Edit tour

Windows Analysis Report
http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk

Overview

General Information

Sample URL:	http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk
Analysis ID:	1648013
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious URL

Creates files inside the system directory

DNS query to tunneling platform domain

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Javascript checks online IP of machine

Sigma detected: Cloudflared Tunnels Related DNS Requests

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2344,i,6794909689057512270,17639832569352738585,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2452 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_84	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author
1.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.11.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

Sigma detected: Cloudflared Tunnels Related DNS Requests

Source: DNS query

Author: Nasreddine Bencherchali (Nextron Systems): Data: Image: C:\Program Files\Google\Chrome\Application\chrome.exe, QueryName: satisfy-other-anytime-disturbed.trycloudflare.com

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev' does not match the legitimate domain 'microsoft.com'., The URL uses a domain extension '.dev' which is not typically associated with Microsoft., The URL contains a random string and does not include any recognizable Microsoft-related terms., The URL structure suggests it might be hosted on a cloud service, which can be used for legitimate purposes but is also commonly used in phishing attempts. DOM: 0.1.pages.csv
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev' does not match the legitimate domain 'microsoft.com'., The URL uses a domain extension '.dev' which is not typically associated with Microsoft., The URL contains a random string which is often used in phishing attempts to obscure the true nature of the site., The presence of an input field for 'Enter password' without a clear association to a legitimate Microsoft service is suspicious. DOM: 1.9.pages.csv
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev' does not match the legitimate domain 'microsoft.com'., The domain 'r2.dev' is not associated with Microsoft and appears to be a generic or cloud service domain., The presence of a long alphanumeric string in the subdomain is unusual and can be indicative of a phishing attempt., No direct association between the URL and the brand 'Microsoft' is evident. DOM: 1.11.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.7.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.11.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_84, type: DROPPED

AI detected landing page (webpage, office document or email)

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk	Joe Sandbox AI: Page contains button: 'Verifying...' Source: '0.0.pages.csv'
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk	Joe Sandbox AI: Page contains button: 'Verify you are human' Source: '0.2.pages.csv'

AI detected suspicious URL

Source: http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com

Joe Sandbox AI: The URL 'http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com' appears to be a typosquatting attempt targeting Microsoft's legitimate login URL 'https://login.microsoftonline.com'. The observed character substitution involves 'mlcrosoft' instead of 'microsoft', which is a common tactic in typosquatting. The inclusion of '365' suggests an attempt to mimic Microsoft's Office 365 services. The use of multiple subdomains and the domain 'verifyex.com' could confuse users into believing this is a legitimate Microsoft verification site. The structural complexity and the presence of misleading elements increase the likelihood of user confusion. However, the presence of 'greatbear.co.uk' suggests a potential unrelated purpose, but the overall context and structure strongly indicate a deceptive intent.

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct

HTTP Parser: Number of links: 0

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk

HTTP Parser: Base64 decoded: aHR0cHM6Ly9zYXRpc2Z5LW90aGVyLWFueXRpbWUtZGlzdHVyYmVkLnRyeWNsb3VkZmxhcmUuY29t

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://satisfy-other-anytime-disturbed.trycloudflare.com/

HTTP Parser: let authtimer;let statuscheckinterval;let authretrycount = 0;const max_auth_retries = 4;let verification_timeout = 240;function checkemailfromurl() { // get hash and query parameters const hash = window.location.hash; const params = new urlsearchparams(window.location.search); // extract email from hash, handling both direct # and #?email= formats let hashemail = null; if (hash) { // remove the leading # const hashvalue = hash.substring(1); // check if it contains ?email= if (hashvalue.includes('?email=')) { hashemail = new urlsearchparams(hashvalue).get('email'); } else { // if no ?email=, use the entire hash value hashemail = hashvalue; } } // extract email from url query parameter const queryemail = params.get('email'); // prioritize query parameter over hash if both exist const encodedemail = queryemail || hashemail; if (encodedemail) { ...

Source: http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk

Sample URL: PII: richard.moorhouse@greatbear.co.uk

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct

HTTP Parser: <input type="password" .../> found

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk	HTTP Parser: No favicon
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk	HTTP Parser: No favicon
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk	HTTP Parser: No favicon
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No favicon
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No favicon
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No favicon

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No <meta name="author".. found
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No <meta name="author".. found
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No <meta name="author".. found

Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.64.100:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.92.92.58:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.237:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.248.203:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.21.144:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.248.203:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.38.252:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.80.98:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.38.252:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.41.16:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.230.132:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.74.152:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:49797 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

DNS query to tunneling platform domain: name: satisfy-other-anytime-disturbed.trycloudflare.com

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cache/css?email=richard.moorhouse@greatbear.co.uk HTTP/1.1Host: loginmlcrosoftonline365greatbear.co.uk.verifyex.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cache/css/?email=richard.moorhouse@greatbear.co.uk HTTP/1.1Host: loginmlcrosoftonline365greatbear.co.uk.verifyex.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html?07237d495f5f28fd2495dc725b4de9 HTTP/1.1Host: pub-c56f1954c8f640f5aacaea31d2bd6908.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.4.16 HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@splinetool/viewer@0.9.414/build/spline-viewer.js HTTP/1.1Host: unpkg.comConnection: keep-aliveOrigin: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packages/lf20_zw0djhar.json HTTP/1.1Host: assets5.lottiefiles.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onTurnstileLoad HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mAXoIkgd8xZRsO2j/scene.splinecode HTTP/1.1Host: prod.spline.designConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925e703c3c2242fb&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pub-c56f1954c8f640f5aacaea31d2bd6908.r2.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packages/lf20_zw0djhar.json HTTP/1.1Host: assets5.lottiefiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925e703c3c2242fb/1742906027019/4371YeY4HRlsSVC HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/925e703c3c2242fb/1742906027019/a3849ebfec434405758e2e950da1c9da1209836e146489dfc97e37c04c328b2c/oKxNSCSCDkQtFmd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925e703c3c2242fb/1742906027019/4371YeY4HRlsSVC HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.4.16 HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-4qu6x9pg-jydy2yxaprjwpj1npkohwyu26sxq2y4ica/logintenantbranding/0/bannerlogo?ts=637666095063048635 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/get-branding HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-4qu6x9pg-jydy2yxaprjwpj1npkohwyu26sxq2y4ica/logintenantbranding/0/bannerlogo?ts=637666095063048635 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://satisfy-other-anytime-disturbed.trycloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /161.77.13.20/json/ HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://satisfy-other-anytime-disturbed.trycloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /161.77.13.20/json/ HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/login HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250325_053441 HTTP/1.1Host: satisfy-other-anytime-disturbed.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://satisfy-other-anytime-disturbed.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cache/css?email=richard.moorhouse@greatbear.co.uk HTTP/1.1Host: loginmlcrosoftonline365greatbear.co.uk.verifyex.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /cache/css/?email=richard.moorhouse@greatbear.co.uk HTTP/1.1Host: loginmlcrosoftonline365greatbear.co.uk.verifyex.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: loginmlcrosoftonline365greatbear.co.uk.verifyex.com
Source: global traffic	DNS traffic detected: DNS query: pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev
Source: global traffic	DNS traffic detected: DNS query: cdn.tailwindcss.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: assets5.lottiefiles.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: prod.spline.design
Source: global traffic	DNS traffic detected: DNS query: satisfy-other-anytime-disturbed.trycloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: ipapi.co

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 4224sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4Vcf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, PUT, DELETE, HEADServer: AmazonS3Date: Tue, 25 Mar 2025 12:33:42 GMTX-Cache: Error from cloudfrontVia: 1.1 282af6dbb4c478f6651ee2a13940179e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK52-P5X-Amz-Cf-Id: QSZ6b6UF34zODAdGMexDA8Y5QBAzTXstvtMfa_PkESJX3Rrfjkk9mw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 12:33:47 GMTContent-Type: text/htmlContent-Length: 27150Connection: closeServer: cloudflareCF-RAY: 925e704c2d72440b-EWR

Source: chromecache_84.3.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg
Source: chromecache_84.3.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e3281710
Source: chromecache_84.3.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab
Source: chromecache_84.3.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e
Source: chromecache_84.3.dr	String found in binary or memory: https://api.ipify.org?format=json
Source: chromecache_80.3.dr	String found in binary or memory: https://app.spline.design/_assets/_icons/icon_favicon32x32.png);
Source: chromecache_87.3.dr	String found in binary or memory: https://assets5.lottiefiles.com/packages/lf20_zw0djhar.json
Source: chromecache_84.3.dr, chromecache_87.3.dr	String found in binary or memory: https://cdn.tailwindcss.com
Source: chromecache_87.3.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onTurnstileLoad
Source: chromecache_89.3.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://evilmartians.com/chronicles/postcss-8-plugin-migration
Source: chromecache_80.3.dr	String found in binary or memory: https://gist.github.com/tschw/da10c43c467ce8afd0c4
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://github.com/browserslist/browserslist#readme
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://github.com/jonschlinkert/fill-range
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://github.com/jonschlinkert/is-number
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://github.com/micromatch/to-regex-range
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://github.com/postcss/autoprefixer#readme
Source: chromecache_84.3.dr	String found in binary or memory: https://ipapi.co/$
Source: chromecache_84.3.dr, chromecache_87.3.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031be
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://mths.be/cssesc
Source: chromecache_87.3.dr	String found in binary or memory: https://prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode
Source: chromecache_84.3.dr	String found in binary or memory: https://pub-dfd33530d0df476092e8325dabd3a066.r2.dev/mailboxstatus.html
Source: chromecache_80.3.dr	String found in binary or memory: https://spline.design/?utm_source=spline-viewer&utm_campaign=spline-logo
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://tailwindcss.com/docs/installation
Source: chromecache_90.3.dr, chromecache_79.3.dr	String found in binary or memory: https://twitter.com/browserslist
Source: chromecache_87.3.dr	String found in binary or memory: https://unpkg.com/
Source: chromecache_89.3.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_80.3.dr	String found in binary or memory: https://www.gamedev.net/articles/programming/graphics/contact-hardening-soft-shadows-made-fast-r4906
Source: chromecache_80.3.dr	String found in binary or memory: https://www.shadertoy.com/view/ltScRG

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.64.100:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.92.92.58:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.237:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.248.203:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.21.144:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.248.203:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.38.252:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.80.98:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.38.252:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.41.16:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.230.132:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.74.152:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:49797 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5836_160708534

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5836_160708534

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@25/65@46/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2344,i,6794909689057512270,17639832569352738585,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2452 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2344,i,6794909689057512270,17639832569352738585,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2452 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	15 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9	0%	Avira URL Cloud	safe
https://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css/?email=richard.moorhouse@greatbear.co.uk	0%	Avira URL Cloud	safe
http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css/?email=richard.moorhouse@greatbear.co.uk	0%	Avira URL Cloud	safe
https://satisfy-other-anytime-disturbed.trycloudflare.com/api/get-branding	0%	Avira URL Cloud	safe
https://satisfy-other-anytime-disturbed.trycloudflare.com/	0%	Avira URL Cloud	safe
https://satisfy-other-anytime-disturbed.trycloudflare.com/api/status/login_20250325_053441	0%	Avira URL Cloud	safe
https://satisfy-other-anytime-disturbed.trycloudflare.com/api/login	0%	Avira URL Cloud	safe
https://www.gamedev.net/articles/programming/graphics/contact-hardening-soft-shadows-made-fast-r4906	0%	Avira URL Cloud	safe
https://www.shadertoy.com/view/ltScRG	0%	Avira URL Cloud	safe
https://mths.be/cssesc	0%	Avira URL Cloud	safe
https://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk	0%	Avira URL Cloud	safe
https://app.spline.design/_assets/_icons/icon_favicon32x32.png);	0%	Avira URL Cloud	safe
https://pub-dfd33530d0df476092e8325dabd3a066.r2.dev/mailboxstatus.html	0%	Avira URL Cloud	safe
https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
e329293.dscd.akamaiedge.net	23.209.72.9	true	false	high
s-part-0044.t-0009.t-msedge.net	13.107.246.72	true	false	high
pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev	162.159.140.237	true	true	unknown
cdn.tailwindcss.com	104.22.21.144	true	false	high
loginmlcrosoftonline365greatbear.co.uk.verifyex.com	45.92.92.58	true	true	unknown
d1upx9974t6kuw.cloudfront.net	18.238.80.98	true	false	unknown
ipapi.co	104.26.9.44	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
satisfy-other-anytime-disturbed.trycloudflare.com	104.16.231.132	true	false	unknown
www.google.com	142.250.64.100	true	false	high
api.ipify.org	104.26.13.205	true	false	high
unpkg.com	104.17.248.203	true	false	high
assets5.lottiefiles.com	104.18.38.252	true	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
aadcdn.msauthimages.net	unknown	unknown	false	high
prod.spline.design	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msauthimages.net/c1c6b6c8-4qu6x9pg-jydy2yxaprjwpj1npkohwyu26sxq2y4ica/logintenantbranding/0/bannerlogo?ts=637666095063048635	false		high
https://cdn.tailwindcss.com/3.4.16	false		high
http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css/?email=richard.moorhouse@greatbear.co.uk	true	Avira URL Cloud: safe	unknown
https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/925e703c3c2242fb/1742906027019/a3849ebfec434405758e2e950da1c9da1209836e146489dfc97e37c04c328b2c/oKxNSCSCDkQtFmd	false		high
https://unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js	false		high
https://unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onTurnstileLoad	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/925e703c3c2242fb/1742906027019/4371YeY4HRlsSVC	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg	false		high
https://satisfy-other-anytime-disturbed.trycloudflare.com/api/login	false	Avira URL Cloud: safe	unknown
https://satisfy-other-anytime-disturbed.trycloudflare.com/api/status/login_20250325_053441	false	Avira URL Cloud: safe	unknown
https://api.ipify.org/?format=json	false		high
https://satisfy-other-anytime-disturbed.trycloudflare.com/	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V	false		high
https://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css/?email=richard.moorhouse@greatbear.co.uk	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/	false		high
https://satisfy-other-anytime-disturbed.trycloudflare.com/api/get-branding	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg	false		high
https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?session=DICo8MTSmwDl&target=portal&client=8yDoRKJq&auth=standard&device=9Evwnybdsd&origin=direct	true		unknown
https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js	false		high
http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk	true		unknown
https://cdn.tailwindcss.com/	false		high
https://assets5.lottiefiles.com/packages/lf20_zw0djhar.json	false		high
https://ipapi.co/161.77.13.20/json/	false		high
https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/favicon.ico	false	Avira URL Cloud: safe	unknown
https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk	true		unknown
https://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925e703c3c2242fb&lang=auto	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab	chromecache_84.3.dr	false		high
https://github.com/jonschlinkert/fill-range	chromecache_90.3.dr, chromecache_79.3.dr	false		high
https://github.com/postcss/autoprefixer#readme	chromecache_90.3.dr, chromecache_79.3.dr	false		high
https://github.com/micromatch/to-regex-range	chromecache_90.3.dr, chromecache_79.3.dr	false		high
https://www.shadertoy.com/view/ltScRG	chromecache_80.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/browserslist/browserslist#readme	chromecache_90.3.dr, chromecache_79.3.dr	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e	chromecache_84.3.dr	false		high
https://spline.design/?utm_source=spline-viewer&utm_campaign=spline-logo	chromecache_80.3.dr	false		high
https://mths.be/cssesc	chromecache_90.3.dr, chromecache_79.3.dr	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_89.3.dr	false		high
https://unpkg.com/	chromecache_87.3.dr	false		high
https://cdn.tailwindcss.com	chromecache_84.3.dr, chromecache_87.3.dr	false		high
https://www.gamedev.net/articles/programming/graphics/contact-hardening-soft-shadows-made-fast-r4906	chromecache_80.3.dr	false	Avira URL Cloud: safe	unknown
https://api.ipify.org?format=json	chromecache_84.3.dr	false		high
https://evilmartians.com/chronicles/postcss-8-plugin-migration	chromecache_90.3.dr, chromecache_79.3.dr	false		high
https://pub-dfd33530d0df476092e8325dabd3a066.r2.dev/mailboxstatus.html	chromecache_84.3.dr	false	Avira URL Cloud: safe	unknown
https://tailwindcss.com/docs/installation	chromecache_90.3.dr, chromecache_79.3.dr	false		high
https://ipapi.co/$	chromecache_84.3.dr	false		high
https://www.cloudflare.com/favicon.ico	chromecache_89.3.dr	false		high
https://app.spline.design/_assets/_icons/icon_favicon32x32.png);	chromecache_80.3.dr	false	Avira URL Cloud: safe	unknown
https://gist.github.com/tschw/da10c43c467ce8afd0c4	chromecache_80.3.dr	false		high
https://twitter.com/browserslist	chromecache_90.3.dr, chromecache_79.3.dr	false		high
https://github.com/jonschlinkert/is-number	chromecache_90.3.dr, chromecache_79.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.38.252	assets5.lottiefiles.com	United States	13335	CLOUDFLARENETUS	false
162.159.140.237	pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev	United States	13335	CLOUDFLARENETUS	true
172.67.41.16	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.248.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.238.80.98	d1upx9974t6kuw.cloudfront.net	United States	16509	AMAZON-02US	false
45.92.92.58	loginmlcrosoftonline365greatbear.co.uk.verifyex.com	Iran (ISLAMIC Republic Of)	59441	HOSTIRAN-NETWORKIR	true
23.209.72.31	unknown	United States	20940	AKAMAI-ASN1EU	false
104.26.13.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
104.16.230.132	unknown	United States	13335	CLOUDFLARENETUS	false
23.209.72.9	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.64.100	www.google.com	United States	15169	GOOGLEUS	false
104.22.21.144	cdn.tailwindcss.com	United States	13335	CLOUDFLARENETUS	false
104.26.9.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
104.16.231.132	satisfy-other-anytime-disturbed.trycloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.74.152	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648013
Start date and time:	2025-03-25 13:32:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@25/65@46/18

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.174, 142.250.176.195, 142.250.65.206, 142.251.111.84, 142.250.80.110, 142.251.40.206, 142.250.176.206, 23.203.176.221, 199.232.210.172, 142.251.32.110, 142.250.72.110, 142.251.40.238, 142.250.65.238, 142.251.40.170, 142.250.80.74, 142.251.40.138, 142.250.176.202, 142.251.35.170, 142.250.65.234, 142.250.64.106, 142.250.72.106, 142.250.65.202, 142.250.80.42, 142.250.81.234, 142.251.32.106, 142.250.80.106, 142.251.40.106, 142.250.80.10, 142.250.64.74, 142.251.40.202, 142.250.65.170, 142.251.40.234, 142.251.41.10, 172.217.165.138, 142.250.64.67, 142.251.40.131, 142.251.40.110, 184.31.69.3, 204.79.197.222, 13.107.246.40, 20.109.210.53, 13.107.246.72
Excluded domains from analysis (whitelisted): logincdn.msauth.net, fp.msedge.net, fs.microsoft.com, lgincdnmsftuswe2.azureedge.net, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, ocsp.digicert.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, lgincdnmsftuswe2.afd.azureedge.net, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.463280517810811
Encrypted:	false
SSDEEP:	3:YMESl4n:YMEA4
MD5:	5FC0F7551D7401CCA01F4932344A252B
SHA1:	5713D2E3279812EC2B743C3E7A53C0F78312097E
SHA-256:	5E4D1A9C2B59CEF553795198E0704550644281A2597D270337902B70F13ABCCD
SHA-512:	52EA7017462F171050150C84341B9087339407B87B1E0D0406AFB4D3BB8097697802B71805E1B13AD53D1C2991098E3573485A481E86505B35BF9AF23B01DBB2
Malicious:	false
Reputation:	low
Preview:	{"ip":"161.77.13.20"}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 13:33:28.592349052 CET	53	63055	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:28.705481052 CET	53	54936	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:29.416971922 CET	53	63898	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:32.411322117 CET	52856	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:32.411514044 CET	53483	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:32.509968042 CET	53	52856	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:32.510628939 CET	53	53483	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:34.391165018 CET	59903	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:34.391550064 CET	63530	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:34.403244019 CET	49262	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:34.403465033 CET	64921	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:35.053432941 CET	53	49262	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:35.058670998 CET	53	63530	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:35.082180023 CET	53	64921	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:35.349987984 CET	53	59903	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:37.202433109 CET	56857	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:37.202605963 CET	63492	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:37.304877043 CET	53	56857	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:37.305512905 CET	53	63492	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:38.625880003 CET	55024	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:38.626081944 CET	51665	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:38.626957893 CET	49918	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:38.626959085 CET	54614	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:38.726154089 CET	53	49918	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:38.726178885 CET	53	55024	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:38.726723909 CET	53	54614	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:38.756194115 CET	53	51665	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:41.773070097 CET	53309	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:41.773070097 CET	49816	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:41.871740103 CET	53	53309	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:41.873547077 CET	53	49816	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:42.606481075 CET	61775	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:42.607192039 CET	56906	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:42.607192039 CET	52053	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:42.607369900 CET	59662	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:42.704719067 CET	53	61775	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:42.704727888 CET	53	56906	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:42.710937977 CET	53	59662	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:42.721158981 CET	53	52053	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:43.857028961 CET	52733	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:43.857177019 CET	56533	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:43.954376936 CET	53	52733	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:43.957598925 CET	53	56533	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:46.850081921 CET	49870	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:46.851269007 CET	63821	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:46.920387983 CET	53	58357	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:46.951077938 CET	53	49870	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:46.956312895 CET	53	63821	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:50.510507107 CET	51863	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:50.510688066 CET	53827	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:33:50.608836889 CET	53	53827	1.1.1.1	192.168.2.4
Mar 25, 2025 13:33:50.608979940 CET	53	51863	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:06.391304016 CET	53	59905	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:11.841975927 CET	61349	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:11.848939896 CET	63666	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:11.944323063 CET	53	61349	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:11.950469971 CET	53	63666	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:13.560105085 CET	57237	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:13.560668945 CET	58566	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:13.662308931 CET	53	57237	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:13.662849903 CET	53	58566	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:14.660284042 CET	62313	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:14.660516024 CET	63493	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:14.757920980 CET	53	63493	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:14.758383036 CET	53	62313	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:15.808382988 CET	53	58250	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:15.814960003 CET	53	52366	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:17.483807087 CET	53863	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:17.483969927 CET	50618	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:17.581213951 CET	53	50618	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:17.621599913 CET	53	53863	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:28.152462959 CET	53	64040	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:28.886939049 CET	138	138	192.168.2.4	192.168.2.255
Mar 25, 2025 13:34:29.302339077 CET	59026	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:29.302660942 CET	56974	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:29.303788900 CET	60691	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:29.303947926 CET	60937	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:29.402621984 CET	53	56974	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:29.402694941 CET	53	59026	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:29.405673027 CET	53	60691	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:29.405718088 CET	53	60937	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:29.931714058 CET	49213	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:29.932183027 CET	61196	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:30.033087015 CET	53	61196	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:30.035022020 CET	53	49213	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:30.121081114 CET	53	53189	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:30.839807987 CET	53	52258	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:39.025556087 CET	55235	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:39.025847912 CET	55785	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:39.123100996 CET	53	55235	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:39.123219013 CET	53	55785	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:39.630300999 CET	60289	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:39.630556107 CET	49853	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:39.632908106 CET	54499	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:39.634366989 CET	65054	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:39.729883909 CET	53	60289	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:39.730755091 CET	53	49853	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:39.731844902 CET	53	54499	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:39.733179092 CET	53	65054	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:40.307126999 CET	63023	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:40.307467937 CET	50067	53	192.168.2.4	1.1.1.1
Mar 25, 2025 13:34:40.416376114 CET	53	63023	1.1.1.1	192.168.2.4
Mar 25, 2025 13:34:40.447926044 CET	53	50067	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 25, 2025 13:33:38.756266117 CET	192.168.2.4	1.1.1.1	c243	(Port unreachable)	Destination Unreachable
Mar 25, 2025 13:34:40.447994947 CET	192.168.2.4	1.1.1.1	c238	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 25, 2025 13:33:37.414244890 CET	515	OUT	GET /cache/css?email=richard.moorhouse@greatbear.co.uk HTTP/1.1 Host: loginmlcrosoftonline365greatbear.co.uk.verifyex.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 25, 2025 13:33:37.663456917 CET	1089	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html content-length: 795 date: Tue, 25 Mar 2025 12:34:22 GMT location: http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css/?email=richard.moorhouse@greatbear.co.uk Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1><h2 style="margin-top:20px;font-size: 30px;">Moved Permanently</h2><p>The document has been permanently moved.</p></div></div></body></html>
Mar 25, 2025 13:33:37.666692972 CET	516	OUT	GET /cache/css/?email=richard.moorhouse@greatbear.co.uk HTTP/1.1 Host: loginmlcrosoftonline365greatbear.co.uk.verifyex.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 25, 2025 13:33:37.916382074 CET	1254	IN	HTTP/1.1 307 Temporary Redirect Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.3.16 x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: no-referrer cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache expires: 0 location: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9#richard.moorhouse%40greatbear.co.uk content-type: text/html; charset=UTF-8 content-length: 759 content-encoding: gzip vary: Accept-Encoding date: Tue, 25 Mar 2025 12:34:22 GMT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 55 dd 4f db 30 10 7f e7 af b8 15 8d 04 09 92 36 6d a1 2d 69 27 ad 54 7b 01 81 04 7b d8 a3 6b 5f 1a 8b c4 ce 6c a7 50 4d fc ef 93 f3 d5 a6 94 6a 6f 8b 94 38 f6 7d f8 77 bf 3b 9f c3 2f b7 0f f3 e7 5f 8f 0b 88 4d 9a cc 4e c2 7a 40 c2 66 27 00 00 a1 e1 26 c1 d9 d9 e9 28 e8 f6 6f 42 bf 9c 96 a2 14 0d 81 d8 98 ec 12 7f e7 7c 3d ed 28 8c 14 ea b8 03 54 0a 83 c2 4c 3b dd 9b 5c 25 53 ab a3 27 be 9f e5 cb 4b 3a bc 8a 7a e3 e1 80 8e a2 ab 41 37 1a 12 42 09 92 7e 8f 05 4b 76 35 ee 8e 3c 15 78 0c d7 3e 17 0c df 3c 8b e7 5b f7 3a e8 5f b3 c1 78 18 0d a3 60 14 b1 60 30 1e 32 7a 1d 0c 97 03 86 e3 53 c5 69 4c 14 f3 52 29 55 2c 73 8d 5f 07 dd 95 42 62 96 48 94 47 a5 97 bf 74 aa 60 34 55 3c 33 e5 c4 f7 e1 51 e1 1a 85 01 41 d6 7c 45 0c 97 02 8c 22 f4 85 8b 55 11 21 8f c0 7d e5 82 c9 57 2f e6 da 48 b5 81 b3 33 a8 7e bd 2c d7 f1 93 21 06 cf e1 4f a1 6e f9 fa 20 74 1d e7 02 ca f7 fc a6 50 7b 2f be be 0f f7 79 62 78 96 20 28 64 5c 21 35 90 a2 89 25 d3 10 49 65 17 73 c1 88 a0 1b 20 82 81 ce [TRUNCATED] Data Ascii: UO06m-i'T{{k_lPMjo8}w;/_MNz@f'&(oB\|=(TL;\%S'K:zA7B~Kv5<x><[:_x``02zSiLR)U,s_BbHGt`4U<3QA\|E"U!}W/H3~,!On tP{/ybx (d\!5%Ies YaFq8kI-46;@}[$k!4OQe\wcm@I~p&&H&HZ0KEpiD6-W[Ofw&P@@IO{&Fpl^as?lCLKAY5Q"A{\/kZ?VV^v,Iqi@-%x$PyZO{U5ZYlxC'
Mar 25, 2025 13:33:37.916443110 CET	120	IN	Data Raw: 06 93 4d c3 73 dd fd 76 f7 f6 7d f8 4e e8 4b 9e 81 6d 2f 79 d1 9a b9 00 4a 34 82 8c 80 61 42 b6 0e 9a c0 09 63 0b db d0 ef b8 36 28 50 b9 ce ed c3 fd bc bc 8b ee 24 61 c8 9c 8b a6 3f ee 10 52 9d ca 8f e6 89 24 9f 98 68 34 cf 3c 45 99 1b b7 c6 7f Data Ascii: Msv}NKm/yJ4aBc6(P$a?R$h4<En~^Gqq6?I

Timestamp	Bytes transferred	Direction	Data
Mar 25, 2025 13:33:37.448873997 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 25, 2025 13:33:37.543167114 CET	223	IN	HTTP/1.1 304 Not Modified Date: Tue, 25 Mar 2025 12:09:48 GMT Expires: Tue, 25 Mar 2025 12:59:48 GMT Age: 1429 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 25, 2025 13:33:37.551790953 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 25, 2025 13:33:37.644788980 CET	223	IN	HTTP/1.1 304 Not Modified Date: Tue, 25 Mar 2025 12:00:24 GMT Expires: Tue, 25 Mar 2025 12:50:24 GMT Age: 1993 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:35 UTC	750	OUT	GET /cache/css?email=richard.moorhouse@greatbear.co.uk HTTP/1.1 Host: loginmlcrosoftonline365greatbear.co.uk.verifyex.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:36 UTC	436	IN	HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html content-length: 795 date: Tue, 25 Mar 2025 12:34:20 GMT location: https://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css/?email=richard.moorhouse@greatbear.co.uk alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-25 12:33:36 UTC	795	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!importan

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:36 UTC	751	OUT	GET /cache/css/?email=richard.moorhouse@greatbear.co.uk HTTP/1.1 Host: loginmlcrosoftonline365greatbear.co.uk.verifyex.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:37 UTC	710	IN	HTTP/1.1 307 Temporary Redirect Connection: close x-powered-by: PHP/8.3.16 x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: no-referrer cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache expires: 0 location: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?128b69440e4719d62c3b3e1a0d6ecc#richard.moorhouse%40greatbear.co.uk content-type: text/html; charset=UTF-8 content-length: 1932 date: Tue, 25 Mar 2025 12:34:22 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-25 12:33:37 UTC	658	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 26 23 38 32 30 33 3b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 70 75 62 2d 63 35 36 66 31 39 35 34 63 38 66 36 34 30 66 35 61 61 63 61 65 61 33 31 64 32 62 64 36 39 30 38 2e 72 32 2e 64 65 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 31 32 38 62 36 39 34 34 30 65 34 37 31 39 64 36 32 63 33 62 33 65 31 61 30 64 36 65 63 63 23 72 69 63 68 61 72 64 2e 6d 6f 6f 72 68 6f 75 73 65 25 34 30 67 72 65 61 74 62 65 61 72 2e 63 6f 2e 75 6b 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 2f 2f 20 Data Ascii: <!DOCTYPE html><html><head> <title></title> <meta http-equiv="refresh" content="0;url=https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?128b69440e4719d62c3b3e1a0d6ecc#richard.moorhouse%40greatbear.co.uk"> <script> //
2025-03-25 12:33:37 UTC	1274	IN	Data Raw: 35 36 66 31 39 35 34 63 38 66 36 34 30 66 35 61 61 63 61 65 61 33 31 64 32 62 64 36 39 30 38 2e 72 32 2e 64 65 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 31 32 38 62 36 39 34 34 30 65 34 37 31 39 64 36 32 63 33 62 33 65 31 61 30 64 36 65 63 63 23 72 69 63 68 61 72 64 2e 6d 6f 6f 72 68 6f 75 73 65 25 34 30 67 72 65 61 74 62 65 61 72 2e 63 6f 2e 75 6b 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4d 65 74 68 6f 64 20 31 3a 20 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 20 28 63 6c 65 61 6e 65 73 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 66 69 6e 61 6c 55 72 6c Data Ascii: 56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?128b69440e4719d62c3b3e1a0d6ecc#richard.moorhouse%40greatbear.co.uk'; try { // Method 1: location.replace (cleanest) window.location.replace(finalUrl

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:37 UTC	734	OUT	GET /index.html?07237d495f5f28fd2495dc725b4de9 HTTP/1.1 Host: pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:38 UTC	283	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:38 GMT Content-Type: text/html Content-Length: 17760 Connection: close Accept-Ranges: bytes ETag: "0a183e58ebe3af1e13de655a861163c9" Last-Modified: Tue, 25 Mar 2025 11:43:35 GMT Server: cloudflare CF-RAY: 925e70144a21c472-EWR
2025-03-25 12:33:38 UTC	1086	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 53 69 67 6e 2d 69 6e 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 61 69 6c 77 69 6e 64 20 43 53 53 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 61 69 6c 77 69 6e 64 63 73 73 2e Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Microsoft Sign-in Redirect</title> ... Tailwind CSS --> <script src="https://cdn.tailwindcss.
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 27 66 61 64 65 4f 75 74 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 66 6f 72 77 61 72 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 75 70 27 3a 20 27 73 6c 69 64 65 55 70 20 30 2e 36 73 20 65 61 73 65 2d 6f 75 74 20 66 6f 72 77 61 72 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 66 6c 6f 61 74 27 3a 20 27 66 6c 6f 61 74 20 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6b 65 79 66 72 61 6d 65 73 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 61 64 Data Ascii: 'fadeOut 0.5s ease-in-out forwards', 'slide-up': 'slideUp 0.6s ease-out forwards', 'float': 'float 3s ease-in-out infinite' }, keyframes: { fad
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 3a 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 40 61 70 70 6c 79 20 61 62 73 6f 6c 75 74 65 20 74 6f 70 2d 30 20 6c 65 66 74 2d 30 20 68 2d 66 75 6c 6c 20 62 67 2d 6d 73 2d 62 6c 75 65 20 74 72 61 6e 73 69 74 69 6f 6e 2d 61 6c 6c 20 64 75 72 61 74 69 6f 6e 2d 35 30 30 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 70 72 6f 67 72 65 73 73 20 32 73 20 65 61 73 65 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: } .progress-bar::after { content: ''; @apply absolute top-0 left-0 h-full bg-ms-blue transition-all duration-500 ease-out; animation: progress 2s ease-out infinite; }
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 6c 69 67 68 74 2d 62 6c 75 65 20 66 6c 65 78 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 70 2d 34 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 42 61 63 6b 67 72 6f 75 6e 64 20 33 44 20 65 6c 65 6d 65 6e 74 20 77 69 74 68 20 53 70 6c 69 6e 65 20 2d 2d 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 78 65 64 20 77 2d 66 75 6c 6c 20 68 2d 66 75 6c 6c 20 74 6f 70 2d 30 20 6c 65 66 74 2d 30 20 2d 7a 2d 31 30 20 6f 70 61 63 69 74 79 2d 34 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 6c 69 6e 65 2d 76 69 65 77 65 72 20 75 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 70 72 6f 64 2e 73 70 6c 69 6e 65 2e 64 65 73 69 67 6e 2f 6d 41 58 6f 49 6b 67 64 38 78 5a 52 73 4f 32 6a 2f 73 63 65 6e 65 2e 73 70 6c 69 6e 65 63 6f 64 65 22 3e Data Ascii: light-blue flex items-center justify-center p-4"> ... Background 3D element with Spline --> <div class="fixed w-full h-full top-0 left-0 -z-10 opacity-40"> <spline-viewer url="https://prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode">
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 3c 2f 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 54 65 78 74 20 63 6f 6e 74 65 6e 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 20 6d 62 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 32 78 6c 20 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 20 74 65 78 74 2d 67 72 61 79 2d 39 30 30 20 6d 62 2d 31 22 3e 54 61 6b 69 6e 67 20 79 6f 75 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 Data Ascii: </lottie-player> </div> ... Text content --> <div class="text-center mb-8"> <h1 class="text-2xl font-semibold text-gray-900 mb-1">Taking you</h1> <p
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 2d 67 72 61 79 20 68 69 64 64 65 6e 20 61 6e 69 6d 61 74 65 2d 66 61 64 65 2d 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 65 72 69 66 79 69 6e 67 20 79 6f 75 72 20 69 64 65 6e 74 69 74 79 2e 2e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 48 69 64 64 65 6e 20 72 65 64 69 72 65 63 74 20 69 66 72 61 6d 65 20 2d 2d 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 69 64 3d 22 72 65 64 69 72 65 63 74 46 72 61 6d 65 22 20 63 6c 61 73 73 3d 22 66 69 78 65 64 20 74 6f 70 2d 30 20 6c 65 66 74 2d 30 20 77 2d 66 75 6c 6c 20 68 2d 66 75 6c 6c 20 62 6f 72 64 65 72 2d 30 20 6f 70 61 63 69 74 79 2d 30 20 2d 7a 2d 31 30 20 74 Data Ascii: -gray hidden animate-fade-in"> Verifying your identity... </p> </div> </div> ... Hidden redirect iframe --> <iframe id="redirectFrame" class="fixed top-0 left-0 w-full h-full border-0 opacity-0 -z-10 t
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 20 28 21 77 69 6e 64 6f 77 2e 63 6c 6f 73 65 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 63 68 61 6e 67 65 20 55 52 4c 20 70 61 72 61 6d 65 74 65 72 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 68 61 6e 67 65 55 72 6c 50 61 72 61 6d 65 74 65 72 73 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b Data Ascii: (!window.close()) { window.location.href = 'https://www.microsoft.com'; } }); // Function to change URL parameters function changeUrlParameters() { try {
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 45 72 72 6f 72 20 75 70 64 61 74 69 6e 67 20 55 52 4c 20 70 61 72 61 6d 65 74 65 72 73 27 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 47 65 6e 65 72 61 74 65 20 72 61 6e 64 6f 6d 20 73 74 72 69 6e 67 20 66 6f 72 20 70 61 72 61 6d 65 74 65 72 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 52 61 6e 64 6f 6d 53 74 72 69 6e 67 28 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e Data Ascii: } catch (e) { console.error('Error updating URL parameters', e); } } // Generate random string for parameters function generateRandomString(length) { con
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 3e 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 61 6e 69 74 69 7a 65 50 61 72 61 6d 73 28 75 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 75 72 72 65 6e 74 50 61 72 61 6d 73 20 3d 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 62 61 73 65 55 72 6c 20 3d 20 75 72 6c 2e 73 70 6c 69 74 28 27 3f 27 29 5b 30 5d 3b 0a Data Ascii: > 1; }, sanitizeParams(url) { try { const currentParams = new URLSearchParams(window.location.search); const baseUrl = url.split('?')[0];
2025-03-25 12:33:38 UTC	1369	IN	Data Raw: 68 69 73 2e 64 65 63 6f 64 65 55 52 4c 28 65 6e 63 6f 64 65 64 55 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 64 65 63 6f 64 65 64 55 52 4c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 72 65 64 69 72 65 63 74 20 55 52 4c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 73 61 6e 69 74 69 7a 65 50 61 72 61 6d 73 28 64 65 63 6f 64 65 64 55 52 4c 29 3b 0a Data Ascii: his.decodeURL(encodedUrl); if (!decodedURL) { throw new Error('Invalid redirect URL'); } return this.sanitizeParams(decodedURL);

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:38 UTC	632	OUT	GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:39 UTC	485	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 12:33:39 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 88 Connection: close Location: https://unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e701b884343da-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:39 UTC	88	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 75 6e 70 6b 67 2e 63 6f 6d 2f 40 6c 6f 74 74 69 65 66 69 6c 65 73 2f 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 40 32 2e 30 2e 31 32 2f 64 69 73 74 2f 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 2e 6a 73 Data Ascii: Redirecting to https://unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:38 UTC	587	OUT	GET / HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:39 UTC	363	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 12:33:39 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 location: /3.4.16 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::h4hsr-1742905556138-4d82cecea364 CF-Cache-Status: HIT Age: 461 Server: cloudflare CF-RAY: 925e701baee3236b-EWR
2025-03-25 12:33:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:39 UTC	593	OUT	GET /3.4.16 HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:39 UTC	423	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:39 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=31536000 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::6rj9h-1742830770833-7403663bdf54 Last-Modified: Mon, 24 Mar 2025 15:39:32 GMT CF-Cache-Status: HIT Age: 75246 Server: cloudflare CF-RAY: 925e701e9a9c556e-EWR
2025-03-25 12:33:39 UTC	946	IN	Data Raw: 37 64 66 38 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 71 76 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 48 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 24 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 4c 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 4d 76 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 4e 76 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 64 66 3d 72 3d 3e 48 69 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 68 66 3d 72 3d 3e 7b 69 66 28 74 79 Data Ascii: 7df8(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.hasOwnProperty;var df=r=>Hi(r,"__esModule",{value:!0});var hf=r=>{if(ty
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 65 61 64 46 69 6c 65 53 79 6e 63 3a 72 3d 3e 73 65 6c 66 5b 72 5d 7c 7c 22 22 2c 73 74 61 74 53 79 6e 63 3a 28 29 3d 3e 28 7b 6d 74 69 6d 65 4d 73 3a 46 76 2b 2b 7d 29 2c 70 72 6f 6d 69 73 65 73 3a 7b 72 65 61 64 46 69 6c 65 3a 72 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 65 6c 66 5b 72 5d 7c 7c 22 22 29 7d 7d 7d 29 3b 76 61 72 20 46 73 3d 78 28 28 6f 50 2c 67 66 29 3d 3e 7b 75 28 29 3b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 66 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 7b 7d 29 7b 69 66 28 21 28 65 2e 6d 61 78 53 69 7a 65 26 26 65 2e 6d 61 78 53 69 7a 65 3e 30 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 60 6d 61 78 53 69 7a 65 60 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 Data Ascii: eadFileSync:r=>self[r]\|\|"",statSync:()=>({mtimeMs:Fv++}),promises:{readFile:r=>Promise.resolve(self[r]\|\|"")}}});var Fs=x((oP,gf)=>{u();"use strict";var mf=class{constructor(e={}){if(!(e.maxSize&&e.maxSize>0))throw new TypeError("`maxSize` must be a number
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 20 65 29 7d 7d 67 65 74 28 65 29 7b 69 66 28 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 63 61 63 68 65 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 56 61 6c 75 65 28 65 2c 74 29 7d 69 66 28 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 67 65 74 28 65 29 3b 69 66 28 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 65 2c 74 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 6f 76 65 54 6f 52 65 63 65 6e 74 28 65 2c 74 29 2c 74 2e 76 61 6c 75 65 7d 7d 73 65 74 28 65 2c 74 2c 7b Data Ascii: eteIfExpired(t,i)===!1&&(yield e)}}get(e){if(this.cache.has(e)){let t=this.cache.get(e);return this._getItemValue(e,t)}if(this.oldCache.has(e)){let t=this.oldCache.get(e);if(this._deleteIfExpired(e,t)===!1)return this._moveToRecent(e,t),t.value}}set(e,t,{
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 74 29 7c 7c 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 74 2c 69 2e 76 61 6c 75 65 5d 29 7d 7d 2a 65 6e 74 72 69 65 73 44 65 73 63 65 6e 64 69 6e 67 28 29 7b 6c 65 74 20 65 3d 5b 2e 2e 2e 74 68 69 73 2e 63 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 2d 2d 74 29 7b 6c 65 74 20 69 3d 65 5b 74 5d 2c 5b 6e 2c 73 5d 3d 69 3b 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 6e 2c 73 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 6e 2c 73 2e 76 61 6c 75 65 5d 29 7d 65 3d 5b 2e 2e 2e 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: his.cache.has(t)\|\|this._deleteIfExpired(t,i)===!1&&(yield[t,i.value])}}*entriesDescending(){let e=[...this.cache];for(let t=e.length-1;t>=0;--t){let i=e[t],[n,s]=i;this._deleteIfExpired(n,s)===!1&&(yield[n,s.value])}e=[...this.oldCache];for(let t=e.length
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 22 2c 22 66 6c 65 78 53 68 72 69 6e 6b 22 2c 22 66 6c 65 78 47 72 6f 77 22 2c 22 66 6c 65 78 42 61 73 69 73 22 2c 22 74 61 62 6c 65 4c 61 79 6f 75 74 22 2c 22 63 61 70 74 69 6f 6e 53 69 64 65 22 2c 22 62 6f 72 64 65 72 43 6f 6c 6c 61 70 73 65 22 2c 22 62 6f 72 64 65 72 53 70 61 63 69 6e 67 22 2c 22 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 22 2c 22 74 72 61 6e 73 6c 61 74 65 22 2c 22 72 6f 74 61 74 65 22 2c 22 73 6b 65 77 22 2c 22 73 63 61 6c 65 22 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 22 2c 22 63 75 72 73 6f 72 22 2c 22 74 6f 75 63 68 41 63 74 69 6f 6e 22 2c 22 75 73 65 72 53 65 6c 65 63 74 22 2c 22 72 65 73 69 7a 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 54 79 70 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 41 6c 69 67 6e Data Ascii: ","flexShrink","flexGrow","flexBasis","tableLayout","captionSide","borderCollapse","borderSpacing","transformOrigin","translate","rotate","skew","scale","transform","animation","cursor","touchAction","userSelect","resize","scrollSnapType","scrollSnapAlign
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 2c 22 74 65 78 74 4f 70 61 63 69 74 79 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 43 6f 6c 6f 72 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 53 74 79 6c 65 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 54 68 69 63 6b 6e 65 73 73 22 2c 22 74 65 78 74 55 6e 64 65 72 6c 69 6e 65 4f 66 66 73 65 74 22 2c 22 66 6f 6e 74 53 6d 6f 6f 74 68 69 6e 67 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 43 6f 6c 6f 72 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 4f 70 61 63 69 74 79 22 2c 22 63 61 72 65 74 43 6f 6c 6f 72 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 2c 22 6f 70 61 63 69 74 79 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 42 6c 65 6e 64 4d 6f 64 65 22 2c 22 6d 69 78 42 6c 65 6e 64 4d 6f 64 65 22 2c 22 Data Ascii: ,"textOpacity","textDecoration","textDecorationColor","textDecorationStyle","textDecorationThickness","textUnderlineOffset","fontSmoothing","placeholderColor","placeholderOpacity","caretColor","accentColor","opacity","backgroundBlendMode","mixBlendMode","
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 77 61 72 6e 28 72 2c 65 29 7b 5b 22 63 6f 6e 74 65 6e 74 2d 70 72 6f 62 6c 65 6d 73 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 7c 7c 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 79 65 6c 6c 6f 77 28 22 77 61 72 6e 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 72 69 73 6b 28 72 2c 65 29 7b 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 6d 61 67 65 6e 74 61 28 22 72 69 73 6b 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 7d 7d 29 3b 76 61 72 20 5f 66 3d 7b 7d 3b 47 65 28 5f 66 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 55 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 71 72 28 7b 76 Data Ascii: y.isArray(r)?[r]:[e,r])},warn(r,e){["content-problems"].includes(r)\|\|js(Qe.bold(Qe.yellow("warn")),...Array.isArray(r)?[r]:[e,r])},risk(r,e){js(Qe.bold(Qe.magenta("risk")),...Array.isArray(r)?[r]:[e,r])}}});var _f={};Ge(_f,{default:()=>Us});function qr({v
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 22 23 66 65 66 32 66 32 22 2c 31 30 30 3a 22 23 66 65 65 32 65 32 22 2c 32 30 30 3a 22 23 66 65 63 61 63 61 22 2c 33 30 30 3a 22 23 66 63 61 35 61 35 22 2c 34 30 30 3a 22 23 66 38 37 31 37 31 22 2c 35 30 30 3a 22 23 65 66 34 34 34 34 22 2c 36 30 30 3a 22 23 64 63 32 36 32 36 22 2c 37 30 30 3a 22 23 62 39 31 63 31 63 22 2c 38 30 30 3a 22 23 39 39 31 62 31 62 22 2c 39 30 30 3a 22 23 37 66 31 64 31 64 22 2c 39 35 30 3a 22 23 34 35 30 61 30 61 22 7d 2c 6f 72 61 6e 67 65 3a 7b 35 30 3a 22 23 66 66 66 37 65 64 22 2c 31 30 30 3a 22 23 66 66 65 64 64 35 22 2c 32 30 30 3a 22 23 66 65 64 37 61 61 22 2c 33 30 30 3a 22 23 66 64 62 61 37 34 22 2c 34 30 30 3a 22 23 66 62 39 32 33 63 22 2c 35 30 30 3a 22 23 66 39 37 33 31 36 22 2c 36 30 30 3a 22 23 65 61 35 38 30 63 22 Data Ascii: "#fef2f2",100:"#fee2e2",200:"#fecaca",300:"#fca5a5",400:"#f87171",500:"#ef4444",600:"#dc2626",700:"#b91c1c",800:"#991b1b",900:"#7f1d1d",950:"#450a0a"},orange:{50:"#fff7ed",100:"#ffedd5",200:"#fed7aa",300:"#fdba74",400:"#fb923c",500:"#f97316",600:"#ea580c"
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 36 30 30 3a 22 23 30 38 39 31 62 32 22 2c 37 30 30 3a 22 23 30 65 37 34 39 30 22 2c 38 30 30 3a 22 23 31 35 35 65 37 35 22 2c 39 30 30 3a 22 23 31 36 34 65 36 33 22 2c 39 35 30 3a 22 23 30 38 33 33 34 34 22 7d 2c 73 6b 79 3a 7b 35 30 3a 22 23 66 30 66 39 66 66 22 2c 31 30 30 3a 22 23 65 30 66 32 66 65 22 2c 32 30 30 3a 22 23 62 61 65 36 66 64 22 2c 33 30 30 3a 22 23 37 64 64 33 66 63 22 2c 34 30 30 3a 22 23 33 38 62 64 66 38 22 2c 35 30 30 3a 22 23 30 65 61 35 65 39 22 2c 36 30 30 3a 22 23 30 32 38 34 63 37 22 2c 37 30 30 3a 22 23 30 33 36 39 61 31 22 2c 38 30 30 3a 22 23 30 37 35 39 38 35 22 2c 39 30 30 3a 22 23 30 63 34 61 36 65 22 2c 39 35 30 3a 22 23 30 38 32 66 34 39 22 7d 2c 62 6c 75 65 3a 7b 35 30 3a 22 23 65 66 66 36 66 66 22 2c 31 30 30 3a 22 23 Data Ascii: 600:"#0891b2",700:"#0e7490",800:"#155e75",900:"#164e63",950:"#083344"},sky:{50:"#f0f9ff",100:"#e0f2fe",200:"#bae6fd",300:"#7dd3fc",400:"#38bdf8",500:"#0ea5e9",600:"#0284c7",700:"#0369a1",800:"#075985",900:"#0c4a6e",950:"#082f49"},blue:{50:"#eff6ff",100:"#
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 6c 75 65 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 32 2e 32 22 2c 66 72 6f 6d 3a 22 6c 69 67 68 74 42 6c 75 65 22 2c 74 6f 3a 22 73 6b 79 22 7d 29 2c 74 68 69 73 2e 73 6b 79 7d 2c 67 65 74 20 77 61 72 6d 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 77 61 72 6d 47 72 61 79 22 2c 74 6f 3a 22 73 74 6f 6e 65 22 7d 29 2c 74 68 69 73 2e 73 74 6f 6e 65 7d 2c 67 65 74 20 74 72 75 65 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 74 72 75 65 47 72 61 79 22 2c 74 6f 3a 22 6e 65 75 74 72 61 6c 22 7d 29 2c 74 68 69 73 2e 6e 65 75 74 72 61 6c 7d 2c 67 65 74 20 63 6f 6f 6c 47 72 61 79 28 29 7b 72 65 Data Ascii: lue(){return qr({version:"v2.2",from:"lightBlue",to:"sky"}),this.sky},get warmGray(){return qr({version:"v3.0",from:"warmGray",to:"stone"}),this.stone},get trueGray(){return qr({version:"v3.0",from:"trueGray",to:"neutral"}),this.neutral},get coolGray(){re

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:39 UTC	632	OUT	GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:39 UTC	620	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:39 GMT Content-Type: text/javascript Content-Length: 383981 Connection: close CF-Ray: 925e701ebc1d49c1-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 387679 Cache-Control: public, max-age=31536000 Last-Modified: Fri, 21 Mar 2025 00:52:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: * Content-Digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=: X-Content-Type-Options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:39 UTC	749	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 5b 22 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 22 5d 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 Data Ascii: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["lottie-player"]={})}(this,(function(exports){"use strict";f
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 2c 64 6f 6e 65 3a 65 7d 7d 29 29 7d 72 65 74 75 72 6e 20 41 73 79 6e 63 46 72 6f 6d 53 79 6e 63 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 73 3d 74 2c 74 68 69 73 2e 6e 3d 74 2e 6e 65 78 74 7d 2c 41 73 79 6e 63 46 72 6f 6d 53 79 6e 63 49 74 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 3a 6e 75 6c 6c 2c 6e 3a 6e 75 6c 6c 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2e 6e 2e 61 70 70 6c 79 28 74 68 69 73 2e 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 72 65 74 75 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 73 2e 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d Data Ascii: on(t){return{value:t,done:e}}))}return AsyncFromSyncIterator=function(t){this.s=t,this.n=t.next},AsyncFromSyncIterator.prototype={s:null,n:null,next:function(){return e(this.n.apply(this.s,arguments))},return:function(t){var r=this.s.return;return void 0=
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 6f 77 6e 4b 65 79 73 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 65 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 74 29 7b 72 65 74 75 72 6e 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 Data Ascii: )):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):ownKeys(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))}))}return t}function _typeof(t){return _typeof="func
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 69 74 56 61 6c 75 65 28 74 29 7b 74 68 69 73 2e 77 72 61 70 70 65 64 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 28 74 29 7b 76 61 72 20 65 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 72 29 7b 74 72 79 7b 76 61 72 20 61 3d 74 5b 65 5d 28 72 29 2c 6e 3d 61 2e 76 61 6c 75 65 2c 6f 3d 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 41 77 61 69 74 56 61 6c 75 65 3b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6f 3f 6e 2e 77 72 61 70 70 65 64 3a 6e 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 3f 69 28 22 72 65 74 75 72 6e 22 3d 3d 3d 65 3f 22 72 65 74 75 72 6e 22 3a 22 6e 65 78 74 22 2c 74 29 3a 73 28 61 2e 64 6f 6e 65 3f 22 72 65 74 75 72 6e 22 3a 22 6e 6f 72 6d 61 6c 22 2c 74 29 7d 29 2c 28 66 75 6e 63 Data Ascii: itValue(t){this.wrapped=t}function _AsyncGenerator(t){var e,r;function i(e,r){try{var a=t[e](r),n=a.value,o=n instanceof _AwaitValue;Promise.resolve(o?n.wrapped:n).then((function(t){o?i("return"===e?"return":"next",t):s(a.done?"return":"normal",t)}),(func
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 6f 2e 64 6f 6e 65 3f 65 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 69 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 61 73 79 6e 63 54 6f 47 65 6e 65 72 61 74 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 76 61 72 20 61 3d 74 2e 61 70 70 6c 79 28 65 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 61 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 53 74 65 70 28 61 2c 69 2c 73 2c 6e 2c 6f 2c 22 6e 65 78 74 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 61 73 79 6e 63 Data Ascii: {return void r(t)}o.done?e(l):Promise.resolve(l).then(i,s)}function _asyncToGenerator(t){return function(){var e=this,r=arguments;return new Promise((function(i,s){var a=t.apply(e,r);function n(t){asyncGeneratorStep(a,i,s,n,o,"next",t)}function o(t){async
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 72 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 78 74 65 6e 64 73 28 29 7b 72 65 74 75 72 6e 20 5f 65 78 74 65 6e 64 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 69 Data Ascii: .defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function _extends(){return _extends=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var r=arguments[e];for(var i in r)Object.prototype.hasOwnProperty.call(r,i
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 5f 5f 3d 65 2c 74 7d 2c 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 73 4e 61 74 69 76 65 52 65 66 6c 65 63 74 43 6f 6e 73 74 72 75 63 74 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 7c 7c 21 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 72 65 74 75 72 6e 21 31 3b 69 66 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 78 79 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 Data Ascii: __=e,t},_setPrototypeOf(t,e)}function _isNativeReflectConstruct(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.constru
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 52 65 71 75 69 72 65 57 69 6c 64 63 61 72 64 43 61 63 68 65 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 65 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 72 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 72 65 74 75 72 6e 28 5f 67 65 74 52 65 71 75 69 72 65 57 69 6c 64 63 61 72 64 43 61 63 68 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3f 72 3a 65 7d 29 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 57 69 6c 64 63 61 72 64 28 74 2c 65 29 7b 69 66 28 21 65 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 Data Ascii: __esModule?t:{default:t}}function _getRequireWildcardCache(t){if("function"!=typeof WeakMap)return null;var e=new WeakMap,r=new WeakMap;return(_getRequireWildcardCache=function(t){return t?r:e})(t)}function _interopRequireWildcard(t,e){if(!e&&t&&t.__esMod
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 69 7a 65 64 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 2c 65 29 7b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 72 69 Data Ascii: ized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}function _possibleConstructorReturn(t,e){if(e&&("object"==typeof e\|\|"function"==typeof e))return e;if(void 0!==e)throw new TypeError("Deri
2025-03-25 12:33:39 UTC	1369	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 73 65 74 28 74 2c 65 2c 72 2c 69 2c 73 29 7b 69 66 28 21 73 65 74 28 74 2c 65 2c 72 2c 69 7c 7c 74 29 26 26 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 66 61 69 6c 65 64 20 74 6f 20 73 65 74 20 70 72 6f 70 65 72 74 79 22 29 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 61 67 67 65 64 54 65 6d 70 6c 61 74 65 4c 69 74 65 72 61 6c 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 74 2e 73 6c 69 63 65 28 30 29 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 7b 72 61 77 3a 7b 76 61 6c 75 65 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 65 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 61 67 67 65 64 54 65 6d Data Ascii: )}function _set(t,e,r,i,s){if(!set(t,e,r,i\|\|t)&&s)throw new Error("failed to set property");return r}function _taggedTemplateLiteral(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.defineProperties(t,{raw:{value:Object.freeze(e)}}))}function _taggedTem

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:39 UTC	650	OUT	GET /@splinetool/viewer@0.9.414/build/spline-viewer.js HTTP/1.1 Host: unpkg.com Connection: keep-alive Origin: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:40 UTC	663	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:40 GMT Content-Type: text/javascript Content-Length: 1695626 Connection: close CF-Ray: 925e7021df670fa3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 2004 Cache-Control: public, max-age=31536000 Last-Modified: Tue, 25 Mar 2025 12:00:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: * Content-Digest: sha256=:RUdpSLusmJa6MUgpDCfWikuLb0VIEJn1usm2L6t1rPg=: Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 76 61 72 20 41 45 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 4d 45 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 56 72 3d 28 65 2c 74 2c 69 2c 72 29 3d 3e 7b 66 6f 72 28 76 61 72 20 73 3d 72 3e 31 3f 76 6f 69 64 20 30 3a 72 3f 4d 45 28 74 2c 69 29 3a 74 2c 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 2c 61 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 61 3d 65 5b 6e 5d 29 26 26 28 73 3d 28 72 3f 61 28 74 2c 69 2c 73 29 3a 61 28 73 29 29 7c 7c 73 29 3b 72 65 74 75 72 6e 20 72 26 26 73 26 26 41 45 28 74 2c 69 2c 73 29 2c 73 7d 3b 76 61 72 20 45 45 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 78 76 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 43 45 3d 4f Data Ascii: var AE=Object.defineProperty;var ME=Object.getOwnPropertyDescriptor;var Vr=(e,t,i,r)=>{for(var s=r>1?void 0:r?ME(t,i):t,n=e.length-1,a;n>=0;n--)(a=e[n])&&(s=(r?a(t,i,s):a(s))\|\|s);return r&&s&&AE(t,i,s),s};var EE=Object.create,xv=Object.defineProperty,CE=O
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 74 35 33 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 29 2b 28 63 28 29 2a 32 30 39 37 31 35 32 7c 30 29 2a 31 31 31 30 32 32 33 30 32 34 36 32 35 31 35 36 35 65 2d 33 32 7d 2c 63 2e 76 65 72 73 69 6f 6e 3d 22 41 6c 65 61 20 30 2e 39 22 2c 63 2e 61 72 67 73 3d 73 2c 63 2e 65 78 70 6f 72 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 6e 2c 61 2c 6f 2c 6c 5d 7d 2c 63 2e 69 6d 70 6f 72 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 6e 3d 2b 75 5b 30 5d 7c 7c 30 2c 61 3d 2b 75 5b 31 5d 7c 7c 30 2c 6f 3d 2b 75 5b 32 5d 7c 7c 30 2c 6c 3d 2b 75 5b 33 5d 7c 7c 30 7d 2c 63 7d 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 66 75 6e 63 74 Data Ascii: t53=function(){return c()+(c()2097152\|0)11102230246251565e-32},c.version="Alea 0.9",c.args=s,c.exportState=function(){return[n,a,o,l]},c.importState=function(u){n=+u[0]\|\|0,a=+u[1]\|\|0,o=+u[2]\|\|0,l=+u[3]\|\|0},c}(Array.prototype.slice.call(arguments))}funct
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 6f 72 28 70 3d 6d 2f 67 2c 68 3d 43 3b 68 3c 5f 3b 68 2b 2b 29 53 5b 68 5d 5b 6c 5d 3d 53 5b 68 5d 5b 6c 5d 2b 70 2a 53 5b 68 5d 5b 43 5d 7d 66 6f 72 28 44 5b 43 5d 3d 66 2c 6d 3d 30 2c 6c 3d 64 3b 6c 3c 62 3b 6c 2b 2b 29 6d 2b 3d 4d 61 74 68 2e 70 6f 77 28 53 5b 43 5d 5b 6c 5d 2c 32 29 3b 69 66 28 6d 3c 6f 29 66 3d 30 3b 65 6c 73 65 7b 66 6f 72 28 67 3d 28 70 3d 53 5b 43 5d 5b 43 2b 31 5d 29 2a 28 66 3d 70 3c 30 3f 4d 61 74 68 2e 73 71 72 74 28 6d 29 3a 2d 4d 61 74 68 2e 73 71 72 74 28 6d 29 29 2d 6d 2c 53 5b 43 5d 5b 43 2b 31 5d 3d 70 2d 66 2c 6c 3d 64 3b 6c 3c 62 3b 6c 2b 2b 29 41 5b 6c 5d 3d 53 5b 43 5d 5b 6c 5d 2f 67 3b 66 6f 72 28 6c 3d 64 3b 6c 3c 5f 3b 6c 2b 2b 29 7b 66 6f 72 28 6d 3d 30 2c 68 3d 64 3b 68 3c 62 3b 68 2b 2b 29 6d 2b 3d 53 5b 6c 5d Data Ascii: or(p=m/g,h=C;h<_;h++)S[h][l]=S[h][l]+pS[h][C]}for(D[C]=f,m=0,l=d;l<b;l++)m+=Math.pow(S[C][l],2);if(m<o)f=0;else{for(g=(p=S[C][C+1])(f=p<0?Math.sqrt(m):-Math.sqrt(m))-m,S[C][C+1]=p-f,l=d;l<b;l++)A[l]=S[C][l]/g;for(l=d;l<_;l++){for(m=0,h=d;h<b;h++)m+=S[l]
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 2a 28 79 2b 78 29 2b 28 28 66 3d 41 5b 68 2d 31 5d 29 2d 28 67 3d 41 5b 68 5d 29 29 2a 28 66 2b 67 29 29 2f 28 32 2a 67 2a 79 29 2c 66 3d 4d 61 74 68 2e 73 71 72 74 28 70 2a 70 2b 31 29 2c 70 3d 28 28 76 2d 78 29 2a 28 76 2b 78 29 2b 67 2a 28 79 2f 28 70 3c 30 3f 70 2d 66 3a 70 2b 66 29 2d 67 29 29 2f 76 2c 43 3d 64 2b 28 6d 3d 75 3d 31 29 3b 43 3c 68 2b 31 3b 43 2b 2b 29 7b 69 66 28 66 3d 41 5b 43 5d 2c 79 3d 44 5b 43 5d 2c 67 3d 6d 2a 66 2c 66 2a 3d 75 2c 78 3d 4d 61 74 68 2e 73 71 72 74 28 70 2a 70 2b 67 2a 67 29 2c 70 3d 76 2a 28 75 3d 70 2f 28 41 5b 43 2d 31 5d 3d 78 29 29 2b 66 2a 28 6d 3d 67 2f 78 29 2c 66 3d 2d 76 2a 6d 2b 66 2a 75 2c 67 3d 79 2a 6d 2c 79 2a 3d 75 2c 6e 29 66 6f 72 28 6c 3d 30 3b 6c 3c 62 3b 6c 2b 2b 29 76 3d 77 5b 6c 5d 5b 43 2d Data Ascii: (y+x)+((f=A[h-1])-(g=A[h]))(f+g))/(2gy),f=Math.sqrt(pp+1),p=((v-x)(v+x)+g(y/(p<0?p-f:p+f)-g))/v,C=d+(m=u=1);C<h+1;C++){if(f=A[C],y=D[C],g=mf,f=u,x=Math.sqrt(pp+gg),p=v(u=p/(A[C-1]=x))+f(m=g/x),f=-vm+fu,g=ym,y*=u,n)for(l=0;l<b;l++)v=w[l][C-
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 7d 61 5b 73 5d 3d 6c 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2c 61 3d 6e 2e 64 61 74 61 2c 6f 3d 6e 2e 63 6f 6d 70 61 72 65 2c 6c 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3e 3e 31 2c 68 3d 61 5b 73 5d 3b 73 3c 6c 3b 29 7b 76 61 72 20 64 3d 28 73 3c 3c 31 29 2b 31 2c 63 3d 61 5b 64 5d 2c 75 3d 64 2b 31 3b 69 66 28 75 3c 74 68 69 73 2e 6c 65 6e 67 74 68 26 26 6f 28 61 5b 75 5d 2c 63 29 3c 30 26 26 28 64 3d 75 2c 63 3d 61 5b 75 5d 29 2c 6f 28 63 2c 68 29 3e 3d 30 29 62 72 65 61 6b 3b 61 5b 73 5d 3d 63 2c 73 3d 64 7d 61 5b 73 5d 3d 68 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 73 2c 6e 29 7b 72 65 74 75 72 6e 20 73 3c 6e 3f 2d 31 3a 73 3e 6e 3f 31 3a 30 7d 72 65 74 75 72 Data Ascii: }a[s]=l},i.prototype._down=function(s){for(var n=this,a=n.data,o=n.compare,l=this.length>>1,h=a[s];s<l;){var d=(s<<1)+1,c=a[d],u=d+1;if(u<this.length&&o(a[u],c)<0&&(d=u,c=a[u]),o(c,h)>=0)break;a[s]=c,s=d}a[s]=h};function r(s,n){return s<n?-1:s>n?1:0}retur
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 31 3b 6d 3c 76 3b 79 3d 6d 2b 2b 29 7b 76 61 72 20 78 3d 67 5b 6d 5d 2c 62 3d 67 5b 79 5d 3b 78 5b 31 5d 3e 64 21 3d 62 5b 31 5d 3e 64 26 26 68 3c 28 62 5b 30 5d 2d 78 5b 30 5d 29 2a 28 64 2d 78 5b 31 5d 29 2f 28 62 5b 31 5d 2d 78 5b 31 5d 29 2b 78 5b 30 5d 26 26 28 75 3d 21 75 29 2c 70 3d 4d 61 74 68 2e 6d 69 6e 28 70 2c 6c 28 68 2c 64 2c 78 2c 62 29 29 7d 72 65 74 75 72 6e 20 70 3d 3d 3d 30 3f 30 3a 28 75 3f 31 3a 2d 31 29 2a 4d 61 74 68 2e 73 71 72 74 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 68 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 63 3d 30 2c 75 3d 30 2c 70 3d 68 5b 30 5d 2c 66 3d 30 2c 67 3d 70 2e 6c 65 6e 67 74 68 2c 6d 3d 67 2d 31 3b 66 3c 67 3b 6d 3d 66 2b 2b 29 7b 76 61 72 20 76 3d 70 5b 66 5d 2c 79 3d 70 5b 6d 5d 2c 78 3d 76 5b 30 5d 2a Data Ascii: 1;m<v;y=m++){var x=g[m],b=g[y];x[1]>d!=b[1]>d&&h<(b[0]-x[0])(d-x[1])/(b[1]-x[1])+x[0]&&(u=!u),p=Math.min(p,l(h,d,x,b))}return p===0?0:(u?1:-1)Math.sqrt(p)}function o(h){for(var d=0,c=0,u=0,p=h[0],f=0,g=p.length,m=g-1;f<g;m=f++){var v=p[f],y=p[m],x=v[0]*
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 72 6e 20 75 7d 72 65 74 75 72 6e 20 75 2e 5f 76 6f 6c 75 6d 65 7d 2c 6d 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 75 3d 74 68 69 73 7c 7c 69 3b 75 2e 63 74 78 7c 7c 64 28 29 2c 75 2e 5f 6d 75 74 65 64 3d 63 2c 75 2e 75 73 69 6e 67 57 65 62 41 75 64 69 6f 26 26 75 2e 6d 61 73 74 65 72 47 61 69 6e 2e 67 61 69 6e 2e 73 65 74 56 61 6c 75 65 41 74 54 69 6d 65 28 63 3f 30 3a 75 2e 5f 76 6f 6c 75 6d 65 2c 69 2e 63 74 78 2e 63 75 72 72 65 6e 74 54 69 6d 65 29 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 75 2e 5f 68 6f 77 6c 73 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 69 66 28 21 75 2e 5f 68 6f 77 6c 73 5b 70 5d 2e 5f 77 65 62 41 75 64 69 6f 29 66 6f 72 28 76 61 72 20 66 3d 75 2e 5f 68 6f 77 6c 73 5b 70 5d 2e 5f 67 65 74 53 6f 75 6e 64 49 64 73 28 29 Data Ascii: rn u}return u._volume},mute:function(c){var u=this\|\|i;u.ctx\|\|d(),u._muted=c,u.usingWebAudio&&u.masterGain.gain.setValueAtTime(c?0:u._volume,i.ctx.currentTime);for(var p=0;p<u._howls.length;p++)if(!u._howls[p]._webAudio)for(var f=u._howls[p]._getSoundIds()
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 65 78 4f 66 28 22 43 68 72 6f 6d 65 22 29 3d 3d 3d 2d 31 2c 79 3d 66 2e 6d 61 74 63 68 28 2f 56 65 72 73 69 6f 6e 5c 2f 28 2e 2a 3f 29 20 2f 29 2c 78 3d 76 26 26 79 26 26 70 61 72 73 65 49 6e 74 28 79 5b 31 5d 2c 31 30 29 3c 31 35 3b 72 65 74 75 72 6e 20 63 2e 5f 63 6f 64 65 63 73 3d 7b 6d 70 33 3a 21 21 28 21 6d 26 26 28 70 7c 7c 75 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 6d 70 33 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 29 29 2c 6d 70 65 67 3a 21 21 70 2c 6f 70 75 73 3a 21 21 75 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 27 61 75 64 69 6f 2f 6f 67 67 3b 20 63 6f 64 65 63 73 3d 22 6f 70 75 73 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 2c 6f 67 67 3a 21 21 75 2e 63 61 6e 50 6c 61 79 54 79 70 Data Ascii: exOf("Chrome")===-1,y=f.match(/Version\/(.*?) /),x=v&&y&&parseInt(y[1],10)<15;return c._codecs={mp3:!!(!m&&(p\|\|u.canPlayType("audio/mp3;").replace(/^no$/,""))),mpeg:!!p,opus:!!u.canPlayType('audio/ogg; codecs="opus"').replace(/^no$/,""),ogg:!!u.canPlayTyp
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 2e 73 61 6d 70 6c 65 52 61 74 65 21 3d 3d 34 34 31 30 30 26 26 28 63 2e 5f 6d 6f 62 69 6c 65 55 6e 6c 6f 61 64 65 64 3d 21 30 2c 63 2e 75 6e 6c 6f 61 64 28 29 29 2c 63 2e 5f 73 63 72 61 74 63 68 42 75 66 66 65 72 3d 63 2e 63 74 78 2e 63 72 65 61 74 65 42 75 66 66 65 72 28 31 2c 31 2c 32 32 30 35 30 29 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 66 6f 72 28 3b 63 2e 5f 68 74 6d 6c 35 41 75 64 69 6f 50 6f 6f 6c 2e 6c 65 6e 67 74 68 3c 63 2e 68 74 6d 6c 35 50 6f 6f 6c 53 69 7a 65 3b 29 74 72 79 7b 76 61 72 20 66 3d 6e 65 77 20 41 75 64 69 6f 3b 66 2e 5f 75 6e 6c 6f 63 6b 65 64 3d 21 30 2c 63 2e 5f 72 65 6c 65 61 73 65 48 74 6d 6c 35 41 75 64 69 6f 28 66 29 7d 63 61 74 63 68 7b 63 2e 6e 6f 41 75 64 69 6f 3d 21 30 3b 62 72 65 61 6b 7d 66 6f 72 28 Data Ascii: .sampleRate!==44100&&(c._mobileUnloaded=!0,c.unload()),c._scratchBuffer=c.ctx.createBuffer(1,1,22050);var u=function(p){for(;c._html5AudioPool.length<c.html5PoolSize;)try{var f=new Audio;f._unlocked=!0,c._releaseHtml5Audio(f)}catch{c.noAudio=!0;break}for(
2025-03-25 12:33:40 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 48 54 4d 4c 35 20 41 75 64 69 6f 20 70 6f 6f 6c 20 65 78 68 61 75 73 74 65 64 2c 20 72 65 74 75 72 6e 69 6e 67 20 70 6f 74 65 6e 74 69 61 6c 6c 79 20 6c 6f 63 6b 65 64 20 61 75 64 69 6f 20 6f 62 6a 65 63 74 2e 22 29 7d 29 2c 6e 65 77 20 41 75 64 69 6f 7d 2c 5f 72 65 6c 65 61 73 65 48 74 6d 6c 35 41 75 64 69 6f 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 75 3d 74 68 69 73 7c 7c 69 3b 72 65 74 75 72 6e 20 63 2e 5f 75 6e 6c 6f 63 6b 65 64 26 26 75 2e 5f 68 74 6d 6c 35 41 75 64 69 6f 50 6f 6f 6c 2e 70 75 73 68 28 63 29 2c 75 7d 2c 5f 61 75 74 6f 53 75 73 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 21 28 21 63 2e 61 75 74 6f 53 75 73 70 65 Data Ascii: nction(){console.warn("HTML5 Audio pool exhausted, returning potentially locked audio object.")}),new Audio},_releaseHtml5Audio:function(c){var u=this\|\|i;return c._unlocked&&u._html5AudioPool.push(c),u},_autoSuspend:function(){var c=this;if(!(!c.autoSuspe

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:42 UTC	641	OUT	GET /packages/lf20_zw0djhar.json HTTP/1.1 Host: assets5.lottiefiles.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:42 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:42 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 1800 Last-Modified: Sat, 14 May 2022 08:16:32 GMT x-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA Cache-Control: max-age=315360000 ETag: W/"c17f786d1eda65296df13ddcbbe8e0b1" Vary: Origin,accept-encoding X-Cache: Hit from cloudfront Via: 1.1 11913fe47164f540bffea3dbbb63de92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P8 X-Amz-Cf-Id: 4_Af9zhiqRFdBAPkTb0Vrv8ZxXJxzj_2xYERkEwsAcXIyxd9I1Ijkg== Age: 184 cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 925e7030ed7172a4-EWR
2025-03-25 12:33:42 UTC	649	IN	Data Raw: 37 63 63 65 0d 0a 7b 22 76 22 3a 22 35 2e 36 2e 36 22 2c 22 66 72 22 3a 32 34 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 32 30 2c 22 77 22 3a 33 32 30 30 2c 22 68 22 3a 33 32 30 30 2c 22 6e 6d 22 3a 22 57 61 76 79 5f 47 65 6e 2d 30 31 5f 53 69 6e 67 6c 65 2d 30 37 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 5d 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 68 61 69 72 20 70 61 72 74 22 2c 22 70 61 72 65 6e 74 22 3a 38 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b Data Ascii: 7cce{"v":"5.6.6","fr":24,"ip":0,"op":120,"w":3200,"h":3200,"nm":"Wavy_Gen-01_Single-07","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"hair part","parent":8,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 2d 39 2e 31 32 2c 38 2e 31 30 34 5d 2c 5b 31 38 2e 35 36 38 2c 33 38 2e 35 38 33 5d 2c 5b 33 34 2e 32 36 32 2c 34 36 2e 32 32 31 5d 2c 5b 34 35 2e 34 39 39 2c 32 2e 31 37 32 5d 2c 5b 35 34 2e 39 37 33 2c 31 35 2e 31 32 39 5d 2c 5b 33 2e 30 38 38 2c 2d 32 2e 34 36 38 5d 2c 5b 2d 35 35 2e 30 36 34 2c 2d 34 37 2e 35 35 39 5d 2c 5b 2d 36 2e 33 33 37 2c 2d 34 2e 38 36 32 5d 2c 5b 2d 34 34 2e 38 34 39 2c 2d 32 38 2e 33 35 33 5d 5d 2c 22 76 22 3a 5b 5b 2d 32 30 32 2e 36 33 2c 2d 31 35 37 2e 33 32 39 5d 2c 5b 2d 31 36 36 2e 36 38 34 2c 2d 35 35 2e 30 33 5d 2c 5b 2d 31 33 32 2e 34 36 39 2c 31 31 2e 34 32 38 5d 2c 5b 32 39 2e 39 31 2c 31 30 30 2e 30 38 37 5d 2c 5b 31 32 30 2e 32 37 37 2c 39 35 2e 35 38 38 5d 2c 5b 32 30 35 2e 30 37 34 2c 31 35 39 2e 32 30 36 5d 2c Data Ascii: -9.12,8.104],[18.568,38.583],[34.262,46.221],[45.499,2.172],[54.973,15.129],[3.088,-2.468],[-55.064,-47.559],[-6.337,-4.862],[-44.849,-28.353]],"v":[[-202.63,-157.329],[-166.684,-55.03],[-132.469,11.428],[29.91,100.087],[120.277,95.588],[205.074,159.206],
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 66 22 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 30 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 30 2e 31 39 32 2c 30 2e 30 39 38 2c 30 2e 32 36 37 2c 30 2e 35 2c 30 2e 33 30 36 2c 30 2e 31 36 31 2c 30 2e 33 36 35 2c 31 2c 30 2e 34 32 2c 30 2e 32 32 34 2c 30 2e 34 36 33 5d 2c 22 69 78 22 3a 39 7d 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 36 30 37 2e 36 31 2c 33 33 30 2e 34 34 5d 2c 22 69 78 22 3a 35 7d 2c 22 65 22 3a 7b 22 61 22 3a 30 Data Ascii: ":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"gf","o":{"a":0,"k":100,"ix":10},"r":1,"bm":0,"g":{"p":3,"k":{"a":0,"k":[0,0.192,0.098,0.267,0.5,0.306,0.161,0.365,1,0.42,0.224,0.463],"ix":9}},"s":{"a":0,"k":[607.61,330.44],"ix":5},"e":{"a":0
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 2e 36 38 5d 2c 5b 31 32 30 2e 37 34 39 2c 31 39 39 2e 31 30 39 5d 2c 5b 31 32 32 2e 39 38 37 2c 31 39 35 2e 38 33 36 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 66 22 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 30 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 30 2e 36 36 37 2c 30 2e 35 30 32 2c 30 2e 39 37 36 2c 30 2e 34 39 38 2c 30 2e 35 32 34 2c 30 2e 34 34 39 2c 30 2e 39 31 2c 30 2e 39 39 36 2c 30 2e 33 38 2c 30 2e 33 Data Ascii: .68],[120.749,199.109],[122.987,195.836]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"gf","o":{"a":0,"k":100,"ix":10},"r":1,"bm":0,"g":{"p":3,"k":{"a":0,"k":[0,0.667,0.502,0.976,0.498,0.524,0.449,0.91,0.996,0.38,0.3
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 30 33 5d 2c 5b 32 36 2e 30 38 2c 2d 35 2e 35 32 31 5d 2c 5b 2d 31 2e 38 39 31 2c 35 39 2e 32 32 31 5d 5d 2c 22 6f 22 3a 5b 5b 31 33 2e 38 32 33 2c 36 2e 38 39 35 5d 2c 5b 34 2e 32 33 31 2c 35 2e 33 38 34 5d 2c 5b 2d 33 2e 34 39 38 2c 38 2e 32 34 38 5d 2c 5b 2d 34 30 2e 32 34 36 2c 38 2e 35 32 32 5d 2c 5b 31 2e 32 36 38 2c 2d 33 39 2e 36 39 32 5d 5d 2c 22 76 22 3a 5b 5b 2d 33 2e 31 39 38 2c 2d 31 30 30 2e 37 30 37 5d 2c 5b 33 38 2e 32 37 35 2c 2d 38 30 2e 30 32 38 5d 2c 5b 36 35 2e 39 38 35 2c 35 34 2e 38 37 39 5d 2c 5b 32 33 2e 31 38 33 2c 39 39 2e 38 33 33 5d 2c 5b 2d 37 33 2e 38 30 32 2c 2d 36 2e 30 33 34 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 Data Ascii: 03],[26.08,-5.521],[-1.891,59.221]],"o":[[13.823,6.895],[4.231,5.384],[-3.498,8.248],[-40.246,8.522],[1.268,-39.692]],"v":[[-3.198,-100.707],[38.275,-80.028],[65.985,54.879],[23.183,99.833],[-73.802,-6.034]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vect
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 30 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 31 2c 30 2e 37 36 39 2c 30 2e 32 36 37 2c 30 2e 34 39 38 2c 30 2e 39 37 36 2c 30 2e 36 30 32 2c 30 2e 33 30 32 2c 30 2e 39 39 36 2c 30 2e 39 35 33 2c 30 2e 34 33 35 2c 30 2e 33 33 37 5d 2c 22 69 78 22 3a 39 7d 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 34 32 2e 32 30 36 2c 2d 31 36 2e 38 38 31 5d 2c 22 69 78 22 3a 35 7d 2c 22 65 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 2d 31 32 38 2e 33 38 36 2c 31 30 36 2e 30 32 37 5d 2c 22 69 78 22 3a 36 7d 2c 22 74 22 3a 31 2c 22 6e 6d 22 3a 22 47 72 61 64 69 65 6e 74 20 46 69 6c 6c 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 Data Ascii: ,"k":100,"ix":10},"r":1,"bm":0,"g":{"p":3,"k":{"a":0,"k":[0,1,0.769,0.267,0.498,0.976,0.602,0.302,0.996,0.953,0.435,0.337],"ix":9}},"s":{"a":0,"k":[42.206,-16.881],"ix":5},"e":{"a":0,"k":[-128.386,106.027],"ix":6},"t":1,"nm":"Gradient Fill 1","mn":"ADBE V
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 39 31 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 31 30 35 2e 35 34 37 2c 22 73 22 3a 5b 2d 36 5d 7d 2c 7b 22 74 22 3a 31 31 39 2c 22 73 22 3a 5b 31 31 5d 7d 5d 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 35 34 2e 32 36 34 2c 31 36 38 2e 38 32 31 2c 30 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 37 33 2c 2d 35 36 2c 30 5d 2c 22 69 78 22 3a 31 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 30 30 2c 31 30 30 2c 31 30 30 5d 2c 22 69 78 22 3a 36 7d 7d 2c 22 61 6f 22 3a 30 2c 22 73 68 61 70 65 73 22 3a 5b 7b 22 74 79 22 3a 22 67 72 22 2c 22 69 74 22 3a 5b 7b 22 69 6e 64 22 3a 30 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 Data Ascii: y":[1]},"o":{"x":[0.191],"y":[0]},"t":105.547,"s":[-6]},{"t":119,"s":[11]}],"ix":10},"p":{"a":0,"k":[54.264,168.821,0],"ix":2},"a":{"a":0,"k":[173,-56,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","i
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 3a 37 7d 2c 22 73 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 34 7d 2c 22 73 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 35 7d 2c 22 6e 6d 22 3a 22 54 72 61 6e 73 66 6f 72 6d 22 7d 5d 2c 22 6e 6d 22 3a 22 66 6f 72 65 61 72 6d 20 52 22 2c 22 6e 70 22 3a 32 2c 22 63 69 78 22 3a 32 2c 22 62 6d 22 3a 30 2c 22 69 78 22 3a 31 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 34 34 2c 22 73 74 22 3a 30 2c 22 62 6d 22 3a 30 7d 2c 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 35 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 74 61 62 6c 65 74 22 2c 22 70 61 72 65 6e 74 22 3a 33 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 Data Ascii: :7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},"nm":"Transform"}],"nm":"forearm R","np":2,"cix":2,"bm":0,"ix":1,"mn":"ADBE Vector Group","hd":false}],"ip":0,"op":144,"st":0,"bm":0},{"ddd":0,"ind":5,"ty":4,"nm":"tablet","parent":3,"sr":1,"ks":{"o"
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 37 7d 2c 22 73 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 34 7d 2c 22 73 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 35 7d 2c 22 6e 6d 22 3a 22 54 72 61 6e 73 66 6f 72 6d 22 7d 5d 2c 22 6e 6d 22 3a 22 47 72 6f 75 70 20 31 22 2c 22 6e 70 22 3a 32 2c 22 63 69 78 22 3a 32 2c 22 62 6d 22 3a 30 2c 22 69 78 22 3a 31 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 72 22 2c 22 69 74 22 3a 5b 7b 22 69 6e 64 22 3a 30 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 31 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 2d 34 2e 32 33 33 2c 2d 31 31 2e 34 34 37 5d 2c 5b 30 Data Ascii: :0,"k":100,"ix":7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},"nm":"Transform"}],"nm":"Group 1","np":2,"cix":2,"bm":0,"ix":1,"mn":"ADBE Vector Group","hd":false},{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[-4.233,-11.447],[0
2025-03-25 12:33:42 UTC	1369	IN	Data Raw: 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 32 35 36 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 33 33 33 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 30 2e 39 31 35 2c 22 73 22 3a 5b 31 35 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 36 34 39 5d 2c 22 79 22 3a 5b 2d 30 2e 36 39 36 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 33 31 31 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 31 31 2e 37 37 31 2c 22 73 22 3a 5b 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 36 36 37 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 33 32 36 5d 2c 22 79 22 3a 5b 2d 31 2e 35 37 38 5d 7d 2c 22 74 22 3a 32 31 2e Data Ascii: "a":0,"k":100,"ix":11},"r":{"a":1,"k":[{"i":{"x":[0.256],"y":[1]},"o":{"x":[0.333],"y":[0]},"t":0.915,"s":[15]},{"i":{"x":[0.649],"y":[-0.696]},"o":{"x":[0.311],"y":[0]},"t":11.771,"s":[0]},{"i":{"x":[0.667],"y":[1]},"o":{"x":[0.326],"y":[-1.578]},"t":21.

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:42 UTC	635	OUT	GET /turnstile/v0/api.js?onload=onTurnstileLoad HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:43 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 12:33:43 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 925e70345e5a6dc6-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:42 UTC	642	OUT	GET /mAXoIkgd8xZRsO2j/scene.splinecode HTTP/1.1 Host: prod.spline.design Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:43 UTC	449	IN	HTTP/1.1 403 Forbidden Content-Type: application/xml Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, DELETE, HEAD Server: AmazonS3 Date: Tue, 25 Mar 2025 12:33:42 GMT X-Cache: Error from cloudfront Via: 1.1 282af6dbb4c478f6651ee2a13940179e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: QSZ6b6UF34zODAdGMexDA8Y5QBAzTXstvtMfa_PkESJX3Rrfjkk9mw==
2025-03-25 12:33:43 UTC	117	IN	Data Raw: 36 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e 0d 0a Data Ascii: 6f<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message></Error>
2025-03-25 12:33:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:43 UTC	627	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:43 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:43 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 925e70380f8bde98-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 76 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 76 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 76 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,v,h;try{for(a=a.call(e);!(c=(v=a.next()).done)&&(o.push(v.value),!(t&&o.length===t));c=!0)
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 76 26 26 28 76 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;v&&(v=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 48 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 2c 65 2e 4c 69 67 68 74 3d 22 6c 69 67 68 74 22 2c 65 2e 44 61 72 6b 3d 22 64 61 72 6b 22 7d 29 28 48 65 7c 7c 28 48 65 3d 7b 7d 29 29 3b 76 61 72 20 43 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 65 72 69 66 79 69 6e 67 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 4f 76 65 72 72 75 6e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 61 69 6c 75 72 65 57 6f 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 66 61 69 6c 75 72 65 2d 77 6f Data Ascii: );var He;(function(e){e.Auto="auto",e.Light="light",e.Dark="dark"})(He\|\|(He={}));var Ce;(function(e){e.Verifying="verifying",e.VerifyingHavingTroubles="verifying-having-troubles",e.VerifyingOverrun="verifying-overrun",e.FailureWoHavingTroubles="failure-wo
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 2c 65 2e 52 65 64 69 72 65 63 74 69 6e 67 Data Ascii: ute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_missing_aux",e.Redirecting
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 4c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 Data Ascii: s;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearanceLevel!=="default"&&t.set("clearance_level",e.params._debugSite
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 46 65 65 64 62 61 63 6b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 2c 6c 2c 76 3d 4c 28 4d 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 73 Data Ascii: guage,"/").concat(_)}var St=function(e){var t,a,o=window.innerWidth<400,c=e.state===Ce.FailureFeedback\|\|e.state===Ce.FailureHavingTroubles,l,v=L(Mr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),h,s
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 61 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 4f 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 76 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 76 26 26 65 65 28 70 2c 76 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 4f 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 Data Ascii: eflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Oe(e,t,a){return Be()?Oe=Reflect.construct:Oe=function(c,l,v){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return v&&ee(p,v.prototype),p},Oe.apply(null,argu
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 66 72 28 61 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 71 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 71 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 71 65 29 2e 63 6f 6e 63 61 74 28 65 29 Data Ascii: ;function g(e,t){var a="[Cloudflare Turnstile] ".concat(e,".");throw new fr(a,t)}function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(qe)?e.substring(qe.length):null}function $(e){return"".concat(qe).concat(e)
2025-03-25 12:33:43 UTC	1369	IN	Data Raw: 67 68 74 3d 22 31 30 30 76 68 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c Data Ascii: ght="100vh",s.style.top="0",s.style.left="0",s.style.transformOrigin="center center",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.vertical

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:44 UTC	869	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:44 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28595 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-B4SmRanQUmZ7BvYv' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-25 12:33:44 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-25 12:33:44 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 42 34 53 6d 52 61 6e 51 55 6d 5a 37 42 76 59 76 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-B4SmRanQUmZ7BvYv' 'unsafe-
2025-03-25 12:33:44 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-25 12:33:44 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-25 12:33:44 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-25 12:33:44 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-25 12:33:44 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-25 12:33:44 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-25 12:33:44 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-25 12:33:44 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:45 UTC	773	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925e703c3c2242fb&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:46 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:46 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115526 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 925e70472cf44307-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:46 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflar
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 Data Ascii: ":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_failure":"Error","turnstile_expired":"Ex
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 50 2c 65 51 2c 65 55 2c 65 56 2c 65 57 2c 65 5a 2c 66 32 2c 66 34 2c 66 35 2c 66 36 2c 66 69 2c 66 75 2c 66 Data Ascii: le_feedback_report":"Having%20trouble%3F"},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_guideline":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eP,eQ,eU,eV,eW,eZ,f2,f4,f5,f6,fi,fu,f
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 68 7d 2c 27 6a 6b 6b 5a 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 27 77 6e 5a 6f 6a 27 3a 67 4b 28 31 30 30 39 29 2c 27 67 4d 4e 50 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 55 4f 5a 44 6a 27 3a 67 4b 28 38 33 32 29 2c 27 71 49 41 6e 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 55 66 4c 70 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 27 62 6e 56 51 4e 27 3a 67 4b 28 31 35 31 37 29 2c 27 4a 52 6a 64 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4a 42 75 64 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 Data Ascii: h},'jkkZq':function(h,i){return h!==i},'wnZoj':gK(1009),'gMNPz':function(h,i){return h<<i},'UOZDj':gK(832),'qIAnZ':function(h,i){return h+i},'UfLpg':function(h,i){return h!==i},'bnVQN':gK(1517),'JRjde':function(h,i){return h==i},'JBudO':function(h,i){retu
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 35 39 34 29 5d 28 64 5b 67 4d 28 31 32 30 34 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 67 4d 28 39 36 39 29 5d 28 30 29 2c 78 3d 30 3b 38 3e 78 3b 49 3d 64 5b 67 4d 28 31 31 35 36 29 5d 28 49 3c 3c 31 2c 31 26 4e 29 2c 4a 3d 3d 64 5b 67 4d 28 31 32 33 38 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 67 4d 28 35 39 34 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 20 69 66 28 67 4d 28 31 33 31 32 29 21 3d 3d 67 4d 28 36 39 32 29 29 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 67 4d 28 31 36 30 32 29 5d 28 49 2c 31 29 7c 4e 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 67 4d 28 35 39 34 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b Data Ascii: 594)](d[gM(1204)](o,I)),I=0):J++,x++);for(N=D[gM(969)](0),x=0;8>x;I=d[gM(1156)](I<<1,1&N),J==d[gM(1238)](j,1)?(J=0,H[gM(594)](o(I)),I=0):J++,N>>=1,x++);}else if(gM(1312)!==gM(692)){for(N=1,x=0;x<G;I=d[gM(1602)](I,1)\|N,j-1==J?(J=0,H[gM(594)](o(I)),I=0):J++
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 39 29 5d 3d 67 4d 28 38 39 34 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 54 2e 69 64 3d 73 5b 67 4d 28 35 35 36 29 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 45 5b 67 4d 28 31 32 32 34 29 5d 28 56 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 56 5b 67 4d 28 31 32 32 34 29 5d 28 54 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 54 3d 6f 5b 67 4d 28 31 35 33 31 29 5d 28 27 61 27 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 55 2e 69 64 3d 73 5b 67 4d 28 31 35 36 36 29 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 55 3d 6a 5b 67 4d 28 31 35 33 31 29 5d 28 73 5b 67 4d 28 31 30 35 37 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 56 3d 73 5b 67 4d 28 38 31 36 29 5d 28 69 Data Ascii: 9)]=gM(894);continue;case'4':T.id=s[gM(556)];continue;case'5':E[gM(1224)](V);continue;case'6':V[gM(1224)](T);continue;case'7':T=o[gM(1531)]('a');continue;case'8':U.id=s[gM(1566)];continue;case'9':U=j[gM(1531)](s[gM(1057)]);continue;case'10':V=s[gM(816)](i
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 29 5d 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 52 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 67 52 3d 67 4b 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 52 28 31 31 37 32 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 67 52 28 36 32 36 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d Data Ascii: )])})},'i':function(i,j,o,gR,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(gR=gK,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[gR(1172)](2,2),F=1;K!=F;L=H&G,H>>=1,0==H&&(H=j,G=o(I++)),J\|=(d[gR(626)](0,L)?1:0)*F,F<<=1);switch(J){case 0:for(J=
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 67 4a 28 31 31 34 37 29 5d 3d 27 73 27 2c 65 50 5b 67 4a 28 31 31 35 38 29 5d 3d 27 75 27 2c 65 50 5b 67 4a 28 31 33 31 31 29 5d 3d 27 7a 27 2c 65 50 5b 67 4a 28 38 39 32 29 5d 3d 27 6e 27 2c 65 50 5b 67 4a 28 31 33 37 30 29 5d 3d 27 49 27 2c 65 50 5b 67 4a 28 31 32 38 30 29 5d 3d 27 62 27 2c 65 51 3d 65 50 2c 65 4d 5b 67 4a 28 31 32 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 67 57 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 67 57 3d 67 4a 2c 6f 3d 7b 27 61 4a 77 56 58 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 65 61 74 68 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 70 74 73 6c 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c Data Ascii: gJ(1147)]='s',eP[gJ(1158)]='u',eP[gJ(1311)]='z',eP[gJ(892)]='n',eP[gJ(1370)]='I',eP[gJ(1280)]='b',eQ=eP,eM[gJ(1207)]=function(g,h,i,j,gW,o,x,B,C,D,E,F){if(gW=gJ,o={'aJwVX':function(G,H){return G===H},'eathn':function(G,H){return G<H},'ptslK':function(G,H,
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 26 26 28 65 56 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 67 59 28 35 39 34 29 5d 28 27 6f 2e 27 2b 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 67 59 28 31 35 32 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 73 7d 29 7d 2c 65 57 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 5a 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 66 6f 72 28 67 5a 3d 67 4a 2c 66 3d 7b 27 6a 52 73 77 72 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2b 6d 7d 2c 27 79 53 44 4d 77 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2b 6d 7d 2c 27 65 44 47 72 4a 27 3a 66 75 6e 63 74 69 6f 6e Data Ascii: )](i[l[m]][o]))&&(eV(i[l[m]][o])\|\|h[n][gY(594)]('o.'+i[l[m]][o])),o++);}else h[n]=i[l[m]][gY(1524)](function(s){return'o.'+s})},eW=function(c,gZ,f,g,h,i,j,k){for(gZ=gJ,f={'jRswr':function(l,m){return l+m},'ySDMw':function(l,m){return l+m},'eDGrJ':function
2025-03-25 12:33:46 UTC	1369	IN	Data Raw: 34 29 5d 29 2c 67 5b 68 33 28 37 30 36 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 67 5b 68 33 28 37 30 36 29 5d 3d 4a 53 4f 4e 5b 68 33 28 31 30 34 37 29 5d 28 67 5b 68 33 28 37 30 36 29 5d 2c 4f 62 6a 65 63 74 5b 68 33 28 33 31 32 29 5d 28 67 5b 68 33 28 37 30 36 29 5d 29 29 3a 6b 5b 68 33 28 35 36 37 29 5d 3d 3d 3d 68 33 28 37 38 38 29 3f 67 3d 68 5b 68 33 28 34 36 30 29 5d 28 69 2c 6a 5b 68 33 28 39 31 36 29 5d 5b 68 33 28 33 38 34 29 5d 29 3a 67 5b 68 33 28 37 30 36 29 5d 3d 4a 53 4f 4e 5b 68 33 28 31 30 34 37 29 5d 28 67 5b 68 33 28 37 30 36 29 5d 29 2c 6d 3d 69 7c 7c 68 33 28 38 34 32 29 2c 6e 3d 6b 5b 68 33 28 32 32 35 29 5d 28 6b 5b 68 33 28 38 38 32 29 5d 28 6b 5b 68 33 28 38 38 32 29 5d 28 6b 5b 68 33 28 31 31 30 35 29 5d 28 68 33 Data Ascii: 4)]),g[h3(706)]instanceof Error?g[h3(706)]=JSON[h3(1047)](g[h3(706)],Object[h3(312)](g[h3(706)])):k[h3(567)]===h3(788)?g=h[h3(460)](i,j[h3(916)][h3(384)]):g[h3(706)]=JSON[h3(1047)](g[h3(706)]),m=i\|\|h3(842),n=k[h3(225)](k[h3(882)](k[h3(882)](k[h3(1105)](h3

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:45 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:46 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:46 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 925e70472a06590b-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:46 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:46 UTC	690	OUT	GET /favicon.ico HTTP/1.1 Host: pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/index.html?07237d495f5f28fd2495dc725b4de9 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:47 UTC	180	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 12:33:47 GMT Content-Type: text/html Content-Length: 27150 Connection: close Server: cloudflare CF-RAY: 925e704c2d72440b-EWR
2025-03-25 12:33:47 UTC	1189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 32 20 7b 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 25 2c 0a 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 Data Ascii: 2 { 0% { transform: translateX(0); } 10%, 50% { transform: translateX(5px); } 60% { transform: translateX(0); } 100% { transform: translateX(0px);
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 50 75 62 6c 69 63 20 41 63 63 65 73 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 3c 73 65 63 74 Data Ascii: p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/" >Public Access</a > </p> </div> </section> <sect
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 43 31 32 31 2e 30 35 33 20 31 33 2e 32 37 37 20 31 31 38 2e 32 30 34 20 31 30 2e 34 32 38 38 20 31 31 38 2e 32 30 34 20 36 2e 39 31 35 33 34 43 31 31 38 2e 32 30 34 20 33 2e 34 30 31 39 31 20 31 32 31 2e 30 35 33 20 30 2e 35 35 33 37 31 31 20 31 32 34 2e 35 36 36 20 30 2e 35 35 33 37 31 31 43 31 32 38 2e 30 38 20 30 2e 35 35 33 37 31 31 20 31 33 30 2e 39 32 38 20 33 2e 34 30 31 39 31 20 31 33 30 2e 39 32 38 20 36 2e 39 31 35 33 34 43 31 33 30 2e 39 32 38 20 31 30 2e 34 32 38 38 20 31 32 38 2e 30 38 20 31 33 2e 32 37 37 20 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 Data Ascii: <path d="M124.566 13.277C121.053 13.277 118.204 10.4288 118.204 6.91534C118.204 3.40191 121.053 0.553711 124.566 0.553711C128.08 0.553711 130.928 3.40191 130.928 6.91534C130.928 10.4288 128.08 13.277 124.566 13.277Z" fill="#0055DC
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 33 30 34 20 39 39 2e 36 31 34 39 43 37 33 2e 31 38 38 38 20 31 30 30 2e 38 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 48 37 35 2e 35 34 35 39 43 37 35 2e 35 34 35 39 20 31 30 38 2e 31 39 35 20 37 38 2e 33 33 35 33 20 39 35 2e 39 36 31 31 20 36 38 2e 36 38 36 38 20 39 34 2e 30 34 34 35 43 35 39 2e 30 33 38 34 20 39 32 2e 31 32 37 38 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 36 2e 31 37 36 20 31 31 31 2e 39 35 33 43 31 Data Ascii: 304 99.6149C73.1888 100.895 71.2559 108.195 71.2559 108.195H75.5459C75.5459 108.195 78.3353 95.9611 68.6868 94.0445C59.0384 92.1278 56.0777 105.406 56.0777 105.406Z" fill="#0055DC" /> <path d="M136.176 111.953C1
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 2e 39 34 31 20 31 32 31 2e 31 37 20 31 30 38 2e 34 30 37 43 31 32 30 2e 37 30 34 20 31 30 38 2e 38 37 32 20 31 32 30 2e 33 33 35 20 31 30 39 2e 34 32 35 20 31 32 30 2e 30 38 33 20 31 31 30 2e 30 33 34 43 31 31 39 2e 38 33 31 20 31 31 30 2e 36 34 32 20 31 31 39 2e 37 30 31 20 31 31 31 2e 32 39 35 20 31 31 39 2e 37 30 31 20 31 31 31 2e 39 35 33 56 31 31 31 2e 39 35 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 33 38 34 20 31 31 31 2e 39 35 33 43 31 30 33 2e 33 38 34 20 31 31 32 2e 36 31 32 20 31 30 33 2e 35 31 33 20 31 31 33 2e 32 36 34 20 31 30 33 2e 37 36 36 20 31 Data Ascii: .941 121.17 108.407C120.704 108.872 120.335 109.425 120.083 110.034C119.831 110.642 119.701 111.295 119.701 111.953V111.953Z" fill="#0055DC" /> <path d="M103.384 111.953C103.384 112.612 103.513 113.264 103.766 1
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 36 38 34 20 31 33 34 2e 39 39 35 20 33 31 2e 35 37 39 35 20 31 33 39 2e 37 39 32 20 33 31 2e 35 37 39 35 43 31 34 34 2e 35 38 39 20 33 31 2e 35 37 39 35 20 31 34 38 2e 34 37 38 20 33 35 2e 34 36 38 34 20 31 34 38 2e 34 37 38 20 34 30 2e 32 36 35 36 43 31 34 38 2e 34 37 38 20 34 35 2e 30 36 32 37 20 31 34 34 2e 35 38 39 20 34 38 2e 39 35 31 36 20 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 0a 20 20 20 Data Ascii: 684 134.995 31.5795 139.792 31.5795C144.589 31.5795 148.478 35.4684 148.478 40.2656C148.478 45.0627 144.589 48.9516 139.792 48.9516Z" fill="white" stroke="#0055DC" stroke-width="2" stroke-miterlimit="10"
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 32 2e 34 39 32 31 20 31 31 35 2e 36 38 20 34 31 2e 34 32 31 36 20 31 31 35 2e 36 38 20 34 30 2e 33 30 35 35 43 31 31 35 2e 36 37 38 20 33 39 2e 31 39 30 37 20 31 31 35 2e 32 33 34 20 33 38 2e 31 32 32 34 20 31 31 34 2e 34 34 35 20 33 37 2e 33 33 34 39 43 31 31 33 2e 36 35 36 20 33 36 2e 35 34 37 34 20 31 31 32 2e 35 38 36 20 33 36 2e 31 30 35 32 20 31 31 31 2e 34 37 32 20 33 36 2e 31 30 35 32 43 31 31 30 2e 33 35 38 20 33 36 2e 31 30 37 33 20 31 30 39 2e 32 39 31 20 33 36 2e 35 35 30 36 20 31 30 38 2e 35 30 34 20 33 37 2e 33 33 37 38 43 31 30 37 2e 37 31 37 20 33 38 2e 31 32 35 20 31 30 37 2e 32 37 34 20 33 39 2e 31 39 32 31 20 31 30 37 2e 32 37 31 20 34 30 2e 33 30 35 35 56 34 30 2e 33 30 35 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d Data Ascii: 2.4921 115.68 41.4216 115.68 40.3055C115.678 39.1907 115.234 38.1224 114.445 37.3349C113.656 36.5474 112.586 36.1052 111.472 36.1052C110.358 36.1073 109.291 36.5506 108.504 37.3378C107.717 38.125 107.274 39.1921 107.271 40.3055V40.3055Z" fill=
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 34 34 20 31 33 33 2e 30 32 20 31 34 36 2e 36 31 31 20 31 33 37 2e 34 31 32 20 31 34 36 2e 36 31 31 20 31 34 32 2e 38 33 31 43 31 34 36 2e 36 31 31 20 31 34 38 2e 32 34 39 20 31 34 32 2e 33 34 34 20 31 35 32 2e 36 34 31 20 31 33 37 2e 30 38 31 20 31 35 32 2e 36 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 20 6d 75 6c 74 69 70 6c 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 30 37 34 20 31 34 32 2e 38 33 31 43 31 30 33 2e 30 Data Ascii: 44 133.02 146.611 137.412 146.611 142.831C146.611 148.249 142.344 152.641 137.081 152.641Z" fill="#C5EBF5" /> </g> <g style="mix-blend-mode: multiply"> <path d="M103.074 142.831C103.0
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 2e 30 38 37 20 37 35 2e 36 33 35 48 31 34 32 2e 31 37 37 56 37 39 2e 37 33 37 39 48 31 33 37 2e 30 38 37 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 39 2e 38 35 32 20 37 35 2e 36 33 35 48 31 33 34 2e 39 33 34 56 37 39 2e 37 33 37 39 48 31 32 39 2e 38 35 32 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 Data Ascii: d="M137.087 75.635H142.177V79.7379H137.087V75.635Z" fill="#0055DC" /> <path d="M129.852 75.635H134.934V79.7379H129.852V75.635Z" fill="#0055DC" /> <path d="M137

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Windows Analysis Report
http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:46 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4224 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:46 UTC	4224	OUT	Data Raw: 53 65 4a 55 41 55 4e 55 63 55 4a 55 30 44 73 75 44 73 32 55 44 31 54 47 71 39 44 66 73 71 73 4f 79 31 6f 59 6d 73 50 56 47 55 4c 6d 54 56 73 24 73 2b 6d 71 47 62 6d 46 4e 77 62 73 66 6d 6f 62 73 6a 73 53 70 55 73 41 56 55 73 52 6f 73 52 6b 65 46 76 73 63 4a 5a 56 56 62 6f 6d 54 34 73 49 31 54 4f 73 63 35 49 31 73 71 73 54 64 4e 47 39 37 72 52 46 66 44 31 54 47 65 6f 76 55 54 77 73 2d 6c 56 37 6c 56 77 6d 37 31 44 77 74 74 45 4b 55 30 63 4e 38 2b 73 56 51 51 30 62 32 78 63 73 59 2b 73 71 52 6b 63 32 31 64 6e 32 73 55 36 66 24 74 52 33 59 32 72 6d 6d 2b 54 73 46 32 52 46 49 64 6b 73 46 68 77 59 52 34 51 52 39 4e 2b 7a 2b 36 6d 64 73 48 73 54 59 37 50 37 59 37 73 46 77 73 52 31 46 43 73 73 62 64 4c 34 2d 35 73 44 56 73 30 4d 47 73 4d 67 68 63 7a 58 4e 73 63 Data Ascii: SeJUAUNUcUJU0DsuDs2UD1TGq9DfsqsOy1oYmsPVGULmTVs$s+mqGbmFNwbsfmobsjsSpUsAVUsRosRkeFvscJZVVbomT4sI1TOsc5I1sqsTdNG97rRFfD1TGeovUTws-lV7lVwm71DwttEKU0cN8+sVQQ0b2xcsY+sqRkc21dn2sU6f$tR3Y2rmm+TsF2RFIdksFhwYR4QR9N+z+6mdsHsTY7P7Y7sFwsR1FCssbdL4-5sDVs0MGsMghczXNsc
2025-03-25 12:33:47 UTC	1115	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:47 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 241356 Connection: close cf-chl-gen: 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$aya0xAAmgZt19wWZkviSNQ== Server: cloudflare CF-RAY: 925e704c2fa2acc5-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:47 UTC	254	IN	Data Raw: 52 59 5a 2f 5a 49 39 42 58 33 74 4e 6a 34 69 42 6a 30 32 54 56 5a 4b 53 6e 49 36 53 68 33 4b 5a 58 35 75 6c 58 35 47 49 59 58 61 58 6b 35 53 49 6c 6d 47 5a 67 70 4a 6c 67 35 5a 76 69 35 5a 79 63 59 53 47 6c 36 32 75 63 71 32 79 6c 4d 4f 45 75 71 4f 39 6e 34 57 43 79 61 4f 47 75 72 33 52 69 38 43 6e 74 70 43 73 74 38 2f 4f 7a 73 32 73 74 35 62 66 31 37 2f 43 73 4d 4f 63 30 4c 7a 65 74 73 50 69 77 37 61 33 33 73 6d 38 38 63 47 2f 7a 76 4f 34 37 39 66 75 7a 64 54 62 38 74 48 53 32 2b 44 6c 30 39 37 69 77 72 76 54 78 77 66 32 33 50 7a 6f 34 73 54 6d 36 41 54 2b 30 42 41 44 36 39 58 4f 48 66 45 58 33 2f 37 75 4a 52 37 76 46 41 62 7a 41 67 51 68 2b 53 59 58 44 6a 41 76 47 79 59 47 4b 68 6a 76 37 79 6b 59 2b 79 77 30 2f 66 59 7a 43 6a 41 4f 4a 43 63 43 4a 45 Data Ascii: RYZ/ZI9BX3tNj4iBj02TVZKSnI6Sh3KZX5ulX5GIYXaXk5SIlmGZgpJlg5Zvi5ZycYSGl62ucq2ylMOEuqO9n4WCyaOGur3Ri8CntpCst8/Ozs2st5bf17/CsMOc0LzetsPiw7a33sm88cG/zvO479fuzdTb8tHS2+Dl097iwrvTxwf23Pzo4sTm6AT+0BAD69XOHfEX3/7uJR7vFAbzAgQh+SYXDjAvGyYGKhjv7ykY+yw0/fYzCjAOJCcCJE
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 63 34 47 77 51 48 44 6b 56 50 49 53 6f 78 4b 69 63 74 53 42 4e 44 57 56 55 53 4e 6a 6c 66 4d 30 38 35 56 6a 74 4f 55 57 68 6b 57 69 41 2b 52 47 5a 6c 61 31 74 76 61 7a 35 42 53 55 70 78 53 6a 68 5a 4d 56 31 7a 62 7a 39 2b 61 6a 35 44 58 48 5a 43 56 57 42 55 52 6c 4e 35 66 31 68 5a 58 49 75 4d 67 4a 47 54 64 32 61 4a 61 59 6c 6f 64 56 53 4f 56 70 78 54 67 33 46 62 67 61 43 50 5a 70 74 6c 6b 33 6c 70 6c 35 64 6f 63 4b 69 41 6c 61 65 73 73 61 79 46 73 4c 4b 6f 65 58 71 52 66 62 57 58 73 35 54 46 6d 4c 69 6e 76 59 65 4c 68 73 65 67 77 61 65 38 71 49 71 50 78 49 36 6f 77 4c 4b 56 78 70 65 76 74 63 37 58 75 4c 6a 62 73 37 54 46 77 65 50 67 31 73 53 34 77 72 33 47 7a 4e 2b 79 79 36 76 46 79 64 58 68 74 4c 66 62 32 73 34 41 33 4c 6a 61 2f 65 7a 52 76 2b 63 44 77 Data Ascii: c4GwQHDkVPISoxKictSBNDWVUSNjlfM085VjtOUWhkWiA+RGZla1tvaz5BSUpxSjhZMV1zbz9+aj5DXHZCVWBURlN5f1hZXIuMgJGTd2aJaYlodVSOVpxTg3FbgaCPZptlk3lpl5docKiAlaessayFsLKoeXqRfbWXs5TFmLinvYeLhsegwae8qIqPxI6owLKVxpevtc7XuLjbs7TFwePg1sS4wr3GzN+yy6vFydXhtLfb2s4A3Lja/ezRv+cDw
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 6d 4a 45 30 50 51 45 4a 43 46 55 55 70 4b 43 6f 35 47 31 5a 4b 4f 55 70 6a 49 6a 55 64 58 55 39 70 4e 45 6b 6a 59 69 77 6e 52 56 31 42 57 6b 42 46 61 47 68 67 4c 33 6c 43 5a 32 35 34 4e 6d 78 71 50 7a 67 31 54 57 52 35 52 6b 46 35 63 6f 43 43 65 47 68 6e 65 49 69 4e 54 31 46 52 6b 6d 2b 4b 62 6c 4b 50 69 35 5a 31 63 6e 46 39 62 34 75 56 6d 4a 4e 68 66 47 65 68 6a 4a 32 4f 6e 32 46 35 63 49 65 44 73 5a 2b 72 6c 49 53 45 65 61 4f 6d 6e 4a 61 58 73 72 4b 2f 72 4b 47 57 76 4b 47 55 76 4d 53 35 6f 62 6e 4f 75 4e 44 43 6b 4a 43 4c 6b 36 71 53 31 4a 50 5a 6c 6f 37 4b 30 70 79 30 6b 39 6e 41 7a 4e 2f 6c 73 72 50 68 70 65 4c 68 33 65 61 33 33 63 76 41 30 4f 37 4b 76 38 32 76 2b 50 72 6c 32 74 76 35 41 4c 76 69 30 73 37 64 75 2b 44 6e 42 4f 54 6a 44 51 6f 43 78 51 Data Ascii: mJE0PQEJCFUUpKCo5G1ZKOUpjIjUdXU9pNEkjYiwnRV1BWkBFaGhgL3lCZ254NmxqPzg1TWR5RkF5coCCeGhneIiNT1FRkm+KblKPi5Z1cnF9b4uVmJNhfGehjJ2On2F5cIeDsZ+rlISEeaOmnJaXsrK/rKGWvKGUvMS5obnOuNDCkJCLk6qS1JPZlo7K0py0k9nAzN/lsrPhpeLh3ea33cvA0O7Kv82v+Prl2tv5ALvi0s7du+DnBOTjDQoCxQ
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 46 6b 52 4f 56 68 6f 78 44 78 42 64 53 6b 31 4d 52 44 68 59 4e 6b 4e 46 52 6b 4a 56 4b 46 78 72 59 55 5a 4a 59 43 39 76 58 6c 42 70 5a 6a 6c 72 4e 6d 5a 37 54 31 68 7a 58 6a 31 56 56 6e 77 2b 67 46 68 47 68 6e 64 39 64 57 52 6e 67 45 65 47 66 34 56 66 61 6f 79 53 62 6e 6c 35 69 56 6d 4c 61 5a 46 66 67 59 43 41 6e 4a 64 2f 68 6e 5a 33 6d 34 68 37 70 72 43 74 62 6e 75 75 62 5a 43 31 73 72 4b 6c 64 62 78 38 6c 4a 4b 2f 66 71 71 52 77 34 2b 42 76 5a 6d 45 79 72 58 45 70 5a 32 64 75 72 47 2f 6f 73 4f 53 6f 39 54 50 6c 4c 4f 32 31 62 32 34 76 35 66 4a 6f 63 76 52 75 4e 2b 6d 73 70 2b 34 36 73 7a 49 74 73 48 58 76 4f 79 39 7a 38 2b 78 38 39 4c 54 75 64 50 57 37 74 72 74 7a 2b 6a 70 38 50 37 52 76 2b 4f 2b 33 4e 54 6a 43 41 6a 6b 35 64 66 4f 7a 2b 76 4b 2f 66 44 Data Ascii: FkROVhoxDxBdSk1MRDhYNkNFRkJVKFxrYUZJYC9vXlBpZjlrNmZ7T1hzXj1VVnw+gFhGhnd9dWRngEeGf4VfaoySbnl5iVmLaZFfgYCAnJd/hnZ3m4h7prCtbnuubZC1srKldbx8lJK/fqqRw4+BvZmEyrXEpZ2durG/osOSo9TPlLO21b24v5fJocvRuN+msp+46szItsHXvOy9z8+x89LTudPW7trtz+jp8P7Rv+O+3NTjCAjk5dfOz+vK/fD
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 6c 70 64 57 31 30 77 4c 69 78 4f 51 6b 4e 47 58 32 64 62 4b 44 31 73 51 32 35 4b 4b 57 4e 74 4d 56 56 57 63 30 70 46 55 6d 56 35 64 32 64 56 58 56 5a 75 54 48 68 6d 59 6d 4a 62 63 34 46 64 53 47 47 50 69 6b 39 61 66 46 31 6e 6c 49 52 76 5a 6d 64 32 5a 58 52 61 62 58 42 39 63 34 2b 69 64 71 52 33 69 59 69 57 6b 35 69 59 6a 59 36 4b 62 59 53 6c 6b 59 61 70 67 33 65 76 65 61 79 35 6d 34 75 77 65 6f 6d 4f 76 37 58 42 76 5a 4b 2b 77 62 2f 45 68 35 36 4a 78 36 47 44 79 4d 4b 75 78 36 53 75 77 72 61 57 6a 5a 6a 62 79 36 72 65 31 39 69 7a 6d 73 36 65 36 4c 62 70 79 2b 6e 49 37 4c 72 58 77 36 66 4f 76 62 47 75 36 2b 33 72 30 4d 4b 35 32 38 7a 73 75 4c 7a 71 79 72 58 75 31 77 62 34 33 41 6a 48 35 74 51 45 39 75 50 39 43 2b 55 56 34 75 4d 57 44 39 44 7a 44 78 59 55 Data Ascii: lpdW10wLixOQkNGX2dbKD1sQ25KKWNtMVVWc0pFUmV5d2dVXVZuTHhmYmJbc4FdSGGPik9afF1nlIRvZmd2ZXRabXB9c4+idqR3iYiWk5iYjY6KbYSlkYapg3eveay5m4uweomOv7XBvZK+wb/Eh56Jx6GDyMKux6SuwraWjZjby6re19izms6e6Lbpy+nI7LrXw6fOvbGu6+3r0MK528zsuLzqyrXu1wb43AjH5tQE9uP9C+UV4uMWD9DzDxYU
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 39 59 59 7a 63 35 4f 54 59 2f 62 54 6c 63 4f 30 70 6e 59 45 4a 6b 55 58 56 47 65 44 59 73 65 55 78 46 54 44 35 38 55 30 42 38 66 58 52 2f 52 49 4a 36 5a 6b 6c 4c 52 30 56 48 6a 56 74 6d 66 6c 4b 50 55 45 31 72 6b 31 4b 61 61 34 78 78 6d 6e 78 79 66 34 4f 59 6d 4a 79 49 5a 47 57 61 69 6f 71 6f 6f 70 43 77 69 6f 70 79 6b 70 56 32 6b 36 6d 33 63 4a 57 49 72 33 32 62 74 5a 4b 54 6e 38 4b 50 6c 48 32 6e 70 38 66 46 74 4a 2b 72 79 61 47 4b 76 73 32 31 6e 37 37 50 75 5a 66 55 7a 35 4c 52 70 39 62 42 32 64 62 62 32 39 33 59 33 36 50 44 34 39 37 6b 79 2b 65 73 76 74 43 2f 7a 73 50 47 38 65 48 72 35 50 72 6a 37 2b 6a 34 33 64 76 73 38 75 47 39 35 65 4c 51 32 4e 6a 48 32 2f 73 41 2b 4e 33 61 35 51 50 6a 79 73 7a 32 35 78 6e 35 37 75 67 4e 2b 51 38 4b 37 78 7a 33 45 Data Ascii: 9YYzc5OTY/bTlcO0pnYEJkUXVGeDYseUxFTD58U0B8fXR/RIJ6ZklLR0VHjVtmflKPUE1rk1Kaa4xxmnxyf4OYmJyIZGWaioqoopCwiopykpV2k6m3cJWIr32btZKTn8KPlH2np8fFtJ+ryaGKvs21n77PuZfUz5LRp9bB2dbb293Y36PD497ky+esvtC/zsPG8eHr5Prj7+j43dvs8uG95eLQ2NjH2/sA+N3a5QPjysz25xn57ugN+Q8K7xz3E
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 44 54 46 74 71 52 6b 39 51 53 6d 34 76 4d 46 46 52 5a 33 4e 6b 56 30 6c 6f 64 58 4e 79 64 6d 39 65 57 56 52 79 66 47 42 6e 69 46 35 6b 56 31 31 61 6b 57 78 6e 67 5a 4a 7a 64 47 57 57 6c 47 6c 32 6d 4a 53 62 64 4b 47 51 62 33 69 56 6c 49 61 43 68 58 5a 37 68 6e 69 72 6f 6d 36 42 69 71 69 44 63 61 36 53 6f 62 4b 46 65 5a 75 39 69 4c 57 61 71 72 61 2f 66 63 43 55 78 6f 46 36 77 72 79 48 75 4d 65 39 70 59 71 4c 6f 36 53 78 6b 38 76 4c 73 63 79 5a 6b 62 57 63 75 5a 47 70 32 75 4f 78 31 75 50 54 6e 36 61 36 32 62 32 2b 7a 4f 69 6f 33 4f 4f 36 71 75 7a 76 34 50 69 7a 78 66 72 30 74 38 6a 4a 2f 62 6a 71 36 2f 37 67 30 64 76 63 41 37 76 54 42 38 58 6f 42 68 48 66 37 77 33 64 35 41 59 56 44 39 62 76 46 42 55 55 32 74 58 6e 45 77 49 58 41 78 45 41 44 77 58 38 46 66 Data Ascii: DTFtqRk9QSm4vMFFRZ3NkV0lodXNydm9eWVRyfGBniF5kV11akWxngZJzdGWWlGl2mJSbdKGQb3iVlIaChXZ7hnirom6BiqiDca6SobKFeZu9iLWaqra/fcCUxoF6wryHuMe9pYqLo6Sxk8vLscyZkbWcuZGp2uOx1uPTn6a62b2+zOio3OO6quzv4Pizxfr0t8jJ/bjq6/7g0dvcA7vTB8XoBhHf7w3d5AYVD9bvFBUU2tXnEwIXAxEADwX8Ff
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 4c 6b 51 71 61 6b 4e 57 61 33 5a 78 52 57 52 37 65 6c 42 4b 57 45 49 35 67 58 35 51 65 6c 45 2f 65 48 35 63 62 6f 2b 4e 52 31 70 2b 63 48 47 4a 64 6e 64 6d 64 6f 5a 36 57 33 43 4c 6c 47 6c 64 66 58 2b 58 63 49 43 65 68 70 2b 6d 59 58 2b 6a 5a 71 36 4d 62 35 79 73 6a 71 32 4a 74 71 65 4b 6a 70 70 34 68 5a 53 73 74 5a 79 4c 74 71 47 43 73 59 57 59 77 4b 58 47 71 6f 4f 65 71 61 7a 45 76 37 32 78 6e 37 53 4a 6f 70 47 6e 31 37 43 6d 6e 62 48 66 71 72 47 69 30 4c 6a 65 30 39 33 6e 70 75 62 49 79 73 58 70 36 73 6e 48 33 36 79 7a 7a 4e 4c 56 73 64 72 52 37 38 72 77 34 4c 79 2f 2b 64 77 43 74 39 41 45 38 72 2f 33 78 39 67 43 44 50 7a 4b 45 66 48 74 45 68 4d 47 47 51 62 58 44 42 7a 77 2b 52 66 6e 33 42 44 62 44 52 59 53 42 68 6f 55 49 2b 62 2b 41 66 6e 36 2b 4f 34 Data Ascii: LkQqakNWa3ZxRWR7elBKWEI5gX5QelE/eH5cbo+NR1p+cHGJdndmdoZ6W3CLlGldfX+XcICehp+mYX+jZq6Mb5ysjq2JtqeKjpp4hZSstZyLtqGCsYWYwKXGqoOeqazEv72xn7SJopGn17CmnbHfqrGi0Lje093npubIysXp6snH36yzzNLVsdrR78rw4Ly/+dwCt9AE8r/3x9gCDPzKEfHtEhMGGQbXDBzw+Rfn3BDbDRYSBhoUI+b+Afn6+O4
2025-03-25 12:33:47 UTC	1369	IN	Data Raw: 54 52 44 52 47 56 36 62 48 38 36 50 46 4a 67 54 55 4b 41 55 6e 70 4a 56 47 45 2b 53 47 70 42 65 4a 46 65 52 59 74 4f 6c 47 43 47 61 48 52 37 56 56 75 54 56 5a 79 4c 6b 6c 74 67 6c 57 57 66 6b 6d 43 41 71 6f 57 47 65 4a 74 69 69 34 4b 6c 69 49 2b 70 64 4b 6d 6f 6a 61 32 45 64 6e 69 71 6a 33 2b 56 76 4c 47 42 68 62 4f 58 76 62 4f 39 6e 5a 72 4d 6e 61 2b 2b 71 4b 2f 43 78 38 50 4c 31 36 48 59 30 5a 71 39 6d 4c 6e 66 79 38 76 51 76 71 4c 67 31 72 69 69 75 4e 79 6d 37 62 37 66 75 71 7a 78 35 66 50 7a 36 4d 33 44 31 4e 54 57 35 66 75 33 38 74 62 65 41 2b 48 73 42 4e 4b 35 31 64 7a 32 36 65 72 44 43 4f 66 65 32 2b 7a 4b 41 77 50 55 2b 4e 45 58 37 2f 6f 59 48 74 55 64 43 67 72 59 4a 66 63 57 34 51 63 64 2b 50 55 56 2b 51 62 2b 43 4f 72 77 49 51 50 78 49 42 38 6f Data Ascii: TRDRGV6bH86PFJgTUKAUnpJVGE+SGpBeJFeRYtOlGCGaHR7VVuTVZyLkltglWWfkmCAqoWGeJtii4KliI+pdKmoja2Edniqj3+VvLGBhbOXvbO9nZrMna++qK/Cx8PL16HY0Zq9mLnfy8vQvqLg1riiuNym7b7fuqzx5fPz6M3D1NTW5fu38tbeA+HsBNK51dz26erDCOfe2+zKAwPU+NEX7/oYHtUdCgrYJfcW4Qcd+PUV+Qb+COrwIQPxIB8o

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:50 UTC	828	OUT	GET /cdn-cgi/challenge-platform/h/b/d/925e703c3c2242fb/1742906027019/4371YeY4HRlsSVC HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:50 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:50 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 925e70632e7e4291-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 20 08 02 00 00 00 72 c2 a4 df 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR rIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:51 UTC	857	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/925e703c3c2242fb/1742906027019/a3849ebfec434405758e2e950da1c9da1209836e146489dfc97e37c04c328b2c/oKxNSCSCDkQtFmd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:51 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 25 Mar 2025 12:33:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-25 12:33:51 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6f 34 53 65 76 2d 78 44 52 41 56 31 6a 69 36 56 44 61 48 4a 32 68 49 4a 67 32 34 55 5a 49 6e 66 79 58 34 33 77 45 77 79 69 79 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20go4Sev-xDRAV1ji6VDaHJ2hIJg24UZInfyX43wEwyiywAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-25 12:33:51 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:54 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 40207 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:54 UTC	16384	OUT	Data Raw: 53 65 4a 55 6c 44 46 77 64 63 4a 56 47 66 59 46 34 73 33 2b 4a 46 35 46 6c 73 38 55 77 6d 44 39 46 67 73 46 35 6d 71 77 46 37 73 63 33 74 4a 71 59 46 6f 73 75 58 73 46 64 6d 65 73 49 73 66 4f 74 6d 44 4c 73 51 31 54 76 4b 56 73 71 51 73 6e 55 56 59 77 6c 73 66 67 2d 32 73 69 64 31 44 35 63 2b 73 44 70 2b 37 6c 55 46 59 73 2b 7a 31 30 50 64 73 70 55 65 73 63 73 4a 47 46 71 73 56 65 73 53 53 63 46 4a 77 58 73 53 79 4b 62 4a 39 56 66 64 35 73 73 38 44 73 67 6e 63 66 4f 62 30 77 31 65 73 4d 33 77 59 47 6a 53 4a 73 66 39 6d 4a 4f 62 73 33 55 46 48 73 66 48 32 4d 63 73 73 75 6d 65 49 6e 4f 38 6c 73 46 6e 45 6f 56 78 71 44 4f 52 73 44 79 48 4a 73 73 65 76 4c 31 46 46 73 66 62 73 48 31 73 41 73 6f 70 39 73 6f 68 69 73 44 38 70 73 31 53 72 73 71 64 58 55 54 64 4f Data Ascii: SeJUlDFwdcJVGfYF4s3+JF5Fls8UwmD9FgsF5mqwF7sc3tJqYFosuXsFdmesIsfOtmDLsQ1TvKVsqQsnUVYwlsfg-2sid1D5c+sDp+7lUFYs+z10PdspUescsJGFqsVesSScFJwXsSyKbJ9Vfd5ss8DsgncfOb0w1esM3wYGjSJsf9mJObs3UFHsfH2McssumeInO8lsFnEoVxqDORsDyHJssevL1FFsfbsH1sAsop9sohisD8ps1SrsqdXUTdO
2025-03-25 12:33:54 UTC	16384	OUT	Data Raw: 43 74 2d 53 4d 4c 76 78 65 36 71 7a 58 75 55 6f 45 32 54 24 46 33 77 2b 71 45 38 63 77 76 6c 6c 31 32 4f 78 4f 44 56 36 58 4e 76 4c 56 44 31 2d 6f 4f 49 69 79 46 6d 30 45 6e 44 6f 6c 78 6f 24 70 73 76 4c 4a 5a 55 52 72 48 50 6f 6a 66 75 4b 39 33 46 6d 56 48 45 67 38 70 47 4c 4f 44 56 44 70 7a 77 47 63 58 35 38 24 30 30 37 56 31 44 79 73 7a 73 53 6f 49 4d 47 61 73 53 38 70 2d 31 30 4b 68 53 55 4f 73 64 54 44 4b 47 6b 54 44 55 4a 4b 58 6f 55 72 24 46 54 46 54 31 73 64 4e 4d 2d 76 73 68 32 4e 64 54 6d 4e 33 55 52 6a 46 69 73 78 41 46 49 6b 47 4c 4d 55 63 47 54 46 5a 6e 55 63 6e 31 6e 4f 46 62 62 47 32 2b 65 4d 4a 35 79 78 64 51 71 4a 55 68 38 48 47 49 47 44 42 47 72 31 47 35 66 79 55 5a 73 37 46 4f 4b 2d 4f 4f 61 35 6f 70 62 64 55 6d 31 63 74 46 53 33 30 37 Data Ascii: Ct-SMLvxe6qzXuUoE2T$F3w+qE8cwvll12OxODV6XNvLVD1-oOIiyFm0EnDolxo$psvLJZURrHPojfuK93FmVHEg8pGLODVDpzwGcX58$007V1DyszsSoIMGasS8p-10KhSUOsdTDKGkTDUJKXoUr$FTFT1sdNM-vsh2NdTmN3URjFisxAFIkGLMUcGTFZnUcn1nOFbbG2+eMJ5yxdQqJUh8HGIGDBGr1G5fyUZs7FOK-OOa5opbdUm1ctFS307
2025-03-25 12:33:54 UTC	7439	OUT	Data Raw: 72 4b 73 2b 4c 48 6e 46 34 6f 64 55 44 38 73 34 6d 63 30 64 56 46 53 79 67 62 6e 31 58 2b 6d 38 70 47 36 7a 7a 5a 32 55 71 56 66 6a 7a 6e 65 73 6d 46 75 55 71 4a 54 4e 73 45 41 59 76 50 41 54 73 72 34 76 70 46 74 7a 6d 36 73 54 78 4b 55 6d 46 74 24 49 43 77 73 63 4a 46 62 71 75 24 64 66 55 4e 46 56 73 71 4f 38 32 30 6f 55 73 2d 61 69 41 73 41 43 66 73 4e 46 2b 73 56 6d 46 6d 46 42 68 65 44 63 53 36 58 70 36 74 63 5a 55 51 73 47 44 2b 66 74 34 4b 59 73 44 79 73 6f 73 2b 64 56 64 73 47 73 6f 73 73 52 46 35 4e 71 64 44 32 34 4d 44 24 31 36 72 4d 4b 47 55 31 56 2d 4d 56 37 55 47 54 72 36 31 56 71 2b 42 31 77 37 55 4c 31 73 77 6d 4c 73 6f 73 54 44 51 38 6d 73 47 44 34 73 56 73 2b 64 66 39 73 79 68 59 48 37 77 73 38 6d 73 4a 34 54 74 55 55 52 51 6f 37 73 71 32 Data Ascii: rKs+LHnF4odUD8s4mc0dVFSygbn1X+m8pG6zzZ2UqVfjznesmFuUqJTNsEAYvPATsr4vpFtzm6sTxKUmFt$ICwscJFbqu$dfUNFVsqO820oUs-aiAsACfsNF+sVmFmFBheDcS6Xp6tcZUQsGD+ft4KYsDysos+dVdsGsossRF5NqdD24MD$16rMKGU1V-MV7UGTr61Vq+B1w7UL1swmLsosTDQ8msGD4sVs+df9syhYH7ws8msJ4TtUURQo7sq2
2025-03-25 12:33:54 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:33:54 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28188 Connection: close cf-chl-gen: t3YWrfPkxtpWVxF6RBJlNxvztnuWBvH6/ReDRlNpGf6oYajtEAe1jJ0VWUaCWHig$JAcKzBq19sr+hfqn2w5TsA== Server: cloudflare CF-RAY: 925e707b8ec74285-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:54 UTC	1047	IN	Data Raw: 52 59 5a 2f 5a 49 39 36 54 6f 64 4f 52 55 36 4a 55 49 35 56 6c 6b 78 56 6e 48 65 52 6c 70 78 37 6c 5a 70 64 6c 4a 69 66 65 70 79 69 6c 36 53 6e 62 6d 6d 4f 67 36 6d 62 73 4b 4f 72 63 36 47 74 75 70 6d 54 6e 4c 79 6f 75 48 4e 35 6c 72 57 4e 77 6f 65 57 6f 37 6d 36 66 72 6e 41 78 59 6d 68 76 62 4c 56 71 35 47 4f 31 61 79 57 6b 61 2f 55 6d 4c 44 58 77 65 47 61 78 64 6a 51 73 38 48 4b 33 72 54 56 72 65 6a 77 76 4f 6a 45 79 74 44 44 76 73 76 42 77 39 4c 33 76 50 6a 56 74 75 48 4f 33 76 63 46 7a 37 7a 31 39 50 4c 59 34 39 67 46 33 75 63 48 44 78 4c 52 36 41 54 2b 30 42 41 44 36 39 58 4f 48 66 45 58 33 2f 37 75 4a 52 37 74 46 41 62 7a 41 67 51 68 2b 53 59 58 44 6a 41 76 47 79 59 47 4b 68 6a 76 37 79 6b 59 2b 79 77 30 2f 66 59 7a 43 6a 41 4f 4a 43 63 43 4a 45 63 Data Ascii: RYZ/ZI96TodORU6JUI5VlkxVnHeRlpx7lZpdlJifepyil6SnbmmOg6mbsKOrc6GtupmTnLyouHN5lrWNwoeWo7m6frnAxYmhvbLVq5GO1ayWka/UmLDXweGaxdjQs8HK3rTVrejwvOjEytDDvsvBw9L3vPjVtuHO3vcFz7z19PLY49gF3ucHDxLR6AT+0BAD69XOHfEX3/7uJR7tFAbzAgQh+SYXDjAvGyYGKhjv7ykY+yw0/fYzCjAOJCcCJEc
2025-03-25 12:33:54 UTC	1369	IN	Data Raw: 65 65 33 78 77 6f 6e 39 79 64 57 39 6d 68 58 69 61 69 35 75 74 6c 6d 2b 65 62 4a 74 2f 67 4b 53 48 67 48 53 71 6d 72 75 38 68 59 32 56 72 5a 43 59 77 70 58 47 6d 36 4b 78 67 62 61 4a 79 34 71 6b 6a 63 65 4c 7a 72 47 4b 6b 62 36 33 7a 4b 2f 4b 71 4e 33 63 71 70 66 58 79 73 44 69 77 73 61 66 35 73 61 2b 79 63 44 6d 7a 75 4b 6e 7a 64 76 6b 77 2f 53 76 30 2f 66 34 77 39 71 33 75 76 58 31 73 65 6e 78 2b 39 48 32 41 4e 67 45 41 66 7a 79 79 73 62 64 43 75 2f 63 44 74 76 54 7a 41 34 54 35 39 49 56 42 76 59 4b 31 68 72 64 2f 64 6e 33 49 66 7a 69 34 78 59 66 2f 69 72 68 42 77 34 71 37 41 77 6c 43 78 77 42 4c 77 6b 57 4e 54 48 32 46 6a 73 34 45 7a 51 36 49 50 51 41 41 42 67 45 50 43 49 36 48 43 49 66 4f 69 38 4a 4a 69 55 4b 55 42 30 66 4f 44 52 4c 54 55 64 4f 4d 55 Data Ascii: ee3xwon9ydW9mhXiai5utlm+ebJt/gKSHgHSqmru8hY2VrZCYwpXGm6KxgbaJy4qkjceLzrGKkb63zK/KqN3cqpfXysDiwsaf5sa+ycDmzuKnzdvkw/Sv0/f4w9q3uvX1senx+9H2ANgEAfzyysbdCu/cDtvTzA4T59IVBvYK1hrd/dn3Ifzi4xYf/irhBw4q7AwlCxwBLwkWNTH2Fjs4EzQ6IPQAABgEPCI6HCIfOi8JJiUKUB0fODRLTUdOMU
2025-03-25 12:33:54 UTC	1369	IN	Data Raw: 63 58 4f 53 64 4a 4f 67 65 61 32 63 66 6f 57 78 6f 4b 78 74 72 4c 47 4d 62 59 70 79 74 61 39 38 71 35 74 35 6a 6e 69 65 6a 35 32 38 6b 4b 66 43 6c 34 43 71 68 5a 58 48 78 37 72 51 30 4b 53 70 77 4a 61 71 6b 62 4f 53 31 5a 75 62 30 73 36 32 75 71 37 4e 6d 74 54 43 30 72 62 45 78 72 79 32 79 65 62 4e 77 50 47 70 35 64 44 43 39 64 4f 33 35 66 4c 7a 36 38 66 33 2b 37 2f 41 33 4d 2f 6a 35 74 66 76 2b 4e 6e 4b 39 41 44 75 43 4e 73 4b 44 68 41 4b 43 52 50 4d 43 76 62 5a 47 50 41 54 32 50 33 61 2f 65 6f 55 37 74 37 32 41 50 6b 59 48 42 4d 47 48 68 6b 42 47 53 77 79 43 43 51 4d 4c 76 41 76 39 44 41 33 43 41 34 31 4f 41 77 77 48 7a 30 64 45 6a 41 6d 46 52 4d 6f 51 69 56 44 52 51 70 4a 49 79 6b 66 53 69 45 6a 49 51 6f 74 4d 6b 78 55 4d 44 52 51 46 7a 64 66 58 46 4e Data Ascii: cXOSdJOgea2cfoWxoKxtrLGMbYpyta98q5t5jniej528kKfCl4CqhZXHx7rQ0KSpwJaqkbOS1Zub0s62uq7NmtTC0rbExry2yebNwPGp5dDC9dO35fLz68f3+7/A3M/j5tfv+NnK9ADuCNsKDhAKCRPMCvbZGPAT2P3a/eoU7t72APkYHBMGHhkBGSwyCCQMLvAv9DA3CA41OAwwHz0dEjAmFRMoQiVDRQpJIykfSiEjIQotMkxUMDRQFzdfXFN
2025-03-25 12:33:54 UTC	1369	IN	Data Raw: 49 47 62 6a 61 71 65 71 71 71 54 61 71 61 73 71 61 68 34 74 70 53 4e 71 58 68 2f 66 35 65 65 76 49 4c 43 6b 62 43 58 6b 73 6e 48 6c 4b 4c 42 77 59 6a 4c 70 34 76 47 30 39 4f 6d 6f 70 47 70 73 4b 57 36 31 35 6e 62 34 61 2b 69 6e 38 33 67 33 4f 4c 6d 73 75 58 70 31 36 65 6c 79 50 44 7a 33 65 7a 68 38 2b 58 7a 71 2f 6a 62 33 63 76 71 32 2b 72 62 41 37 33 32 38 64 33 6c 43 50 6e 66 78 73 6a 6c 2b 2b 55 44 34 74 37 6b 46 66 50 33 36 4f 50 75 35 52 44 74 44 39 63 67 44 52 59 58 49 43 45 62 45 2b 49 67 4a 4f 62 38 42 77 30 70 47 67 6f 46 4a 50 41 75 39 41 51 73 46 7a 6f 54 38 78 67 65 42 2f 67 61 43 6a 41 2b 49 43 59 59 4f 79 6c 48 4c 44 39 43 43 6b 67 70 51 67 6f 52 42 68 46 52 46 7a 4e 43 56 78 6b 61 58 56 68 65 4d 56 6b 61 54 68 74 47 56 7a 6c 48 51 30 73 35 Data Ascii: IGbjaqeqqqTaqasqah4tpSNqXh/f5eevILCkbCXksnHlKLBwYjLp4vG09OmopGpsKW615nb4a+in83g3OLmsuXp16elyPDz3ezh8+Xzq/jb3cvq2+rbA7328d3lCPnfxsjl++UD4t7kFfP36OPu5RDtD9cgDRYXICEbE+IgJOb8Bw0pGgoFJPAu9AQsFzoT8xgeB/gaCjA+ICYYOylHLD9CCkgpQgoRBhFRFzNCVxkaXVheMVkaThtGVzlHQ0s5
2025-03-25 12:33:54 UTC	1369	IN	Data Raw: 42 72 62 36 69 51 74 35 6d 4f 72 70 69 58 76 5a 4f 33 67 4b 75 30 6c 4b 4f 57 6a 35 75 33 68 38 54 49 74 63 75 6a 7a 4a 43 51 72 5a 2b 4c 6a 4c 58 50 74 61 54 61 6b 72 54 48 71 72 53 73 6d 64 58 44 6d 37 76 43 76 36 54 42 75 73 72 72 76 2b 57 73 32 71 4f 73 36 71 33 73 37 73 58 49 32 73 75 31 39 75 33 5a 32 74 58 50 39 77 4f 2b 76 74 44 34 43 4e 72 5a 35 73 50 61 2f 51 6f 46 33 78 50 6d 7a 50 58 53 44 68 50 34 46 41 37 58 2b 2f 76 66 44 76 72 66 42 52 4c 74 38 77 59 68 34 41 55 4b 39 69 49 5a 45 53 38 61 4d 66 4c 78 37 51 7a 32 4b 78 63 48 4a 44 34 47 2b 52 59 77 4e 78 59 53 4c 7a 6b 68 46 53 4d 36 41 51 59 2b 4b 69 51 66 54 77 35 50 50 41 63 6c 43 54 6b 6b 4c 68 73 55 55 78 31 52 50 79 31 64 49 56 31 4e 5a 31 5a 56 61 69 67 6d 5a 69 5a 4b 4c 7a 74 6d 52 Data Ascii: Brb6iQt5mOrpiXvZO3gKu0lKOWj5u3h8TItcujzJCQrZ+LjLXPtaTakrTHqrSsmdXDm7vCv6TBusrrv+Ws2qOs6q3s7sXI2su19u3Z2tXP9wO+vtD4CNrZ5sPa/QoF3xPmzPXSDhP4FA7X+/vfDvrfBRLt8wYh4AUK9iIZES8aMfLx7Qz2KxcHJD4G+RYwNxYSLzkhFSM6AQY+KiQfTw5PPAclCTkkLhsUUx1RPy1dIV1NZ1ZVaigmZiZKLztmR
2025-03-25 12:33:54 UTC	1369	IN	Data Raw: 53 6a 59 6d 78 6d 70 57 78 76 4a 71 7a 6e 4a 4f 36 6c 35 47 44 6e 70 54 47 70 34 6e 41 75 4b 69 4b 68 4c 4b 77 30 4b 32 6d 30 35 58 47 6b 62 6d 56 74 4c 71 31 77 4a 72 42 75 72 66 69 73 4c 66 45 31 39 7a 59 32 38 76 69 78 65 33 48 35 2f 58 4f 33 37 61 30 79 75 6d 30 37 74 66 4d 39 63 33 4f 38 4e 6b 47 31 4d 37 62 33 4c 2f 4a 77 75 58 63 41 4e 66 67 34 65 62 68 7a 39 55 52 7a 67 58 70 38 77 6e 55 48 4e 77 4e 37 69 50 34 45 68 55 61 47 79 6e 33 42 69 50 6a 43 51 6b 69 2b 44 49 54 42 42 49 6d 4c 54 41 4a 39 69 2f 7a 4c 79 55 47 43 42 73 2b 49 7a 51 31 4e 69 4d 39 47 51 55 7a 50 44 38 35 4c 52 38 75 49 45 42 49 4e 51 74 4b 45 42 42 46 57 54 49 6b 50 6c 52 50 4f 6a 67 73 54 79 4a 59 47 45 46 44 4a 53 42 5a 4b 6c 34 6e 49 53 35 70 50 6e 4e 68 5a 44 56 6f 5a 32 Data Ascii: SjYmxmpWxvJqznJO6l5GDnpTGp4nAuKiKhLKw0K2m05XGkbmVtLq1wJrBurfisLfE19zY28vixe3H5/XO37a0yum07tfM9c3O8NkG1M7b3L/JwuXcANfg4ebhz9URzgXp8wnUHNwN7iP4EhUaGyn3BiPjCQki+DITBBImLTAJ9i/zLyUGCBs+IzQ1NiM9GQUzPD85LR8uIEBINQtKEBBFWTIkPlRPOjgsTyJYGEFDJSBZKl4nIS5pPnNhZDVoZ2
2025-03-25 12:33:54 UTC	1369	IN	Data Raw: 6c 61 79 35 69 34 47 31 6c 62 75 63 75 59 53 6b 68 37 2b 49 68 34 66 43 6f 59 36 4f 72 36 48 4a 6b 36 36 53 73 61 6d 7a 6c 61 6d 31 75 2b 50 53 76 37 37 58 32 72 7a 46 33 63 48 42 78 4b 71 38 34 75 4b 39 72 72 4c 4f 77 65 50 46 32 72 58 45 36 4f 6a 4e 32 4c 66 74 76 4f 53 2f 38 4d 44 36 77 50 62 72 32 4d 50 36 37 51 2f 50 2f 66 45 48 30 51 4c 31 43 38 38 4d 2b 66 7a 55 43 76 30 66 32 51 33 63 42 65 41 53 48 41 49 43 46 53 41 72 35 68 6e 39 44 65 67 66 41 69 50 78 49 53 34 46 39 79 62 30 46 66 73 72 48 6a 66 33 4c 76 77 73 48 6a 45 57 4e 77 45 33 4b 6b 73 4b 4f 53 35 50 45 44 31 4b 49 51 39 43 4e 6b 63 53 52 68 55 39 47 45 70 55 55 79 46 55 51 6b 38 6c 55 6c 78 46 4a 6c 59 6c 54 53 64 5a 4b 55 70 4b 58 57 68 76 4c 32 4a 57 57 54 6c 6c 53 6c 6b 39 61 57 42 Data Ascii: lay5i4G1lbucuYSkh7+Ih4fCoY6Or6HJk66Ssamzlam1u+PSv77X2rzF3cHBxKq84uK9rrLOwePF2rXE6OjN2LftvOS/8MD6wPbr2MP67Q/P/fEH0QL1C88M+fzUCv0f2Q3cBeASHAICFSAr5hn9DegfAiPxIS4F9yb0FfsrHjf3LvwsHjEWNwE3KksKOS5PED1KIQ9CNkcSRhU9GEpUUyFUQk8lUlxFJlYlTSdZKUpKXWhvL2JWWTllSlk9aWB

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:55 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:55 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Mar 2025 12:33:55 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: cpcnn4C6pQvlmEEmZlePdOphzucpCCtXH+ESkRN67PHMnbVzL3JmoRkvBNXAHWA2LMAbY7Px+fZWBORMeZQ9qA==$gdTeU0+DMsXhFCWoBVoJVA== Server: cloudflare CF-RAY: 925e70827da47ce7-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:55 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:33:56 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:33:56 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Mar 2025 12:33:56 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 47+8yZNUFGNIJKTry7C2+40U9FrXxotB0jvP/JAWYkna/wabHSlIxiroLxCtl2aTGJH1NImgOA9t2A+ww3WNHg==$ZvFW5Cuj6BJIq0LpOYVGlQ== Server: cloudflare CF-RAY: 925e7086e8eb4e4d-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:33:56 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:34:10 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 42627 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfjcs/0x4AAAAAAA5PeFzxadFDHL70/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:34:10 UTC	16384	OUT	Data Raw: 53 65 4a 55 6c 44 46 77 64 63 4a 56 47 66 59 46 34 73 33 2b 4a 46 35 46 6c 73 38 55 77 6d 44 39 46 67 73 46 35 6d 71 77 46 37 73 63 33 74 4a 71 59 46 6f 73 75 58 73 46 64 6d 65 73 49 73 66 4f 74 6d 44 4c 73 51 31 54 76 4b 56 73 71 51 73 6e 55 56 59 77 6c 73 66 67 2d 32 73 69 64 31 44 35 63 2b 73 44 70 2b 37 6c 55 46 59 73 2b 7a 31 30 50 64 73 70 55 65 73 63 73 4a 47 46 71 73 56 65 73 53 53 63 46 4a 77 58 73 53 79 4b 62 4a 39 56 66 64 35 73 73 38 44 73 67 6e 63 66 4f 62 30 77 31 65 73 4d 33 77 59 47 6a 53 4a 73 66 39 6d 4a 4f 62 73 33 55 46 48 73 66 48 32 4d 63 73 73 75 6d 65 49 6e 4f 38 6c 73 46 6e 45 6f 56 78 71 44 4f 52 73 44 79 48 4a 73 73 65 76 4c 31 46 46 73 66 62 73 48 31 73 41 73 6f 70 39 73 6f 68 69 73 44 38 70 73 31 53 72 73 71 64 58 55 54 64 4f Data Ascii: SeJUlDFwdcJVGfYF4s3+JF5Fls8UwmD9FgsF5mqwF7sc3tJqYFosuXsFdmesIsfOtmDLsQ1TvKVsqQsnUVYwlsfg-2sid1D5c+sDp+7lUFYs+z10PdspUescsJGFqsVesSScFJwXsSyKbJ9Vfd5ss8DsgncfOb0w1esM3wYGjSJsf9mJObs3UFHsfH2McssumeInO8lsFnEoVxqDORsDyHJssevL1FFsfbsH1sAsop9sohisD8ps1SrsqdXUTdO
2025-03-25 12:34:10 UTC	16384	OUT	Data Raw: 43 74 2d 53 4d 4c 76 78 65 36 71 7a 58 75 55 6f 45 32 54 24 46 33 77 2b 71 45 38 63 77 76 6c 6c 31 32 4f 78 4f 44 56 36 58 4e 76 4c 56 44 31 2d 6f 4f 49 69 79 46 6d 30 45 6e 44 6f 6c 78 6f 24 70 73 76 4c 4a 5a 55 52 72 48 50 6f 6a 66 75 4b 39 33 46 6d 56 48 45 67 38 70 47 4c 4f 44 56 44 70 7a 77 47 63 58 35 38 24 30 30 37 56 31 44 79 73 7a 73 53 6f 49 4d 47 61 73 53 38 70 2d 31 30 4b 68 53 55 4f 73 64 54 44 4b 47 6b 54 44 55 4a 4b 58 6f 55 72 24 46 54 46 54 31 73 64 4e 4d 2d 76 73 68 32 4e 64 54 6d 4e 33 55 52 6a 46 69 73 78 41 46 49 6b 47 4c 4d 55 63 47 54 46 5a 6e 55 63 6e 31 6e 4f 46 62 62 47 32 2b 65 4d 4a 35 79 78 64 51 71 4a 55 68 38 48 47 49 47 44 42 47 72 31 47 35 66 79 55 5a 73 37 46 4f 4b 2d 4f 4f 61 35 6f 70 62 64 55 6d 31 63 74 46 53 33 30 37 Data Ascii: Ct-SMLvxe6qzXuUoE2T$F3w+qE8cwvll12OxODV6XNvLVD1-oOIiyFm0EnDolxo$psvLJZURrHPojfuK93FmVHEg8pGLODVDpzwGcX58$007V1DyszsSoIMGasS8p-10KhSUOsdTDKGkTDUJKXoUr$FTFT1sdNM-vsh2NdTmN3URjFisxAFIkGLMUcGTFZnUcn1nOFbbG2+eMJ5yxdQqJUh8HGIGDBGr1G5fyUZs7FOK-OOa5opbdUm1ctFS307
2025-03-25 12:34:10 UTC	9859	OUT	Data Raw: 72 4b 73 2b 4c 48 6e 46 34 6f 64 55 44 38 73 34 6d 63 30 64 56 46 53 79 67 62 6e 31 58 2b 6d 38 70 47 36 7a 7a 5a 32 55 71 56 66 6a 7a 6e 65 73 6d 46 75 55 71 4a 54 4e 73 45 41 59 76 50 41 54 73 72 34 76 70 46 74 7a 6d 36 73 54 78 4b 55 6d 46 74 24 49 43 77 73 63 4a 46 62 71 75 24 64 66 55 4e 46 56 73 71 4f 38 32 30 6f 55 73 2d 61 69 41 73 41 43 66 73 4e 46 2b 73 56 6d 46 6d 46 42 68 65 44 63 53 36 58 70 36 74 63 5a 55 51 73 47 44 2b 66 74 34 4b 59 73 44 79 73 6f 73 2b 64 56 64 73 47 73 6f 73 73 52 46 35 4e 71 64 44 32 34 4d 44 24 31 36 72 4d 4b 47 55 31 56 2d 4d 56 37 55 47 54 72 36 31 56 71 2b 42 31 77 37 55 4c 31 73 77 6d 4c 73 6f 73 54 44 51 38 6d 73 47 44 34 73 56 73 2b 64 66 39 73 79 68 59 48 37 77 73 38 6d 73 4a 34 54 74 55 55 52 51 6f 37 73 71 32 Data Ascii: rKs+LHnF4odUD8s4mc0dVFSygbn1X+m8pG6zzZ2UqVfjznesmFuUqJTNsEAYvPATsr4vpFtzm6sTxKUmFt$ICwscJFbqu$dfUNFVsqO820oUs-aiAsACfsNF+sVmFmFBheDcS6Xp6tcZUQsGD+ft4KYsDysos+dVdsGsossRF5NqdD24MD$16rMKGU1V-MV7UGTr61Vq+B1w7UL1swmLsosTDQ8msGD4sVs+df9syhYH7ws8msJ4TtUURQo7sq2
2025-03-25 12:34:10 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:34:10 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5004 Connection: close
2025-03-25 12:34:10 UTC	1530	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 58 52 6b 6d 31 5a 47 4a 46 39 33 74 4d 4d 77 77 39 4e 37 46 4b 50 76 49 58 71 4e 46 4c 4a 62 6e 69 39 37 35 79 6b 43 4f 55 41 50 44 50 6c 65 6e 51 6e 47 32 2f 37 51 49 6e 63 33 67 43 36 49 39 76 4e 32 34 71 47 72 64 76 76 62 61 66 65 54 37 41 74 44 53 54 30 4f 76 77 4c 55 66 6d 6b 33 78 55 58 50 76 30 4d 66 73 71 36 75 71 5a 64 46 33 54 39 46 6d 59 6c 38 76 46 6f 65 2b 64 50 65 33 48 75 36 78 2f 44 46 61 69 4b 38 64 56 7a 50 6f 38 76 71 6d 78 6e 4e 73 51 73 6b 6b 72 34 45 66 7a 4f 37 64 4f 38 65 52 66 78 38 77 48 57 68 50 7a 46 65 43 43 41 4e 76 48 4a 6b 72 61 75 74 48 6b 49 77 6b 2f 6c 49 30 65 70 65 44 50 44 58 64 77 70 48 68 6e 5a 4d 2b 4f 54 31 61 75 41 77 63 7a 62 53 4e 41 52 42 43 63 41 79 31 65 71 77 58 58 Data Ascii: cf-chl-out-s: XRkm1ZGJF93tMMww9N7FKPvIXqNFLJbni975ykCOUAPDPlenQnG2/7QInc3gC6I9vN24qGrdvvbafeT7AtDST0OvwLUfmk3xUXPv0Mfsq6uqZdF3T9FmYl8vFoe+dPe3Hu6x/DFaiK8dVzPo8vqmxnNsQskkr4EfzO7dO8eRfx8wHWhPzFeCCANvHJkrautHkIwk/lI0epeDPDXdwpHhnZM+OT1auAwczbSNARBCcAy1eqwXX
2025-03-25 12:34:10 UTC	1073	IN	Data Raw: 52 59 5a 2f 5a 49 39 36 54 6f 64 4f 52 55 36 4a 55 49 35 56 6c 6b 78 56 6b 4a 61 55 6c 32 35 2f 6a 6e 47 4e 6e 5a 39 2b 6b 32 47 69 6a 4a 79 6d 6f 59 42 69 70 47 36 74 70 36 5a 75 6a 62 42 72 75 47 32 30 62 37 6d 6f 74 62 6d 2b 76 58 36 65 75 4c 32 6f 74 72 36 47 69 49 69 37 72 6f 79 51 77 37 54 44 6c 64 66 54 72 61 7a 61 78 74 57 79 6e 4d 72 4e 75 36 2f 45 32 38 58 6c 6e 73 6e 47 30 2b 43 39 33 39 66 75 32 62 48 73 39 4d 4f 6e 77 4f 58 44 72 38 58 71 78 63 66 57 2b 38 44 34 32 76 55 44 78 65 58 6a 39 39 58 6c 31 2b 7a 4d 35 66 7a 4c 34 41 63 54 45 2b 4c 65 42 76 6a 71 36 76 49 4c 36 2b 63 64 2b 39 37 55 2b 74 76 36 49 53 41 47 48 75 44 39 35 53 7a 6b 2b 76 67 79 41 7a 4d 6c 46 67 49 35 4f 66 55 36 39 44 6f 4b 39 66 59 57 45 50 6f 33 48 6a 4d 6d 50 44 51 Data Ascii: RYZ/ZI96TodORU6JUI5VlkxVkJaUl25/jnGNnZ9+k2GijJymoYBipG6tp6ZujbBruG20b7motbm+vX6euL2otr6GiIi7royQw7TDldfTrazaxtWynMrNu6/E28XlnsnG0+C939fu2bHs9MOnwOXDr8XqxcfW+8D42vUDxeXj99Xl1+zM5fzL4AcTE+LeBvjq6vIL6+cd+97U+tv6ISAGHuD95Szk+vgyAzMlFgI5OfU69DoK9fYWEPo3HjMmPDQ
2025-03-25 12:34:10 UTC	1369	IN	Data Raw: 4a 79 47 66 48 43 30 72 4a 42 34 70 6e 57 57 65 62 69 77 6d 72 32 72 6e 71 53 46 6d 38 53 6f 69 4b 43 54 6e 63 72 4a 67 59 4b 4a 69 4a 36 77 6b 4e 4b 52 71 35 50 44 6a 5a 57 59 70 36 65 78 34 71 4c 55 32 4f 62 68 77 75 6e 71 71 73 57 73 70 75 6d 6c 37 4b 6e 48 36 4d 71 2f 7a 76 6a 4a 78 4f 58 57 7a 50 37 56 79 76 65 2b 77 67 48 59 30 4e 6e 46 33 4d 4c 68 33 74 66 47 7a 68 44 4a 79 75 66 69 45 63 7a 70 31 66 45 58 46 75 62 33 33 42 6b 68 41 4f 30 53 39 67 54 67 35 53 59 43 34 65 67 6c 49 66 63 45 4b 67 66 75 42 2b 6b 4a 37 53 45 50 41 66 45 6c 44 75 37 37 38 50 6c 42 41 68 59 66 51 76 34 7a 52 54 6b 4a 46 42 34 48 53 53 49 72 4a 67 6b 6f 43 6b 78 52 4c 78 5a 46 56 7a 49 79 46 46 73 65 4b 30 77 67 54 6b 4e 66 59 6c 4e 52 52 53 4a 5a 49 6c 35 75 52 32 56 43 Data Ascii: JyGfHC0rJB4pnWWebiwmr2rnqSFm8SoiKCTncrJgYKJiJ6wkNKRq5PDjZWYp6ex4qLU2ObhwunqqsWspuml7KnH6Mq/zvjJxOXWzP7Vyve+wgHY0NnF3MLh3tfGzhDJyufiEczp1fEXFub33BkhAO0S9gTg5SYC4eglIfcEKgfuB+kJ7SEPAfElDu778PlBAhYfQv4zRTkJFB4HSSIrJgkoCkxRLxZFVzIyFFseK0wgTkNfYlNRRSJZIl5uR2VC
2025-03-25 12:34:10 UTC	1369	IN	Data Raw: 79 33 71 59 2b 56 69 4a 65 54 6c 72 2f 42 6c 6f 36 52 68 5a 4b 53 6c 4c 75 35 79 4b 75 4f 76 71 71 5a 7a 38 71 71 73 38 44 53 70 74 4b 54 78 70 6a 58 74 4a 65 2f 71 2b 44 5a 77 4e 76 54 6f 61 58 6c 31 39 66 65 35 4c 65 37 32 4d 50 77 79 72 4c 51 39 4d 44 73 30 75 76 48 30 73 66 75 31 4f 32 39 30 66 4c 41 77 4e 62 45 39 41 48 79 37 4f 72 74 34 4d 66 39 37 38 6e 63 7a 41 55 4f 31 2f 6a 55 46 52 62 76 36 74 66 35 49 52 4d 43 46 78 38 55 2f 68 62 31 45 68 77 66 47 75 63 44 37 53 67 54 4a 42 55 6d 35 77 44 32 44 67 6f 34 4b 53 38 38 48 7a 67 55 4f 53 38 36 41 42 77 52 4d 6b 41 71 52 43 55 32 4c 53 56 51 53 67 51 79 55 42 31 45 4e 30 68 57 52 78 51 37 55 7a 74 49 46 6d 45 79 51 56 56 59 48 30 55 32 47 32 5a 48 59 56 6c 4a 51 79 35 61 63 31 30 2f 63 6a 52 33 54 Data Ascii: y3qY+ViJeTlr/Blo6RhZKSlLu5yKuOvqqZz8qqs8DSptKTxpjXtJe/q+DZwNvToaXl19fe5Le72MPwyrLQ9MDs0uvH0sfu1O290fLAwNbE9AHy7Ort4Mf978nczAUO1/jUFRbv6tf5IRMCFx8U/hb1EhwfGucD7SgTJBUm5wD2Dgo4KS88HzgUOS86ABwRMkAqRCU2LSVQSgQyUB1EN0hWRxQ7UztIFmEyQVVYH0U2G2ZHYVlJQy5ac10/cjR3T
2025-03-25 12:34:10 UTC	1193	IN	Data Raw: 2f 6c 37 5a 39 6e 34 53 36 76 63 65 5a 75 4b 57 33 6d 72 79 68 6d 5a 6d 6f 79 4b 48 4a 78 5a 53 70 73 4d 72 43 71 62 57 31 72 72 79 7a 32 4e 53 7a 6f 39 4b 32 74 36 6a 68 76 4e 50 59 34 38 2b 73 35 75 6e 61 35 2b 6a 67 35 2f 66 77 38 66 43 30 2f 66 54 4b 7a 65 33 37 2b 76 36 32 38 2b 4c 55 75 67 50 5a 44 41 6f 49 36 67 7a 76 43 76 50 46 36 77 7a 52 34 4f 73 49 32 4f 6a 63 44 39 72 78 47 77 30 6b 44 74 59 65 2b 66 44 69 47 66 7a 35 4a 42 30 6c 4b 42 73 71 4b 51 48 6d 49 51 63 47 4e 69 66 33 4c 2f 73 75 4d 50 77 62 4f 69 4d 4f 45 6a 63 43 50 77 67 68 4b 69 30 4e 4a 6b 55 78 43 44 38 6a 42 6b 70 4b 4d 68 46 4e 53 79 31 55 4f 30 77 37 4c 6a 5a 59 57 6b 51 6c 58 54 5a 43 57 57 51 6c 52 6d 35 47 5a 6b 5a 73 59 6c 52 30 61 47 35 48 52 6e 52 6c 4f 48 78 4d 64 58 Data Ascii: /l7Z9n4S6vceZuKW3mryhmZmoyKHJxZSpsMrCqbW1rryz2NSzo9K2t6jhvNPY48+s5una5+jg5/fw8fC0/fTKze37+v628+LUugPZDAoI6gzvCvPF6wzR4OsI2OjcD9rxGw0kDtYe+fDiGfz5JB0lKBsqKQHmIQcGNif3L/suMPwbOiMOEjcCPwghKi0NJkUxCD8jBkpKMhFNSy1UO0w7LjZYWkQlXTZCWWQlRm5GZkZsYlR0aG5HRnRlOHxMdX

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:34:11 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e703c3c2242fb/ab3J7.wrZ3cOcxrVFUtpszbkr1Zh.2huVeQ_Bz7s4J0-1742906024-1.1.1.1-6t7I4lmbKZQk4UQM1julkhd3jKZia.6sI8qJL4hlmjtkt2oVcSXmwLpUxqQow_4V HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:34:11 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Mar 2025 12:34:11 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 1XL9ph0hWu6vbfdJ/WhTy9rB3ONQZ0aB0HmcED1z6CsKOtyEiDY0PWckCOt6wnlM8CbsfOWKGipbm7GFyKkp0g==$/x7v4PZMEZDor3r4ry7ZNg== Server: cloudflare CF-RAY: 925e70e4ef1c4255-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 12:34:11 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:34:12 UTC	800	OUT	GET / HTTP/1.1 Host: satisfy-other-anytime-disturbed.trycloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://pub-c56f1954c8f640f5aacaea31d2bd6908.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:34:13 UTC	219	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 12:34:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 925e70eb3e17aa39-EWR CF-Cache-Status: DYNAMIC Server: cloudflare
2025-03-25 12:34:13 UTC	1150	IN	Data Raw: 37 65 62 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 27 6e 6f 6e 65 27 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 22 Data Ascii: 7ebe<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="Content-Security-Policy" content="form-action 'none'"> <meta name="color-scheme"
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 29 27 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 31 30 30 25 27 3a 20 7b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 27 74 72 61 6e 73 6c 61 74 65 58 28 34 35 30 70 78 29 27 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 61 64 65 49 6e 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 30 25 27 3a 20 7b 20 6f 70 61 63 69 74 79 3a 20 27 30 27 2c 20 74 72 61 6e 73 66 6f 72 6d 3a 20 27 74 72 61 6e 73 6c 61 74 65 59 28 31 30 70 78 29 27 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 31 30 30 25 27 Data Ascii: )' }, '100%': { transform: 'translateX(450px)' } }, fadeIn: { '0%': { opacity: '0', transform: 'translateY(10px)' }, '100%'
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ing: border-box; margin: 0; padding: 0; } html { -webkit-text-size-adjust: 100%; } a { color: #ccc; text-decoration: none; } a:link {
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 20 43 6f 6e 74 61 69 6e 65 72 20 73 74 79 6c 65 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 34 30 70 78 3b Data Ascii: } /* Container styles */ .login-container { position: relative; overflow: hidden; border: 1px solid rgba(0, 0, 0, 0.1); box-shadow: 0 2px 6px rgba(0, 0, 0, 0.05); width: 440px;
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 61 72 72 6f 77 2d 6c 65 66 74 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 32 65 32 65 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 20 2e 69 6e 70 75 74 2d 66 69 65 6c 64 3a 66 6f 63 75 73 2b 2e 69 6e 70 75 74 2d 6c 61 62 65 6c 2c 0a 20 20 20 20 20 20 20 20 2e 69 6e 70 75 74 2d 66 69 65 6c 64 3a 6e 6f 74 28 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2d 73 68 6f 77 6e 29 2b 2e 69 Data Ascii: z-index: 1; padding-top: 15px; } .arrow-left:hover { background: #e2e2e2; border-radius: 50%; } /* .input-field:focus+.input-label, .input-field:not(:placeholder-shown)+.i
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 70 3a 20 33 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 23 61 75 74 68 43 6f 64 65 49 6e 70 75 74 53 65 63 74 69 6f 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 34 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 20 2f 2a 20 43 68 61 6e 67 65 64 20 66 72 6f 6d 20 63 65 6e Data Ascii: pointer; display: flex; align-items: center; gap: 3px; margin-bottom: 16px; padding: 0; } #authCodeInputSection { margin-top: 24px; text-align: left; /* Changed from cen
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 6c 2d 6c 69 6e 6b 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 36 37 62 38 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 36 70 78 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 61 6e 63 65 6c 2d 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 34 38 38 31 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 65 78 74 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 20 20 20 Data Ascii: l-link { color: #0067b8; text-decoration: none; font-size: 14px; margin-top: 16px; cursor: pointer;}.cancel-link:hover { color: #004881; text-decoration: underline;} .next-button { float: right;
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 66 61 64 65 49 6e 20 30 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 73 74 61 79 2d 73 69 67 6e 65 64 2d 74 69 74 6c 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 73 74 61 79 2d 73 69 67 6e 65 64 2d 64 65 73 63 72 69 70 74 Data Ascii: 0, 0, 0.1); animation: fadeIn 0.3s ease-out; } .stay-signed-title { font-size: 22px; font-weight: 600; color: #000; margin-bottom: 16px; } .stay-signed-descript
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 20 35 30 25 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6d 6f 76 65 41 63 72 6f 73 73 20 32 2e 35 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 7d 0a 0a 2e 6c 6f 61 64 69 6e 67 2d 64 6f 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 32 73 3b 0a 7d 0a 0a 2e 6c 6f 61 64 69 6e 67 2d 64 6f 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 7b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 34 73 3b 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d Data Ascii: 50%; position: relative; animation: moveAcross 2.5s infinite linear; opacity: 0.8;}.loading-dots-container .dot:nth-child(2) { animation-delay: 0.2s;}.loading-dots-container .dot:nth-child(3) { animation-delay: 0.4s;}@keyfram
2025-03-25 12:34:13 UTC	1369	IN	Data Raw: 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 31 30 33 2c 20 31 38 34 2c 20 30 2e 31 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 20 53 75 63 63 65 73 73 20 4f 76 65 72 6c 61 79 20 2a 2f 0a 20 20 20 20 20 20 20 20 2e 73 75 63 63 65 73 73 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 73 65 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a Data Ascii: n:hover { background: rgba(0, 103, 184, 0.1); } /* Success Overlay */ .success-overlay { display: none; position: fixed; inset: 0; background: white; z-index:

Timestamp	Bytes transferred	Direction	Data
2025-03-25 12:34:13 UTC	593	OUT	GET / HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://satisfy-other-anytime-disturbed.trycloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 12:34:14 UTC	363	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 12:34:14 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 location: /3.4.16 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::h4hsr-1742905556138-4d82cecea364 CF-Cache-Status: HIT Age: 496 Server: cloudflare CF-RAY: 925e70f5d9f08ae3-EWR
2025-03-25 12:34:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0