Edit tour

Windows Analysis Report
https://vintagelights.com/ 1/

Overview

General Information

Sample URL:	https://vintagelights.com/
Analysis ID:	1645105
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

Yara detected Phisher

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2524,i,15826355381714560950,4631702583341079825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2552 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2524,i,15826355381714560950,4631702583341079825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5012 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_121	JoeSecurity_Phisher_1	Yara detected Phisher	Joe Security

HTML

Source	Rule	Description	Author
3.17..script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.7..script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-21T13:16:40.355546+0100	2857090	1	Successful Credential Theft Detected	172.232.32.87	443	192.168.2.5	49744	TCP

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com' does not match the legitimate domain., The URL contains suspicious elements such as random alphanumeric strings and an unrelated domain 'aboutfamous.com'., The presence of input fields for 'Email, phone, or Skype' is typical for phishing attempts targeting Microsoft services. DOM: 3.6.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 3.17..script.csv, type: HTML
Source: Yara match	File source: 2.7..script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML

Yara detected Phisher

Source: Yara match

File source: dropped/chromecache_121, type: DROPPED

Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true

HTTP Parser: Number of links: 0

Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe

HTTP Parser: Base64 decoded: a[href="http://www.salidzini.lv/"][style="display: block; width: 120px; height: 40px; overflow: hidden; position: relative;"]

Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: Iframe src: https://db024c32-f96c2626.aboutfamous.com/Prefetch/Prefetch.aspx
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: Iframe src: https://db024c32-f96c2626.aboutfamous.com/Prefetch/Prefetch.aspx
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: Iframe src: https://db024c32-f96c2626.aboutfamous.com/Prefetch/Prefetch.aspx

Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/	HTTP Parser: No favicon
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe	HTTP Parser: No favicon
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe	HTTP Parser: No favicon
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No favicon
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No favicon
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No favicon
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No favicon
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No favicon

Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.139.47.125:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.35:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.35:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49795 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 172.232.32.87:443 -> 192.168.2.5:49744

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.40.139
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ HTTP/1.1Host: vintagelights.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ HTTP/1.1Host: vintagelights.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: vintagelights.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: vintagelights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiA1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /%20%20%20%20%20%20%20%20%20%20%20%20%202/ HTTP/1.1Host: vintagelights.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?yR1Ou=urSe HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://vintagelights.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png HTTP/1.1Host: findicons.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons HTTP/1.1Host: images.freeimages.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons HTTP/1.1Host: images.freeimages.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923d61ca195c8cca&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?yR1Ou=urSe HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1614496233:1742555690:s8MyFAnUjn_yelYrvqRBIMNKptt559iiZEmc39as_nM/923d61ca195c8cca/LBC6jk3eQtGPqturzsXoGd4815gUyOyVeo6n0n8WJ9U-1742559402-1.1.1.1-b2rsB_lwNQskbNFYFUQkmGU41mUmSqn82BPfJaV0mvvBKYW5Gs3cOaO.TsS_W3ZV HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/923d61ca195c8cca/1742559404377/ixw_7DcmNesFaLs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_9810YxmrLqOR1rQ4anyNMg2.js HTTP/1.1Host: b9326968-f96c2626.aboutfamous.comConnection: keep-aliveOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/923d61ca195c8cca/1742559404377/ixw_7DcmNesFaLs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="Sec-WebSocket-Key: Dzw8An92jTXkMtg1P9MiOw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /?yR1Ou=urSe&sso_reload=true HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_GjP1RdcVSKf6ASC7mgkR1g2.js HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_r1sg5sxlkljjoa22hvk04g2.js HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1Sec-WebSocket-Key: CXCDBf35NmxfdfohCulXDQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_72a1051aa2aa2943d8c1.js HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: db024c32-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=fdbf17e3-c1f3-4fdb-b749-476b182413e4; brcap=0Sec-WebSocket-Key: NVpW6HhvAK2+4rUBQRwR0g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_c4928fb5cff147a39780.js HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=fdbf17e3-c1f3-4fdb-b749-476b182413e4; brcap=0Sec-WebSocket-Key: bsAMHnoinE4lcvLb1eM+mA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=fdbf17e3-c1f3-4fdb-b749-476b182413e4; brcap=0Sec-WebSocket-Key: cc5od1o+mJt6Og8ZbF4ZmA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: b268d905-f96c2626.aboutfamous.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=fdbf17e3-c1f3-4fdb-b749-476b182413e4; brcap=0
Source: global traffic	HTTP traffic detected: GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=fdbf17e3-c1f3-4fdb-b749-476b182413e4; brcap=0Sec-WebSocket-Key: gYmSlSt4PiiHur/3poUrJA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=fdbf17e3-c1f3-4fdb-b749-476b182413e4; brcap=0Sec-WebSocket-Key: tQBNh+SZy6pop9BtfX5x+Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=fdbf17e3-c1f3-4fdb-b749-476b182413e4; brcap=0Sec-WebSocket-Key: XIvW4aNAhwra3PLY9aRNcg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: vintagelights.com
Source: global traffic	DNS traffic detected: DNS query: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: findicons.com
Source: global traffic	DNS traffic detected: DNS query: images.freeimages.com
Source: global traffic	DNS traffic detected: DNS query: b9326968-f96c2626.aboutfamous.com
Source: global traffic	DNS traffic detected: DNS query: b268d905-f96c2626.aboutfamous.com
Source: global traffic	DNS traffic detected: DNS query: l1ve.aboutfamous.com
Source: global traffic	DNS traffic detected: DNS query: db024c32-f96c2626.aboutfamous.com

Source: unknown

HTTP traffic detected: POST /%20%20%20%20%20%20%20%20%20%20%20%20%202 HTTP/1.1Host: vintagelights.comConnection: keep-aliveContent-Length: 26Cache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Origin: https://vintagelights.comContent-Type: application/x-www-form-urlencodedUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:16:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:16:49 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 13d8b8af-b632-47dd-8f20-3b60e4a01600x-ms-ests-server: 2.1.20262.4 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:16:53 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 04315b97-e48c-46cc-bfd8-bbf65ee64200x-ms-ests-server: 2.1.20329.5 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:16:54 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: 1aca1905-4eed-4b2a-8ce9-21721694aaa0x-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 0148FBDA4EB2455B9A489F30F0CE8313 Ref B: AMS231032602033 Ref C: 2025-03-21T12:16:54Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:16:56 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 11bef905-c0e3-4d56-aba9-b1f20ecc0c00x-ms-ests-server: 2.1.20329.5 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:17:01 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: c40711a3-cdc7-4508-81f9-76f1253f0e00x-ms-ests-server: 2.1.20329.5 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:17:08 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 57d76592-d207-413b-9695-83fdc3894500x-ms-ests-server: 2.1.20329.5 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:17:17 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 00ba7bc0-aaf7-4c00-b8bd-8323ffb86000x-ms-ests-server: 2.1.20329.5 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:17:24 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: a9e57c2b-0e2d-4d15-9f77-476603977300x-ms-ests-server: 2.1.20329.5 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 21 Mar 2025 12:17:28 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 467c8246-1b47-47a6-9389-c200eb1f6b00x-ms-ests-server: 2.1.20329.5 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_121.2.dr

String found in binary or memory: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.139.47.125:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.35:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.35:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.232.32.87:443 -> 192.168.2.5:49795 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6488_1916257262

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6488_1916257262

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@26/54@34/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2524,i,15826355381714560950,4631702583341079825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2552 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2524,i,15826355381714560950,4631702583341079825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5012 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2524,i,15826355381714560950,4631702583341079825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2552 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2524,i,15826355381714560950,4631702583341079825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5012 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/favicon.ico	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://db024c32-f96c2626.aboutfamous.com/Prefetch/Prefetch.aspx	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_c4928fb5cff147a39780.js	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/js/ConvergedLogin_PCore_GjP1RdcVSKf6ASC7mgkR1g2.js	0%	Avira URL Cloud	safe
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/f96c26262cbc4e859f648ad7f833f8d3/	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_r1sg5sxlkljjoa22hvk04g2.js	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_72a1051aa2aa2943d8c1.js	0%	Avira URL Cloud	safe
https://l1ve.aboutfamous.com/Me.htm?v=3	0%	Avira URL Cloud	safe
https://vintagelights.com/favicon.ico	0%	Avira URL Cloud	safe
https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://b9326968-f96c2626.aboutfamous.com/shared/1.0/content/js/BssoInterrupt_Core_9810YxmrLqOR1rQ4anyNMg2.js	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?	0%	Avira URL Cloud	safe
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
findicons.com	108.139.47.125	true	false	high
b9326968-f96c2626.aboutfamous.com	172.232.32.87	true	true	unknown
db024c32-f96c2626.aboutfamous.com	172.232.32.87	true	true	unknown
logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com	172.232.32.87	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	142.251.40.228	true	false	high
b268d905-f96c2626.aboutfamous.com	172.232.32.87	true	true	unknown
vintagelights.com	216.194.169.74	true	false	high
images.freeimages.com	108.138.106.35	true	false	high
l1ve.aboutfamous.com	172.232.32.87	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://b268d905-f96c2626.aboutfamous.com/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	true	Avira URL Cloud: safe	unknown
https://db024c32-f96c2626.aboutfamous.com/Prefetch/Prefetch.aspx	true	Avira URL Cloud: safe	unknown
https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202/	false		unknown
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	true	Avira URL Cloud: safe	unknown
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/f96c26262cbc4e859f648ad7f833f8d3/	true	Avira URL Cloud: safe	unknown
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/js/ConvergedLogin_PCore_GjP1RdcVSKf6ASC7mgkR1g2.js	true	Avira URL Cloud: safe	unknown
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	true	Avira URL Cloud: safe	unknown
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923d61ca195c8cca&lang=auto	false		high
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_c4928fb5cff147a39780.js	true	Avira URL Cloud: safe	unknown
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe	false		unknown
https://b268d905-f96c2626.aboutfamous.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_r1sg5sxlkljjoa22hvk04g2.js	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_72a1051aa2aa2943d8c1.js	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/923d61ca195c8cca/1742559404377/ixw_7DcmNesFaLs	false		high
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	true	Avira URL Cloud: safe	unknown
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe&sso_reload=true	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/	false		high
https://vintagelights.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://l1ve.aboutfamous.com/Me.htm?v=3	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://findicons.com/files/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	false		high
https://b9326968-f96c2626.aboutfamous.com/shared/1.0/content/js/BssoInterrupt_Core_9810YxmrLqOR1rQ4anyNMg2.js	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1614496233:1742555690:s8MyFAnUjn_yelYrvqRBIMNKptt559iiZEmc39as_nM/923d61ca195c8cca/LBC6jk3eQtGPqturzsXoGd4815gUyOyVeo6n0n8WJ9U-1742559402-1.1.1.1-b2rsB_lwNQskbNFYFUQkmGU41mUmSqn82BPfJaV0mvvBKYW5Gs3cOaO.TsS_W3ZV	false		high
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	Avira URL Cloud: safe	unknown
https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/	false		unknown
https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202	false	Avira URL Cloud: safe	unknown
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?	true	Avira URL Cloud: safe	unknown
https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/common/GetCredentialType?mkt=en-US	true	Avira URL Cloud: safe	unknown
https://images.freeimages.com/fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons	false		high
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://b268d905-f96c2626.aboutfamous.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
108.138.106.35	images.freeimages.com	United States	16509	AMAZON-02US	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
108.139.47.125	findicons.com	United States	16509	AMAZON-02US	false
172.232.32.87	b9326968-f96c2626.aboutfamous.com	United States	20940	AKAMAI-ASN1EU	true
216.194.169.74	vintagelights.com	United States	22611	IMH-WESTUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1645105
Start date and time:	2025-03-21 13:15:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://vintagelights.com/ 1/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@26/54@34/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.31.69.3, 142.251.41.3, 142.251.40.238, 142.251.16.84, 142.250.80.78, 142.250.65.238, 142.251.40.110, 142.250.65.174, 142.250.176.206, 142.250.65.206, 199.232.210.172, 142.251.40.170, 172.217.165.138, 142.250.80.42, 142.250.72.106, 142.250.65.170, 142.251.32.106, 142.251.40.106, 142.250.64.106, 142.250.80.74, 142.250.65.234, 142.250.80.106, 142.250.81.234, 142.251.40.138, 142.251.35.170, 142.250.65.202, 142.250.64.74, 142.251.40.163, 34.104.35.123, 20.12.23.50, 23.96.180.189
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 21, 2025 13:16:13.224230051 CET	53	62583	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:13.241067886 CET	53	54835	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:14.008465052 CET	53	55405	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:17.321814060 CET	62208	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:17.321937084 CET	58614	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:17.419296980 CET	53	58614	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:17.419357061 CET	53	62208	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:18.948951960 CET	65474	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:18.949325085 CET	53233	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:19.064577103 CET	53	65474	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:19.064915895 CET	53	53233	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:21.457434893 CET	64443	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:21.457591057 CET	51274	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:21.564436913 CET	53	51274	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:21.573746920 CET	53	64443	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:31.085655928 CET	53	58671	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:39.252579927 CET	52699	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:39.252819061 CET	63126	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:39.358472109 CET	53	52699	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:39.360610962 CET	53	63126	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:40.776060104 CET	57059	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:40.776345968 CET	59880	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:40.776824951 CET	57749	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:40.776962996 CET	56986	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:40.777297974 CET	55648	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:40.777451992 CET	62281	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:40.875611067 CET	53	59880	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:40.875900030 CET	53	56986	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:40.876019001 CET	53	57059	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:40.878056049 CET	53	57749	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:40.880875111 CET	53	62281	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:40.891112089 CET	53	55648	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:41.479578972 CET	49793	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:41.479779005 CET	64243	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:41.581425905 CET	53	64243	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:41.594266891 CET	53	49793	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:42.087933064 CET	64012	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:42.088082075 CET	50491	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:42.175456047 CET	56739	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:42.175602913 CET	64774	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:42.186289072 CET	53	64012	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:42.186404943 CET	53	50491	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:42.287278891 CET	53	56739	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:42.297321081 CET	53	64774	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:43.214618921 CET	51840	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:43.217381001 CET	53500	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:43.314033985 CET	53	51840	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:43.316246986 CET	53	53500	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:46.470722914 CET	61677	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:46.471545935 CET	56572	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:46.584800959 CET	53	56572	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:46.617167950 CET	53	61677	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:49.718590975 CET	58683	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:49.719033957 CET	55364	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:49.737046003 CET	52330	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:49.737404108 CET	51727	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:49.825589895 CET	53	58683	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:49.827560902 CET	53	55364	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:49.845249891 CET	53	51727	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:49.879220963 CET	53	52330	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:50.364464998 CET	53	63988	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:53.790729046 CET	54059	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:53.790982008 CET	56753	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:53.892498970 CET	53	54059	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:53.894753933 CET	53	56753	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:56.416847944 CET	53	53002	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:57.745100975 CET	64296	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:57.746038914 CET	63007	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:16:57.851442099 CET	53	64296	1.1.1.1	192.168.2.5
Mar 21, 2025 13:16:57.885356903 CET	53	63007	1.1.1.1	192.168.2.5
Mar 21, 2025 13:17:07.623234034 CET	138	138	192.168.2.5	192.168.2.255
Mar 21, 2025 13:17:10.144546986 CET	53038	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:17:10.144934893 CET	51255	53	192.168.2.5	1.1.1.1
Mar 21, 2025 13:17:10.247159958 CET	53	53038	1.1.1.1	192.168.2.5
Mar 21, 2025 13:17:10.253942966 CET	53	51255	1.1.1.1	192.168.2.5
Mar 21, 2025 13:17:12.735229969 CET	53	57559	1.1.1.1	192.168.2.5
Mar 21, 2025 13:17:13.029872894 CET	53	51718	1.1.1.1	192.168.2.5
Mar 21, 2025 13:17:15.717344046 CET	53	49759	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:19 UTC	864	OUT	GET /%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ HTTP/1.1 Host: vintagelights.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:19 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:19 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html
2025-03-21 12:16:19 UTC	8022	IN	Data Raw: 33 61 64 62 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 21 2d 2d 0a 2e 72 70 73 5f 39 65 64 61 20 3e 20 64 69 76 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 61 62 6c 65 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 64 2c 20 2e 72 70 73 5f 39 65 64 61 20 61 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 74 61 62 6c 65 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 64 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 69 6d 67 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 69 6d 67 0a 09 7b 62 6f 72 64 65 72 3a 30 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 09 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 2e 72 70 73 5f 39 65 Data Ascii: 3adb<style type="text/css">....rps_9eda > div, .rps_9eda table, .rps_9eda td, .rps_9eda a{}.rps_9eda table, .rps_9eda td{}.rps_9eda img{}.rps_9eda img{border:0;height:auto;line-height:100%;outline:none;text-decoration:none}.rps_9e
2025-03-21 12:16:20 UTC	7051	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 6d 6f 62 69 6c 65 2d 74 6f 70 62 6f 78 2d 70 61 64 64 69 6e 67 2d 32 30 2d 62 6f 74 74 6f 6d 2d 69 74 65 6d 2d 34 38 30 0a 09 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 32 30 70 78 20 32 30 70 78 20 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 6d 6f 62 69 6c 65 2d 68 69 64 65 0a 09 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 23 78 5f 6d 6f 62 69 6c 65 2d 68 69 64 65 0a 09 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 68 65 61 64 6c 69 6e 65 0a 09 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 21 69 6d 70 6f 72 74 61 6e Data Ascii: important}.rps_9eda .x_mobile-topbox-padding-20-bottom-item-480{padding:10px 20px 20px 20px!important}.rps_9eda .x_mobile-hide{display:none!important}.rps_9eda #x_mobile-hide{display:none!important}.rps_9eda .x_headline{font-size:30px!importan
2025-03-21 12:16:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 12:16:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:21 UTC	794	OUT	GET /favicon.ico HTTP/1.1 Host: vintagelights.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:21 UTC	235	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 07 Feb 2024 10:38:36 GMT Accept-Ranges: bytes Content-Length: 3126 Content-Type: image/x-icon
2025-03-21 12:16:21 UTC	3126	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 18 00 68 03 00 00 26 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 8e 03 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 18 00 00 00 00 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 34 4d 3c 4f 68 51 59 67 00 00 00 00 00 00 95 96 98 64 6a 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 8e 8d 9c a1 a8 5e 64 74 07 18 2c 24 3d 5d 24 48 73 09 2c 59 00 23 54 01 21 4e 00 18 3f 97 96 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 34 41 00 00 11 10 1a 29 12 2e 51 1c 3c 69 18 36 5c 08 27 55 02 21 49 9e aa c1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 7b 81 11 1c 2c 1f 2c 3b 1b 38 5a 21 41 6c 07 2f 62 06 2c 60 06 23 4d Data Ascii: h& ( @!4M<OhQYgdjw^dt,$=]$Hs,Y#T!N?*4A).Q<i6\'U!I{{,,;8Z!Al/b,`#M

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:21 UTC	392	OUT	GET /favicon.ico HTTP/1.1 Host: vintagelights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:22 UTC	235	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 07 Feb 2024 10:38:36 GMT Accept-Ranges: bytes Content-Length: 3126 Content-Type: image/x-icon
2025-03-21 12:16:22 UTC	3126	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 18 00 68 03 00 00 26 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 8e 03 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 18 00 00 00 00 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 34 4d 3c 4f 68 51 59 67 00 00 00 00 00 00 95 96 98 64 6a 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 8e 8d 9c a1 a8 5e 64 74 07 18 2c 24 3d 5d 24 48 73 09 2c 59 00 23 54 01 21 4e 00 18 3f 97 96 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 34 41 00 00 11 10 1a 29 12 2e 51 1c 3c 69 18 36 5c 08 27 55 02 21 49 9e aa c1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 7b 81 11 1c 2c 1f 2c 3b 1b 38 5a 21 41 6c 07 2f 62 06 2c 60 06 23 4d Data Ascii: h& ( @!4M<OhQYgdjw^dt,$=]$Hs,Y#T!N?*4A).Q<i6\'U!I{{,,;8Z!Al/b,`#M

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:22 UTC	567	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiA1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:22 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:22 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-OxSSf4eKYPehKAwMgpQg4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-21 12:16:22 UTC	1303	IN	Data Raw: 61 64 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 63 68 69 70 6f 74 6c 65 20 63 6c 6f 73 69 6e 67 20 61 6c 6c 20 73 74 6f 72 65 73 22 2c 22 77 6f 72 6c 64 20 68 61 70 70 69 6e 65 73 73 20 72 65 70 6f 72 74 20 32 30 32 35 22 2c 22 6e 61 73 61 20 61 73 74 72 6f 6e 61 75 74 73 20 72 65 74 75 72 6e 22 2c 22 63 6f 6c 6c 65 67 65 20 62 61 73 6b 65 74 62 61 6c 6c 20 74 6f 75 72 6e 61 6d 65 6e 74 20 62 72 61 63 6b 65 74 22 2c 22 74 68 65 20 70 69 74 74 20 72 65 63 61 70 22 2c 22 6d 61 72 76 65 6c 20 72 69 76 61 6c 73 20 70 65 6e 69 20 70 61 72 6b 65 72 20 6e 65 72 66 22 2c 22 64 6f 77 20 6a 6f 6e 65 73 20 73 74 6f 63 6b 20 6d 61 72 6b 65 74 73 20 66 75 74 75 72 65 73 22 2c 22 64 61 6c 6c 61 73 20 63 6f 77 62 6f 79 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c Data Ascii: ad9)]}'["",["chipotle closing all stores","world happiness report 2025","nasa astronauts return","college basketball tournament bracket","the pitt recap","marvel rivals peni parker nerf","dow jones stock markets futures","dallas cowboys"],["","","","",
2025-03-21 12:16:22 UTC	1303	IN	Data Raw: 77 56 58 6c 56 56 31 64 43 56 48 56 72 57 45 78 35 59 54 4e 5a 51 69 74 75 52 55 46 50 54 33 42 52 4d 6b 74 4e 52 47 35 43 4e 32 52 5a 62 57 6c 52 65 48 4a 6f 55 46 4a 73 61 47 39 55 4e 58 5a 7a 65 46 42 6f 64 55 35 4c 4f 58 5a 36 4e 31 70 36 5a 6c 42 5a 5a 6d 56 33 56 57 64 52 4c 32 6f 35 51 6a 56 45 59 6a 6c 7a 5a 6b 39 31 56 48 64 4a 54 48 42 45 53 33 42 77 4c 7a 49 35 61 32 56 46 63 6e 67 34 4d 6a 68 73 55 6b 6c 49 63 47 56 32 5a 30 68 53 4d 6b 5a 4b 52 48 70 72 4e 31 70 78 53 6a 55 32 52 45 39 4a 4e 47 35 4f 53 45 74 34 56 79 74 4a 53 46 68 6d 54 32 35 71 65 47 67 33 65 6b 6f 79 5a 32 46 78 59 32 78 68 55 57 46 43 63 32 56 34 64 6b 4a 4b 51 32 78 77 53 6a 4e 6c 4d 6c 5a 6b 62 56 4a 43 61 55 70 51 4b 79 39 31 4e 44 67 79 55 6d 64 54 4d 44 4a 5a 4f 45 Data Ascii: wVXlVV1dCVHVrWEx5YTNZQituRUFPT3BRMktNRG5CN2RZbWlReHJoUFJsaG9UNXZzeFBodU5LOXZ6N1p6ZlBZZmV3VWdRL2o5QjVEYjlzZk91VHdJTHBES3BwLzI5a2VFcng4MjhsUklIcGV2Z0hSMkZKRHprN1pxSjU2RE9JNG5OSEt4VytJSFhmT25qeGg3ekoyZ2FxY2xhUWFCc2V4dkJKQ2xwSjNlMlZkbVJCaUpQKy91NDgyUmdTMDJZOE
2025-03-21 12:16:22 UTC	178	IN	Data Raw: 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 2c 31 30 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 5d 7d 5d 0d 0a Data Ascii: 8],[3,143,362,308],[3,143,362,308,10],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","ENTITY"]}]
2025-03-21 12:16:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:38 UTC	1079	OUT	POST /%20%20%20%20%20%20%20%20%20%20%20%20%202 HTTP/1.1 Host: vintagelights.com Connection: keep-alive Content-Length: 26 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://vintagelights.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:38 UTC	26	OUT	Data Raw: 73 75 62 6d 69 74 42 75 74 74 6f 6e 73 3d 2b 2b 2b 2b 4f 50 45 4e 2b 2b 2b 2b Data Ascii: submitButtons=++++OPEN++++
2025-03-21 12:16:38 UTC	251	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 21 Mar 2025 12:16:38 GMT Server: Apache Location: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202/ Content-Length: 275 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-21 12:16:38 UTC	275	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 6e 74 61 67 65 6c 69 67 68 74 73 2e 63 6f 6d 2f 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 32 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202/">here</a>.

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:38 UTC	975	OUT	GET /%20%20%20%20%20%20%20%20%20%20%20%20%202/ HTTP/1.1 Host: vintagelights.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:39 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html
2025-03-21 12:16:39 UTC	132	IN	Data Raw: 37 65 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 6c 6f 67 74 72 61 6e 73 63 72 69 70 74 34 35 36 37 68 36 35 34 72 37 79 68 6e 62 37 74 36 34 35 36 72 68 72 65 76 6f 69 70 2e 61 62 6f 75 74 66 61 6d 6f 75 73 2e 63 6f 6d 2f 3f 79 52 31 4f 75 3d 75 72 53 65 22 20 2f 3e 0d 0a 0d 0a Data Ascii: 7e<meta http-equiv="refresh" content="0; url=https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe" />
2025-03-21 12:16:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:39 UTC	741	OUT	GET /?yR1Ou=urSe HTTP/1.1 Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://vintagelights.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:40 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2025-03-21 12:16:40 UTC	16203	IN	Data Raw: 37 30 38 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 58 34 28 29 7b 76 61 72 20 59 64 3d 5b 27 52 48 6c 52 58 27 2c 27 73 6f 6d 65 27 2c 27 23 30 36 39 27 2c 27 61 74 74 61 63 6b 27 2c 27 77 65 62 6b 69 74 52 65 73 6f 6c 76 65 4c 6f 63 61 6c 46 69 6c 65 53 79 73 74 65 6d 55 52 4c 27 2c 27 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 27 2c 27 46 49 4c 6f 67 27 2c 27 73 69 6e 27 2c 27 4d 61 74 68 27 2c 27 40 40 69 74 65 72 61 74 6f 72 27 2c 27 73 65 74 49 6d 6d 65 64 69 61 74 65 27 2c 27 75 6e 73 63 6f 70 61 62 Data Ascii: 708c<!DOCTYPE html><html lang="en-US"> <head> <script type="text/javascript"> function a0X4(){var Yd=['RHlRX','some','#069','attack','webkitResolveLocalFileSystemURL','isConcatSpreadable','FILog','sin','Math','@@iterator','setImmediate','unscopab
2025-03-21 12:16:40 UTC	12617	IN	Data Raw: 65 6e 67 74 68 27 2c 27 68 74 6d 6c 66 69 6c 65 27 2c 27 27 2c 27 71 75 65 72 79 27 2c 27 6f 70 73 27 2c 27 44 61 74 65 27 2c 27 74 6f 53 74 72 69 6e 67 54 61 67 27 2c 27 77 69 61 41 73 27 2c 27 55 4e 4d 41 53 4b 45 44 5f 56 45 4e 44 4f 52 5f 57 45 42 47 4c 27 2c 27 73 74 72 69 6e 67 69 66 79 27 2c 27 63 6c 69 65 6e 74 57 69 64 74 68 27 2c 27 67 65 74 53 68 61 64 65 72 50 72 65 63 69 73 69 6f 6e 46 6f 72 6d 61 74 27 2c 27 44 45 4e 4f 27 2c 27 4a 6d 49 59 4e 27 2c 27 67 65 74 43 6f 6e 74 65 78 74 41 74 74 72 69 62 75 74 65 73 27 2c 27 72 65 6a 65 63 74 69 6f 6e 68 61 6e 64 6c 65 64 27 2c 27 6d 73 53 65 74 49 6d 6d 65 64 69 61 74 65 27 2c 27 63 6f 6d 70 6f 6e 65 6e 74 73 27 2c 27 5e 28 3f 3a 27 2c 27 43 6f 75 6e 74 65 72 27 2c 27 6d 73 4c 61 75 6e 63 68 55 Data Ascii: ength','htmlfile','','query','ops','Date','toStringTag','wiaAs','UNMASKED_VENDOR_WEBGL','stringify','clientWidth','getShaderPrecisionFormat','DENO','JmIYN','getContextAttributes','rejectionhandled','msSetImmediate','components','^(?:','Counter','msLaunchU
2025-03-21 12:16:40 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 29 3a 30 78 37 3b 7d 7d 29 5b 30 78 31 5d 3b 7d 29 3b 7d 2c 30 78 63 34 39 3a 66 75 6e 63 74 69 6f 6e 28 49 4d 2c 49 6d 2c 49 59 29 7b 76 61 72 20 46 76 3d 61 30 58 35 3b 69 66 28 46 76 28 30 78 34 64 63 29 3d 3d 3d 27 47 6f 53 77 58 27 29 7b 76 61 72 20 49 44 3d 49 59 28 30 78 31 35 63 61 29 2c 49 45 3d 49 59 28 30 78 36 61 38 29 2c 49 76 3d 49 44 5b 46 76 28 30 78 35 30 38 29 5d 2c 49 68 3d 49 45 28 49 76 29 26 26 49 45 28 49 76 5b 46 76 28 30 78 34 37 66 29 5d 29 3b 49 4d 5b 46 76 28 30 78 35 36 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 49 4b 29 7b 76 61 72 20 46 68 3d 46 76 3b 72 65 74 75 72 6e 20 49 68 3f 49 76 5b 46 68 28 30 78 34 37 66 29 5d 28 49 4b 29 3a 7b 7d 3b 7d 3b 7d 65 6c 73 65 7b 76 61 72 20 49 56 3b 72 65 74 75 72 6e 20 58 Data Ascii: 3ff9):0x7;}})[0x1];});},0xc49:function(IM,Im,IY){var Fv=a0X5;if(Fv(0x4dc)==='GoSwX'){var ID=IY(0x15ca),IE=IY(0x6a8),Iv=ID[Fv(0x508)],Ih=IE(Iv)&&IE(Iv[Fv(0x47f)]);IM[Fv(0x569)]=function(IK){var Fh=Fv;return Ih?Iv[Fh(0x47f)](IK):{};};}else{var IV;return X
2025-03-21 12:16:40 UTC	16384	IN	Data Raw: 0a 63 30 30 30 0d 0a 33 62 34 29 5d 3b 7d 7d 2c 30 78 34 31 30 3a 66 75 6e 63 74 69 6f 6e 28 49 4d 2c 49 6d 2c 49 59 29 7b 76 61 72 20 48 70 3d 61 30 58 35 2c 49 44 3d 49 59 28 30 78 37 33 62 29 5b 48 70 28 30 78 32 61 39 29 5d 2c 49 45 3d 49 59 28 30 78 31 34 61 61 29 2c 49 76 3d 49 59 28 30 78 31 65 33 61 29 2c 49 68 3d 49 59 28 30 78 38 65 35 29 2c 49 4b 3d 49 59 28 30 78 31 61 37 37 29 2c 49 56 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 3b 49 4d 5b 48 70 28 30 78 35 36 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 49 69 2c 49 54 2c 49 42 2c 49 71 29 7b 76 61 72 20 48 66 3d 48 70 3b 69 66 28 27 4a 6e 73 53 6a 27 3d 3d 3d 48 66 28 30 78 32 34 34 29 29 7b 76 61 72 20 49 65 2c 49 43 3b 58 72 3f 28 28 49 65 3d 58 4d 5b 27 63 72 65 Data Ascii: c0003b4)];}},0x410:function(IM,Im,IY){var Hp=a0X5,ID=IY(0x73b)[Hp(0x2a9)],IE=IY(0x14aa),Iv=IY(0x1e3a),Ih=IY(0x8e5),IK=IY(0x1a77),IV=function(){return this;};IM[Hp(0x569)]=function(Ii,IT,IB,Iq){var Hf=Hp;if('JnsSj'===Hf(0x244)){var Ie,IC;Xr?((Ie=XM['cre
2025-03-21 12:16:40 UTC	16384	IN	Data Raw: 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 68 69 73 5b 27 68 65 61 64 27 5d 3d 49 59 5b 78 5a 28 30 78 31 35 65 29 5d 29 26 26 28 74 68 69 73 5b 27 74 61 69 6c 27 5d 3d 6e 75 6c 6c 29 2c 49 59 5b 78 5a 28 30 78 34 66 32 29 5d 3b 7d 7d 2c 49 4d 5b 78 4f 28 30 78 35 36 39 29 5d 3d 49 6d 3b 7d 2c 30 78 39 37 63 3a 66 75 6e 63 74 69 6f 6e 28 49 4d 2c 49 6d 2c 49 59 29 7b 76 61 72 20 78 47 3d 61 30 58 35 2c 49 44 3d 49 59 28 30 78 37 30 66 29 2c 49 45 3d 49 59 28 30 78 38 66 35 29 2c 49 76 3d 49 59 28 30 78 35 63 62 29 2c 49 68 3d 49 59 28 30 78 34 66 65 29 2c 49 4b 3d 49 59 28 30 78 32 32 61 31 29 2c 49 56 3d 54 79 70 65 45 72 72 6f 72 3b 49 4d 5b 78 47 28 30 78 35 36 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 49 69 2c 49 54 29 7b 76 61 72 20 78 6f 3d 78 47 2c 49 42 Data Ascii: urn null===(this['head']=IY[xZ(0x15e)])&&(this['tail']=null),IY[xZ(0x4f2)];}},IM[xO(0x569)]=Im;},0x97c:function(IM,Im,IY){var xG=a0X5,ID=IY(0x70f),IE=IY(0x8f5),Iv=IY(0x5cb),Ih=IY(0x4fe),IK=IY(0x22a1),IV=TypeError;IM[xG(0x569)]=function(Ii,IT){var xo=xG,IB
2025-03-21 12:16:40 UTC	16384	IN	Data Raw: 78 31 3f 61 72 67 75 6d 65 6e 74 73 5b 30 78 31 5d 3a 76 6f 69 64 20 30 78 30 3b 72 65 74 75 72 6e 20 49 56 3f 49 4b 28 74 68 69 73 2c 49 69 2c 49 54 29 7c 7c 30 78 30 3a 49 76 28 74 68 69 73 2c 49 69 2c 49 54 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 69 66 28 58 68 28 49 44 29 29 72 65 74 75 72 6e 20 58 47 3b 74 68 72 6f 77 20 6e 65 77 20 58 79 28 58 6d 28 49 4d 29 2b 27 5c 78 32 30 69 73 5c 78 32 30 6e 6f 74 5c 78 32 30 61 5c 78 32 30 63 6f 6e 73 74 72 75 63 74 6f 72 27 29 3b 7d 7d 2c 30 78 31 33 36 32 3a 66 75 6e 63 74 69 6f 6e 28 49 4d 2c 49 6d 2c 49 59 29 7b 76 61 72 20 55 61 3d 61 30 58 35 3b 69 66 28 55 61 28 30 78 33 63 62 29 21 3d 3d 55 61 28 30 78 31 61 39 29 29 7b 76 61 72 20 49 44 3d 49 59 28 30 78 31 35 64 66 29 2c 49 45 3d 49 59 28 30 78 31 62 62 Data Ascii: x1?arguments[0x1]:void 0x0;return IV?IK(this,Ii,IT)\|\|0x0:Iv(this,Ii,IT);}});}else{if(Xh(ID))return XG;throw new Xy(Xm(IM)+'\x20is\x20not\x20a\x20constructor');}},0x1362:function(IM,Im,IY){var Ua=a0X5;if(Ua(0x3cb)!==Ua(0x1a9)){var ID=IY(0x15df),IE=IY(0x1bb
2025-03-21 12:16:40 UTC	16384	IN	Data Raw: 49 44 3d 49 59 28 30 0d 0a 31 34 39 32 30 0d 0a 78 32 31 61 34 29 2c 49 45 3d 49 59 28 30 78 32 32 61 31 29 3b 49 44 28 7b 27 74 61 72 67 65 74 27 3a 27 52 65 67 45 78 70 27 2c 27 70 72 6f 74 6f 27 3a 21 30 78 30 2c 27 66 6f 72 63 65 64 27 3a 2f 2e 2f 5b 4d 6a 28 30 78 33 65 33 29 5d 21 3d 3d 49 45 7d 2c 7b 27 65 78 65 63 27 3a 49 45 7d 29 3b 7d 2c 30 78 65 36 37 3a 66 75 6e 63 74 69 6f 6e 28 49 4d 2c 49 6d 2c 49 59 29 7b 76 61 72 20 4d 49 3d 61 30 58 35 2c 49 44 3d 49 59 28 30 78 38 30 30 29 5b 4d 49 28 30 78 33 65 30 29 5d 2c 49 45 3d 49 59 28 30 78 31 65 65 61 29 2c 49 76 3d 49 59 28 30 78 38 66 35 29 2c 49 68 3d 49 59 28 30 78 31 38 37 35 29 2c 49 4b 3d 49 59 28 30 78 32 31 31 39 29 2c 49 56 3d 49 59 28 30 78 32 36 30 38 29 2c 49 69 3d 4d 49 28 30 78 Data Ascii: ID=IY(014920x21a4),IE=IY(0x22a1);ID({'target':'RegExp','proto':!0x0,'forced':/./[Mj(0x3e3)]!==IE},{'exec':IE});},0xe67:function(IM,Im,IY){var MI=a0X5,ID=IY(0x800)[MI(0x3e0)],IE=IY(0x1eea),Iv=IY(0x8f5),Ih=IY(0x1875),IK=IY(0x2119),IV=IY(0x2608),Ii=MI(0x
2025-03-21 12:16:40 UTC	16384	IN	Data Raw: 45 3d 49 4d 5b 30 78 31 5d 3e 3e 3e 30 78 31 30 2c 49 76 3d 30 78 66 66 66 66 26 49 4d 5b 30 78 31 5d 2c 49 68 3d 49 6d 5b 30 78 30 5d 3e 3e 3e 30 78 31 30 2c 49 4b 3d 30 78 66 66 66 66 26 49 6d 5b 30 78 30 5d 2c 49 56 3d 49 6d 5b 30 78 31 5d 3e 3e 3e 30 78 31 30 2c 49 69 3d 30 78 66 66 66 66 26 49 6d 5b 30 78 31 5d 2c 49 54 3d 30 78 30 2c 49 42 3d 30 78 30 2c 49 71 3d 30 78 30 2c 49 77 3d 30 78 30 3b 49 71 2b 3d 28 49 77 2b 3d 49 76 2a 49 69 29 3e 3e 3e 30 78 31 30 2c 49 77 26 3d 30 78 66 66 66 66 2c 49 42 2b 3d 28 49 71 2b 3d 49 45 2a 49 69 29 3e 3e 3e 30 78 31 30 2c 49 71 26 3d 30 78 66 66 66 66 2c 49 42 2b 3d 28 49 71 2b 3d 49 76 2a 49 56 29 3e 3e 3e 30 78 31 30 2c 49 71 26 3d 30 78 66 66 66 66 2c 49 54 2b 3d 28 49 42 2b 3d 49 44 2a 49 69 29 3e 3e 3e Data Ascii: E=IM[0x1]>>>0x10,Iv=0xffff&IM[0x1],Ih=Im[0x0]>>>0x10,IK=0xffff&Im[0x0],IV=Im[0x1]>>>0x10,Ii=0xffff&Im[0x1],IT=0x0,IB=0x0,Iq=0x0,Iw=0x0;Iq+=(Iw+=IvIi)>>>0x10,Iw&=0xffff,IB+=(Iq+=IEIi)>>>0x10,Iq&=0xffff,IB+=(Iq+=IvIV)>>>0x10,Iq&=0xffff,IT+=(IB+=IDIi)>>>
2025-03-21 12:16:40 UTC	16384	IN	Data Raw: 58 66 28 66 75 6e 63 74 69 6f 6e 28 49 59 2c 49 44 29 7b 76 61 72 20 6d 47 3d 6d 5a 3b 69 66 28 6d 47 28 30 78 34 64 39 29 21 3d 3d 6d 47 28 30 78 33 32 34 29 29 7b 76 61 72 20 49 45 3d 49 44 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 3b 72 65 74 75 72 6e 20 58 38 28 49 4d 2c 76 6f 69 64 20 30 78 30 2c 76 6f 69 64 20 30 78 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 6f 3d 6d 47 3b 69 66 28 6d 6f 28 30 78 35 35 61 29 21 3d 3d 6d 6f 28 30 78 32 33 38 29 29 7b 76 61 72 20 49 76 2c 49 68 2c 49 4b 2c 49 56 2c 49 69 2c 49 54 2c 49 42 2c 49 71 2c 49 77 2c 49 62 2c 49 65 3b 72 65 74 75 72 6e 20 58 39 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 49 43 29 7b 76 61 72 20 6d 50 3d 6d 6f 3b 66 6f 72 28 28 49 76 3d 49 45 5b 6d 50 28 30 78 32 61 65 29 5d 29 5b 6d 50 Data Ascii: Xf(function(IY,ID){var mG=mZ;if(mG(0x4d9)!==mG(0x324)){var IE=ID['document'];return X8(IM,void 0x0,void 0x0,function(){var mo=mG;if(mo(0x55a)!==mo(0x238)){var Iv,Ih,IK,IV,Ii,IT,IB,Iq,Iw,Ib,Ie;return X9(this,function(IC){var mP=mo;for((Iv=IE[mP(0x2ae)])[mP
2025-03-21 12:16:40 UTC	16384	IN	Data Raw: 6c 73 65 7b 76 61 72 20 49 45 3d 58 68 28 30 78 35 38 31 29 2c 49 76 3d 49 45 28 30 78 31 32 39 61 29 2c 49 68 3d 58 47 28 30 78 38 65 36 29 2c 49 4b 3d 58 79 28 30 78 31 30 66 62 29 2c 49 56 3d 58 6d 28 30 78 38 66 35 29 2c 49 69 3d 49 76 28 5b 5d 5b 74 41 28 30 78 35 34 61 29 5d 29 3b 49 4d 5b 74 41 28 30 78 35 36 39 29 5d 3d 49 45 28 74 41 28 30 78 31 39 63 29 2c 74 41 28 30 78 34 65 37 29 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 49 54 29 7b 76 61 72 20 49 42 3d 49 68 5b 27 66 27 5d 28 49 56 28 49 54 29 29 2c 49 71 3d 49 4b 5b 27 66 27 5d 3b 72 65 74 75 72 6e 20 49 71 3f 49 69 28 49 42 2c 49 71 28 49 54 29 29 3a 49 42 3b 7d 3b 7d 7d 2c 27 68 61 72 64 77 61 72 65 43 6f 6e 63 75 72 72 65 6e 63 79 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 7a 3d 4d Data Ascii: lse{var IE=Xh(0x581),Iv=IE(0x129a),Ih=XG(0x8e6),IK=Xy(0x10fb),IV=Xm(0x8f5),Ii=Iv([][tA(0x54a)]);IM[tA(0x569)]=IE(tA(0x19c),tA(0x4e7))\|\|function(IT){var IB=Ih['f'](IV(IT)),Iq=IK['f'];return Iq?Ii(IB,Iq(IT)):IB;};}},'hardwareConcurrency':function(){var tz=M

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:41 UTC	720	OUT	GET /files/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png HTTP/1.1 Host: findicons.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:41 UTC	452	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 12:16:41 GMT Location: https://images.freeimages.com/fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons X-Cache: Miss from cloudfront Via: 1.1 500a5a4e72d986068e53ce22c8372bde.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: 5l9_fCtaSGbyr4uFrJPwZmal3tbKrl52nkLXcwR03AkP-IVr9JBJLg==

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:41 UTC	626	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:41 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 21 Mar 2025 12:16:41 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 923d61c31dd28c9b-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:41 UTC	638	OUT	GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:41 UTC	960	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"603e8adc-15d9d" Last-Modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 22223 Expires: Wed, 11 Mar 2026 12:16:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ek8PaDIaWdwIjxZQK2NEX8VH531rgHnTqtBLihvpXaGV79Wd%2BfYWmRZ6NZVjmT9RsWoATWWTv6F9Iw%2BpN8MAOH0Fok6c6rzchvod0QGFezbkl47tBJoMERcZHEuOXeS5G%2BUcIs7%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 923d61c31af00f4b-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 12:16:41 UTC	409	IN	Data Raw: 37 62 66 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bf0/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f Data Ascii: ototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeo
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d Data Ascii: call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 3f 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c Data Ascii: ?=)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\\((('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\\)\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e Data Ascii: g(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.len
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 Data Ascii: r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeC
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 Data Ascii: t,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=c
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e Data Ascii: (o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 Data Ascii: Element("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).dis

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:41 UTC	641	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:41 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:41 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 923d61c5eb9642d0-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 12:16:41 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 76 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 76 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 76 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,v,h;try{for(a=a.call(e);!(c=(v=a.next()).done)&&(o.push(v.value),!(t&&o.length===t));c=!0)
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 76 26 26 28 76 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;v&&(v=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 48 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 2c 65 2e 4c 69 67 68 74 3d 22 6c 69 67 68 74 22 2c 65 2e 44 61 72 6b 3d 22 64 61 72 6b 22 7d 29 28 48 65 7c 7c 28 48 65 3d 7b 7d 29 29 3b 76 61 72 20 43 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 65 72 69 66 79 69 6e 67 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 4f 76 65 72 72 75 6e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 61 69 6c 75 72 65 57 6f 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 66 61 69 6c 75 72 65 2d 77 6f Data Ascii: );var He;(function(e){e.Auto="auto",e.Light="light",e.Dark="dark"})(He\|\|(He={}));var Ce;(function(e){e.Verifying="verifying",e.VerifyingHavingTroubles="verifying-having-troubles",e.VerifyingOverrun="verifying-overrun",e.FailureWoHavingTroubles="failure-wo
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 2c 65 2e 52 65 64 69 72 65 63 74 69 6e 67 Data Ascii: ute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_missing_aux",e.Redirecting
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 4c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 Data Ascii: s;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearanceLevel!=="default"&&t.set("clearance_level",e.params._debugSite
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 46 65 65 64 62 61 63 6b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 2c 6c 2c 76 3d 4c 28 4d 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 73 Data Ascii: guage,"/").concat(_)}var St=function(e){var t,a,o=window.innerWidth<400,c=e.state===Ce.FailureFeedback\|\|e.state===Ce.FailureHavingTroubles,l,v=L(Mr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),h,s
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 61 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 4f 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 76 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 76 26 26 65 65 28 70 2c 76 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 4f 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 Data Ascii: eflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Oe(e,t,a){return Be()?Oe=Reflect.construct:Oe=function(c,l,v){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return v&&ee(p,v.prototype),p},Oe.apply(null,argu
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 66 72 28 61 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 71 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 71 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 71 65 29 2e 63 6f 6e 63 61 74 28 65 29 Data Ascii: ;function g(e,t){var a="[Cloudflare Turnstile] ".concat(e,".");throw new fr(a,t)}function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(qe)?e.substring(qe.length):null}function $(e){return"".concat(qe).concat(e)
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 67 68 74 3d 22 31 30 30 76 68 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c Data Ascii: ght="100vh",s.style.top="0",s.style.left="0",s.style.transformOrigin="center center",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.vertical

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:41 UTC	747	OUT	GET /fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons HTTP/1.1 Host: images.freeimages.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:42 UTC	704	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 254 Connection: close Date: Fri, 21 Mar 2025 12:16:42 GMT Last-Modified: Tue, 20 Dec 2022 05:17:19 GMT ETag: "57ab754695eb0a2c74201ecd6948c12f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f359087e1d20f17f76b31eb5ffbbd450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: hoLZZE3wb53t931FwpHLHdUdlMyu1mMnYJePdUBP45aY7LGWbqN5uw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2025-03-21 12:16:42 UTC	254	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 42 50 4c 54 45 ff ff ff 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 e5 a9 0a 0e 92 ce c2 4d 2b 6c 93 17 f4 b2 05 06 9b e0 db 4e 26 75 a6 0b 01 a4 ef 7f ba 00 f2 50 22 ff b9 01 c0 62 25 1a 00 00 00 12 74 52 4e 53 01 03 05 07 09 0d 0f 13 15 19 4b 4f 59 5f 87 8b 93 99 bc da 4c 81 00 00 00 59 49 44 41 54 58 c3 ed cc b9 01 80 20 00 04 c1 45 50 fc 01 9f fe 5b 35 27 b8 d4 e4 a6 80 61 98 95 09 f2 a2 44 e6 47 a9 d0 6e 65 71 e0 c0 81 03 07 0e 1c 74 c1 54 95 1d 8e a6 64 fe 97 8a b2 c1 7a 2a 91 f1 52 0a 9c af 92 1c 38 70 e0 c0 81 03 07 5d 10 46 25 41 4c 4a f8 00 7a f6 14 9b 35 88 33 b8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR@@BPLTEFFFFFFFFFFFFFFFFFFFFFFFFFFFM+lN&uP"b%tRNSKOY_LYIDATX EP[5'aDGneqtTdz*R8p]F%ALJz53IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:42 UTC	882	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:42 UTC	1297	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28103 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-xtNDtrKq1LiNZlnp' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-21 12:16:42 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-21 12:16:42 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 78 74 4e 44 74 72 4b 71 31 4c 69 4e 5a 6c 6e 70 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-xtNDtrKq1LiNZlnp' 'unsafe-
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-21 12:16:42 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:42 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923d61ca195c8cca&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:43 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:43 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116125 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 923d61cdad91423a-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 12:16:43 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23brow
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 Data Ascii: lank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","feedback_report_g
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 50 2c 65 54 2c 65 55 2c 66 31 2c 66 35 2c 66 62 2c 66 65 2c 66 67 2c 66 68 2c 66 69 2c 66 75 2c 66 47 2c 66 Data Ascii: ly.","turnstile_verifying":"Verifying..."},"polyfills":{"feedback_report_guideline":false,"feedback_report_output_subtitle":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eP,eT,eU,f1,f5,fb,fe,fg,fh,fi,fu,fG,f
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 67 4f 28 31 32 34 36 29 5d 5b 67 4f 28 31 32 33 38 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 67 4f 28 31 34 37 30 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 65 52 28 67 2c 68 2c 44 29 2c 6f 5b 67 4f 28 37 33 38 29 5d 28 42 2c 45 29 3f 28 46 3d 6f 5b 67 4f 28 39 36 39 29 5d 28 27 73 27 2c 45 29 26 26 21 67 5b 67 4f 28 31 32 38 30 29 5d 28 68 5b 44 5d 29 2c 6f 5b 67 4f 28 39 36 39 29 5d 28 67 4f 28 31 31 35 34 29 2c 6f 5b 67 4f 28 37 34 39 29 5d 28 69 2c 44 29 29 3f 73 28 6f 5b 67 4f 28 31 33 35 33 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 6f 5b 67 4f 28 31 31 30 30 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 6f 5b 67 4f 28 31 31 39 35 29 5d 28 73 2c 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 Data Ascii: AaAb'.split('A'),B=B[gO(1246)][gO(1238)](B),C=0;C<x[gO(1470)];D=x[C],E=eR(g,h,D),o[gO(738)](B,E)?(F=o[gO(969)]('s',E)&&!g[gO(1280)](h[D]),o[gO(969)](gO(1154),o[gO(749)](i,D))?s(o[gO(1353)](i,D),E):F\|\|o[gO(1100)](s,i+D,h[D])):o[gO(1195)](s,i+D,E),C++);retu
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 68 69 28 38 37 39 29 2c 27 68 4a 74 4e 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 57 4a 77 48 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 7a 59 52 4e 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 51 44 59 43 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 47 61 78 74 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4d 6c 64 6c 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 48 4f 7a 45 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 57 47 54 45 Data Ascii: hi(879),'hJtNx':function(h,i){return h>i},'WJwHZ':function(h,i){return i\|h},'zYRNW':function(h,i){return i===h},'QDYCU':function(h,i){return h<<i},'GaxtG':function(h,i){return h>i},'Mldlb':function(h,i){return h&i},'HOzEN':function(h,i){return i==h},'WGTE
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 68 6b 28 31 32 37 36 29 5d 5b 68 6b 28 31 38 38 36 29 5d 5b 68 6b 28 36 32 30 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 20 69 66 28 64 5b 68 6b 28 36 34 35 29 5d 28 64 5b 68 6b 28 38 34 38 29 5d 2c 64 5b 68 6b 28 31 36 36 37 29 5d 29 29 72 65 74 75 72 6e 20 46 5b 68 6b 28 31 30 34 33 29 5d 28 47 29 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 68 6b 28 31 32 37 36 29 5d 5b 68 6b 28 31 38 38 36 29 5d 5b 68 6b 28 36 32 30 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 68 6b 28 31 30 34 33 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 6b 28 31 38 31 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f Data Ascii: ),L=C+K,Object[hk(1276)][hk(1886)][hk(620)](x,L))C=L;else if(d[hk(645)](d[hk(848)],d[hk(1667)]))return F[hk(1043)](G);else{if(Object[hk(1276)][hk(1886)][hk(620)](B,C)){if(256>C[hk(1043)](0)){for(s=0;s<F;H<<=1,I==j-1?(I=0,G[hk(1814)](o(H)),H=0):I++,s++);fo
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 6b 28 31 38 31 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 6b 28 31 30 34 33 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 68 6b 28 31 37 32 38 29 5d 28 38 2c 73 29 3b 48 3d 48 3c 3c 31 7c 31 2e 33 26 4d 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 6b 28 31 38 31 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 6b 28 31 38 37 32 29 5d 28 48 2c 31 29 7c 4d 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 68 6b 28 31 38 31 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 6b 28 31 30 34 33 29 Data Ascii: j,1))?(I=0,G[hk(1814)](o(H)),H=0):I++,s++);for(M=C[hk(1043)](0),s=0;d[hk(1728)](8,s);H=H<<1\|1.3&M,I==j-1?(I=0,G[hk(1814)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[hk(1872)](H,1)\|M,j-1==I?(I=0,G[hk(1814)](o(H)),H=0):I++,M=0,s++);for(M=C[hk(1043)
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 74 68 5b 68 6e 28 31 33 31 35 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 68 6e 28 31 34 31 39 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 6e 28 31 38 39 37 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 6e 28 31 33 31 35 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 68 6e 28 31 36 30 36 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 Data Ascii: th[hn(1315)](2,8),F=1;K!=F;L=G&H,H>>=1,d[hn(1419)](0,H)&&(H=j,G=o(I++)),J\|=d[hn(1897)](0<L?1:0,F),F<<=1);M=e(J);break;case 1:for(J=0,K=Math[hn(1315)](2,16),F=1;d[hn(1606)](F,K);L=G&H,H>>=1,0==H&&(H=j,G=o(I++)),J\|=(0<L?1:0)*F,F<<=1);M=e(J);break;case 2:ret
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 39 29 2c 68 7a 28 31 39 32 39 29 29 29 6a 3d 7b 7d 2c 6a 5b 68 7a 28 39 31 30 29 5d 3d 65 5b 68 7a 28 36 38 39 29 5d 2c 6a 5b 68 7a 28 36 37 31 29 5d 3d 63 5b 68 7a 28 38 30 33 29 5d 5b 68 7a 28 31 32 30 33 29 5d 2c 6a 5b 68 7a 28 31 34 30 30 29 5d 3d 68 7a 28 31 30 30 38 29 2c 65 5b 68 7a 28 31 39 30 35 29 5d 5b 68 7a 28 35 31 34 29 5d 28 6a 2c 27 2a 27 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 65 5b 68 7a 28 31 35 34 34 29 5d 28 66 36 2c 65 5b 68 7a 28 31 35 34 34 29 5d 28 66 37 2c 63 29 29 7d 7d 2c 65 4d 5b 67 4a 28 31 35 39 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 41 2c 64 2c 65 2c 66 2c 67 29 7b 68 41 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 68 41 28 31 34 32 38 29 5d 3d 68 41 28 31 31 37 31 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 41 28 Data Ascii: 9),hz(1929)))j={},j[hz(910)]=e[hz(689)],j[hz(671)]=c[hz(803)][hz(1203)],j[hz(1400)]=hz(1008),e[hz(1905)][hz(514)](j,'');else return e[hz(1544)](f6,e[hz(1544)](f7,c))}},eM[gJ(1590)]=function(hA,d,e,f,g){hA=gJ,d={},d[hA(1428)]=hA(1171),e=d,f=1,g=1e3eM[hA(
2025-03-21 12:16:43 UTC	1369	IN	Data Raw: 5b 28 68 43 28 35 39 39 29 29 5d 28 29 2c 6f 5b 68 43 28 36 30 39 29 5d 28 68 43 28 36 33 31 29 2c 6c 29 2c 6f 5b 68 43 28 31 35 38 32 29 5d 3d 35 65 33 2c 6f 5b 68 43 28 31 30 37 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 3d 7b 7d 2c 73 5b 68 43 28 31 36 39 39 29 5d 3d 66 2c 73 5b 68 43 28 31 31 37 34 29 5d 3d 6a 2c 73 2e 63 63 3d 67 2c 73 5b 68 43 28 39 31 30 29 5d 3d 6b 2c 73 5b 68 43 28 37 33 33 29 5d 3d 6e 2c 76 3d 4a 53 4f 4e 5b 68 43 28 31 31 38 31 29 5d 28 73 29 2c 6f 5b 68 43 28 36 35 30 29 5d 28 66 35 5b 68 43 28 31 30 31 37 29 5d 28 76 29 29 7d 63 61 74 63 68 28 78 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 35 37 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 44 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6f 2c 6d 29 7b 69 66 28 68 44 Data Ascii: [(hC(599))](),o[hC(609)](hC(631),l),o[hC(1582)]=5e3,o[hC(1070)]=function(){},s={},s[hC(1699)]=f,s[hC(1174)]=j,s.cc=g,s[hC(910)]=k,s[hC(733)]=n,v=JSON[hC(1181)](s),o[hC(650)](f5[hC(1017)](v))}catch(x){}},eM[gJ(571)]=function(d,hD,e,f,g,h,i,j,k,l,o,m){if(hD

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:42 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:43 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:43 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 923d61cdaea74333-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 12:16:43 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:43 UTC	688	OUT	GET /favicon.ico HTTP/1.1 Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:43 UTC	188	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 21 Mar 2025 12:16:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2025-03-21 12:16:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:44 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1614496233:1742555690:s8MyFAnUjn_yelYrvqRBIMNKptt559iiZEmc39as_nM/923d61ca195c8cca/LBC6jk3eQtGPqturzsXoGd4815gUyOyVeo6n0n8WJ9U-1742559402-1.1.1.1-b2rsB_lwNQskbNFYFUQkmGU41mUmSqn82BPfJaV0mvvBKYW5Gs3cOaO.TsS_W3ZV HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3393 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: LBC6jk3eQtGPqturzsXoGd4815gUyOyVeo6n0n8WJ9U-1742559402-1.1.1.1-b2rsB_lwNQskbNFYFUQkmGU41mUmSqn82BPfJaV0mvvBKYW5Gs3cOaO.TsS_W3ZV cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:44 UTC	3393	OUT	Data Raw: 7a 37 30 32 2b 32 6b 32 47 32 30 32 38 75 6e 44 75 6e 53 32 75 42 74 4b 52 33 75 4f 6e 52 6e 61 48 42 6a 55 71 6e 76 4c 4b 32 6c 71 74 4c 6e 65 6e 59 71 52 4b 34 71 72 6b 24 34 6e 4f 71 6a 34 6e 57 6e 7a 58 32 6e 2b 4c 32 6e 79 6a 6e 79 2d 37 72 4d 6e 47 30 67 4c 4c 34 6a 71 74 49 6e 56 42 74 61 6e 47 62 64 75 6e 50 6e 74 46 67 4b 33 31 41 79 72 4f 75 42 74 4b 37 6a 4d 32 74 24 6e 46 73 4c 31 73 4c 65 62 32 4c 66 66 44 64 6e 6e 37 34 75 42 68 6e 24 78 34 50 52 75 4a 35 4c 6e 55 6b 4d 4f 65 4a 6e 78 32 53 44 71 68 79 6e 52 4c 42 6a 4c 74 34 64 66 33 6e 4d 78 32 6e 74 61 24 76 64 71 32 6e 4b 51 51 70 34 30 6e 77 6e 74 7a 7a 6e 6e 34 6e 64 35 51 76 48 71 6e 6a 6e 75 24 6e 30 48 39 51 52 4c 6f 4a 6e 6a 66 6e 30 51 54 33 6e 75 66 53 62 42 2b 6c 77 6e 72 56 4f Data Ascii: z702+2k2G2028unDunS2uBtKR3uOnRnaHBjUqnvLK2lqtLnenYqRK4qrk$4nOqj4nWnzX2n+L2nyjny-7rMnG0gLL4jqtInVBtanGbdunPntFgK31AyrOuBtK7jM2t$nFsL1sLeb2LffDdnn74uBhn$x4PRuJ5LnUkMOeJnx2SDqhynRLBjLt4df3nMx2nta$vdq2nKQQp40nwntzznn4nd5QvHqnjnu$n0H9QRLoJnjfn0QT3nufSbB+lwnrVO
2025-03-21 12:16:44 UTC	1051	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:44 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 228752 Connection: close cf-chl-gen: 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$bCPlMwPBEb6DKdS+U8EwRA== Server: cloudflare CF-RAY: 923d61d4ac0b0f68-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 12:16:44 UTC	318	IN	Data Raw: 57 33 4f 42 67 59 4f 43 67 32 39 78 59 57 42 72 6b 32 61 4d 6d 6d 52 4e 56 6c 52 51 6e 48 52 30 65 6f 75 64 6e 5a 31 31 64 47 57 43 69 4b 71 71 6f 61 36 44 6f 36 6d 65 61 6d 64 73 6b 49 69 71 68 36 61 5a 6b 6e 43 5a 66 6e 6e 43 76 59 48 42 66 35 2b 38 6c 35 2b 34 6d 4d 6d 37 78 5a 6d 50 77 4d 6a 51 6e 38 57 32 6c 4e 6a 61 78 4e 66 64 32 73 37 5a 33 61 72 51 77 62 66 64 70 36 48 59 79 64 2f 58 33 73 6e 4e 7a 64 7a 61 76 36 2f 53 39 39 6a 68 34 73 4c 45 2b 74 7a 47 79 50 37 61 7a 64 76 4d 33 64 6a 68 35 66 58 69 34 77 44 57 42 77 62 74 7a 67 50 76 33 78 49 51 36 52 4d 4a 35 67 62 38 35 66 59 51 46 68 34 61 41 78 59 42 32 41 6a 69 47 69 48 35 42 69 55 59 2f 50 41 65 47 77 38 43 4b 52 67 72 41 53 49 71 44 2f 6b 79 4b 54 6b 51 4e 43 38 75 2b 68 38 54 46 77 41 Data Ascii: W3OBgYOCg29xYWBrk2aMmmRNVlRQnHR0eoudnZ11dGWCiKqqoa6Do6meamdskIiqh6aZknCZfnnCvYHBf5+8l5+4mMm7xZmPwMjQn8W2lNjaxNfd2s7Z3arQwbfdp6HYyd/X3snNzdzav6/S99jh4sLE+tzGyP7azdvM3djh5fXi4wDWBwbtzgPv3xIQ6RMJ5gb85fYQFh4aAxYB2AjiGiH5BiUY/PAeGw8CKRgrASIqD/kyKTkQNC8u+h8TFwA
2025-03-21 12:16:44 UTC	1369	IN	Data Raw: 4a 53 59 33 74 6f 58 6e 4e 6f 65 57 46 33 51 58 56 6c 63 6b 52 54 61 58 78 49 65 57 53 48 5a 55 64 67 67 47 64 6f 6c 45 6c 77 65 46 56 62 63 35 78 79 69 5a 43 65 6f 59 43 58 6a 5a 64 31 6e 4a 65 58 59 36 69 49 6f 32 64 69 68 34 71 73 69 71 52 73 72 49 4b 45 74 5a 78 32 6b 5a 43 56 6c 6e 37 44 76 35 65 66 66 38 47 48 74 5a 4b 42 6c 37 75 6c 6d 70 75 61 76 5a 4f 47 72 4c 2f 50 72 5a 6a 43 71 4e 75 31 79 37 47 71 31 35 33 55 34 4d 33 64 78 73 47 36 77 4f 44 4e 37 64 7a 69 36 4c 2f 51 36 4d 58 79 37 75 48 68 73 73 50 54 32 4e 55 41 32 4c 66 68 2f 64 62 31 76 74 44 58 39 64 6f 44 39 4f 72 5a 35 4f 7a 34 36 2f 30 4d 44 50 50 73 43 2b 76 35 38 67 54 6d 47 65 6e 65 36 78 58 59 44 78 76 38 39 67 67 70 38 76 6b 4a 41 42 73 6c 47 76 34 73 2f 51 67 4d 49 77 45 31 39 Data Ascii: JSY3toXnNoeWF3QXVlckRTaXxIeWSHZUdggGdolElweFVbc5xyiZCeoYCXjZd1nJeXY6iIo2dih4qsiqRsrIKEtZx2kZCVln7Dv5eff8GHtZKBl7ulmpuavZOGrL/PrZjCqNu1y7Gq153U4M3dxsG6wODN7dzi6L/Q6MXy7uHhssPT2NUA2Lfh/db1vtDX9doD9OrZ5Oz46/0MDPPsC+v58gTmGene6xXYDxv89ggp8vkJABslGv4s/QgMIwE19
2025-03-21 12:16:44 UTC	1369	IN	Data Raw: 2f 53 58 68 42 62 33 36 46 57 59 5a 36 65 6f 5a 31 58 57 31 58 52 6c 78 38 68 32 47 41 67 49 6c 6d 64 32 52 78 69 70 6d 65 56 31 61 53 59 58 71 56 68 46 69 53 65 4b 6c 68 6f 71 4a 6a 6f 71 69 42 68 4b 78 2b 70 4b 69 4d 6d 49 57 6e 6a 61 69 4e 73 35 75 6e 6a 4a 69 2f 6d 4b 4f 54 72 37 4f 43 79 61 47 6a 7a 63 57 45 70 73 47 76 6a 6f 71 52 71 4e 43 69 32 4b 6e 47 70 36 62 62 31 36 2b 31 32 70 6d 38 34 5a 76 56 76 72 61 35 74 37 54 4d 7a 63 44 42 72 65 4c 50 78 4b 7a 56 7a 76 43 33 38 76 43 33 36 4d 6e 31 79 37 6a 63 33 73 44 69 37 76 4c 35 38 73 6a 35 32 2b 45 41 37 4e 72 70 45 4f 7a 68 42 4f 45 46 39 77 54 69 36 2f 59 4b 2f 4e 6e 66 31 67 76 73 48 65 7a 62 39 4e 37 65 4a 42 73 46 36 66 62 6e 48 75 6b 4f 4d 78 48 75 43 43 76 32 2b 43 59 6b 43 67 59 37 46 6a Data Ascii: /SXhBb36FWYZ6eoZ1XW1XRlx8h2GAgIlmd2RxipmeV1aSYXqVhFiSeKlhoqJjoqiBhKx+pKiMmIWnjaiNs5unjJi/mKOTr7OCyaGjzcWEpsGvjoqRqNCi2KnGp6bb16+12pm84ZvVvra5t7TMzcDBreLPxKzVzvC38vC36Mn1y7jc3sDi7vL58sj52+EA7NrpEOzhBOEF9wTi6/YK/Nnf1gvsHezb9N7eJBsF6fbnHukOMxHuCCv2+CYkCgY7Fj
2025-03-21 12:16:44 UTC	1369	IN	Data Raw: 52 6e 64 6b 51 56 31 69 69 32 39 4a 5a 34 52 62 64 47 71 4d 69 57 39 4f 61 46 46 5a 6a 35 65 59 6a 58 64 79 63 56 6d 4e 6d 70 61 6d 66 6f 4e 6c 59 59 43 67 6e 70 2b 5a 72 4b 35 77 68 61 71 55 69 61 65 72 73 49 65 55 64 4a 71 4d 6d 72 65 6a 71 37 47 62 74 72 4f 7a 6b 71 4b 49 74 73 43 63 6a 35 43 44 72 6f 79 74 79 37 65 6b 6f 5a 44 46 71 63 75 56 32 4d 7a 64 72 70 33 65 75 72 37 6c 78 70 2f 49 71 63 44 4d 36 4f 37 68 71 73 50 45 34 4d 54 54 31 4f 50 49 32 72 6e 38 30 2f 48 32 36 74 58 64 38 2f 58 77 39 66 7a 6c 2f 41 48 72 37 4e 6b 4a 37 51 6a 4a 41 66 50 78 38 64 48 33 44 76 63 44 47 4f 50 76 42 2f 66 65 45 76 6b 6b 33 2b 77 67 35 42 59 44 35 68 6b 68 48 51 59 64 44 44 41 72 45 75 77 77 45 52 4c 30 44 43 38 56 4d 76 6e 31 4b 68 4d 61 4e 42 33 2b 44 6b 55 Data Ascii: RndkQV1ii29JZ4RbdGqMiW9OaFFZj5eYjXdycVmNmpamfoNlYYCgnp+ZrK5whaqUiaersIeUdJqMmrejq7GbtrOzkqKItsCcj5CDroyty7ekoZDFqcuV2Mzdrp3eur7lxp/IqcDM6O7hqsPE4MTT1OPI2rn80/H26tXd8/Xw9fzl/AHr7NkJ7QjJAfPx8dH3DvcDGOPvB/feEvkk3+wg5BYD5hkhHQYdDDArEuwwERL0DC8VMvn1KhMaNB3+DkU
2025-03-21 12:16:44 UTC	1369	IN	Data Raw: 32 42 46 52 6f 4e 45 67 56 4e 77 61 47 39 6d 62 33 4f 4f 62 5a 70 37 62 33 70 73 6a 4a 64 32 59 36 42 79 58 6e 36 4a 6d 57 71 6b 61 4c 43 75 71 59 2b 47 6f 71 4b 7a 62 36 52 35 69 59 61 4b 70 37 69 59 6b 5a 36 51 75 4b 2b 74 72 6f 2b 69 67 38 6e 49 74 63 62 41 69 72 76 43 79 63 32 39 31 74 61 72 7a 4b 79 58 6c 62 65 77 6b 4c 69 63 33 4f 4c 55 6f 62 2f 66 32 2b 6e 42 32 38 76 4b 75 74 7a 6f 78 4d 62 42 32 36 72 32 74 62 62 6d 30 62 6a 72 7a 74 6a 73 37 72 6a 4e 2b 77 4c 6a 2b 51 50 6e 41 67 66 35 2b 67 37 63 42 4f 7a 67 42 51 2f 77 42 74 54 69 31 4e 62 6e 36 50 7a 6e 43 78 6e 56 2b 52 62 55 39 52 6b 50 49 75 59 69 45 2f 58 39 41 76 62 37 47 67 45 50 4a 77 6f 4f 45 69 4d 56 4a 53 38 55 4e 42 63 61 46 79 45 61 4e 44 51 69 4a 43 51 52 51 79 6b 39 52 6b 49 38 Data Ascii: 2BFRoNEgVNwaG9mb3OObZp7b3psjJd2Y6ByXn6JmWqkaLCuqY+GoqKzb6R5iYaKp7iYkZ6QuK+tro+ig8nItcbAirvCyc291tarzKyXlbewkLic3OLUob/f2+nB28vKutzoxMbB26r2tbbm0bjrztjs7rjN+wLj+QPnAgf5+g7cBOzgBQ/wBtTi1Nbn6PznCxnV+RbU9RkPIuYiE/X9Avb7GgEPJwoOEiMVJS8UNBcaFyEaNDQiJCQRQyk9RkI8
2025-03-21 12:16:44 UTC	1369	IN	Data Raw: 32 41 64 47 78 6f 56 34 75 51 6a 58 61 50 66 57 31 36 64 59 4e 63 66 6e 79 49 59 47 46 2f 69 6f 78 74 72 47 56 6d 6f 72 46 73 63 4c 43 46 69 4c 69 6e 72 4a 43 32 75 61 69 63 73 4c 79 32 73 4a 62 42 6e 72 79 59 6e 38 50 41 6e 62 57 37 78 72 47 76 78 5a 50 54 78 63 76 4e 7a 4b 62 4f 77 38 36 73 73 38 33 49 6e 65 50 43 76 71 47 33 76 73 58 4a 35 73 4c 49 77 61 76 45 76 4d 6d 70 30 4d 2f 55 78 76 44 68 75 4f 33 63 36 39 44 6d 39 75 72 41 2b 64 55 45 35 65 50 5a 34 63 54 65 32 67 7a 70 2f 4f 41 42 33 51 48 6b 45 78 51 45 34 78 59 59 43 75 77 64 37 66 7a 78 49 42 72 5a 46 4f 50 76 2b 2f 4d 43 35 4f 63 43 43 78 77 6b 48 43 6e 35 36 4f 6f 70 49 51 63 51 37 69 7a 34 46 6a 6b 39 44 77 6f 67 38 77 30 76 4f 68 55 5a 4b 52 59 33 52 69 41 61 52 52 73 4f 4c 44 30 4d 50 Data Ascii: 2AdGxoV4uQjXaPfW16dYNcfnyIYGF/ioxtrGVmorFscLCFiLinrJC2uaicsLy2sJbBnryYn8PAnbW7xrGvxZPTxcvNzKbOw86ss83InePCvqG3vsXJ5sLIwavEvMmp0M/UxvDhuO3c69Dm9urA+dUE5ePZ4cTe2gzp/OAB3QHkExQE4xYYCuwd7fzxIBrZFOPv+/MC5OcCCxwkHCn56OopIQcQ7iz4Fjk9Dwog8w0vOhUZKRY3RiAaRRsOLD0MP
2025-03-21 12:16:44 UTC	1369	IN	Data Raw: 73 69 31 69 53 62 70 39 39 6e 4a 53 59 58 31 68 6e 67 70 6c 63 6d 4b 57 6b 6e 6e 71 4e 69 35 47 6c 68 58 2b 6e 71 4a 6c 31 63 4b 2b 63 65 71 71 7a 75 33 69 69 73 4b 58 42 78 73 4b 62 6d 5a 6a 49 77 5a 75 4a 6a 6f 61 64 6e 4a 47 55 76 74 53 77 31 72 4b 72 32 73 58 56 79 74 53 2f 75 37 57 77 30 72 32 6b 6f 39 75 2b 74 73 54 46 79 75 50 47 36 65 44 63 77 4f 44 79 36 71 37 30 79 74 58 54 30 39 50 74 75 39 54 68 79 74 66 78 41 73 4d 43 38 51 6f 4d 43 67 62 31 44 4e 77 4e 33 39 38 48 38 65 6e 77 79 65 50 73 30 50 50 5a 35 2b 73 4f 2f 74 50 78 45 64 38 48 4a 52 59 57 4a 42 55 6b 36 41 6a 6d 2b 75 66 6a 2f 53 37 79 45 51 50 70 39 44 55 44 45 69 73 70 45 6a 67 51 2b 68 51 76 2f 76 63 57 4e 54 34 36 48 45 49 49 4b 56 41 51 54 54 45 77 49 45 30 6a 4f 46 45 35 4c 41 Data Ascii: si1iSbp99nJSYX1hngplcmKWknnqNi5GlhX+nqJl1cK+ceqqzu3iisKXBxsKbmZjIwZuJjoadnJGUvtSw1rKr2sXVytS/u7Ww0r2ko9u+tsTFyuPG6eDcwODy6q70ytXT09Ptu9ThytfxAsMC8QoMCgb1DNwN398H8enwyePs0PPZ5+sO/tPxEd8HJRYWJBUk6Ajm+ufj/S7yEQPp9DUDEispEjgQ+hQv/vcWNT46HEIIKVAQTTEwIE0jOFE5LA
2025-03-21 12:16:44 UTC	1369	IN	Data Raw: 58 57 74 61 68 58 64 5a 66 36 4b 6c 66 5a 71 69 61 48 68 6d 6f 6e 4a 7a 73 61 75 42 61 59 4f 49 72 36 2b 33 70 34 2b 4e 72 33 69 35 67 72 4f 37 76 5a 6a 47 68 4b 71 64 6c 62 32 6f 75 61 69 6b 6a 71 69 6c 7a 72 37 4d 31 62 71 72 6d 74 61 38 72 64 76 5a 31 71 2f 68 34 4e 61 78 34 39 4c 45 76 4f 6a 57 79 4d 47 73 78 4d 66 75 72 75 37 71 79 76 50 74 37 63 37 48 31 4f 6a 71 33 38 32 2b 36 73 76 30 76 38 55 42 78 63 4b 38 42 73 58 66 34 67 72 4b 41 51 62 51 41 50 33 67 42 76 6e 68 38 51 6f 55 44 74 67 49 47 39 50 36 47 51 54 33 33 42 6f 66 41 68 6b 4d 47 68 76 72 35 53 33 6a 4c 43 49 4b 36 78 51 73 43 41 33 35 46 53 72 76 38 44 38 72 44 52 49 2f 50 78 6b 61 52 45 59 43 51 69 49 71 44 54 73 62 48 7a 49 38 4d 45 70 53 4d 30 77 56 4d 45 52 4f 56 56 34 38 4f 52 70 Data Ascii: XWtahXdZf6KlfZqiaHhmonJzsauBaYOIr6+3p4+Nr3i5grO7vZjGhKqdlb2ouaikjqilzr7M1bqrmta8rdvZ1q/h4Nax49LEvOjWyMGsxMfuru7qyvPt7c7H1Ojq382+6sv0v8UBxcK8BsXf4grKAQbQAP3gBvnh8QoUDtgIG9P6GQT33BofAhkMGhvr5S3jLCIK6xQsCA35FSrv8D8rDRI/PxkaREYCQiIqDTsbHzI8MEpSM0wVMEROVV48ORp
2025-03-21 12:16:44 UTC	1369	IN	Data Raw: 70 70 39 6c 58 70 66 61 36 53 48 6e 32 36 4f 62 49 61 71 6c 6f 4f 46 67 71 71 37 64 61 79 5a 74 35 79 74 75 6e 32 6d 73 61 2b 56 69 61 43 7a 77 4b 48 4f 76 72 79 66 30 62 36 53 76 72 4c 41 30 71 2b 73 74 72 6d 75 7a 62 72 53 74 61 4b 34 72 35 2f 6a 73 37 6d 62 79 72 66 56 36 4b 7a 51 72 39 37 43 37 2b 33 6a 79 63 37 44 32 63 33 54 38 39 76 6d 39 2b 48 70 31 66 4c 6a 42 74 50 6b 43 76 72 5a 43 76 37 5a 44 50 44 67 33 77 37 6a 38 4e 44 31 46 2b 76 4c 47 52 72 62 32 2f 72 5a 44 50 72 61 46 2f 34 55 2b 2f 62 6e 43 50 67 6d 4a 69 62 37 4c 69 37 39 42 69 41 6f 44 6a 41 59 41 2f 49 36 4f 54 51 32 49 44 41 52 4c 43 73 4d 45 76 64 48 49 66 6f 37 4d 30 4d 36 53 30 63 62 49 30 4e 4b 49 31 55 6d 4e 53 73 6d 51 6b 31 58 57 78 59 33 4e 6c 30 38 4f 42 78 6b 52 6a 77 32 Data Ascii: pp9lXpfa6SHn26ObIaqloOFgqq7dayZt5ytun2msa+ViaCzwKHOvryf0b6SvrLA0q+strmuzbrStaK4r5/js7mbyrfV6KzQr97C7+3jyc7D2c3T89vm9+Hp1fLjBtPkCvrZCv7ZDPDg3w7j8ND1F+vLGRrb2/rZDPraF/4U+/bnCPgmJib7Li79BiAoDjAYA/I6OTQ2IDARLCsMEvdHIfo7M0M6S0cbI0NKI1UmNSsmQk1XWxY3Nl08OBxkRjw2

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:44 UTC	956	OUT	POST /? HTTP/1.1 Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com Connection: keep-alive Content-Length: 5126 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:44 UTC	5126	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 26 75 72 65 6b 69 30 69 31 76 31 35 3d 25 35 42 25 35 42 25 32 32 36 38 32 35 33 33 34 34 37 39 37 33 36 39 33 37 37 25 32 32 25 32 43 25 32 32 61 33 38 32 35 33 37 34 32 37 65 37 36 32 35 34 33 25 32 32 25 32 43 25 32 32 33 32 32 35 33 38 34 32 37 37 37 31 37 33 37 37 37 25 32 32 25 32 43 25 32 32 38 37 35 36 64 36 33 33 38 33 34 33 37 33 39 33 33 25 32 32 25 32 43 25 32 32 33 38 33 33 33 32 33 37 33 30 33 37 33 36 33 38 33 25 32 32 25 32 43 25 32 32 38 33 37 33 38 33 36 25 32 32 25 35 44 25 32 43 25 32 32 38 34 37 39 33 38 33 32 37 30 25 32 32 25 32 43 25 32 32 32 30 39 30 39 33 31 25 32 32 25 32 43 38 25 35 44 26 70 79 6d 69 73 61 33 3d 25 35 42 25 35 42 25 32 32 32 35 33 33 34 32 36 65 Data Ascii: cf-turnstile-response=&ureki0i1v15=%5B%5B%2268253344797369377%22%2C%22a382537427e762543%22%2C%2232253842777173777%22%2C%228756d633834373933%22%2C%2238333237303736383%22%2C%228373836%22%5D%2C%228479383270%22%2C%222090931%22%2C8%5D&pymisa3=%5B%5B%222533426e
2025-03-21 12:16:45 UTC	438	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 21 Mar 2025 12:16:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe set-cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; Domain=aboutfamous.com; HttpOnly; Path=/; SameSite=None; Secure
2025-03-21 12:16:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:45 UTC	938	OUT	GET /?yR1Ou=urSe HTTP/1.1 Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
2025-03-21 12:16:46 UTC	784	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:45 GMT Content-Type: text/html; charset=utf-8 Content-Length: 57513 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 9eedf49c-7cbe-4843-9422-cb6a0fc44d00 x-ms-ests-server: 2.1.20329.5 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2025-03-21 12:16:46 UTC	15595	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc 7d e9 7a e2 48 b2 e8 ff 7e 0a 9b d3 9f 41 63 19 b3 83 a1 d4 1c 83 37 5c 78 c3 78 a5 39 75 05 12 46 36 48 a0 cd a6 aa 78 f7 1b 11 99 a9 05 43 75 df 99 3e b7 e7 9b b2 94 ca 25 32 32 f6 8c 4c be 6c 1f 5d 35 bb 4f d7 c7 5b 63 77 3a f9 e3 b7 2f ec cf d6 97 b1 ae 6a f0 77 eb 8b 6b b8 13 1d 9f b6 3a ba 66 d8 fa d0 35 cc 17 fc b0 1f 7c f9 32 d5 5d 75 6b 68 99 ae 6e ba 4a c2 d5 3f dc 7d ec a7 b6 35 1c ab b6 a3 bb 8a e7 8e f6 2a 09 18 c3 9d ed e9 73 cf f0 95 44 93 55 df eb 2e 66 7a 62 7f 4d 37 ad 63 45 d7 5e f4 78 ab c7 bd bb c3 bd a6 35 9d a9 ae 31 98 ac 6f f8 6e 68 ee 58 d1 74 df 18 ea 7b f4 22 6f 19 a6 e1 1a ea 64 cf 19 aa 13 5d c9 a6 33 f2 d6 54 fd 30 a6 de 94 17 e5 b0 c8 73 74 9b de 55 e8 5b 59 e8 4e 62 cb 54 a7 ba 92 f0 0d fd Data Ascii: }zH~Ac7\xx9uF6HxCu>%22Ll]5O[cw:/jwk:f5\|2]ukhnJ?}5*sDU.fzbM7cE^x51onhXt{"od]3T0stU[YNbT
2025-03-21 12:16:46 UTC	16384	IN	Data Raw: 7c ec 4a 3f 12 cd 5c 05 77 05 2b 15 51 b5 12 9f bc 1a f4 71 80 6b 07 2a 9c f9 b8 18 48 fa 2e fc b5 5a d0 a4 1c 54 57 ab 6b 0a 07 d5 50 ff 33 a0 99 2d 25 b3 a5 5a 22 23 f1 70 1a d8 28 1b e5 c1 ed ca 9e 68 16 0c 59 62 ef db 80 bd b7 41 a8 ae da 82 47 ca fc 56 b0 0e 40 05 52 59 08 89 23 21 24 c0 e7 c2 b1 99 f2 4a ae b9 6d 13 da 21 98 3d a2 97 25 0b e1 0c 0b 07 1b 41 1d ad b8 48 42 3c 45 82 7d e8 d5 f5 e6 23 5a 9c b2 c4 b6 aa 2f 31 5e c9 2c ff 0e ff 36 42 6b 83 66 39 5a a7 a4 f8 78 33 65 3e a2 18 cf c2 3a ba be a0 2d b7 19 99 40 ba 30 81 50 91 29 20 6f fc 67 a9 17 4b 11 ec af f3 8b 40 cb f9 4d 8a f0 7d 45 36 eb f9 33 a0 3b df ab fa 4f a8 b3 e2 a1 07 dc 3b 06 68 67 02 5a 84 aa fa 43 58 28 d9 5c 7c 93 97 03 fc 16 da 77 6f c1 bc f8 73 01 cc 54 7a c2 0d 65 f6 94 Data Ascii: \|J?\w+Qqk*H.ZTWkP3-%Z"#p(hYbAGV@RY#!$Jm!=%AHB<E}#Z/1^,6Bkf9Zx3e>:-@0P) ogK@M}E63;O;hgZCX(\\|wosTze
2025-03-21 12:16:46 UTC	16384	IN	Data Raw: 60 fe 77 b2 fa 51 55 df 92 90 29 6e 88 e6 47 81 3f aa 42 c2 08 d1 fc 28 d0 47 82 17 17 c3 53 dc 43 7c f1 dd 1f 05 08 3b d9 07 58 df b1 5a 66 df cd 32 a3 2a bf eb 32 58 a4 1b 11 9f 0f b8 45 5a 7c 7e 9a d6 29 56 7c ce 19 44 7c 2e ea 21 35 77 db e6 69 f4 fc 3b e9 39 23 49 b9 23 3f 7a d6 42 c7 ed 23 cf 52 76 ce 49 e2 48 cc 02 1f 89 4e 33 c4 ae 62 b4 f6 47 cf 58 05 75 1e 7d be b4 5d 40 a9 45 7b b4 d6 f3 e0 d1 87 19 58 eb 5a 40 29 ad 25 50 0b 73 6b 3f 6b bf eb 27 4b fc 1b 11 39 74 92 66 40 7a 56 d3 3d b3 91 12 4b 3d 16 56 d7 d3 fc f6 00 56 46 84 e0 07 13 e1 d8 20 d6 7e 3f 88 e4 33 7e c6 a3 c6 42 42 a7 57 12 ad 7e 34 f2 47 30 0d 1f c1 1a bc 0f f6 0a cf f9 5c d7 da 49 2d 01 19 47 43 0a 1c c8 a3 ea a2 22 ab dd b5 06 1a 24 90 ab e1 28 1d 7e 55 6c 12 87 16 50 cb 9f Data Ascii: `wQU)nG?B(GSC\|;XZf2*2XEZ\|~)V\|D\|.!5wi;9#I#?zB#RvIHN3bGXu}]@E{XZ@)%Psk?k'K9tf@zV=K=VVF ~?3~BBW~4G0\I-GC"$(~UlP
2025-03-21 12:16:46 UTC	9150	IN	Data Raw: 6e 52 d2 77 e4 21 7c cd c8 1a be 1e d1 d4 d5 ad 5f b9 e2 c5 d2 b4 51 14 95 3a c1 45 c5 8e b7 ed c9 81 bd c8 00 be 94 68 13 86 86 95 fd c9 01 91 4e 93 72 64 bd d4 33 e1 7b 9e 73 46 ad bc 7f 84 9d 34 a2 52 a2 9a 4a c4 be cd 5e 70 93 d0 ea b9 7a 9d 6f 1c 21 61 02 73 b5 4e 3c ae 51 3b bc b5 07 a1 3a fc a3 3b 8a 0d df 50 b2 3a 4a c3 8d 1e 45 ee 8d 04 d3 3a 69 4f 35 72 fa 4d d8 ca 05 8a 00 f3 ac ce d7 4a b8 24 53 eb 36 d2 b8 1e d6 e0 c2 bd e6 d1 d3 14 46 73 83 5c 7e ef 5a 9d 38 04 fd 8b 66 85 63 76 90 5a d6 37 12 9e 78 ee 13 13 19 d3 68 81 1b 10 3b 42 b2 e9 ab 10 55 bc f2 36 cd f7 f5 34 06 4e e0 59 1f 9b ea c5 8d a9 46 28 c1 6f de ec dc 2f eb 1d 04 5e 3b da ad be fc a1 26 76 12 68 c1 19 dd 2a 2f 8a 44 78 0b c8 49 b2 66 c1 75 e2 f8 72 58 2e 82 bf 4a a2 f7 26 df Data Ascii: nRw!\|_Q:EhNrd3{sF4RJ^pzo!asN<Q;:;P:JE:iO5rMJ$S6Fs\~Z8fcvZ7xh;BU64NYF(o/^;&vh*/DxIfurX.J&

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://vintagelights.com/ 1/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Windows Analysis Report
https://vintagelights.com/ 1/

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:45 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1614496233:1742555690:s8MyFAnUjn_yelYrvqRBIMNKptt559iiZEmc39as_nM/923d61ca195c8cca/LBC6jk3eQtGPqturzsXoGd4815gUyOyVeo6n0n8WJ9U-1742559402-1.1.1.1-b2rsB_lwNQskbNFYFUQkmGU41mUmSqn82BPfJaV0mvvBKYW5Gs3cOaO.TsS_W3ZV HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:45 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 21 Mar 2025 12:16:45 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: q7zQfiou9a/zI03DCvl3P6+cGt+5rFQEH9W0FJJ5wAstcfhSTQLfjZX4YQpm0+ogfnNWRF0FqIs3Jq8UhBbhYQ==$e7Tyzu0xVzI5RjWcKvL50Q== Server: cloudflare CF-RAY: 923d61dcbd01c3fd-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 12:16:45 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:45 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/923d61ca195c8cca/1742559404377/ixw_7DcmNesFaLs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kfgf7/0x4AAAAAABAu9AHH_uIEarMe/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:45 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 12:16:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 923d61def9c05e70-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 12:16:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 35 00 00 00 18 08 02 00 00 00 d5 b6 22 cf 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR5"IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:46 UTC	719	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_9810YxmrLqOR1rQ4anyNMg2.js HTTP/1.1 Host: b9326968-f96c2626.aboutfamous.com Connection: keep-alive Origin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:47 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:47 GMT Content-Type: application/x-javascript Content-Length: 50016 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 29 Jan 2025 22:53:23 GMT etag: 0x8DD40B7BBC6F429 x-ms-request-id: f80040be-c01e-0043-7115-9752b5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250321T121647Z-r1d48fbc54cqt84jhC1PRAhc0c0000000ma000000000b0bk x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2025-03-21 12:16:47 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 4c cf 2e b0 5c 4e ac 80 a7 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 7f 88 71 12 57 a6 7e 9c 40 a1 91 98 86 8f 95 2a 54 17 79 95 53 37 4a 9e 2a 87 a7 66 1d ea 17 50 9b 7f eb 07 50 7a 1c ce 9e e0 f9 2e a9 04 61 e2 8f 45 c5 0d 3c aa 6d 0a 2f 41 2c 2a f3 c0 13 51 e5 f1 ce 1f df 55 8e fd 71 14 c6 e1 24 a9 44 62 2c Data Ascii: m[80OL;waL.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDeqW~@TyS7JfPPz.aE<m/A,*QUq$Db,
2025-03-21 12:16:47 UTC	14460	IN	Data Raw: 07 96 22 09 d1 f9 10 33 5a 74 c6 88 d0 b6 7a eb 05 5e ba d1 63 0b 8b 7c 12 38 b3 cd 93 29 90 37 ef a1 e5 65 65 1b 37 3a 01 03 e4 d2 e8 70 8a 23 f7 09 64 9d 3a 36 80 59 f6 08 6f 12 c3 1d a4 0d 9c 80 e8 a0 0a da f5 c4 dd e0 96 73 1d 72 97 07 8e 1f f6 7b d9 e4 6d 94 6e e6 68 a6 1b 71 70 52 49 37 20 d1 5b 9b f5 16 3e 7f 83 f7 97 d0 f3 76 c9 f1 01 c8 16 dc 64 89 be 92 7c 6c 82 5c de 2a c9 6c 4a 79 a5 c5 06 cf e6 b8 bd 07 af c3 ca e9 1c 67 02 4f ec 21 8d 03 1f f0 84 e0 33 f1 20 d4 e9 19 2b 76 88 50 7f d3 3a e4 86 13 0e 64 e6 9d 23 38 b4 e9 4b 6f 92 28 ed 95 36 d7 e1 11 4b 73 18 96 23 71 8b 53 eb 96 06 ca 11 c4 4f 8c 96 0f 11 6f d9 4a f1 f0 a1 70 fd 9c f1 b7 8f bd 8f 7b 1f 77 8d bc 52 c5 f3 16 77 73 08 e5 a7 d2 38 b4 8d 58 7b 03 2e 80 2a 7d 95 75 9f bd f0 3c 9d Data Ascii: "3Ztz^c\|8)7ee7:p#d:6Yosr{mnhqpRI7 [>vd\|l\lJygO!3 +vP:d#8Ko(6Ks#qSOoJp{wRws8X{.}u<
2025-03-21 12:16:48 UTC	16384	IN	Data Raw: 8b f4 b4 5a 45 81 67 d0 29 64 c1 99 b2 0b e8 ce 4c 71 5b b5 77 7c f7 6e e2 32 9c 9f 69 e1 aa 95 a9 52 e1 82 9f 06 ef 40 5b 0e 7c 64 f8 40 42 af b3 44 1c 72 85 7b 1b 84 4a 86 70 ce 41 2d 86 40 18 d4 f6 11 20 0b 2b 46 ef 43 be 52 3a 2c 75 ae 52 d8 fe 51 3b 00 98 50 33 07 24 28 c2 85 e4 aa 59 f0 f7 19 df fb fb 8c b3 8d d4 76 38 a4 85 dd 5c 44 75 e3 4b b7 ee ac 8d 25 49 de 03 27 dd cd cd dc 87 5a f6 ce 40 58 31 51 e6 7a 5a b3 23 7b a8 e2 ea d6 3e 96 39 8f ff d1 29 72 21 20 a9 2d f0 33 2f f9 e2 f2 58 0c d7 2a 9e f0 7a 19 a6 1b 4e d6 90 70 c4 04 75 22 51 b8 72 9c 96 cc 5f 45 b9 b0 b9 dc e4 b3 01 27 4f b5 b9 92 69 e2 7a 61 c1 d9 73 2f a2 64 28 ed 5f ff dd d2 a5 97 24 e1 c1 90 43 41 41 8f 36 93 33 8c ca 90 cb 57 c1 60 54 a5 7b c1 16 7b ff 0c 4e fe 43 e5 38 2c a0 Data Ascii: ZEg)dLq[w\|n2iR@[\|d@BDr{JpA-@ +FCR:,uRQ;P3$(Yv8\DuK%I'Z@X1QzZ#{>9)r! -3/X*zNpu"Qr_E'Oizas/d(_$CAA63W`T{{NC8,
2025-03-21 12:16:48 UTC	3600	IN	Data Raw: 1f 21 dd 6f 6c 19 53 96 fa 4a db 48 2a 7f 2d da b6 c7 29 49 ed aa 21 34 0f b1 07 97 1c 81 03 40 76 8f d8 56 19 59 5e f2 ea 6d a2 06 cd bb fa 61 f3 ca 47 9b 59 b6 f2 37 70 d2 ed 4f 67 e5 89 00 5f 71 5a 3b 46 c0 f2 73 86 2c 39 94 db 54 e1 46 99 c2 94 c9 e0 17 da dc 36 27 5e 34 10 8b 3a 80 70 c7 dd 01 0c 67 85 88 41 57 eb 5e 99 9e 63 50 5d 8f a9 20 f1 c4 2d 1a d4 6a 25 2d ab 6f f7 f6 64 5b 49 b3 a0 0f cb 1b 46 bf 59 c9 d4 56 76 73 53 0a af 4a 80 a1 70 fe 72 d8 82 32 d0 12 25 cd a2 1f d2 af 89 56 3b 6a b8 46 c2 6d 8c 76 77 47 2f 8b 91 b6 c9 09 d4 b9 d0 51 47 03 d8 d7 0a 17 ac 96 35 e1 84 54 d7 de de 3e 2a 53 cb 64 a4 94 91 45 07 97 5e 0e 4a 29 ff 00 e5 99 b2 d3 01 69 17 12 05 4a a8 fb fa 53 f4 cd de 1e 8b 90 b4 86 ec 72 dc f7 52 95 a6 ba de 31 5b 01 c0 1a 7e Data Ascii: !olSJH-)I!4@vVY^maGY7pOg_qZ;Fs,9TF6'^4:pgAW^cP] -j%-od[IFYVvsSJpr2%V;jFmvwG/QG5T>SdE^J)iJSrR1[~

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:48 UTC	736	OUT	GET /f96c26262cbc4e859f648ad7f833f8d3/ HTTP/1.1 Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ==" Sec-WebSocket-Key: Dzw8An92jTXkMtg1P9MiOw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-03-21 12:16:49 UTC	740	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 21 Mar 2025 12:16:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 13d8b8af-b632-47dd-8f20-3b60e4a01600 x-ms-ests-server: 2.1.20262.4 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2025-03-21 12:16:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:48 UTC	970	OUT	GET /?yR1Ou=urSe&sso_reload=true HTTP/1.1 Host: logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/?yR1Ou=urSe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-03-21 12:16:49 UTC	781	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 64033 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 0fe0037e-0707-4a5f-afde-026039082900 x-ms-ests-server: 2.1.20329.5 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://e193995b-f96c2626.aboutfamous.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2025-03-21 12:16:49 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 76 ea c8 96 28 fa 9e 5f c1 e2 e4 f6 82 6b c0 f4 06 7b b1 5d f4 c6 b4 06 6c dc 94 8f 87 90 02 90 11 12 a8 a1 f1 5a e6 ed 7c c9 7d b8 a3 1e ee db fd 83 fd 63 77 ce 19 92 10 d8 ce cc ca bd 76 9d 66 64 56 ed 65 45 28 9a 19 b3 9f 33 42 c1 b7 2f a5 76 b1 7f df 29 fb 26 e6 4c f9 fb 2f df f0 8f 4f 54 04 c3 c8 f9 fd 3e 49 d6 73 7e c5 d4 fd 3e 45 50 c7 39 3f 53 fd 7f ff c5 f7 6d c2 04 09 fe fa be 99 b2 a9 30 7c f2 f5 e4 b1 ea 93 55 9f a9 f9 36 9a a5 fb 04 51 d4 2c d5 c4 46 27 6e ab 6f 33 66 0a 3e 51 53 4d a6 9a 39 bf c9 d6 e6 09 4e 78 ee 13 27 82 6e 30 33 67 99 a3 70 c6 0f c0 98 f3 30 5b 58 f2 32 e7 2f f2 e6 e1 fe 66 ce fc 27 1f 0c 53 2b e7 98 34 66 fb bd ee c2 37 f9 70 51 9b cd 05 53 1e 2a 1f 77 5c c9 92 39 c9 49 6c 29 8b 2c Data Ascii: v(_k{]lZ\|}cwvfdVeE(3B/v)&L/OT>Is~>EP9?Sm0\|U6Q,F'no3f>QSM9Nx'n03gp0[X2/f'S+4f7pQS*w\9Il),
2025-03-21 12:16:49 UTC	16379	IN	Data Raw: 26 70 71 66 ab ce 54 ba 67 8e 8d 3a a2 16 b5 06 00 cd 79 98 66 b1 54 19 ef ca 07 42 22 76 26 5c 9a 2a 03 73 53 44 75 53 b1 fa d8 ed 46 ba 9a a2 c5 fb f5 9b f0 77 44 76 2c 15 4d a5 63 f3 ab 62 eb 16 a7 1a 8b 77 a4 5f d5 6a b5 84 af fb ea 64 88 04 2c a8 77 95 96 97 5e 79 c2 66 d1 24 1c d9 67 ae 91 c5 ae c4 56 05 87 05 af 2a f9 6a c9 7d 1d 35 b3 61 42 54 8b c3 e0 d7 11 f0 a7 25 dd 99 2a 15 91 55 c3 dc a6 85 77 ec 43 1b 58 7c 68 40 63 7b 85 77 6c 42 95 49 a1 30 2e ee 75 a2 35 9b 48 03 a1 d0 47 91 6b 5a fc 76 18 0f 36 f8 a7 a3 a4 08 6c 29 e3 f2 e1 4a b5 ee 11 ba a6 60 a2 a1 ee 77 0b da 80 30 89 3f 4a 85 54 c0 c9 90 80 32 68 51 bd 67 0d d1 19 1b d2 12 00 d3 e0 cf 9d a0 26 03 67 91 c4 9e cf 6d 90 52 6c ca a8 44 46 6c a2 de 13 cf 2c 6b 08 54 c5 9c 76 15 62 ed 99 Data Ascii: &pqfTg:yfTB"v&\sSDuSFwDv,Mcbw_jd,w^yf$gVj}5aBT%*UwCX\|h@c{wlBI0.u5HGkZv6l)J`w0?JT2hQg&gmRlDFl,kTvb
2025-03-21 12:16:49 UTC	16384	IN	Data Raw: 32 68 be 4b 55 08 39 54 a8 7a 22 b9 dd 6f c9 62 4c 3c 58 74 75 85 2a 19 46 05 77 3e 3c 2e e4 d3 42 89 4c 08 83 2f 8c b6 93 41 5b fb a8 58 db 2a 66 82 cf 6c be 79 eb 07 53 b4 f6 8e 8c d0 be 90 d5 63 f0 25 93 7a 4a 11 38 0f 80 e7 a0 fd 44 e2 34 05 8b df 2f fb 7e 0a 96 c4 ea db 7c 3a 98 46 5b 8c 0e b8 1d e4 30 3d e9 3d d3 b8 3e 62 00 45 7e be 78 91 fa cf 26 0b b3 d7 c6 f9 56 91 80 bf 43 d5 7d 9f bf 29 90 05 70 7f 3f e5 a5 a8 15 29 e6 ce 83 5b d5 2b 0a 6a 1b 54 40 6a f2 16 48 f3 17 8a 87 36 5f 7c f1 d8 be 38 1d cd 98 fa 6f 8a b2 70 fe b2 da aa 9c b1 40 19 ab 7e bc 93 a1 cf ab 39 b8 ab 07 95 5a b0 51 0d f1 f0 23 ac a7 83 50 d6 c2 64 08 3b aa 68 82 6a 25 7d 8f cb 5d 5e b2 47 19 27 73 fd f9 51 d2 52 89 fe de f7 e5 53 bd 14 c8 2c a8 16 cb e4 c3 9f 49 75 22 08 a9 Data Ascii: 2hKU9Tz"obL<XtuFw><.BL/A[XflySc%zJ8D4/~\|:F[0==>bE~x&VC})p?)[+jT@jH6_\|8op@~9ZQ#Pd;hj%}]^G'sQRS,Iu"
2025-03-21 12:16:49 UTC	15667	IN	Data Raw: 78 fc 23 0e 3a 23 78 35 d7 df fd eb 4f 87 e4 bf 2c 30 e9 b4 8e be db d3 bc 16 be e6 df d2 b5 8e bc 75 a2 b0 d3 fd b1 c7 3e 1b ec 58 7d ea eb f1 60 b3 86 6d 13 a1 33 a9 fc 82 9a 8b 01 6c 51 22 5f 4c da c6 fa cc 8e 61 07 f6 c7 d7 17 76 a8 3a 11 5b a1 ed 92 df 50 c9 0e 85 ee 18 4f 9f 79 51 a3 c7 f8 18 4e 62 9f 4e d2 ce dd 66 21 43 e2 9f dd d3 67 34 d3 30 4c 9d 30 37 c6 26 ad 65 8f 83 0e f0 cf 31 30 fb 52 1f d7 47 df 82 14 61 63 21 39 27 d0 25 e0 d4 c8 ec ec fa de 8e fa c2 5d 50 32 18 f7 d1 c1 20 79 a9 31 f1 8d 43 45 93 3e 30 b6 8c fe 9f de be b4 ab 6d 65 5b f0 fb fd 15 e0 be 0b 4b 17 c5 f1 80 0d d8 d1 f1 c5 24 24 64 20 09 90 01 fc e8 2c 0f 32 d8 08 89 d8 92 81 13 f8 ef bd 87 1a 25 41 72 5f bf ee b5 ce 09 72 a9 54 e3 ae 5d 7b de c0 ce 2e 84 70 66 f9 59 73 be Data Ascii: x#:#x5O,0u>X}`m3lQ"_Lav:[POyQNbNf!Cg40L07&e10RGac!9'%]P2 y1CE>0me[K$$d ,2%Ar_rT]{.pfYs

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:50 UTC	744	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 Host: b268d905-f96c2626.aboutfamous.com Connection: keep-alive Origin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:51 UTC	653	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:50 GMT Content-Type: text/css Content-Length: 20410 Connection: close last-modified: Wed, 04 Dec 2024 23:52:00 GMT accept-ranges: bytes etag: "0x8DD14BEA5012AB1" x-ms-request-id: 015ace25-c01e-00e5-589c-66d025000000 x-ms-version: 2018-03-28 access-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version access-control-allow-origin: * cache-control: public, max-age=29445448 vary: Accept-Encoding akamai-grn: 0.9c771002.1742559410.336c304 content-encoding: gzip
2025-03-21 12:16:51 UTC	15726	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2025-03-21 12:16:51 UTC	4684	IN	Data Raw: 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 bb 7d ce d8 eb 5e a9 2b 2e 5f 31 9e 3c 14 8e 66 b6 29 6a 84 19 ff 16 73 31 e4 bd 7d b5 80 7d 3b 31 dc 4f b3 45 e0 11 a6 59 9b e2 6f 30 17 da 55 f8 2d 47 97 9c 1b 9d 47 1f 3b 4e 93 ed 9d d7 79 6a 32 d1 1f 5f eb 9b f4 7f 13 a6 a3 1e a1 60 c3 fb 18 66 4b 1a ec 5b df 7f c7 cf a6 e1 66 b8 e1 3c 49 fa 09 1e a6 bb 4e 99 7d 83 9c 71 6f 0c a3 d6 41 73 e1 3a 8a 7b d0 7d c7 b8 09 57 f6 9c 2a 6f d7 c8 38 69 61 9f 30 8a 5b Data Ascii: [66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f}^+._1<f)js1}};1OEYo0U-GG;Nyj2_`fK[f<IN}qoAs:{}W*o8ia0[

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:50 UTC	721	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_GjP1RdcVSKf6ASC7mgkR1g2.js HTTP/1.1 Host: b268d905-f96c2626.aboutfamous.com Connection: keep-alive Origin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:51 UTC	670	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:51 GMT Content-Type: application/x-javascript Content-Length: 122949 Connection: close last-modified: Tue, 25 Feb 2025 19:14:31 GMT accept-ranges: bytes etag: "0x8DD55D0A1E1E362" x-ms-request-id: 96f56d60-c01e-00d1-6a60-90a8a6000000 x-ms-version: 2018-03-28 access-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version access-control-allow-origin: * cache-control: public, max-age=30438836 vary: Accept-Encoding akamai-grn: 0.4c4f655f.1742559410.d6fafc2 content-encoding: gzip
2025-03-21 12:16:51 UTC	13790	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb 6f 2b ad ce ba 9c a4 2a db 49 9c 89 93 ea de 4d 65 72 64 89 76 d4 b1 25 af 24 e7 31 8e f7 b3 ff 00 90 94 28 59 4e 55 f5 ee b9 f7 dc 73 e7 51 b1 48 f0 05 82 20 00 82 e0 87 9f 77 fe af d2 cf a5 fd ef ff 4f 69 74 dd bf ba 2e 0d 4f 4a d7 9f 4f af 8e 4a 97 f0 f5 1f a5 8b e1 f5 e9 e0 f8 fb eb c1 46 f1 ff d7 0f 5e 54 9a 78 33 56 82 bf 63 3b 62 6e 29 f0 4b 41 58 f2 7c 27 08 17 41 68 c7 2c 2a cd e1 df d0 b3 67 a5 49 18 cc 4b f1 03 2b 2d c2 e0 4f e6 c4 51 69 e6 45 31 14 1a b3 59 f0 5c 2a 43 75 a1 5b ba b4 c3 f8 b5 74 7a 59 a9 42 fd 0c 6a f3 a6 9e 0f a5 9d 60 f1 0a bf 1f e2 92 1f c4 9e c3 4a b6 ef 52 6d 33 f8 f0 23 56 5a fa 2e 0b 4b cf 0f 9e f3 50 3a f7 9c 30 88 82 49 5c 0a 99 Data Ascii: {w88fn(.o+IMerdv%$1(YNUsQH wOit.OJOJF^Tx3Vc;bn)KAX\|'Ah,gIK+-OQiE1Y\*Cu[tzYBj`JRm3#VZ.KP:0I\
2025-03-21 12:16:51 UTC	16384	IN	Data Raw: eb 55 73 bd 6a ad 35 9d 6b d4 c7 d5 94 5c f5 99 be 54 6c 1c ff e3 fa bd a2 fa d7 fa 73 e8 c5 9b fc 5b b7 f5 40 e8 f8 2b fe 5e 5c 70 08 a8 45 a4 cc 2c e5 70 0a 1b 57 a6 e4 00 04 ce 19 7d c3 d2 ae e9 e7 d0 a1 ea dc 7e 81 9f 33 31 53 fb f5 0a e7 58 4b cb dd 9b 71 16 48 25 8f ab d4 13 b4 e1 d3 ed 5f 5b ed ce 21 cd c3 25 5f 9f d8 f9 32 77 11 d0 97 a2 93 62 1c d9 d2 f9 51 c9 31 cd c8 72 cb 79 6b e5 58 28 34 00 13 54 0e e8 d1 f1 f4 bd 45 cb 03 f6 45 b2 b3 90 1b 53 42 16 a3 d0 17 96 0d 44 23 31 0e c4 87 38 9a 20 ba e4 dc 68 7b 01 a6 4d ad 90 93 e3 dc 8a 33 64 76 b0 b4 a2 dd 5d fe 14 08 c8 ea 51 ce 53 43 3b 90 84 07 35 45 e6 fb 14 29 ec 70 e3 2c 9d 08 ca 30 d6 40 1c 9c 26 a0 8b fa 54 5f e8 73 a0 01 14 36 00 25 d2 56 f4 64 35 59 63 7f 2c e7 4b 3a 94 ec 1b fa 83 45 Data Ascii: Usj5k\Tls[@+^\pE,pW}~31SXKqH%_[!%_2wbQ1rykX(4TEESBD#18 h{M3dv]QSC;5E)p,0@&T_s6%Vd5Yc,K:E
2025-03-21 12:16:51 UTC	16384	IN	Data Raw: 55 54 34 b7 37 e5 00 8b 96 0a b7 a7 89 b9 f5 03 69 a8 c4 4e 35 1f 90 64 5e 5c e4 99 50 c4 09 ec 51 dc a6 55 4c 85 37 88 55 3f 7e b0 94 65 56 a9 ec f1 f1 54 a8 e9 11 f9 6c 88 f9 33 ca 22 8a e0 17 91 76 8a 8c 29 28 d2 9c 93 c3 1f ba f9 fc 23 c3 bf 46 d0 44 98 84 a6 1e da b5 45 f6 f4 c4 49 4d fa 2a 0a 37 d3 64 81 68 98 66 ce 10 ae 36 62 f0 80 43 da 21 30 cd 43 75 9c 06 bf c3 b4 fd 16 f7 1e 43 99 c1 d7 32 bb 30 aa 1f f2 21 e9 43 76 c6 63 e1 52 08 39 50 ad 32 c9 f2 9c 4f 99 bd 70 ac 79 1c aa 8f d2 68 92 25 51 d3 b7 73 5f bb 14 21 7d f4 f0 c2 f7 cf 66 99 f9 7f 6d 7f 66 7e 73 61 40 66 90 fe 09 fe ab 0c ef 6f e6 f5 14 68 df 6b 59 85 6d de 88 6d f3 66 14 6d 12 32 7e 88 8b 10 3d cd 82 29 ea 52 f7 b4 94 9e f9 e8 a3 de 9a 7c 85 cc db 04 ae 98 5a 3c 44 fb ce ed bb 57 Data Ascii: UT47iN5d^\PQUL7U?~eVTl3"v)(#FDEIM*7dhf6bC!0CuC20!CvcR9P2Opyh%Qs_!}fmf~sa@fohkYmmfm2~=)R\|Z<DW
2025-03-21 12:16:51 UTC	16384	IN	Data Raw: 7c b8 19 de d7 41 3d eb 01 ab 2e 38 c3 4e fd fd 87 70 cc ef 3e 34 d4 73 02 07 e4 ce 68 c4 19 8e 1a 32 30 06 0d 3a bf 72 9e 13 73 2c 94 a4 52 34 70 af f2 9a 56 03 df 4d c7 13 16 06 89 21 33 33 b2 4c 9a 5f f1 6f e3 f5 90 76 fa 01 6f fb e8 73 52 dc 60 3c b2 93 4c 0e f1 cf e6 b8 c0 b5 04 f3 73 cb e7 83 98 04 33 07 1f 11 6a 68 de 99 ad 19 c7 f1 97 63 65 01 cf 59 fa 66 01 b8 d7 b0 0d fc f2 d8 6c 2e dd 0e e5 db 23 f3 6d 93 0d 28 67 dc 35 f2 a9 03 b3 2c e9 c6 6c c4 84 8c 22 78 5e cc 3a 8a ec fa 7a 14 ef 67 b7 38 37 7b 79 be 87 44 30 e7 7c 63 ce b2 c1 7c 52 86 b7 66 86 69 fa 75 12 8e ab c3 31 6c 18 4e 63 4f 9c 98 6b 29 22 93 40 73 2d 1d 99 a3 8e 1b 16 e6 7e 8f 4d cd c5 88 a8 b6 50 2b 54 dd f2 ca d5 54 78 c8 b3 03 a9 3e e7 4d 83 43 30 01 57 a2 ec 0f 23 88 49 61 52 Data Ascii: \|A=.8Np>4sh20:rs,R4pVM!33L_ovosR`<Ls3jhceYfl.#m(g5,l"x^:zg87{yD0\|c\|Rfiu1lNcOk)"@s-~MP+TTx>MC0W#IaR
2025-03-21 12:16:51 UTC	16384	IN	Data Raw: 10 51 33 de 1b ef 19 f1 82 2d 98 8e 02 cd b3 c7 58 8f a6 df a0 1f 33 1f e8 a3 60 cb c5 d1 0b de 58 7f b7 5a a5 bc 16 90 75 02 fa 9b 64 1a 1b 4f 1a db 75 b7 d3 6b a2 96 6c 91 53 37 95 03 93 5a ca 09 44 be 9f 79 8b a0 51 51 64 8b a6 59 b5 10 14 7d 84 04 8c 34 3a 4d 52 38 a5 ae 04 78 92 3d 7d 9a 29 02 aa c5 45 88 06 03 37 5b aa 59 d4 ea 93 98 5d 68 fd ec e1 21 e2 13 47 be 0c 3d 83 b4 15 66 05 5d 10 76 da 5a fd 5f 96 1d e1 db d4 dd 00 46 04 9a 75 0a 96 33 8f 3d 64 33 77 fa 67 04 cb ee 8a 3a aa 51 e0 ed 0c 85 70 6f 7b f4 c0 13 f2 71 f1 54 a6 52 d3 a9 04 41 eb 5f eb b9 e2 27 21 11 d2 94 93 c1 2a 89 11 fe c9 d3 e8 0e ea 87 55 76 e9 b3 ef 62 c1 c0 16 99 88 be a6 fe 88 2b d2 92 cb 65 32 1e c7 e9 23 0e 2c aa a1 7f ca 83 c5 66 8b ba 6d 7b 96 03 b6 65 a1 67 89 8b 0d Data Ascii: Q3-X3`XZudOuklS7ZDyQQdY}4:MR8x=})E7[Y]h!G=f]vZ_Fu3=d3wg:Qpo{qTRA_'!*Uvb+e2#,fm{eg
2025-03-21 12:16:52 UTC	16384	IN	Data Raw: cc 4c 25 05 6c b7 fb 7c 36 df d4 f2 e8 bd 50 07 47 0f a8 f9 15 0b bf a7 f0 32 ab 4a 2b dd d2 90 ea 8e ac 0d 91 a0 7d 65 af 46 16 cd ec ca 0e 37 da ff db e4 7d 7d e9 db 91 bc aa 83 47 85 aa 98 d6 b2 6d b2 b9 69 93 6b e7 93 03 dd 6a 72 5f 5e 76 b7 a6 13 5a 7f bb 7d fb 6f cb 7b e8 ae fa 0f a7 6b ef 48 eb 85 49 68 b8 25 1b e2 c8 3a a7 e3 0d ff 9a dc ef dc ac 7d 3e 83 02 c0 84 68 0e b9 3f 42 49 b2 75 bf a7 b7 2a c7 54 f3 e9 c4 1a 9c 43 a0 c3 16 1a 58 ff 9e 2d b3 24 f6 fb 42 8e 87 db d3 2c 2e ac ff b5 9e 8e 1b f3 6a 64 fd cf e4 7b 0a 80 7b 7d fa e8 fc b4 15 4f 6a fd af 54 b7 81 60 f1 c4 48 07 20 e9 9b 4f c1 6f 7e 52 1a d3 05 5a 7b 3e ae 4f 29 2d ef 1c ea 5c b8 f3 a1 29 40 37 98 d2 ae 19 de 3c aa 9e a8 c8 24 a5 df ea f1 50 6e e3 33 79 f7 0c 6b 43 7b c8 c3 81 35 Data Ascii: L%l\|6PG2J+}eF7}}Gmikjr_^vZ}o{kHIh%:}>h?BIu*TCX-$B,.jd{{}OjT`H Oo~RZ{>O)-\)@7<$Pn3ykC{5
2025-03-21 12:16:52 UTC	16384	IN	Data Raw: 6d 43 d8 14 16 ab b7 41 aa eb a0 9d 35 70 06 44 8b a7 13 fb f8 f4 2f 97 86 4b 9e d2 ae ee f0 14 1f ea 28 ad f6 c1 9c f7 7a 97 b3 04 6e d0 a0 db 11 e5 dc a0 f1 01 1f 2b 44 5e 75 76 77 05 59 cf c6 2b 25 bc 1b cf ca 37 77 cd 0f 28 c7 7d 99 f0 d6 82 23 96 9a e7 27 6d e7 6e 91 11 ab 91 17 eb 9a e7 7a 8a 54 c5 7f 3a 66 ad ac 35 5c 7b 74 75 dc 5d 5f be cc 70 3f 78 5d 54 45 56 00 9d de 99 b8 dc f6 b2 0f ce 0a 01 c3 9e 22 21 97 95 c6 cb 3a 27 0b 4c 0a 04 82 ce 54 b7 d2 8b 35 20 3f 24 5a 40 a3 8b 55 37 79 2f 21 ad 6f f2 ea 98 8b 4a 1d 88 1d ca f1 42 fb c5 c7 14 dd f8 06 f5 59 25 29 42 83 e3 df 03 31 d6 51 c1 b2 ad e9 7d f7 ec 87 ef d5 eb da b7 7e 57 6f 46 82 08 80 98 14 29 4c 7e c2 e6 8d 09 1a 06 b2 53 de 67 e5 ca 97 e2 ee a0 fe 31 38 1a 00 be fa f7 68 bd 23 1d 5f Data Ascii: mCA5pD/K(zn+D^uvwY+%7w(}#'mnzT:f5\{tu]_p?x]TEV"!:'LT5 ?$Z@U7y/!oJBY%)B1Q}~WoF)L~Sg18h#_
2025-03-21 12:16:52 UTC	10855	IN	Data Raw: c8 9a 70 84 e8 32 6a 6e 81 8f af c5 51 45 e8 06 95 a3 8a 8b 2f 2b 38 ea 7a d0 fb 65 e8 83 75 a0 d7 8b 68 55 77 be 6b 8d bc 7c b7 55 ee d0 15 64 f3 df 55 0e cf 5f 0c d6 11 1a 12 7f 33 27 16 a1 26 85 61 c0 d6 eb 10 8e 1c c3 ec 73 68 d0 27 ff 23 71 64 ec 8b 75 02 a6 69 78 92 90 eb 76 f0 8e d9 8b 30 04 6a 66 79 90 51 c2 c3 eb 5c 31 a6 3d f6 6f 98 10 b4 bc 61 17 bc e0 01 be 3d 71 16 af 7c 07 f8 21 6d 97 22 3a 5d 36 3d 06 8a 41 b8 94 43 96 4f f1 f2 35 1f 7a 4c 81 d4 41 29 be bd 6c e6 b8 5f 61 55 ed f2 7a 2c 1f 7d 9c 25 a4 cf 56 75 d1 8a 84 09 bf f8 58 56 d8 6e d9 b0 2f 4e df 95 17 1a 11 e3 48 a2 0b 1a dd c4 85 0e e6 d9 1d 9f b0 04 cb 5d 94 5d c4 f8 2d 67 f6 16 f1 51 4c 00 ce 85 d5 f4 75 85 e8 98 c7 48 59 b8 91 28 12 9b 83 40 92 46 fe 94 05 d1 98 5a 53 0a d3 3d Data Ascii: p2jnQE/+8zeuhUwk\|UdU_3'&ash'#qduixv0jfyQ\1=oa=q\|!m":]6=ACO5zLA)l_aUz,}%VuXVn/NH]]-gQLuHY(@FZS=

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:50 UTC	740	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_r1sg5sxlkljjoa22hvk04g2.js HTTP/1.1 Host: b268d905-f96c2626.aboutfamous.com Connection: keep-alive Origin: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 12:16:51 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:50 GMT Content-Type: application/x-javascript Content-Length: 16623 Connection: close last-modified: Mon, 03 Mar 2025 20:34:05 GMT accept-ranges: bytes etag: "0x8DD5A92BDF0C136" x-ms-request-id: 1c5db267-f01e-00d1-68c9-8ce3ed000000 x-ms-version: 2018-03-28 access-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version access-control-allow-origin: * cache-control: public, max-age=30044033 vary: Accept-Encoding akamai-grn: 0.8f771002.1742559410.9edae7a content-encoding: gzip
2025-03-21 12:16:51 UTC	15715	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c1 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c0 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd 5d 95 55 95 95 95 95 99 95 99 f5 87 d9 da 9f c4 5e e0 ef 89 fd 47 f5 bb 10 ec f9 fb 8f de 6c cf fb d1 ff 79 3f 14 f1 3a f4 0b f8 bb 24 3e ad 82 30 8e 5e 7d 74 c3 42 d8 c0 57 8d 47 f9 ae fe f8 d9 f1 a6 75 df 59 04 ee 54 4c eb 7f a8 7c 7e 25 ab 0a ac 3a 71 17 8b bd 50 41 70 42 27 f9 1d ec c3 03 57 6b fc a1 9c 7c f8 8c cd 78 8d 47 0d 28 28 2d 1b c2 09 4a 93 86 07 ff ae 1a c5 a2 13 ec 95 f7 3f ef fd 98 0c c3 09 1c 0f 3a bf 57 dd a7 5e fa 0d 6f af 02 f0 e1 cf e1 be 13 c3 9f a3 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo]U^Gly?:$>0^}tBWGuYTL\|~%:qPApB'Wk\|xG((-J?:W^o
2025-03-21 12:16:51 UTC	908	IN	Data Raw: 47 9b f7 66 fd 20 8a 98 a5 35 1e ad a5 43 c2 c9 64 e5 16 1d 0e c2 a0 75 c0 2f e9 b9 e8 5c 51 e2 57 14 c7 a8 e0 98 13 c1 8e 6f e1 05 11 e0 f5 6a 1e ba 53 71 e5 cd 79 eb b8 fe 1e f1 a8 a4 98 b2 73 15 fc d9 c5 c0 23 da 57 cd 60 00 99 09 ed bd 1b a2 70 df 78 94 2c 08 ab 2c 3f e1 b6 ba fc c4 8e a5 48 42 80 7b 54 ec f0 d0 19 3d 42 6b ea a9 e9 eb 44 ff c0 7a a0 ca 1b 81 3b db 3a c6 54 c2 1c 43 cb c7 ca 75 0c 74 82 05 60 bd 3b a6 78 38 f7 01 ef e5 94 79 03 78 c9 52 5e 2e 8c 20 2d e3 06 84 b8 5a 50 d4 13 0f 83 7b ce 30 64 94 07 ce 1f 8e 3b ab f2 96 73 83 39 2a 3a 10 07 37 15 1d 80 44 4f 35 96 5b e8 b7 0c bf a5 df 87 39 e9 03 70 59 70 97 25 fa 72 be 63 17 e4 f1 56 ce c7 8a e4 57 86 6f f0 6a 8d e1 3d 80 8e 07 4b e6 18 08 bc 75 80 24 0e fc 81 59 dd 07 e2 a3 c0 60 02 Data Ascii: Gf 5Cdu/\QWojSqys#W`px,,?HB{T=BkDz;:TCut`;x8yxR^. -ZP{0d;s9*:7DO5[9pYp%rcVWoj=Ku$Y`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:50 UTC	846	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.aboutfamous.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
2025-03-21 12:16:51 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1443 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C525_SN1 x-ms-request-id: 649aa0dc-dbc7-4aaf-a1c2-8b5f695a015c ppserver: PPV: 30 H: SN1PEPF0002F16F V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2025-03-21 12:16:51 UTC	1443	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 6d 6f db 36 10 fe de 5f 61 0b 45 20 ce 9c 22 bf 27 72 98 a0 e8 3a d4 45 d3 16 55 87 7d 70 3d 80 91 28 8b ab 4c 0a 24 ed 36 70 f4 df 77 7a b3 64 75 cb d2 0f fd 90 58 3e de 3d 7c 9e d3 dd 91 be d2 81 e2 a9 e9 99 fb 94 11 cb b0 6f e6 fc 6f ba a7 a5 d5 ba 7e d6 eb 47 3b 11 18 2e 85 6d 30 43 87 48 2a 7b 4f 55 4f f7 b8 e8 31 64 56 7a 4d 18 fc cb 6c 13 73 8d 1b 67 70 ad 9e 7b cc 16 e8 c0 23 5b af c4 1a 29 66 76 4a f4 f2 67 87 7d 4b a5 32 7a 91 03 72 92 9b c8 a1 b2 79 87 0c f3 d0 13 38 91 34 64 a1 d7 1f 66 8b 2a d4 e4 a1 01 4d 12 9b d7 08 98 e3 e6 99 21 f8 52 86 91 be db 2c 64 05 6f 72 38 02 31 67 4b 40 94 13 10 08 72 52 62 59 98 d9 2e ca ec 55 47 73 2d 44 17 b2 aa 0c 30 12 ad fc 35 d6 c4 c5 82 30 27 61 62 63 e2 85 be 12 8b c1 Data Ascii: Wmo6_aE "'r:EU}p=(L$6pwzduX>=\|oo~G;.m0CH{OUO1dVzMlsgp{#[)fvJg}K2zry84dfM!R,dor81gK@rRbY.UGs-D050'abc

Timestamp	Bytes transferred	Direction	Data
2025-03-21 12:16:52 UTC	750	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: b268d905-f96c2626.aboutfamous.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://logtranscript4567h654r7yhnb7t6456rhrevoip.aboutfamous.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: ifqNhf="Zjk2YzI2MjYtMmNiYy00ZTg1LTlmNjQtOGFkN2Y4MzNmOGQzOmI4NzFjNzdhLTkxNzQtNDczZC1hMzhjLTRmMjAwMmJmMzlkMQ=="
2025-03-21 12:16:53 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 21 Mar 2025 12:16:53 GMT Content-Type: application/x-javascript Content-Length: 61143 Connection: close last-modified: Thu, 05 Dec 2024 00:06:38 GMT accept-ranges: bytes etag: "0x8DD14C0B0989681" x-ms-request-id: bdebf93a-901e-0060-3e4e-672851000000 x-ms-version: 2018-03-28 access-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version access-control-allow-origin: * cache-control: public, max-age=28485796 vary: Accept-Encoding akamai-grn: 0.9c771002.1742559412.336c542 content-encoding: gzip
2025-03-21 12:16:53 UTC	15710	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 79 5b db c8 b2 38 fc ff fd 14 46 cf 5c 8e 74 e8 38 36 59 26 b1 a3 f1 25 e0 24 9e 61 1b 96 59 0e e1 f0 08 bb 01 25 b6 e4 91 64 08 07 fc dd 7f 55 d5 bb 2c 19 98 99 fb de f7 99 09 96 5a d5 7b 75 75 75 75 2d fe 4d 9c 8c d2 9b 66 c1 c7 7c c2 8b ec f6 ec 86 9f 4f a3 e1 d7 1f f3 34 99 86 4b bf de df 9f 9c 06 cd e9 2c bf f2 4f 4e d6 4f d9 09 63 ec 62 96 0c 8b 38 4d 7c ce 0a 96 04 77 de 2c e7 8d bc c8 e2 61 e1 75 93 66 e6 17 01 4b 9a 23 bf 60 de 2f d1 78 c6 7f 82 0a 3c e6 eb 6c c1 5d c6 8b 59 96 34 b2 26 9f 07 1a b6 7f cd 93 62 3b 2a 78 32 bc ad 01 8f ca e0 fb 3c cb e3 1c b3 f0 9a 2c e7 56 96 a3 2c 1a f2 6d 7e cd c7 35 c0 23 0b 78 63 3a 1d 24 79 7c 79 55 e4 9b 69 56 5d 7c ec b4 e8 7d 94 f3 5a 50 bb e8 b3 fe 37 68 f2 88 8f 06 49 Data Ascii: y[8F\t86Y&%$aY%dU,Z{uuuu-Mf\|O4K,ONOcb8M\|w,aufK#`/x<l]Y4&b;*x2<,V,m~5#xc:$y\|yUiV]\|}ZP7hI
2025-03-21 12:16:53 UTC	12561	IN	Data Raw: 69 2c 8b c3 ef 50 0d 05 b7 40 c9 19 88 d0 3f fd 6f c5 e6 c5 25 de 9b e9 8b 0c 3b ec 52 95 bb 6d f2 b4 9d 08 69 0d 16 04 ec 27 f9 64 d6 3c 3f 02 90 3a 72 61 3b 1c 8a e6 fe 15 90 92 c2 bf a1 20 7f 80 d2 bf 72 85 33 28 7a 82 84 0f dc df 63 37 b5 a2 67 d9 37 f2 43 4a f0 bf b9 db b8 5f 66 13 ca 56 01 0e f7 70 b7 2f 6f 82 60 d9 ee 8b 4b a0 4e 32 ef 3a 27 64 5f dc 6e 78 0e ef 04 24 05 1a 88 2b 36 23 03 ac 8c 8c b1 32 46 a2 66 be 49 06 5a ed 39 de 37 ca 0a 71 2a 5d 32 2c fc 16 d5 4b 8b d1 7b c1 b2 ef cc 92 8e e1 92 c8 81 17 54 7c f4 89 f7 fc dc 64 3c 8c 2f 61 cf 3f 78 ee 31 ef f9 d9 99 f5 e1 b9 77 da ad 5f 9e 0e 9a 42 0d 33 14 de 69 b7 ed 61 78 63 36 0f e3 24 45 79 72 17 e6 9c 4a 45 4b b8 40 2c 6c 17 88 14 63 4a 58 28 a1 79 87 78 32 ae ed 4e b2 d3 e0 87 b0 a5 95 Data Ascii: i,P@?o%;Rmi'd<?:ra; r3(zc7g7CJ_fVp/o`KN2:'d_nx$+6#2FfIZ97q*]2,K{T\|d</a?x1w_B3iaxc6$EyrJEK@,lcJX(yx2N
2025-03-21 12:16:53 UTC	16384	IN	Data Raw: 76 74 3e 9f fb df a7 9b 50 cf 13 cc 0c 7e cd 9b da 12 f1 52 ce 63 b8 94 03 9a 1a 25 de d5 96 18 2c e5 1b 4d 97 72 eb f2 a5 5c d4 d1 52 3e da 78 29 07 74 68 94 38 5f ca 33 fe 69 29 cf b8 9e e3 37 59 ca 8b bb 32 4a 1c 2e e5 3b ff ba 94 ef fc 76 29 df b9 9e bf 69 f2 9d eb 39 b1 26 df 79 58 cf 44 37 19 cf c7 4b 19 cf 67 4b 19 cf fb 4b 19 cf af 97 32 9e eb 99 b5 26 e3 79 50 3f 18 93 f3 fc c7 52 ce 73 3d b7 f6 9f 71 9e 3f 2c e5 3c d7 73 e2 4d ce 73 3d 9f dd e4 3c d7 cb 0c 4c ce f3 e9 52 ce 73 58 3f 65 26 eb f9 64 29 eb f9 fd 52 d6 f3 c7 27 59 cf aa c4 41 6d 89 d7 4b c5 3d ef 8c 12 3f d7 96 f8 65 a9 88 e4 6f a3 c4 5e 6d 89 bf 8c 12 9f 6a 4b fc b4 94 9d ff d9 28 f1 7b 6d 89 df 96 b2 f3 7f 5e 2a aa f9 7d a9 70 eb d7 a5 82 98 3f 8c 12 bf d4 96 f8 c1 04 21 b5 25 a2 Data Ascii: vt>P~Rc%,Mr\R>x)th8_3i)7Y2J.;v)i9&yXD7KgKK2&yP?Rs=q?,<sMs=<LRsX?e&d)R'YAmK=?eo^mjK({m^*}p?!%
2025-03-21 12:16:53 UTC	16384	IN	Data Raw: 7d fd 99 18 53 a4 e4 8b 88 bf 5c 40 a5 b6 34 ef d1 02 66 98 4e 34 d8 b5 03 8c a6 f9 a1 42 99 5f d9 8e 32 05 17 0e 26 8c 82 dd 42 95 25 2f 23 d3 98 b1 40 78 14 33 30 54 c1 0c c0 a5 6e f4 68 8a ba 17 3d 38 8f a1 33 49 04 77 9b e3 2f 5d b9 99 f4 8a 19 23 e2 e7 e2 5e a3 7d c4 d9 4f b9 d2 88 61 4f 26 cb b0 9d 77 4d 19 e5 25 6d 6e 98 f7 d6 f9 36 ca 64 01 c2 58 58 1c 58 13 9b 66 75 35 62 bf 84 ac 61 40 9b 86 9a 77 63 cc 88 e7 b1 5f 79 51 01 db c1 9b 1a 2f a1 54 51 61 4d 14 1d cd 5d 24 0e 02 f5 be 91 28 06 50 ce 51 ba 40 bd 0e 82 f0 e5 a0 1b b6 07 d8 4d c2 c2 7e 00 35 84 81 27 67 4f 0b 59 e8 46 8b a4 7d 58 69 5d 5d 89 73 5a 8d 72 2a 91 29 e5 94 a5 7e 09 d5 96 43 cc 28 fc c9 38 70 48 80 43 b0 31 50 98 c0 06 c1 27 b8 73 66 8e e3 77 98 c6 8c c7 e9 bd 94 c0 42 18 0b Data Ascii: }S\@4fN4B_2&B%/#@x30Tnh=83Iw/]#^}OaO&wM%mn6dXXXfu5ba@wc_yQ/TQaM]$(PQ@M~5'gOYF}Xi]]sZr*)~C(8pHC1P'sfwB
2025-03-21 12:16:53 UTC	104	IN	Data Raw: 7c 93 be cb 78 42 dd 96 58 8d 4e 04 52 8a 4d f5 ba 1d 71 0a a4 98 b8 37 b5 03 75 77 84 09 b5 d6 dd 15 3a 66 69 77 ef ce bf 1b 81 a8 fd 1f 8f 1f ff e7 46 91 2d 73 64 d4 17 0b 20 12 1f 4f de 06 59 1a 1d 16 e7 d3 4e d4 9a ee 86 ad ce b3 fd 27 ad 69 bb 35 79 fa ac d3 fc 52 34 e7 e1 e2 7f 00 d4 52 e2 10 39 e7 02 00 Data Ascii: \|xBXNRMq7uw:fiwF-sd OYN'i5yR4R9