.36" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" Origin: https://dua-tech.us Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://dua-tech.us/uiw920?__cf_chl_tk=Va_OWVXUIj.Xw9TmbIHEuZVGP_CW3a6fNINp9vPww00-1742494795-1.0.1.1-MBM38wpiUZvpWiVA_pL9hOXnb8Ip5v6.BoshxLRoDJM Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7
2025-03-20 18:20:10 UTC	4740	OUT	Data Raw: 37 63 64 33 64 62 32 32 39 38 38 66 62 36 35 63 37 36 62 63 62 64 38 34 38 35 36 37 66 39 30 61 36 32 65 31 61 66 64 34 33 63 34 31 39 39 65 32 63 63 64 37 62 38 36 31 34 62 30 63 65 39 31 64 3d 4f 33 67 78 69 70 59 4f 4c 2e 34 36 37 7a 6e 68 61 4c 52 55 43 34 79 45 39 76 2e 70 49 65 58 4f 42 56 57 63 4c 58 67 65 45 68 4d 2d 31 37 34 32 34 39 34 37 39 35 2d 31 2e 32 2e 31 2e 31 2d 6b 39 33 78 78 5f 50 6e 32 6d 38 54 68 4f 4b 56 30 55 6f 41 6d 63 56 55 73 64 4c 55 36 42 33 70 50 79 6e 42 69 5a 57 61 63 32 49 43 31 64 61 58 4d 38 62 54 31 71 79 70 4e 5f 57 38 61 54 4f 6e 67 39 70 57 43 41 73 56 70 6b 7a 4f 39 30 62 4c 7a 4d 31 63 50 62 35 4b 71 68 5f 6d 58 4f 70 76 4e 6a 77 4d 68 6f 62 54 56 6f 45 46 74 2e 59 30 68 34 42 78 56 67 37 78 52 37 6f 47 6f 37 30 Data Ascii: 7cd3db22988fb65c76bcbd848567f90a62e1afd43c4199e2ccd7b8614b0ce91d=O3gxipYOL.467znhaLRUC4yE9v.pIeXOBVWcLXgeEhM-1742494795-1.2.1.1-k93xx_Pn2m8ThOKV0UoAmcVUsdLU6B3pPynBiZWac2IC1daXM8bT1qypN_W8aTOng9pWCAsVpkzO90bLzM1cPb5Kqh_mXOpvNjwMhobTVoEFt.Y0h4BxVg7xR7oGo70
2025-03-20 18:20:10 UTC	1345	IN	HTTP/1.1 503 Service Temporarily Unavailable Date: Thu, 20 Mar 2025 18:20:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; path=/; expires=Fri, 21-Mar-25 18:20:09 GMT; Max-Age=86400; Set-Cookie: r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; path=/; expires=Fri, 21-Mar-25 18:20:09 GMT; Max-Age=86400; Set-Cookie: uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; path=/; expires=Fri, 21-Mar-25 18:20:09 GMT; Max-Age=86400; Set-Cookie: qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; path=/; expires=Fri, 21-Mar-25 18:20:09 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MxampaB0A5Yqththa4SPU6tpHMCRT0TTbKm0Y0BXuty5wkRF3R5%2BJ%2BtybUXPo4ZBcgqlfsxwk3F4R3BZdr%2BHXy5Mr5e1dqctm1K02bpgK%2BN1KZN895d1uNH0GKeRGA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 923738d469fc4399-EWR
2025-03-20 18:20:10 UTC	251	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 31 30 35 31 32 26 6d 69 6e 5f 72 74 74 3d 31 30 39 38 32 30 26 72 74 74 5f 76 61 72 3d 32 34 32 30 36 26 73 65 6e 74 3d 38 26 72 65 63 76 3d 31 33 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 33 26 72 65 63 76 5f 62 79 74 65 73 3d 37 30 35 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 33 32 39 30 26 63 77 6e 64 3d 32 32 38 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 38 36 38 62 33 35 30 63 63 35 64 63 62 32 33 30 26 74 73 3d 34 36 33 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=110512&min_rtt=109820&rtt_var=24206&sent=8&recv=13&lost=0&retrans=0&sent_bytes=2823&recv_bytes=7053&delivery_rate=33290&cwnd=228&unsent_bytes=0&cid=868b350cc5dcb230&ts=463&x=0"
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 33 34 30 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: 340b<!DOCTYPE html><html><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /><meta name="viewport" content="width=device-width, initial-
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 32 30 5c 78 36 32 5c 78 32 39 5c 78 37 44 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 36 32 5c 78 32 38 5c 78 36 36 5c 78 37 35 5c 78 36 45 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 38 5c 78 32 39 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 37 36 5c 78 36 31 5c 78 37 32 5c 78 32 30 5c 78 36 45 5c 78 36 46 5c 78 37 37 5c 78 32 30 5c 78 33 44 5c 78 32 30 5c 78 36 45 5c 78 36 35 5c Data Ascii: 20\x62\x29\x7D\x3B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x62\x28\x66\x75\x6E\x63\x74\x69\x6F\x6E\x28\x29\x7B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x76\x61\x72\x20\x6E\x6F\x77\x20\x3D\x20\x6E\x65\
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 35 5c 78 32 30 5c 78 33 31 5c 78 33 38 5c 78 33 41 5c 78 33 32 5c 78 33 30 5c 78 33 41 5c 78 33 31 5c 78 33 30 5c 78 32 30 5c 78 34 37 5c 78 34 44 5c 78 35 34 5c 78 32 37 5c 78 32 30 5c 78 32 42 5c 78 32 30 5c 78 32 37 5c 78 33 42 5c 78 32 30 5c 78 37 30 5c 78 36 31 5c 78 37 34 5c 78 36 38 5c 78 33 44 5c 78 32 46 5c 78 32 37 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 46 5c 78 32 46 5c 78 36 41 5c 78 36 31 5c 78 37 36 5c 78 36 31 5c 78 37 33 5c 78 36 33 5c 78 37 32 5c 78 36 39 5c 78 Data Ascii: 5\x20\x31\x38\x3A\x32\x30\x3A\x31\x30\x20\x47\x4D\x54\x27\x20\x2B\x20\x27\x3B\x20\x70\x61\x74\x68\x3D\x2F\x27\x3B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2F\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 37 33 5c 78 37 30 5c 78 36 31 5c 78 37 37 5c 78 36 45 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 37 32 5c 78 36 38 5c 78 36 39 5c 78 36 45 5c 78 36 46 5c 78 32 41 5c 78 32 46 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 37 37 5c 78 36 35 5c 78 36 32 5c 78 36 34 5c 78 37 32 5c 78 36 39 5c 78 37 36 5c 78 36 35 5c 78 37 32 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 37 33 5c 78 36 35 5c 78 36 43 5c 78 36 35 5c 78 36 45 5c 78 36 39 5c 78 37 35 5c 78 36 44 5c 78 32 41 5c 78 32 46 5c 78 30 Data Ascii: \x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x73\x70\x61\x77\x6E\x29\x7B\x2F\x2A\x72\x68\x69\x6E\x6F\x2A\x2F\x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x77\x65\x62\x64\x72\x69\x76\x65\x72\x29\x7B\x2F\x2A\x73\x65\x6C\x65\x6E\x69\x75\x6D\x2A\x2F\x0
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 78 37 37 5c 78 36 39 5c 78 37 34 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 37 43 5c 78 36 43 5c 78 36 39 5c 78 36 45 5c 78 36 42 5c 78 36 35 5c 78 36 34 5c 78 36 39 5c 78 36 45 5c 78 37 43 5c 78 37 30 5c 78 36 39 5c 78 36 45 5c 78 36 37 5c 78 36 34 5c 78 36 46 5c 78 36 44 5c 78 32 46 5c 78 36 39 5c 78 32 45 5c 78 37 34 5c 78 36 35 5c 78 37 33 5c 78 37 34 5c 78 32 38 5c 78 36 45 5c 78 36 31 5c 78 37 36 5c 78 36 39 5c 78 36 37 5c 78 36 31 5c 78 37 34 5c 78 36 46 5c 78 37 32 5c 78 32 45 5c 78 37 35 5c 78 37 33 5c 78 36 35 5c 78 37 32 5c 78 34 31 5c 78 36 37 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 32 39 5c 78 32 39 5c 78 37 42 5c 78 30 41 5c 78 32 46 5c 78 32 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 36 45 5c 78 36 31 5c 78 37 36 5c 78 36 39 5c 78 36 37 Data Ascii: x77\x69\x74\x74\x65\x72\x7C\x6C\x69\x6E\x6B\x65\x64\x69\x6E\x7C\x70\x69\x6E\x67\x64\x6F\x6D\x2F\x69\x2E\x74\x65\x73\x74\x28\x6E\x61\x76\x69\x67\x61\x74\x6F\x72\x2E\x75\x73\x65\x72\x41\x67\x65\x6E\x74\x29\x29\x7B\x0A\x2F\x2A\x69\x66\x28\x6E\x61\x76\x69\x67
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 46 5c 78 32 46 5c 78 36 35 5c 78 36 45 5c 78 36 34 5c 78 32 30 5c 78 36 41 5c 78 36 31 5c 78 37 36 5c 78 36 31 5c 78 37 33 5c 78 36 33 5c 78 37 32 5c 78 36 39 5c 78 37 30 5c 78 37 34 5c 78 32 30 5c 78 37 30 5c 78 37 35 5c 78 37 41 5c 78 37 41 5c 78 36 43 5c 78 36 35 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: 7D\x0A\x7D\x0A\x7D\x0A\x7D\x0A\x7D\x0A\x7D\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2F\x2F\x65\x6E\x64\x20\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x20\x70\x75\x7A\x7A\x6C\x65\x0A\x20\x20\x20\x20\
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 30 5c 78 36 39 5c 78 36 36 5c 78 32 30 5c 78 36 39 5c 78 37 34 5c 78 32 30 5c 78 36 38 5c 78 36 31 5c 78 37 33 5c 78 32 30 5c 78 36 39 5c 78 36 45 5c 78 37 30 5c 78 37 35 5c 78 37 34 5c 78 32 30 5c 78 36 35 5c 78 36 43 5c 78 36 35 5c 78 36 44 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 37 33 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 30 5c 78 32 38 5c 78 36 36 5c 78 36 39 5c 78 37 32 5c 78 37 33 5c 78 37 34 5c 78 34 36 5c 78 36 46 5c 78 37 32 5c 78 36 44 5c 78 32 39 5c 78 32 30 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 36 33 5c 78 36 46 5c 78 36 45 5c 78 37 33 5c 78 37 34 5c 78 32 30 5c 78 36 39 5c 78 36 45 5c 78 37 30 5c 78 37 35 5c 78 37 34 5c 78 34 36 5c 78 36 39 5c 78 36 35 5c 78 36 43 5c 78 36 34 5c 78 37 33 5c 78 32 30 5c 78 33 44 5c 78 Data Ascii: 0\x69\x66\x20\x69\x74\x20\x68\x61\x73\x20\x69\x6E\x70\x75\x74\x20\x65\x6C\x65\x6D\x65\x6E\x74\x73\x0A\x69\x66\x20\x28\x66\x69\x72\x73\x74\x46\x6F\x72\x6D\x29\x20\x7B\x0A\x20\x20\x63\x6F\x6E\x73\x74\x20\x69\x6E\x70\x75\x74\x46\x69\x65\x6C\x64\x73\x20\x3D\x
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 36 43 5c 78 36 46 5c 78 36 33 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 45 5c 78 36 38 5c 78 37 32 5c 78 36 35 5c 78 36 36 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 37 44 5c 78 32 30 5c 78 36 Data Ascii: \x69\x6E\x64\x6F\x77\x2E\x6C\x6F\x63\x61\x74\x69\x6F\x6E\x2E\x68\x72\x65\x66\x3B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x7D\x20\x6

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:10 UTC	1450	OUT	GET /favicon.ico HTTP/1.1 Host: dua-tech.us Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dua-tech.us/uiw920?__cf_chl_tk=Va_OWVXUIj.Xw9TmbIHEuZVGP_CW3a6fNINp9vPww00-1742494795-1.0.1.1-MBM38wpiUZvpWiVA_pL9hOXnb8Ip5v6.BoshxLRoDJM Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7
2025-03-20 18:20:10 UTC	1342	IN	HTTP/1.1 503 Service Temporarily Unavailable Date: Thu, 20 Mar 2025 18:20:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache X-Frame-Options: SAMEORIGIN Expires: 0 CF-Cache-Status: BYPASS Set-Cookie: G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; path=/; expires=Fri, 21-Mar-25 18:20:09 GMT; Max-Age=86400; Set-Cookie: r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; path=/; expires=Fri, 21-Mar-25 18:20:09 GMT; Max-Age=86400; Set-Cookie: uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; path=/; expires=Fri, 21-Mar-25 18:20:09 GMT; Max-Age=86400; Set-Cookie: qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; path=/; expires=Fri, 21-Mar-25 18:20:09 GMT; Max-Age=86400; Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YSBx5qV2xYyNLluv0ptO7k8P6mPoE6smoz%2FCaO9PaNo%2B7K0qkBq4DPYn0EWpUnuLgO6bHGI33e4pMEHqlfa26gH2DGKDL7Q29WTR5QyzTlGX1dnAsW3wD%2BtvmruxTA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 923738d46df519c7-EWR
2025-03-20 18:20:10 UTC	250	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 30 38 34 39 32 26 6d 69 6e 5f 72 74 74 3d 31 30 38 32 39 37 26 72 74 74 5f 76 61 72 3d 32 33 30 32 38 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 39 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 33 26 72 65 63 76 5f 62 79 74 65 73 3d 32 30 34 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 34 33 38 39 26 63 77 6e 64 3d 32 32 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 37 36 38 62 34 37 32 65 65 39 32 66 64 30 32 66 26 74 73 3d 35 35 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=108492&min_rtt=108297&rtt_var=23028&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2044&delivery_rate=34389&cwnd=222&unsent_bytes=0&cid=768b472ee92fd02f&ts=557&x=0"
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 34 36 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: 462d<!DOCTYPE html><html><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /><meta name="viewport" content="width=device-width, initial-
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 32 30 5c 78 36 32 5c 78 32 39 5c 78 37 44 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 36 32 5c 78 32 38 5c 78 36 36 5c 78 37 35 5c 78 36 45 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 38 5c 78 32 39 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 37 36 5c 78 36 31 5c 78 37 32 5c 78 32 30 5c 78 36 45 5c 78 36 46 5c 78 37 37 5c 78 32 30 5c 78 33 44 5c 78 32 30 5c 78 36 45 5c 78 36 35 5c Data Ascii: 20\x62\x29\x7D\x3B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x62\x28\x66\x75\x6E\x63\x74\x69\x6F\x6E\x28\x29\x7B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x76\x61\x72\x20\x6E\x6F\x77\x20\x3D\x20\x6E\x65\
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 35 5c 78 32 30 5c 78 33 31 5c 78 33 38 5c 78 33 41 5c 78 33 32 5c 78 33 30 5c 78 33 41 5c 78 33 31 5c 78 33 30 5c 78 32 30 5c 78 34 37 5c 78 34 44 5c 78 35 34 5c 78 32 37 5c 78 32 30 5c 78 32 42 5c 78 32 30 5c 78 32 37 5c 78 33 42 5c 78 32 30 5c 78 37 30 5c 78 36 31 5c 78 37 34 5c 78 36 38 5c 78 33 44 5c 78 32 46 5c 78 32 37 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 46 5c 78 32 46 5c 78 36 41 5c 78 36 31 5c 78 37 36 5c 78 36 31 5c 78 37 33 5c 78 36 33 5c 78 37 32 5c 78 36 39 5c 78 Data Ascii: 5\x20\x31\x38\x3A\x32\x30\x3A\x31\x30\x20\x47\x4D\x54\x27\x20\x2B\x20\x27\x3B\x20\x70\x61\x74\x68\x3D\x2F\x27\x3B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2F\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 37 33 5c 78 37 30 5c 78 36 31 5c 78 37 37 5c 78 36 45 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 37 32 5c 78 36 38 5c 78 36 39 5c 78 36 45 5c 78 36 46 5c 78 32 41 5c 78 32 46 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 37 37 5c 78 36 35 5c 78 36 32 5c 78 36 34 5c 78 37 32 5c 78 36 39 5c 78 37 36 5c 78 36 35 5c 78 37 32 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 37 33 5c 78 36 35 5c 78 36 43 5c 78 36 35 5c 78 36 45 5c 78 36 39 5c 78 37 35 5c 78 36 44 5c 78 32 41 5c 78 32 46 5c 78 30 Data Ascii: \x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x73\x70\x61\x77\x6E\x29\x7B\x2F\x2A\x72\x68\x69\x6E\x6F\x2A\x2F\x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x77\x65\x62\x64\x72\x69\x76\x65\x72\x29\x7B\x2F\x2A\x73\x65\x6C\x65\x6E\x69\x75\x6D\x2A\x2F\x0
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 78 37 37 5c 78 36 39 5c 78 37 34 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 37 43 5c 78 36 43 5c 78 36 39 5c 78 36 45 5c 78 36 42 5c 78 36 35 5c 78 36 34 5c 78 36 39 5c 78 36 45 5c 78 37 43 5c 78 37 30 5c 78 36 39 5c 78 36 45 5c 78 36 37 5c 78 36 34 5c 78 36 46 5c 78 36 44 5c 78 32 46 5c 78 36 39 5c 78 32 45 5c 78 37 34 5c 78 36 35 5c 78 37 33 5c 78 37 34 5c 78 32 38 5c 78 36 45 5c 78 36 31 5c 78 37 36 5c 78 36 39 5c 78 36 37 5c 78 36 31 5c 78 37 34 5c 78 36 46 5c 78 37 32 5c 78 32 45 5c 78 37 35 5c 78 37 33 5c 78 36 35 5c 78 37 32 5c 78 34 31 5c 78 36 37 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 32 39 5c 78 32 39 5c 78 37 42 5c 78 30 41 5c 78 32 46 5c 78 32 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 36 45 5c 78 36 31 5c 78 37 36 5c 78 36 39 5c 78 36 37 Data Ascii: x77\x69\x74\x74\x65\x72\x7C\x6C\x69\x6E\x6B\x65\x64\x69\x6E\x7C\x70\x69\x6E\x67\x64\x6F\x6D\x2F\x69\x2E\x74\x65\x73\x74\x28\x6E\x61\x76\x69\x67\x61\x74\x6F\x72\x2E\x75\x73\x65\x72\x41\x67\x65\x6E\x74\x29\x29\x7B\x0A\x2F\x2A\x69\x66\x28\x6E\x61\x76\x69\x67
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 37 44 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 46 5c 78 32 46 5c 78 36 35 5c 78 36 45 5c 78 36 34 5c 78 32 30 5c 78 36 41 5c 78 36 31 5c 78 37 36 5c 78 36 31 5c 78 37 33 5c 78 36 33 5c 78 37 32 5c 78 36 39 5c 78 37 30 5c 78 37 34 5c 78 32 30 5c 78 37 30 5c 78 37 35 5c 78 37 41 5c 78 37 41 5c 78 36 43 5c 78 36 35 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: 7D\x0A\x7D\x0A\x7D\x0A\x7D\x0A\x7D\x0A\x7D\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2F\x2F\x65\x6E\x64\x20\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x20\x70\x75\x7A\x7A\x6C\x65\x0A\x20\x20\x20\x20\
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 30 5c 78 36 39 5c 78 36 36 5c 78 32 30 5c 78 36 39 5c 78 37 34 5c 78 32 30 5c 78 36 38 5c 78 36 31 5c 78 37 33 5c 78 32 30 5c 78 36 39 5c 78 36 45 5c 78 37 30 5c 78 37 35 5c 78 37 34 5c 78 32 30 5c 78 36 35 5c 78 36 43 5c 78 36 35 5c 78 36 44 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 37 33 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 30 5c 78 32 38 5c 78 36 36 5c 78 36 39 5c 78 37 32 5c 78 37 33 5c 78 37 34 5c 78 34 36 5c 78 36 46 5c 78 37 32 5c 78 36 44 5c 78 32 39 5c 78 32 30 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 36 33 5c 78 36 46 5c 78 36 45 5c 78 37 33 5c 78 37 34 5c 78 32 30 5c 78 36 39 5c 78 36 45 5c 78 37 30 5c 78 37 35 5c 78 37 34 5c 78 34 36 5c 78 36 39 5c 78 36 35 5c 78 36 43 5c 78 36 34 5c 78 37 33 5c 78 32 30 5c 78 33 44 5c 78 Data Ascii: 0\x69\x66\x20\x69\x74\x20\x68\x61\x73\x20\x69\x6E\x70\x75\x74\x20\x65\x6C\x65\x6D\x65\x6E\x74\x73\x0A\x69\x66\x20\x28\x66\x69\x72\x73\x74\x46\x6F\x72\x6D\x29\x20\x7B\x0A\x20\x20\x63\x6F\x6E\x73\x74\x20\x69\x6E\x70\x75\x74\x46\x69\x65\x6C\x64\x73\x20\x3D\x
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 36 43 5c 78 36 46 5c 78 36 33 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 45 5c 78 36 38 5c 78 37 32 5c 78 36 35 5c 78 36 36 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 37 44 5c 78 32 30 5c 78 36 Data Ascii: \x69\x6E\x64\x6F\x77\x2E\x6C\x6F\x63\x61\x74\x69\x6F\x6E\x2E\x68\x72\x65\x66\x3B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x7D\x20\x6
2025-03-20 18:20:10 UTC	1369	IN	Data Raw: 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 37 44 5c 78 32 30 5c 78 36 35 5c 78 36 43 5c 78 37 33 5c 78 36 35 5c 78 32 30 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 Data Ascii: x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x7D\x20\x65\x6C\x73\x65\x20\x7B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:11 UTC	1837	OUT	POST /uiw920 HTTP/1.1 Host: dua-tech.us Connection: keep-alive Content-Length: 22 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" X-Requested-TimeStamp-Combination: X-Requested-TimeStamp: sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" X-Requested-with: XMLHttpRequest sec-ch-ua-full-version: "134.0.6998.36" X-Requested-Type: GET Content-type: application/x-www-form-urlencoded X-Requested-Type-Combination: GET xjOLdewKdj04hwoma4fQqIiHoRI: 39282344 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-Requested-TimeStamp-Expire: sec-ch-ua-platform-version: "10.0.0" Accept: / Origin: https://dua-tech.us Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://dua-tech.us/uiw920 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk
2025-03-20 18:20:11 UTC	22	OUT	Data Raw: 6e 61 6d 65 31 3d 48 65 6e 72 79 26 6e 61 6d 65 32 3d 46 6f 72 64 Data Ascii: name1=Henry&name2=Ford
2025-03-20 18:20:11 UTC	1353	IN	HTTP/1.1 204 No Content Date: Thu, 20 Mar 2025 18:20:11 GMT Connection: close Server: cloudflare X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block X-Xss-Protection: 1; mode=block Cf-Ray: 923738dbef5843ef-EWR X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 X-Server-Powered-By: Engintron X-Robots-Tag: noindex, nofollow Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aTXOf8dyybygE9Nvow1IHfcwg%2BrxdNSo1%2BjbysVWqPOpKiLEEi4GINIn0Qf4zkTEfxw5ZuIzJ4UJ%2BTGoKmXkmLiIVenN6yISNo7Xl8WzWQNEOKRuJQPqZwDxuepMZA%3D%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk; Path=/; Max-Age=86400; Expires=Fri, 21 Mar 2025 18:20:11 GMT Set-Cookie: XnTxcz3uMTqOivNGhqPywr-YdT8=1742494811; Path=/; Max-Age=86400; Expires=Fri, 21 Mar 2025 18:20:11 GMT Set-Cookie: K2xuG5zeRkWwt_p0NkM7eaov5HU=1742581211; Path=/; Max-Age=86400; Expires=Fri, 21 Mar 2025 18:20:11 GMT Set-Cookie: wv2C-BNPI_nby_2evFgR3M154hE=a4GHYabhhqdH5qDzL9de6osxh8s; Path=/; Max-Age=86400; Expires=Fri, 21 Mar 2025 18:20:11 GMT alt-svc: h3=":443"; ma=86400
2025-03-20 18:20:11 UTC	220	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 30 36 33 36 34 26 6d 69 6e 5f 72 74 74 3d 31 30 36 31 35 33 26 72 74 74 5f 76 61 72 3d 32 32 35 32 38 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 39 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 34 26 72 65 63 76 5f 62 79 74 65 73 3d 32 34 37 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 35 30 32 39 26 63 77 6e 64 3d 32 32 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 33 39 33 65 31 35 30 37 33 36 37 64 35 36 63 26 74 73 3d 34 39 38 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=106364&min_rtt=106153&rtt_var=22528&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2475&delivery_rate=35029&cwnd=222&unsent_bytes=0&cid=0393e1507367d56c&ts=498&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:11 UTC	1582	OUT	GET /favicon.ico HTTP/1.1 Host: dua-tech.us Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dua-tech.us/uiw920 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk
2025-03-20 18:20:11 UTC	1094	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 18:20:11 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cf-Ray: 923738dcce8c0caa-EWR Server: cloudflare Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block X-Xss-Protection: 1; mode=block Cache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable Pragma: public Cf-Cache-Status: HIT Age: 18352 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7fCmYZ1ZeyQvP2viFtl7nWwTYy221rytOjUkeQCoU0InXlvcxxb%2BapUnmzqZJUJ5z0IHoKqbd6G%2FGMgEWupLtDbh1Ngw0DKNpI5QSa%2BstHbrLp1mK3BzJRBLbKGuqg%3D%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=108174&min_rtt=108093&rtt_var=22847&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2154&delivery_rate=34450&cwnd=233&unsent_bytes=0&cid=5f6812d79302fc9c&ts=263&x=0"
2025-03-20 18:20:11 UTC	275	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2025-03-20 18:20:11 UTC	47	IN	Data Raw: 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: nt to handle the request.</p></body></html>
2025-03-20 18:20:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:12 UTC	1819	OUT	GET /uiw920 HTTP/1.1 Host: dua-tech.us Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "134.0.6998.36" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://dua-tech.us/uiw920 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk; XnTxcz3uMTqOivNGhqPywr-YdT8=1742494811; K2xuG5zeRkWwt_p0NkM7eaov5HU=1742581211; wv2C-BNPI_nby_2evFgR3M154hE=a4GHYabhhqdH5qDzL9de6osxh8s
2025-03-20 18:20:12 UTC	1082	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 20 Mar 2025 18:20:12 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Location: http://dua-tech.us/uiw920/ X-Nginx-Upstream-Cache-Status: MISS X-Server-Powered-By: Engintron X-Robots-Tag: noindex, nofollow cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bbXNqQemvuAJYGjJ1U1XJi7Sm3R23WeIip1aghR3iyD9g2qtgkhey7Uglg9MrbYM3AIebTRB937UAgLx0dY%2FuGhAyWJD%2BvrgvCjg8TS8l93cyq1ltifxcihT%2BKTWPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 923738e09fe22223-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=107323&min_rtt=107185&rtt_var=22693&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2413&delivery_rate=34694&cwnd=239&unsent_bytes=0&cid=f4c7912c71096529&ts=786&x=0"
2025-03-20 18:20:12 UTC	241	IN	Data Raw: 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 75 61 2d 74 65 63 68 2e 75 73 2f 75 69 77 39 32 30 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: eb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://dua-tech.us/uiw920/">here</a>.</p></body></html>
2025-03-20 18:20:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:12 UTC	1250	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: dua-tech.us Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk
2025-03-20 18:20:12 UTC	923	IN	HTTP/1.1 302 Found Date: Thu, 20 Mar 2025 18:20:12 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FZwLYWX4A5g8%2BX73RKhiXZHIVGuDSiYMZM5v6L%2FV0u%2FbKdKD8PNN%2F2%2FowQCkRnpK29Ejwn5ytx%2FjFvyTmS55szLAK9u4XwF6x3Zh3qSvwslCGuLPQUaIV%2Bhp8hbBPw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 923738e34e151861-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104077&min_rtt=103000&rtt_var=23349&sent=6&recv=8&lost=0&retrans=1&sent_bytes=2822&recv_bytes=1822&delivery_rate=35057&cwnd=188&unsent_bytes=0&cid=280e0bb1d35b4e24&ts=274&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:20:12 UTC	1405	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1 Host: dua-tech.us Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=JMQsFAVjKfrcob3nvFWr0Y90yumc8z32FME3HEJ0mLA-1742494809-1.2.1.1-kG5KVp60Bf10aXJkm8JCfpxAWfTLLGBfly1sCpwAsM6uXryK3TEe.rv3rolS.QkkHA3HcftmccUQKBjC4kHR5f5UKGNQcVkHZFb.3jBVrSbWkl6eOC5uQcr6Ka4mjxz1Ho0r4FICGxqKhle6hw0o8DSTD5L3uG_kDKfnl1WjzESkw_bDNUKlrJIFcsxRpjJI9.O9HCvzJBsCBsgeIYcYLJ7ISTG1_2W.C25pfNYesDYmhtEHasKmlA0yvvUHT.j0fE_Qbu2V28GsI90ycIpDhU_LOdwZVCGYMxraYk3Cs2NKWvQxHrKEkAVw.NrBH7K9JRxiTlA.gcdfFSEezNaRhaPU3ui9atM8uuRFjav4LHGWv2CCZPyUaH369MNxrcE7; G2UUNFrU05wQRi-clUb21goBxxs=4Ld_oZ6m1nmOvy5ApgN2z3Ti8Hw; r61NlaUf6tVF7sT204wJ4_KDB-0=1742494809; uMXq9x-NzysTjaMCMI_hT289wPE=1742581209; qtybCuYcRxO_6TryEXOpy-2y0Ug=Z-_RlQh0vKr-XucmAyrBArOps3w; v7CtkHk-h80GvLE2W5BUMZwut-o=s6CIfQpxs1c5zXDHe4hjqlbmmhk; XnTxcz3uMTqOivNGhqPywr-YdT8=1742494811; K2xuG5zeRkWwt_p0NkM7eaov5HU=1742581211; wv2C-BNPI_nby_2evFgR3M154hE=a4GHYabhhqdH5qDzL9de6osxh8s
2025-03-20 18:20:13 UTC	898	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:20:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8482 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bCZTZXWHtzr7ag%2BEBKnmO%2BzN12F60rykxkMbBNwxmB9qxNm%2FMtZjwd6EoMzsxU8KSuEdnPtrweVhJhqxf%2BG0DCgDETO2cJSkh11SuYxInV4ln%2FbOiTKSQTT78xEfWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 923738e619384fb3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=110595&min_rtt=106155&rtt_var=27050&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1977&delivery_rate=35083&cwnd=239&unsent_bytes=0&cid=856d0cc86b0f9e3f&ts=230&x=0"
2025-03-20 18:20:13 UTC	471	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 57 2c 68 2c 69 2c 6a 2c 6b 2c 6f 2c 73 2c 78 29 7b 57 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 56 2c 66 2c 67 29 7b 66 6f 72 28 56 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 2d 70 61 72 73 65 49 6e 74 28 56 28 32 32 30 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 32 36 38 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 56 28 32 30 34 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 56 28 33 30 30 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 56 28 32 33 35 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 32 35 30 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 32 34 36 29 29 2f 37 29 2b 2d Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,k,o,s,x){W=b,function(d,e,V,f,g){for(V=b,f=d();!![];)try{if(g=-parseInt(V(220))/1+-parseInt(V(268))/2(parseInt(V(204))/3)+parseInt(V(300))/4(parseInt(V(235))/5)+-parseInt(V(250))/6*(-parseInt(V(246))/7)+-
2025-03-20 18:20:13 UTC	1369	IN	Data Raw: 28 32 34 31 29 5d 3d 27 75 27 2c 6a 5b 57 28 32 37 30 29 5d 3d 27 7a 27 2c 6a 5b 57 28 32 37 35 29 5d 3d 27 6e 27 2c 6a 5b 57 28 32 32 31 29 5d 3d 27 49 27 2c 6a 5b 57 28 32 32 37 29 5d 3d 27 62 27 2c 6b 3d 6a 2c 68 5b 57 28 32 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 45 2c 46 2c 47 2c 61 31 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 29 7b 69 66 28 61 31 3d 57 2c 45 3d 3d 3d 6e 75 6c 6c 7c 7c 45 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 47 3b 66 6f 72 28 49 3d 6e 28 45 29 2c 67 5b 61 31 28 32 30 39 29 5d 5b 61 31 28 32 32 32 29 5d 26 26 28 49 3d 49 5b 61 31 28 31 39 30 29 5d 28 67 5b 61 31 28 32 30 39 29 5d 5b 61 31 28 32 32 32 29 5d 28 45 29 29 29 2c 49 3d 67 5b 61 31 28 32 31 35 29 5d 5b 61 31 28 32 34 38 29 5d 26 26 67 5b 61 31 28 31 39 37 29 Data Ascii: (241)]='u',j[W(270)]='z',j[W(275)]='n',j[W(221)]='I',j[W(227)]='b',k=j,h[W(258)]=function(g,E,F,G,a1,I,J,K,L,M,N){if(a1=W,E===null\|\|E===void 0)return G;for(I=n(E),g[a1(209)][a1(222)]&&(I=I[a1(190)](g[a1(209)][a1(222)](E))),I=g[a1(215)][a1(248)]&&g[a1(197)
2025-03-20 18:20:13 UTC	1369	IN	Data Raw: 4a 5b 53 5d 3d 21 30 29 2c 54 3d 4b 2b 53 2c 4f 62 6a 65 63 74 5b 61 37 28 31 39 39 29 5d 5b 61 37 28 32 35 39 29 5d 5b 61 37 28 32 32 38 29 5d 28 49 2c 54 29 29 4b 3d 54 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 61 37 28 31 39 39 29 5d 5b 61 37 28 32 35 39 29 5d 5b 61 37 28 32 32 38 29 5d 28 4a 2c 4b 29 29 7b 69 66 28 32 35 36 3e 4b 5b 61 37 28 32 31 32 29 5d 28 30 29 29 7b 66 6f 72 28 48 3d 30 3b 48 3c 4e 3b 50 3c 3c 3d 31 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b 61 37 28 32 38 31 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 48 2b 2b 29 3b 66 6f 72 28 55 3d 4b 5b 61 37 28 32 31 32 29 5d 28 30 29 2c 48 3d 30 3b 38 3e 48 3b 50 3d 50 3c 3c 31 2e 38 38 7c 55 26 31 2e 39 39 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b 61 37 28 32 38 31 29 Data Ascii: J[S]=!0),T=K+S,Object[a7(199)][a7(259)][a7(228)](I,T))K=T;else{if(Object[a7(199)][a7(259)][a7(228)](J,K)){if(256>K[a7(212)](0)){for(H=0;H<N;P<<=1,F-1==Q?(Q=0,O[a7(281)](G(P)),P=0):Q++,H++);for(U=K[a7(212)](0),H=0;8>H;P=P<<1.88\|U&1.99,F-1==Q?(Q=0,O[a7(281)
2025-03-20 18:20:13 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 45 2c 61 38 29 7b 72 65 74 75 72 6e 20 61 38 3d 61 35 2c 6e 75 6c 6c 3d 3d 45 3f 27 27 3a 45 3d 3d 27 27 3f 6e 75 6c 6c 3a 66 2e 69 28 45 5b 61 38 28 32 33 34 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 61 39 29 7b 72 65 74 75 72 6e 20 61 39 3d 61 38 2c 45 5b 61 39 28 32 31 32 29 5d 28 46 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 2c 61 61 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 53 2c 55 2c 54 29 7b 66 6f 72 28 61 61 3d 61 35 2c 48 3d 5b 5d 2c 49 3d 34 2c 4a 3d 34 2c 4b 3d 33 2c 4c 3d 5b 5d 2c 4f 3d 47 28 30 29 2c 50 3d 46 2c 51 3d 31 2c 4d 3d 30 3b 33 3e 4d 3b 48 5b 4d 5d 3d 4d 2c 4d 2b 3d 31 29 3b 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 61 28 31 39 36 29 Data Ascii: nction(E,a8){return a8=a5,null==E?'':E==''?null:f.i(E[a8(234)],32768,function(F,a9){return a9=a8,E[a9(212)](F)})},'i':function(E,F,G,aa,H,I,J,K,L,M,N,O,P,Q,R,S,U,T){for(aa=a5,H=[],I=4,J=4,K=3,L=[],O=G(0),P=F,Q=1,M=0;3>M;H[M]=M,M+=1);for(R=0,S=Math[aa(196)
2025-03-20 18:20:13 UTC	1369	IN	Data Raw: 39 31 29 5d 5b 61 6c 28 32 35 31 29 5d 28 46 2c 27 2a 27 29 29 3a 28 47 3d 7b 7d 2c 47 5b 61 6c 28 32 39 39 29 5d 3d 45 2c 47 5b 61 6c 28 32 33 33 29 5d 3d 66 2e 72 2c 47 5b 61 6c 28 32 34 37 29 5d 3d 61 6c 28 32 35 37 29 2c 47 5b 61 6c 28 32 33 31 29 5d 3d 67 2c 68 5b 61 6c 28 31 39 31 29 5d 5b 61 6c 28 32 35 31 29 5d 28 47 2c 27 2a 27 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 63 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 61 63 3d 57 2c 64 3d 68 5b 61 63 28 32 39 32 29 5d 2c 65 3d 33 36 30 30 2c 66 3d 4d 61 74 68 5b 61 63 28 32 33 38 29 5d 28 2b 61 74 6f 62 28 64 2e 74 29 29 2c 67 3d 4d 61 74 68 5b 61 63 28 32 33 38 29 5d 28 44 61 74 65 5b 61 63 28 32 31 33 29 5d 28 29 2f 31 65 33 29 2c 67 2d 66 3e 65 3f 21 5b 5d 3a 21 21 5b 5d 7d 66 75 6e Data Ascii: 91)][al(251)](F,'')):(G={},G[al(299)]=E,G[al(233)]=f.r,G[al(247)]=al(257),G[al(231)]=g,h[al(191)][al(251)](G,'')))}function z(ac,d,e,f,g){return ac=W,d=h[ac(292)],e=3600,f=Math[ac(238)](+atob(d.t)),g=Math[ac(238)](Date[ac(213)]()/1e3),g-f>e?![]:!![]}fun
2025-03-20 18:20:13 UTC	1369	IN	Data Raw: 74 44 30 3b 65 65 4c 63 58 33 3b 58 78 45 65 32 3b 66 42 78 43 4d 35 2c 74 69 6d 65 6f 75 74 2c 75 6e 64 65 66 69 6e 65 64 2c 6f 62 6a 65 63 74 2c 46 75 6e 63 74 69 6f 6e 2c 2f 62 2f 6f 76 31 2f 30 2e 31 35 39 30 33 35 34 38 39 30 35 36 36 39 39 34 3a 31 37 34 32 34 39 30 39 30 38 3a 2d 59 78 34 50 32 61 34 36 53 30 4a 76 73 5a 71 2d 52 47 62 74 76 39 71 55 69 53 72 68 67 36 6b 58 52 73 4b 61 4c 75 37 49 4d 6b 2f 2c 63 68 6c 41 70 69 55 72 6c 2c 32 39 36 34 37 38 56 79 4f 78 4e 64 2c 65 76 65 6e 74 2c 66 72 6f 6d 2c 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2c 32 34 6b 65 4c 53 4a 6e 2c 70 6f 73 74 4d 65 73 73 61 67 65 2c 69 73 4e 61 4e 2c 35 31 39 35 30 38 50 53 49 56 55 4d 2c 65 72 72 6f 72 20 6f 6e 20 63 66 5f 63 68 6c 5f 70 72 6f 70 73 2c 63 68 6c Data Ascii: tD0;eeLcX3;XxEe2;fBxCM5,timeout,undefined,object,Function,/b/ov1/0.1590354890566994:1742490908:-Yx4P2a46S0JvsZq-RGbtv9qUiSrhg6kXRsKaLu7IMk/,chlApiUrl,296478VyOxNd,event,from,contentDocument,24keLSJn,postMessage,isNaN,519508PSIVUM,error on cf_chl_props,chl
2025-03-20 18:20:13 UTC	1166	IN	Data Raw: 33 30 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 6b 29 7b 61 6b 3d 61 69 2c 45 28 29 2c 69 5b 61 6b 28 32 30 37 29 5d 21 3d 3d 61 6b 28 32 37 32 29 26 26 28 69 5b 61 6b 28 33 30 31 29 5d 3d 45 2c 67 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 64 2c 65 2c 61 64 2c 66 2c 67 29 7b 61 64 3d 57 2c 66 3d 68 5b 61 64 28 32 39 32 29 5d 2c 67 3d 6e 65 77 20 68 5b 28 61 64 28 32 36 35 29 29 5d 28 29 2c 67 5b 61 64 28 32 37 36 29 5d 28 61 64 28 32 37 38 29 2c 61 64 28 32 31 39 29 2b 68 5b 61 64 28 32 30 30 29 5d 5b 61 64 28 32 32 39 29 5d 2b 61 64 28 32 38 37 29 2b 66 2e 72 29 2c 66 5b 61 64 28 32 36 36 29 5d 26 26 28 67 5b 61 64 28 32 34 30 29 5d 3d 35 65 33 2c 67 5b 61 64 28 32 31 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 65 29 7b 61 65 3d 61 64 2c 65 28 61 Data Ascii: 301)]=function(ak){ak=ai,E(),i[ak(207)]!==ak(272)&&(i[ak(301)]=E,g())})}function A(d,e,ad,f,g){ad=W,f=h[ad(292)],g=new h[(ad(265))](),g[ad(276)](ad(278),ad(219)+h[ad(200)][ad(229)]+ad(287)+f.r),f[ad(266)]&&(g[ad(240)]=5e3,g[ad(211)]=function(ae){ae=ad,e(a