Edit tour

Windows Analysis Report
https://document-baol.b12sites.com/

Overview

General Information

Sample URL:	https://document-baol.b12sites.com/
Analysis ID:	1648886
Infos:

Detection

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

Form action URLs do not match main URL

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --subproc-heap-profiling --field-trial-handle=1968,i,8141388924341248411,5639761963271740158,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://document-baol.b12sites.com/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-26T10:06:39.540975+0100	2024228	2	Possible Social Engineering Attempted	104.21.66.135	443	192.168.2.4	49789	TCP
2025-03-26T10:06:44.271750+0100	2024228	2	Possible Social Engineering Attempted	104.21.66.135	443	192.168.2.4	49790	TCP

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://document-baol.b12sites.com/	Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT' Source: '0.0.pages.csv'
Source: https://document-baol.b12sites.com/	Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT' Source: '0.2.pages.csv'

AI detected suspicious Javascript

Source: 2.28..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://withamprospect.museandhemarketplace.com/?c... This JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and heavy obfuscation. The use of `eval`, `Function` constructor, and encoded strings indicates the potential for malicious activities. Additionally, the script appears to be attempting to bypass security measures and hide its true purpose. Overall, this script poses a significant risk and should be thoroughly investigated before execution.

AI detected suspicious URL

Source: https://museandhemarketplace.com

Joe Sandbox AI: The URL 'https://museandhemarketplace.com' closely resembles the legitimate URL 'https://museandthemarketplace.com'. The primary difference is the omission of the letter 't' in 'the', which is a common typographical error. This minor structural change could easily lead to user confusion, especially if the legitimate site is well-known to the target audience. The domain does not suggest a different legitimate purpose unrelated to the brand, and there are no additional subdomains or domain extensions that would indicate a non-deceptive context. Given the high similarity and potential for user confusion, this URL is likely a typosquatting attempt.

Source: https://document-baol.b12sites.com/	HTTP Parser: Form action: https://b12.io/contact/send/ b12sites b12
Source: https://document-baol.b12sites.com/	HTTP Parser: Form action: https://b12.io/contact/send/ b12sites b12

Source: https://document-baol.b12sites.com/	HTTP Parser: No favicon
Source: https://document-baol.b12sites.com/	HTTP Parser: No favicon
Source: https://document-baol.b12sites.com/	HTTP Parser: No favicon
Source: https://withamprospect.museandhemarketplace.com/	HTTP Parser: No favicon

Source: https://document-baol.b12sites.com/	HTTP Parser: No <meta name="author".. found
Source: https://document-baol.b12sites.com/	HTTP Parser: No <meta name="author".. found

Source: https://document-baol.b12sites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://document-baol.b12sites.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.40.132:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.22.145.238:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.22.145.238:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.10:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.41.4:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.10:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.121:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.90:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.176.196:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.135:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.135:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.160.101:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.135:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.135:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.4:49795 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 104.21.66.135:443 -> 192.168.2.4:49789
Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 104.21.66.135:443 -> 192.168.2.4:49790

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.136.170
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.136.170
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.136.170
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.136.170
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.136.170
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.136.170
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.136.170

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: document-baol.b12sites.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/bundle-26df06bbde665912c7803cd668f15047.js HTTP/1.1Host: document-baol.b12sites.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://document-baol.b12sites.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/poppins-latin-normal-400.woff2 HTTP/1.1Host: document-baol.b12sites.comConnection: keep-aliveOrigin: https://document-baol.b12sites.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/poppins-latin-normal-600.woff2 HTTP/1.1Host: document-baol.b12sites.comConnection: keep-aliveOrigin: https://document-baol.b12sites.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/poppins-latin-normal-500.woff2 HTTP/1.1Host: document-baol.b12sites.comConnection: keep-aliveOrigin: https://document-baol.b12sites.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/poppins-latin-normal-700.woff2 HTTP/1.1Host: document-baol.b12sites.comConnection: keep-aliveOrigin: https://document-baol.b12sites.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_media/LTWlEPPJ/4a217452-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg HTTP/1.1Host: cdn.b12.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Ld1R8kUAAAAAGEYGyd1RXFcdSGY03uF4y_yN40A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_media/LTWlEPPJ/4a217452-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg HTTP/1.1Host: cdn.b12.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prod_traffic/global.js HTTP/1.1Host: cdn.b12.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_media/LTWlEPPJ/4aa9faf2-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg HTTP/1.1Host: cdn.b12.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?stm=1742979947772&e=pv&url=https%3A%2F%2Fdocument-baol.b12sites.com%2F&page=DOCUMENT%3A%20Streamline%20Your%20Documentation%20in%20Toronto&tv=js-2.9.0&tna=cf&aid=ca%2FLTWlEPPJ&p=web&tz=America%2FNew_York&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=4297aec2-1792-4bd5-8acd-4551805cf503&dtm=1742979947770&vp=1280x897&ds=1265x3342&vid=1&sid=df5802e2-194e-4308-9daf-af5aa5f1cb1e&duid=3f336497-7342-4311-8b5f-9dc582f5fe36&fp=2128515719 HTTP/1.1Host: prod-traffic.b12.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?stm=1742979947772&e=pv&url=https%3A%2F%2Fdocument-baol.b12sites.com%2F&page=DOCUMENT%3A%20Streamline%20Your%20Documentation%20in%20Toronto&tv=js-2.9.0&tna=cf&aid=ca%2FLTWlEPPJ&p=web&tz=America%2FNew_York&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=4297aec2-1792-4bd5-8acd-4551805cf503&dtm=1742979947770&vp=1280x897&ds=1265x3342&vid=1&sid=df5802e2-194e-4308-9daf-af5aa5f1cb1e&duid=3f336497-7342-4311-8b5f-9dc582f5fe36&fp=2128515719 HTTP/1.1Host: prod-traffic.b12.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_media/LTWlEPPJ/4aa9faf2-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg HTTP/1.1Host: cdn.b12.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Ld1R8kUAAAAAGEYGyd1RXFcdSGY03uF4y_yN40A&co=aHR0cHM6Ly9kb2N1bWVudC1iYW9sLmIxMnNpdGVzLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=bdexqwdvwnbi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: /X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCL7VzgEIgdbOAQjI3M4BCIrgzgEIruTOAQiL5c4BSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerSec-Fetch-Storage-Access: activeReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld1R8kUAAAAAGEYGyd1RXFcdSGY03uF4y_yN40A&co=aHR0cHM6Ly9kb2N1bWVudC1iYW9sLmIxMnNpdGVzLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=bdexqwdvwnbiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: document-baol.b12sites.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://document-baol.b12sites.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _sp_ses.493b=; _sp_id.493b=3f336497-7342-4311-8b5f-9dc582f5fe36.1742979948.1.1742979948.1742979948.df5802e2-194e-4308-9daf-af5aa5f1cb1e
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: withamprospect.museandhemarketplace.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: withamprospect.museandhemarketplace.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://withamprospect.museandhemarketplace.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=uqls6fj35k2lea336n33iai05c
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://withamprospect.museandhemarketplace.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://withamprospect.museandhemarketplace.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://withamprospect.museandhemarketplace.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92657dc20d9f42a7&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/images/favicon.ico HTTP/1.1Host: withamprospect.museandhemarketplace.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://withamprospect.museandhemarketplace.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=uqls6fj35k2lea336n33iai05c
Source: global traffic	HTTP traffic detected: GET /page/images/favicon.ico HTTP/1.1Host: withamprospect.museandhemarketplace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=uqls6fj35k2lea336n33iai05c
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/109354503:1742977610:vBcNnr8NMUJMjR8QdEocKteNJAN-hlPdGxlfnGEXtEU/92657dc20d9f42a7/mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/92657dc20d9f42a7/1742979981303/jTDsi5OxEtTj5Ee HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/92657dc20d9f42a7/1742979981303/jTDsi5OxEtTj5Ee HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/92657dc20d9f42a7/1742979981304/fcc91aedd73be29b38264842c5932c544ffe6be8b682138cc979f3286c9290b2/qHOa5trkPpyTJKY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/109354503:1742977610:vBcNnr8NMUJMjR8QdEocKteNJAN-hlPdGxlfnGEXtEU/92657dc20d9f42a7/mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?cf-turnstile-response=0.c8uwYdWleBqFAg6LotLXXfR02WLqev_71Tt-ErX_O5EEd_kQOuDvKny19sB9FwDvjhgo_nuPSlAm_Z57195uPT0enwN5JrFz-Fbm7jSvwzITlGIXPDQDsNuN0LWa74EYbei6nQNDUXUajeekQSjjvd62tNmLgmEMNhdB2GldJuVNgfooJMhfOJFG711ecS-UnMiD41kaHLgr6-6QVZfoB9L3xALYd0RWKuFOXN7Suu0aIyfPCZEUPfQXaZKV2QhSsb11eRUdJM3egKTi2hxAE7qG-F2K7S60glyP1Bvn-eDi9JjhuviNPKNfiPt-YS3ok9kiqVxZo0HCKFgfy0wnj95BjwEKL20FM952V15RSd1InpzHZNvA6wCJjDqXlRdJ5u7-JQHJMkVYqTWZDI5u_oufwsrvFTX4DZjtCEMpVfhDU_UJXnKv1ugyTWGejQI2tbMDx58aSRnM4aZM6tjLfW0N99dHNCchL-jzkfi07MY5UJ9NCGZ64eGavjb88uYzs1VmN6pmj6UiOkDOnrZBfa0CEQtzD1b7BwH7r4idEgY3zJtgoFOt1U8fzBXU9Ue_jOf_JYW3H7ABkY2kEoowMsAHkGlhRmkWHU_JRO6vWT_WfjZmXntC2lW5lvgi0mpRH4BMw8CKNFYpVkgWkcwHWcVXI8nrzwZqFj9iiHZh43ERStFj8_MHr1RJAUikmjsqPZsCiKCEi8zsTSwxfHR93XuUrk-BD4JSveCKZu_DyFrWhQJ3tR0GD-lYG7smS-qbwhCK_-S1lriU3eSW_hUCR1XcvJejLqvEIjSbwhFbxZUq0elLwmPNDt62KvJChU_1zigThK4EFGGuyNoOqCYVHqYnXKO5OBlU_7Y_Z-PK-Arylyh4A5UPPHQzly8J3v6v.SF9cyLolqglu_eUvzb7HEQ.50e19e9d6939ec09acccbd713fe92b7964698d341a047957f69086d887ea88dc HTTP/1.1Host: withamprospect.museandhemarketplace.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://withamprospect.museandhemarketplace.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=uqls6fj35k2lea336n33iai05c
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/109354503:1742977610:vBcNnr8NMUJMjR8QdEocKteNJAN-hlPdGxlfnGEXtEU/92657dc20d9f42a7/mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lcdbE3v9F2K6Xd7SO428Njyw6m1OwmkWosaaedqSeQoXVGp4nyhfnWIV6UiTR9PoRB7umYtDvHLxI2wDjrM4exVSGIyQ5aoZZEQt8gTz5P7ABZlhrMTsKkCkOY9EL5AfLvjoCBR8Wbl3gxJcHi0bFgzHuUqAN/index HTTP/1.1Host: withamprospect.museandhemarketplace.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://withamprospect.museandhemarketplace.com/?cf-turnstile-response=0.c8uwYdWleBqFAg6LotLXXfR02WLqev_71Tt-ErX_O5EEd_kQOuDvKny19sB9FwDvjhgo_nuPSlAm_Z57195uPT0enwN5JrFz-Fbm7jSvwzITlGIXPDQDsNuN0LWa74EYbei6nQNDUXUajeekQSjjvd62tNmLgmEMNhdB2GldJuVNgfooJMhfOJFG711ecS-UnMiD41kaHLgr6-6QVZfoB9L3xALYd0RWKuFOXN7Suu0aIyfPCZEUPfQXaZKV2QhSsb11eRUdJM3egKTi2hxAE7qG-F2K7S60glyP1Bvn-eDi9JjhuviNPKNfiPt-YS3ok9kiqVxZo0HCKFgfy0wnj95BjwEKL20FM952V15RSd1InpzHZNvA6wCJjDqXlRdJ5u7-JQHJMkVYqTWZDI5u_oufwsrvFTX4DZjtCEMpVfhDU_UJXnKv1ugyTWGejQI2tbMDx58aSRnM4aZM6tjLfW0N99dHNCchL-jzkfi07MY5UJ9NCGZ64eGavjb88uYzs1VmN6pmj6UiOkDOnrZBfa0CEQtzD1b7BwH7r4idEgY3zJtgoFOt1U8fzBXU9Ue_jOf_JYW3H7ABkY2kEoowMsAHkGlhRmkWHU_JRO6vWT_WfjZmXntC2lW5lvgi0mpRH4BMw8CKNFYpVkgWkcwHWcVXI8nrzwZqFj9iiHZh43ERStFj8_MHr1RJAUikmjsqPZsCiKCEi8zsTSwxfHR93XuUrk-BD4JSveCKZu_DyFrWhQJ3tR0GD-lYG7smS-qbwhCK_-S1lriU3eSW_hUCR1XcvJejLqvEIjSbwhFbxZUq0elLwmPNDt62KvJChU_1zigThK4EFGGuyNoOqCYVHqYnXKO5OBlU_7Y_Z-PK-Arylyh4A5UPPHQzly8J3v6v.SF9cyLolqglu_eUvzb7HEQ.50e19e9d6939ec09acccbd713fe92b7964698d341a047957f69086d887ea88dcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=uqls6fj35k2lea336n33iai05c
Source: global traffic	HTTP traffic detected: GET /gh/syntaxerror019/HTML-STO/ld.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://withamprospect.museandhemarketplace.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCL7VzgEIgdbOAQjI3M4BCIrgzgEIruTOAQiL5c4BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: document-baol.b12sites.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdn.b12.io
Source: global traffic	DNS traffic detected: DNS query: prod-traffic.b12.io
Source: global traffic	DNS traffic detected: DNS query: withamprospect.museandhemarketplace.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/109354503:1742977610:vBcNnr8NMUJMjR8QdEocKteNJAN-hlPdGxlfnGEXtEU/92657dc20d9f42a7/mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3401sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2fcf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundAlt-Svc: h3=":443"; ma=2592000Content-Length: 979Content-Type: text/html; charset=utf-8Date: Wed, 26 Mar 2025 09:06:00 GMTServer: CaddyServer: gunicorn/20.0.4X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Xss-Protection: 1; mode=blockConnection: close

Source: chromecache_71.2.dr	String found in binary or memory: http://github.com/jquery/jquery-tmpl
Source: chromecache_71.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/haltu/muuri
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/haltu/muuri/blob/master/LICENSE.md
Source: chromecache_71.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_71.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_71.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_102.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_71.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_102.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_95.2.dr, chromecache_102.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_95.2.dr, chromecache_102.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__.
Source: chromecache_91.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 142.251.40.132:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.22.145.238:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.22.145.238:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.10:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.41.4:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.10:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.121:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.90:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.176.196:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.135:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.135:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.160.101:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.135:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.135:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.4:49795 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1760_1053101546

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1760_1053101546

Jump to behavior

Source: classification engine

Classification label: mal52.win@25/61@32/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --subproc-heap-profiling --field-trial-handle=1968,i,8141388924341248411,5639761963271740158,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://document-baol.b12sites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --subproc-heap-profiling --field-trial-handle=1968,i,8141388924341248411,5639761963271740158,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://document-baol.b12sites.com/"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	3 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://document-baol.b12sites.com/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://document-baol.b12sites.com/favicon.ico	0%	Avira URL Cloud	safe
https://document-baol.b12sites.com/assets/bundle-26df06bbde665912c7803cd668f15047.js	0%	Avira URL Cloud	safe
https://withamprospect.museandhemarketplace.com/lcdbE3v9F2K6Xd7SO428Njyw6m1OwmkWosaaedqSeQoXVGp4nyhfnWIV6UiTR9PoRB7umYtDvHLxI2wDjrM4exVSGIyQ5aoZZEQt8gTz5P7ABZlhrMTsKkCkOY9EL5AfLvjoCBR8Wbl3gxJcHi0bFgzHuUqAN/index	0%	Avira URL Cloud	safe
https://document-baol.b12sites.com/assets/fonts/poppins-latin-normal-400.woff2	0%	Avira URL Cloud	safe
https://document-baol.b12sites.com/assets/fonts/poppins-latin-normal-700.woff2	0%	Avira URL Cloud	safe
https://cdn.b12.io/prod_traffic/global.js	0%	Avira URL Cloud	safe
https://document-baol.b12sites.com/assets/fonts/poppins-latin-normal-500.woff2	0%	Avira URL Cloud	safe
https://cdn.b12.io/client_media/LTWlEPPJ/4a217452-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg	0%	Avira URL Cloud	safe
https://withamprospect.museandhemarketplace.com/page/images/favicon.ico	0%	Avira URL Cloud	safe
https://cdn.b12.io/client_media/LTWlEPPJ/4aa9faf2-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg	0%	Avira URL Cloud	safe
https://prod-traffic.b12.io/i?stm=1742979947772&e=pv&url=https%3A%2F%2Fdocument-baol.b12sites.com%2F&page=DOCUMENT%3A%20Streamline%20Your%20Documentation%20in%20Toronto&tv=js-2.9.0&tna=cf&aid=ca%2FLTWlEPPJ&p=web&tz=America%2FNew_York&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=4297aec2-1792-4bd5-8acd-4551805cf503&dtm=1742979947770&vp=1280x897&ds=1265x3342&vid=1&sid=df5802e2-194e-4308-9daf-af5aa5f1cb1e&duid=3f336497-7342-4311-8b5f-9dc582f5fe36&fp=2128515719	0%	Avira URL Cloud	safe
https://document-baol.b12sites.com/assets/fonts/poppins-latin-normal-600.woff2	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod-traffic.b12.io	13.249.91.121	true	false	unknown
cdn.jsdelivr.net.cdn.cloudflare.net	104.18.186.31	true	false	high
code.jquery.com	151.101.2.137	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.251.40.132	true	false	high
webproxy-production.b12.io	52.22.145.238	true	false	unknown
withamprospect.museandhemarketplace.com	104.21.66.135	true	true	unknown
dm60rvnu40ni7.cloudfront.net	18.164.116.10	true	false	unknown
cdn.b12.io	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
document-baol.b12sites.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld1R8kUAAAAAGEYGyd1RXFcdSGY03uF4y_yN40A&co=aHR0cHM6Ly9kb2N1bWVudC1iYW9sLmIxMnNpdGVzLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=bdexqwdvwnbi	false		high
https://document-baol.b12sites.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://withamprospect.museandhemarketplace.com/	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/109354503:1742977610:vBcNnr8NMUJMjR8QdEocKteNJAN-hlPdGxlfnGEXtEU/92657dc20d9f42a7/mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2f	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/92657dc20d9f42a7/1742979981304/fcc91aedd73be29b38264842c5932c544ffe6be8b682138cc979f3286c9290b2/qHOa5trkPpyTJKY	false		high
https://withamprospect.museandhemarketplace.com/page/images/favicon.ico	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/syntaxerror019/HTML-STO/ld.min.js	false		high
https://cdn.b12.io/prod_traffic/global.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://cdn.b12.io/client_media/LTWlEPPJ/4aa9faf2-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://document-baol.b12sites.com/	true		unknown
https://document-baol.b12sites.com/assets/bundle-26df06bbde665912c7803cd668f15047.js	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92657dc20d9f42a7&lang=auto	false		high
https://document-baol.b12sites.com/assets/fonts/poppins-latin-normal-500.woff2	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/92657dc20d9f42a7/1742979981303/jTDsi5OxEtTj5Ee	false		high
https://www.google.com/recaptcha/api.js?render=6Ld1R8kUAAAAAGEYGyd1RXFcdSGY03uF4y_yN40A	false		high
https://document-baol.b12sites.com/assets/fonts/poppins-latin-normal-400.woff2	true	Avira URL Cloud: safe	unknown
https://withamprospect.museandhemarketplace.com/lcdbE3v9F2K6Xd7SO428Njyw6m1OwmkWosaaedqSeQoXVGp4nyhfnWIV6UiTR9PoRB7umYtDvHLxI2wDjrM4exVSGIyQ5aoZZEQt8gTz5P7ABZlhrMTsKkCkOY9EL5AfLvjoCBR8Wbl3gxJcHi0bFgzHuUqAN/index	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.3.1.min.js	false		high
https://document-baol.b12sites.com/assets/fonts/poppins-latin-normal-700.woff2	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://cdn.b12.io/client_media/LTWlEPPJ/4a217452-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/	false		high
https://prod-traffic.b12.io/i?stm=1742979947772&e=pv&url=https%3A%2F%2Fdocument-baol.b12sites.com%2F&page=DOCUMENT%3A%20Streamline%20Your%20Documentation%20in%20Toronto&tv=js-2.9.0&tna=cf&aid=ca%2FLTWlEPPJ&p=web&tz=America%2FNew_York&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=4297aec2-1792-4bd5-8acd-4551805cf503&dtm=1742979947770&vp=1280x897&ds=1265x3342&vid=1&sid=df5802e2-194e-4308-9daf-af5aa5f1cb1e&duid=3f336497-7342-4311-8b5f-9dc582f5fe36&fp=2128515719	false	Avira URL Cloud: safe	unknown
https://document-baol.b12sites.com/assets/fonts/poppins-latin-normal-600.woff2	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error	chromecache_95.2.dr, chromecache_102.2.dr	false	high
https://github.com/haltu/muuri/blob/master/LICENSE.md	chromecache_71.2.dr	false	high
http://jquery.org/license	chromecache_71.2.dr	false	high
https://github.com/haltu/muuri	chromecache_71.2.dr	false	high
https://support.google.com/recaptcha#6262736	chromecache_95.2.dr, chromecache_102.2.dr	false	high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_95.2.dr, chromecache_102.2.dr	false	high
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error	chromecache_95.2.dr, chromecache_102.2.dr	false	high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_95.2.dr, chromecache_102.2.dr	false	high
https://cloud.google.com/contact	chromecache_95.2.dr, chromecache_102.2.dr	false	high
http://github.com/jquery/jquery-tmpl	chromecache_71.2.dr	false	high
https://jquery.org/license	chromecache_71.2.dr	false	high
https://play.google.com/log?format=json&hasfast=true	chromecache_102.2.dr	false	high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_95.2.dr, chromecache_102.2.dr	false	high
https://www.gstatic.c..?/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__.	chromecache_95.2.dr, chromecache_102.2.dr	false	high
https://jquery.com/	chromecache_71.2.dr	false	high
https://support.google.com/recaptcha/#6175971	chromecache_95.2.dr, chromecache_102.2.dr	false	high
https://www.google.com/recaptcha/api2/	chromecache_95.2.dr, chromecache_102.2.dr, chromecache_88.2.dr	false	high
https://sizzlejs.com/	chromecache_71.2.dr	false	high
https://js.foundation/	chromecache_71.2.dr	false	high
https://support.google.com/recaptcha	chromecache_102.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.160.101	unknown	United States	13335	CLOUDFLARENETUS	false
13.249.91.121	prod-traffic.b12.io	United States	16509	AMAZON-02US	false
142.250.176.196	unknown	United States	15169	GOOGLEUS	false
104.18.186.31	cdn.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.66.135	withamprospect.museandhemarketplace.com	United States	13335	CLOUDFLARENETUS	true
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
13.249.91.90	unknown	United States	16509	AMAZON-02US	false
18.164.116.10	dm60rvnu40ni7.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
52.22.145.238	webproxy-production.b12.io	United States	14618	AMAZON-AESUS	false
142.251.41.4	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648886
Start date and time:	2025-03-26 10:04:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://document-baol.b12sites.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@25/61@32/14

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.33.40.139, 23.33.40.140, 23.33.40.147, 23.33.40.149, 23.33.40.138, 23.33.40.143, 142.251.32.110, 142.251.40.131, 142.251.163.84, 142.251.40.206, 142.250.65.238, 142.251.41.14, 142.250.81.238, 23.203.176.221, 142.250.80.106, 142.250.65.234, 142.250.65.170, 142.250.72.106, 142.251.32.106, 142.251.40.170, 142.250.64.106, 142.251.40.138, 142.250.80.74, 142.250.80.10, 142.250.65.202, 142.251.35.170, 142.251.40.106, 142.250.64.74, 142.250.81.234, 142.250.176.202, 142.250.176.195, 142.251.40.142, 142.250.81.227, 142.251.35.174, 142.250.80.67, 142.250.72.99, 142.250.65.206, 142.250.64.99, 142.250.80.78, 184.31.69.3, 20.12.23.50, 52.149.20.212
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, www-www.bing.com.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, e86303.dscx.akamaiedge.net, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, www.bing.com.edgekey.net, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://document-baol.b12sites.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	979
Entropy (8bit):	4.758851341341829
Encrypted:	false
SSDEEP:	24:hYb05C0l0eR/Zc7jo2wlS8IeRQqlfFh6Vly9nLgMTu:RrN0d8IezFmA0au
MD5:	B5B2C2F32BA7AC063A3780736EFF2FE2
SHA1:	4DDE7F301A934CCF35610F2F5B520E6E5BB6F8AA
SHA-256:	FB2E445313B1D694626C1D475377C34E9A860A2DEDD50FF5D28D76A3541F1AF0
SHA-512:	8D0E1A9F23B5CAD427228B852897D5840DEDE2C6239037CA33E3F22C9EC270A3FA8F43DD369720903E8D6064752E3DE25A7DA30B0E744933EA25547601EC3091
Malicious:	false
Reputation:	low
URL:	https://document-baol.b12sites.com/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Not Found</title>. <style>. body {. background-color: rgb(252, 252, 252);. color: #222222;. font-family: sans-serif;. }. h1 {. font-family: $font-family-serif;. font-weight: 200;. font-size: 50px;. letter-spacing: 2.3px;. line-height: 67px;. margin-bottom: 20px;. text-align: center;. }. .error-page {. padding-top: 50px;. }. .error-text {. font-size: 20px;. font-weight: 300;. height: 26px;. letter-spacing: 0.8px;. margin-bottom: 5px;. margin-top: 0px;. text-align: center;. }. </style>.</head>..<body>. <div class='error-page'>. <h1>404</h1>. <p class="error-text">. Looks like an error :/. </p>. <p class="error-text">. Head back <a href="/"> home</a>.. </p>. </div>.</body>..</html>.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2025 10:05:34.877558947 CET	53	56602	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:34.905453920 CET	53	50230	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:35.488699913 CET	53	65255	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:35.922873974 CET	53	57006	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:39.005489111 CET	62356	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:39.005654097 CET	64730	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:39.109045029 CET	53	62356	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:40.165955067 CET	60671	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:40.165955067 CET	49844	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:40.327725887 CET	53	60671	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:40.337023020 CET	53	49844	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:40.999936104 CET	51560	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:41.000222921 CET	55987	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:41.106223106 CET	53	51560	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:41.133285046 CET	53	55987	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:41.847491026 CET	52833	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:41.848421097 CET	49665	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:41.914994955 CET	51499	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:41.915525913 CET	60217	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:41.988548040 CET	53	49665	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:42.100867033 CET	53	60217	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:42.235722065 CET	53	51499	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:42.868248940 CET	63000	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:42.967211962 CET	53	63000	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:43.084278107 CET	60167	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:43.088587046 CET	58410	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:43.220881939 CET	53	58410	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:43.265388966 CET	53	60167	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:48.341322899 CET	53	56903	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:48.374739885 CET	53	53118	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:48.746970892 CET	55442	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:48.747138023 CET	65100	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:48.894610882 CET	53	55442	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:48.910703897 CET	53	65100	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:49.461119890 CET	50816	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:49.461119890 CET	50542	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:49.606508017 CET	53	50816	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:49.631962061 CET	53	50542	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:52.387758017 CET	58497	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:52.387865067 CET	49538	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:05:52.504389048 CET	53	49538	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:52.532157898 CET	53	58497	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:53.687105894 CET	53	49564	1.1.1.1	192.168.2.4
Mar 26, 2025 10:05:53.972554922 CET	53	62068	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:00.125427961 CET	53	50359	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:12.968063116 CET	53	63179	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:13.183481932 CET	55196	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:13.183665037 CET	56943	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:13.296890974 CET	53	55196	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:13.327863932 CET	53	56943	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:15.209532976 CET	57545	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:15.209860086 CET	59787	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:15.348736048 CET	53	57545	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:15.348928928 CET	53	59787	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:17.912924051 CET	55830	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:17.913134098 CET	56202	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:18.053854942 CET	53	55830	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:18.057154894 CET	53	56202	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:20.383569956 CET	51121	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:20.383771896 CET	60493	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:20.484359980 CET	53	60493	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:20.520946980 CET	53	51121	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:21.020140886 CET	56744	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:21.020417929 CET	54972	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:21.142661095 CET	53	54972	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:21.165519953 CET	53	56744	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:34.427604914 CET	53	49386	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:34.770308018 CET	53	52011	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:42.764380932 CET	64823	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:42.764517069 CET	53450	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:42.775660992 CET	138	138	192.168.2.4	192.168.2.255
Mar 26, 2025 10:06:42.864845037 CET	53	53450	1.1.1.1	192.168.2.4
Mar 26, 2025 10:06:43.775232077 CET	63892	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:06:43.884598017 CET	53	63892	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 26, 2025 10:05:41.133352041 CET	192.168.2.4	1.1.1.1	c222	(Port unreachable)	Destination Unreachable
Mar 26, 2025 10:06:13.327979088 CET	192.168.2.4	1.1.1.1	c291	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 26, 2025 10:05:25.734428883 CET	434	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 7796 Cache-Control: public,max-age=900 Content-Type: application/vnd.ms-cab-compressed Last-Modified: Fri, 02 Jun 2017 17:39:05 GMT ETag: "80424021c7dbd21:0" Accept-Ranges: bytes Date: Wed, 26 Mar 2025 09:05:25 GMT Via: 1.1 varnish Age: 718 X-Served-By: cache-lga21926-LGA X-Cache: HIT X-Cache-Hits: 3787 X-Timer: S1742979926.526971,VS0,VE0 X-CID: 3 X-CCC: US
Mar 26, 2025 10:05:25.864552021 CET	1254	IN	Data Raw: 4d 53 43 46 00 00 00 00 74 1e 00 00 00 00 00 00 2c 00 00 00 00 00 00 00 03 01 01 00 01 00 00 00 00 00 00 00 49 00 00 00 01 00 01 00 98 45 00 00 00 00 00 00 00 00 c2 4a d0 52 20 00 70 69 6e 72 75 6c 65 73 2e 73 74 6c 00 ab 3e 4e 16 23 1e 98 45 43 Data Ascii: MSCFt,IEJR pinrules.stl>N#ECK[TOl$)VavdH&DYA,(+YAc]"ka-XWIw\|9{\|dvTwTMZ\|)FrtAmfT*nz:
Mar 26, 2025 10:05:25.864568949 CET	1254	IN	Data Raw: 90 8d 84 87 0b f9 e4 89 1d f7 8b cf 90 3d e9 81 8c e7 11 86 50 41 49 0d 0c af 50 d4 50 5d 0e 4a 4d 33 99 01 11 89 99 0a e6 3e c0 83 74 4a a7 42 92 ad 7a 3b 23 c9 1e 42 21 62 58 20 25 5b a2 38 02 7a 9d 70 dd 56 a1 b8 94 18 c1 c8 29 c7 ab 50 75 d8 Data Ascii: =PAIPP]JM3>tJBz;#B!bX %[8zpV)PuWu`0DO@;twJHazT<9g_W.LQo+V (I;Qq(8(9C4FBRX%SmIXL,eC%B&.
Mar 26, 2025 10:05:25.987816095 CET	1254	IN	Data Raw: df f8 f8 b7 da f6 9b e6 3a ac 6d c8 5e df dc 73 27 0d b4 b4 98 a7 b6 0b ca c2 36 b9 5e d3 d9 38 23 77 16 c0 64 54 bf 7d 7a b7 d8 70 b0 a9 e6 90 71 b5 eb 37 e4 95 c8 fe dc b4 45 e2 c3 df 06 0d 7a 3d c4 44 8b 18 83 56 9b 06 ca 97 fc 32 25 cb 7a 5f Data Ascii: :m^s'6^8#wdT}zpq7Ez=DV2%z_-&SZSI2-q<}tlzp#Lc7c5=S~Q>N7p4cwM+V2<B%@)?O4i')SzFXg*Fx1FMc`K@-hMNh?
Mar 26, 2025 10:05:25.987834930 CET	1254	IN	Data Raw: 62 d2 f3 3f e7 cf df 48 bd 5f 78 37 23 13 76 d6 7e e8 2d 3a 3d 66 40 d9 e5 e2 89 4e 1b 1a 3e ae 1f 13 34 e2 51 d3 d9 a4 d0 c9 b6 9c a0 49 37 36 4d 1c 9b d4 7b 15 dd ba fa 49 d6 c0 92 22 d3 99 91 7a da 35 bd a7 3b 73 7e 2e a0 03 a9 b5 55 fe ab 2f Data Ascii: b?H_x7#v~-:=f@N>4QI76M{I"z5;s~.U/5]:_pPsD<~&w}T;jlE8NsgRht<aq5#_-\|K3/$d)KNnoIuN1.KuiwG//:d

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:40 UTC	676	OUT	GET / HTTP/1.1 Host: document-baol.b12sites.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:40 UTC	359	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-cache,max-age=0,no-store,post-check=0,pre-check=0 Content-Length: 319390 Content-Type: text/html Date: Wed, 26 Mar 2025 09:05:40 GMT Strict-Transport-Security: max-age=5; X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Xss-Protection: 1; mode=block Connection: close
2025-03-26 09:05:40 UTC	827	IN	Data Raw: 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 Data Ascii: <!doctype html><html lang="en"><head> <meta charset='utf-8'> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Language" content="en"> <meta name="viewport" content="width=device-width"> <meta content="origin-wh
2025-03-26 09:05:40 UTC	2372	IN	Data Raw: 44 4f 43 55 4d 45 4e 54 3a 20 53 74 72 65 61 6d 6c 69 6e 65 20 59 6f 75 72 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 6e 20 54 6f 72 6f 6e 74 6f 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 66 66 69 63 69 65 6e 74 6c 79 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 64 6f 63 75 6d 65 6e 74 73 20 77 69 74 68 20 44 4f 43 55 4d 45 4e 54 20 69 6e 20 54 6f 72 6f 6e 74 6f 2e 20 45 78 70 65 72 69 65 6e 63 65 20 73 65 61 6d 6c 65 73 73 20 73 6f 6c 75 74 69 6f 6e 73 20 66 6f 72 20 61 6c 6c 20 79 6f 75 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 6e 65 65 64 73 2e 22 20 2f 3e 0a 0a 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 5f Data Ascii: DOCUMENT: Streamline Your Documentation in Toronto" /><meta property="og:description" content="Efficiently manage your documents with DOCUMENT in Toronto. Experience seamless solutions for all your documentation needs." /> <script> var __
2025-03-26 09:05:40 UTC	538	IN	Data Raw: 34 31 64 36 30 35 38 32 61 65 39 33 36 39 62 39 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 75 72 6c 28 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2d 39 31 32 65 63 36 36 64 37 35 37 32 66 66 38 32 31 37 34 39 33 31 39 33 39 36 34 37 30 62 64 65 2e 73 76 67 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 Data Ascii: 41d60582ae9369b9.ttf) format("truetype"),url(/assets/fonts/fontawesome-webfont-912ec66d7572ff821749319396470bde.svg#fontawesomeregular) format("svg");font-weight:400;font-style:normal}@-webkit-keyframes fa-spin{to{-webkit-transform:rotate(359deg);transfor
2025-03-26 09:05:40 UTC	4744	IN	Data Raw: 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 30 6d 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 30 30 22 5d 2c 62 6f 64 Data Ascii: os][data-aos-delay="50"],body[data-aos-delay="50"] [data-aos]{transition-delay:0}[data-aos][data-aos][data-aos-delay="50"].aos-animate,body[data-aos-delay="50"] [data-aos].aos-animate{transition-delay:50ms}[data-aos][data-aos][data-aos-duration="100"],bod
2025-03-26 09:05:41 UTC	5930	IN	Data Raw: 61 79 3d 22 37 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 37 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 37 35 30 22 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 37 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 37 35 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 38 30 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 Data Ascii: ay="750"],body[data-aos-delay="750"] [data-aos]{transition-delay:0}[data-aos][data-aos][data-aos-delay="750"].aos-animate,body[data-aos-delay="750"] [data-aos].aos-animate{transition-delay:.75s}[data-aos][data-aos][data-aos-duration="800"],body[data-aos-d
2025-03-26 09:05:41 UTC	7116	IN	Data Raw: 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 31 36 30 30 22 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 31 36 30 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 36 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 36 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 36 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 2e 36 35 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 Data Ascii: [data-aos-delay="1600"].aos-animate,body[data-aos-delay="1600"] [data-aos].aos-animate{transition-delay:1.6s}[data-aos][data-aos][data-aos-duration="1650"],body[data-aos-duration="1650"] [data-aos]{transition-duration:1.65s}[data-aos][data-aos][data-aos-d
2025-03-26 09:05:41 UTC	873	IN	Data Raw: 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 2e 36 35 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 36 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 36 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 36 35 30 22 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 36 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 32 2e 36 35 73 Data Ascii: ansition-duration:2.65s}[data-aos][data-aos][data-aos-delay="2650"],body[data-aos-delay="2650"] [data-aos]{transition-delay:0}[data-aos][data-aos][data-aos-delay="2650"].aos-animate,body[data-aos-delay="2650"] [data-aos].aos-animate{transition-delay:2.65s
2025-03-26 09:05:41 UTC	9488	IN	Data Raw: 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 37 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 32 2e 37 35 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 32 38 30 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 32 38 30 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 2e 38 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 38 30 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 Data Ascii: ,body[data-aos-delay="2750"] [data-aos].aos-animate{transition-delay:2.75s}[data-aos][data-aos][data-aos-duration="2800"],body[data-aos-duration="2800"] [data-aos]{transition-duration:2.8s}[data-aos][data-aos][data-aos-delay="2800"],body[data-aos-delay="2
2025-03-26 09:05:41 UTC	10674	IN	Data Raw: 65 76 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 73 6c 69 63 6b 2d 6e 65 78 74 2e 73 6c 69 63 6b 2d 64 69 73 61 62 6c 65 64 3a 62 65 66 6f 72 65 2c 2e 73 6c 69 63 6b 2d 70 72 65 76 2e 73 6c 69 63 6b 2d 64 69 73 61 62 6c 65 64 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 32 35 7d 2e 73 Data Ascii: ev:hover{color:transparent;outline:none;background:transparent}.slick-next:focus:before,.slick-next:hover:before,.slick-prev:focus:before,.slick-prev:hover:before{opacity:1}.slick-next.slick-disabled:before,.slick-prev.slick-disabled:before{opacity:.25}.s
2025-03-26 09:05:41 UTC	11860	IN	Data Raw: 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 7d 2e 66 61 6e 63 79 62 6f 78 2d 66 78 2d 63 69 72 63 75 6c 61 72 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 63 75 72 72 65 6e 74 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 66 61 6e 63 79 62 6f 78 2d 66 78 2d 74 75 62 65 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 70 72 65 76 69 6f 75 73 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 20 73 63 61 6c 65 28 2e 31 29 20 73 6b 65 77 28 2d 31 30 64 65 67 29 7d 2e 66 61 6e 63 79 62 6f 78 2d 66 78 2d 74 75 62 65 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 6e 65 78 74 7b 74 Data Ascii: ,0) translate3d(100%,0,0)}.fancybox-fx-circular.fancybox-slide--current{opacity:1;transform:scaleX(1) translateZ(0)}.fancybox-fx-tube.fancybox-slide--previous{transform:translate3d(-100%,0,0) scale(.1) skew(-10deg)}.fancybox-fx-tube.fancybox-slide--next{t

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:41 UTC	593	OUT	GET /assets/bundle-26df06bbde665912c7803cd668f15047.js HTTP/1.1 Host: document-baol.b12sites.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:41 UTC	337	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Length: 518382 Content-Type: application/javascript Date: Wed, 26 Mar 2025 09:05:41 GMT Server: Caddy Server: gunicorn/20.0.4 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Connection: close
2025-03-26 09:05:41 UTC	849	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 73 29 7b 76 61 72 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 7b 69 66 28 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 29 72 65 74 75 72 6e 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6d 6f 64 75 6c 65 3d 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 3d 7b 69 3a 6d 6f 64 75 6c 65 49 64 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 2e 63 61 6c 6c 28 6d 6f 64 75 Data Ascii: !function(modules){var installedModules={};function __webpack_require__(moduleId){if(installedModules[moduleId])return installedModules[moduleId].exports;var module=installedModules[moduleId]={i:moduleId,l:!1,exports:{}};return modules[moduleId].call(modu
2025-03-26 09:05:41 UTC	2372	IN	Data Raw: 28 76 61 6c 75 65 29 29 2c 38 26 6d 6f 64 65 29 72 65 74 75 72 6e 20 76 61 6c 75 65 3b 69 66 28 34 26 6d 6f 64 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 76 61 6c 75 65 26 26 76 61 6c 75 65 26 26 76 61 6c 75 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 76 61 6c 75 65 3b 76 61 72 20 6e 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 6e 73 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 73 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 61 6c 75 65 7d 29 2c 32 26 6d 6f 64 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 76 61 6c 75 65 29 66 6f 72 Data Ascii: (value)),8&mode)return value;if(4&mode&&"object"==typeof value&&value&&value.__esModule)return value;var ns=Object.create(null);if(__webpack_require__.r(ns),Object.defineProperty(ns,"default",{enumerable:!0,value:value}),2&mode&&"string"!=typeof value)for
2025-03-26 09:05:41 UTC	538	IN	Data Raw: 55 6e 64 65 66 69 6e 65 64 5d 22 2c 73 79 6d 54 6f 53 74 72 69 6e 67 54 61 67 3d 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 3a 76 6f 69 64 20 30 3b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 62 61 73 65 47 65 74 54 61 67 28 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 76 61 6c 75 65 3f 76 6f 69 64 20 30 3d 3d 3d 76 61 6c 75 65 3f 75 6e 64 65 66 69 6e 65 64 54 61 67 3a 6e 75 6c 6c 54 61 67 3a 73 79 6d 54 6f 53 74 72 69 6e 67 54 61 67 26 26 73 79 6d 54 6f 53 74 72 69 6e 67 54 61 67 20 69 6e 20 4f 62 6a 65 63 74 28 76 61 6c 75 65 29 3f 67 65 74 52 61 77 54 61 67 28 76 61 6c 75 65 29 3a 6f 62 6a 65 63 74 54 6f 53 74 72 69 6e 67 28 76 61 6c 75 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: Undefined]",symToStringTag=Symbol?Symbol.toStringTag:void 0;module.exports=function baseGetTag(value){return null==value?void 0===value?undefinedTag:nullTag:symToStringTag&&symToStringTag in Object(value)?getRawTag(value):objectToString(value)}},function(
2025-03-26 09:05:41 UTC	4744	IN	Data Raw: 65 63 74 28 76 61 6c 75 65 29 7b 76 61 72 20 74 79 70 65 3d 74 79 70 65 6f 66 20 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 76 61 6c 75 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 67 6c 6f 62 61 6c 2e 6a 51 75 65 72 79 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 35 37 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 30 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 Data Ascii: ect(value){var type=typeof value;return null!=value&&("object"==type\|\|"function"==type)}},function(module,exports,__webpack_require__){(function(global){module.exports=global.jQuery=__webpack_require__(57)}).call(this,__webpack_require__(0))},function(mod
2025-03-26 09:05:41 UTC	5930	IN	Data Raw: 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 34 29 3b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 6d 61 70 43 61 63 68 65 43 6c 65 61 72 28 29 7b 74 68 69 73 2e 73 69 7a 65 3d 30 2c 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 7b 68 61 73 68 3a 6e 65 77 20 48 61 73 68 2c 6d 61 70 3a 6e 65 77 28 4d 61 70 7c 7c 4c 69 73 74 43 61 63 68 65 29 2c 73 74 72 69 6e 67 3a 6e 65 77 20 48 61 73 68 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 76 61 72 20 68 61 73 68 43 6c 65 61 72 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 36 29 2c 68 61 73 68 44 65 6c 65 74 65 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 Data Ascii: bpack_require__(44);module.exports=function mapCacheClear(){this.size=0,this.__data__={hash:new Hash,map:new(Map\|\|ListCache),string:new Hash}}},function(module,exports,__webpack_require__){var hashClear=__webpack_require__(26),hashDelete=__webpack_require
2025-03-26 09:05:41 UTC	7116	IN	Data Raw: 75 6c 65 2c 65 78 70 6f 72 74 73 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 69 73 4b 65 79 61 62 6c 65 28 76 61 6c 75 65 29 7b 76 61 72 20 74 79 70 65 3d 74 79 70 65 6f 66 20 76 61 6c 75 65 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 7c 7c 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 3f 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 76 61 6c 75 65 3a 6e 75 6c 6c 3d 3d 3d 76 61 6c 75 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 76 61 72 20 67 65 74 4d 61 70 44 61 74 61 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 Data Ascii: ule,exports){module.exports=function isKeyable(value){var type=typeof value;return"string"==type\|\|"number"==type\|\|"symbol"==type\|\|"boolean"==type?"__proto__"!==value:null===value}},function(module,exports,__webpack_require__){var getMapData=__webpack_requ
2025-03-26 09:05:41 UTC	851	IN	Data Raw: 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 75 28 65 29 29 7d 28 65 29 26 26 77 2e 63 61 6c 6c 28 65 29 3d 3d 66 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 72 28 65 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 6f 28 65 29 29 7b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 76 61 6c 75 65 4f 66 3f 65 2e 76 61 6c 75 65 4f 66 28 29 3a 65 3b 65 3d 6f 28 74 29 3f 74 2b 22 22 3a 74 7d 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 30 3d 3d 3d 65 3f 65 3a 2b 65 3b 65 3d 65 2e 72 65 70 6c 61 63 65 28 64 2c 22 22 29 3b 76 61 Data Ascii: e&&"object"==(void 0===e?"undefined":u(e))}(e)&&w.call(e)==f}function a(e){if("number"==typeof e)return e;if(r(e))return s;if(o(e)){var t="function"==typeof e.valueOf?e.valueOf():e;e=o(t)?t+"":t}if("string"!=typeof e)return 0===e?e:+e;e=e.replace(d,"");va
2025-03-26 09:05:41 UTC	9488	IN	Data Raw: 22 29 28 29 2c 68 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 77 3d 68 2e 74 6f 53 74 72 69 6e 67 2c 6b 3d 4d 61 74 68 2e 6d 61 78 2c 78 3d 4d 61 74 68 2e 6d 69 6e 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 76 61 72 20 6e 3d 62 2c 6f 3d 76 3b 72 65 74 75 72 6e 20 62 3d 76 3d 76 6f 69 64 20 30 2c 4f 3d 74 2c 67 3d 65 2e 61 70 70 6c 79 28 6f 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 6e 3d 65 2d 77 2c 6f 3d 65 2d 4f 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 77 7c 7c 6e 3e 3d 74 7c 7c 6e 3c 30 7c 7c 53 26 26 6f 3e 3d 79 7d 66 75 6e Data Ascii: ")(),h=Object.prototype,w=h.toString,k=Math.max,x=Math.min,j=function(){return g.Date.now()};e.exports=function n(e,t,n){function i(t){var n=b,o=v;return b=v=void 0,O=t,g=e.apply(o,n)}function s(e){var n=e-w,o=e-O;return void 0===w\|\|n>=t\|\|n<0\|\|S&&o>=y}fun
2025-03-26 09:05:41 UTC	10674	IN	Data Raw: 6c 61 7a 79 4c 6f 61 64 3a 22 6f 6e 64 65 6d 61 6e 64 22 2c 6d 6f 62 69 6c 65 46 69 72 73 74 3a 21 31 2c 70 61 75 73 65 4f 6e 48 6f 76 65 72 3a 21 30 2c 70 61 75 73 65 4f 6e 46 6f 63 75 73 3a 21 30 2c 70 61 75 73 65 4f 6e 44 6f 74 73 48 6f 76 65 72 3a 21 31 2c 72 65 73 70 6f 6e 64 54 6f 3a 22 77 69 6e 64 6f 77 22 2c 72 65 73 70 6f 6e 73 69 76 65 3a 6e 75 6c 6c 2c 72 6f 77 73 3a 31 2c 72 74 6c 3a 21 31 2c 73 6c 69 64 65 3a 22 22 2c 73 6c 69 64 65 73 50 65 72 52 6f 77 3a 31 2c 73 6c 69 64 65 73 54 6f 53 68 6f 77 3a 31 2c 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3a 31 2c 73 70 65 65 64 3a 35 30 30 2c 73 77 69 70 65 3a 21 30 2c 73 77 69 70 65 54 6f 53 6c 69 64 65 3a 21 31 2c 74 6f 75 63 68 4d 6f 76 65 3a 21 30 2c 74 6f 75 63 68 54 68 72 65 73 68 6f 6c 64 3a Data Ascii: lazyLoad:"ondemand",mobileFirst:!1,pauseOnHover:!0,pauseOnFocus:!0,pauseOnDotsHover:!1,respondTo:"window",responsive:null,rows:1,rtl:!1,slide:"",slidesPerRow:1,slidesToShow:1,slidesToScroll:1,speed:500,swipe:!0,swipeToSlide:!1,touchMove:!0,touchThreshold:
2025-03-26 09:05:42 UTC	11860	IN	Data Raw: 63 6b 22 2c 65 2e 73 77 69 70 65 48 61 6e 64 6c 65 72 29 2c 65 2e 24 6c 69 73 74 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 65 2e 63 6c 69 63 6b 48 61 6e 64 6c 65 72 29 2c 69 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 65 2e 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 2c 65 2e 76 69 73 69 62 69 6c 69 74 79 29 2c 65 2e 63 6c 65 61 6e 55 70 53 6c 69 64 65 45 76 65 6e 74 73 28 29 2c 21 30 3d 3d 3d 65 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 26 26 65 2e 24 6c 69 73 74 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 2e 73 6c 69 63 6b 22 2c 65 2e 6b 65 79 48 61 6e 64 6c 65 72 29 2c 21 30 3d 3d 3d 65 2e 6f 70 74 69 6f 6e 73 2e 66 6f 63 75 73 4f 6e 53 65 6c 65 63 74 26 26 69 28 65 2e 24 73 6c 69 64 65 54 72 61 63 6b 29 2e 63 68 Data Ascii: ck",e.swipeHandler),e.$list.off("click.slick",e.clickHandler),i(document).off(e.visibilityChange,e.visibility),e.cleanUpSlideEvents(),!0===e.options.accessibility&&e.$list.off("keydown.slick",e.keyHandler),!0===e.options.focusOnSelect&&i(e.$slideTrack).ch

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:41 UTC	592	OUT	GET /jquery-3.3.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://document-baol.b12sites.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:41 UTC	562	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86927 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-1538f" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Wed, 26 Mar 2025 09:05:41 GMT Via: 1.1 varnish Age: 1876326 X-Served-By: cache-lga21935-LGA X-Cache: HIT X-Cache-Hits: 7 X-Timer: S1742979942.575792,VS0,VE0 Vary: Accept-Encoding
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 33 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 2c 6e 2c 74 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 Data Ascii: map(this,function(t,n){return e.call(t,n,t)}))},slice:function(){return this.pushStack(o.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 54 2c 22 22 29 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 43 28 4f 62 6a 65 63 74 28 65 29 29 3f 77 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 73 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 75 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 Data Ascii: ){return null==e?"":(e+"").replace(T,"")},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(C(Object(e))?w.merge(n,"string"==typeof e?[e]:e):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:u.call(t,e,n)},merge:function(e,t){for(var n=+t.lengt
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 52 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 49 3d 22 5c 5c 5b 22 2b 4d 2b 22 2a 28 22 2b 52 2b 22 29 28 3f 3a 22 2b 4d 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 52 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 57 3d 22 3a 28 22 2b 52 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c Data Ascii: ped",M="[\\x20\\t\\r\\n\\f]",R="(?:\\\\.\|[\\w-]\|[^\0-\\xa0])+",I="\\["+M+"("+R+")(?:"+M+"([^$\|!~]?=)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+R+"))\|)"+M+"\\]",W=":("+R+")(?:\\((('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"])*)\")\|
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 67 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 5c 75 66 66 66 64 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 28 29 7d 2c 69 65 3d 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 28 22 66 6f 72 6d 22 69 6e 20 65 7c 7c 22 6c 61 62 65 6c 22 69 6e 20 65 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 4c 2e 61 70 70 6c 79 28 41 3d 48 2e 63 61 6c Data Ascii: g,ne=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},re=function(){p()},ie=me(function(e){return!0===e.disabled&&("form"in e\|\|"label"in e)},{dir:"parentNode",next:"legend"});try{L.apply(A=H.cal
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 6e 20 75 28 65 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 2c 74 2c 72 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 69 29 7b 72 65 74 75 72 6e 20 65 2e 70 75 73 68 28 6e 2b 22 20 22 29 3e 72 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 74 5b 65 2e 73 68 69 66 74 28 29 5d 2c 74 5b 6e 2b 22 20 22 5d 3d 69 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 62 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 65 29 7b 76 61 72 20 74 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 Data Ascii: n u(e.replace(B,"$1"),t,r,i)}function ae(){var e=[];function t(n,i){return e.push(n+" ")>r.cacheLength&&delete t[e.shift()],t[n+" "]=i}return t}function se(e){return e[b]=!0,e}function ue(e){var t=d.createElement("fieldset");try{return!!e(t)}catch(e){retu
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 74 2c 69 2c 61 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 77 3b 72 65 74 75 72 6e 20 61 21 3d 3d 64 26 26 39 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 64 3d 61 2c 68 3d 64 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 67 3d 21 6f 28 64 29 2c 77 21 3d 3d 64 26 26 28 69 3d 64 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 69 2e 74 6f 70 21 3d 3d 69 26 26 28 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 72 65 2c 21 31 29 3a 69 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 69 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 72 65 29 29 2c 6e 2e 61 74 74 72 69 62 Data Ascii: t,i,a=e?e.ownerDocument\|\|e:w;return a!==d&&9===a.nodeType&&a.documentElement?(d=a,h=d.documentElement,g=!o(d),w!==d&&(i=d.defaultView)&&i.top!==i&&(i.addEventListener?i.addEventListener("unload",re,!1):i.attachEvent&&i.attachEvent("onunload",re)),n.attrib
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 6e 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 6f 5b 69 2b 2b 5d 29 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6f 7d 2c 72 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 Data Ascii: tsByTagName(e):n.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},r.find.CLASS=n.getElementsByClassName&&function(e,t){if("undefined"!=typeof
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 73 74 28 6d 3d 68 2e 6d 61 74 63 68 65 73 7c 7c 68 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 68 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 68 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 68 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 75 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 6d 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 2c 6d 2e 63 61 6c 6c 28 65 2c 22 5b 73 21 3d 27 27 5d 3a 78 22 29 2c 76 2e 70 75 73 68 28 22 21 3d 22 2c 57 29 7d 29 2c 79 3d 79 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 79 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 76 3d 76 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 76 2e Data Ascii: st(m=h.matches\|\|h.webkitMatchesSelector\|\|h.mozMatchesSelector\|\|h.oMatchesSelector\|\|h.msMatchesSelector))&&ue(function(e){n.disconnectedMatch=m.call(e,"*"),m.call(e,"[s!='']:x"),v.push("!=",W)}),y=y.length&&new RegExp(y.join("\|")),v=v.length&&new RegExp(v.
2025-03-26 09:05:41 UTC	1378	IN	Data Raw: 26 26 70 28 65 29 2c 74 3d 74 2e 72 65 70 6c 61 63 65 28 7a 2c 22 3d 27 24 31 27 5d 22 29 2c 6e 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 67 26 26 21 53 5b 74 2b 22 20 22 5d 26 26 28 21 76 7c 7c 21 76 2e 74 65 73 74 28 74 29 29 26 26 28 21 79 7c 7c 21 79 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 72 3d 6d 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 72 7c 7c 6e 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 72 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6f 65 28 74 2c 64 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 3e 30 7d 2c 6f 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 Data Ascii: &&p(e),t=t.replace(z,"='$1']"),n.matchesSelector&&g&&!S[t+" "]&&(!v\|\|!v.test(t))&&(!y\|\|!y.test(t)))try{var r=m.call(e,t);if(r\|\|n.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return r}catch(e){}return oe(t,d,null,[e]).length>0},oe.contains=funct

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:42 UTC	626	OUT	GET /assets/fonts/poppins-latin-normal-400.woff2 HTTP/1.1 Host: document-baol.b12sites.com Connection: keep-alive Origin: https://document-baol.b12sites.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:42 UTC	323	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Length: 7900 Content-Type: font/woff2 Date: Wed, 26 Mar 2025 09:05:42 GMT Server: Caddy Server: gunicorn/20.0.4 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Connection: close
2025-03-26 09:05:42 UTC	863	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e dc 00 0c 00 00 00 00 3f a0 00 00 1e 8b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 1e 1c 2e 06 60 00 81 54 0a e7 4c d2 36 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 5c 07 84 0b 1b 7e 32 b3 22 d8 38 00 20 a1 77 14 45 99 a0 c4 d9 7f 99 c0 8d 21 60 1f d6 45 42 44 84 57 55 03 86 96 3a 01 c3 31 12 93 9b 10 79 bf 52 fc 71 85 bf 40 89 00 d5 af d5 0a 87 8a d0 31 11 86 8f 53 15 f3 23 34 f6 49 2e 4f d4 18 af 6f f7 c2 e8 50 65 62 c9 11 3a 94 4c e3 d1 c6 a6 68 3b 91 95 ad 70 d5 d5 40 42 01 cb 7f 43 34 67 0d 52 bc a2 e0 0d a2 31 21 e2 1b d9 24 9b 84 c4 c9 46 48 d0 60 92 1a 45 2b e2 54 0c da 83 93 5e 8f 54 fc a9 98 df f5 a4 aa af f4 fb ed 0b 26 bd 40 12 d5 b4 a3 6d 3d 63 1e 5f c4 ac 7f 9d ef ef 4a 76 60 Data Ascii: wOF2?.`TL666$h \~2"8 wE!`EBDWU:1yRq@1S#4I.OoPeb:Lh;p@BC4gR1!$FH`E+T^T&@m=c_Jv`
2025-03-26 09:05:42 UTC	2372	IN	Data Raw: 29 0c b5 96 b7 e4 00 2b e5 af 06 5c 7d 86 99 1e 01 fe 1b 55 76 85 e0 fb 62 5b f4 36 2d a0 f4 d5 01 45 93 aa 8b 1a 56 16 9e bc b3 e5 96 02 8b 30 58 39 98 56 17 04 5c f8 cf 95 90 65 fc c6 35 c5 e3 de b9 cc 2b 46 24 5a 29 d9 55 c1 09 7f 43 ac 22 f8 f9 e2 b5 3e bf 00 9f 5d 8f af 73 ff 42 be b9 4e 8a a0 1e 1a 8c b1 37 07 f3 bf dd 27 ea 54 17 d1 c0 c1 09 ec a2 6c cd 58 dc 7f 10 c4 c3 0d 07 6f fc 7a 80 cc bd 8b 86 71 b2 01 9a 50 6f ef 3b 6c 88 b4 97 70 ee d1 f5 43 7f 05 d4 23 0a de 25 bb 85 28 b4 fe c9 0d 6f 07 99 08 9c 36 6f bb e4 4a 99 dd 3c 22 e5 f9 ce 6e ae de 21 58 1f 76 e8 3c ed 72 08 54 e0 75 09 43 01 e5 ac 1c ea 9a ae 24 ee 82 d7 b5 d8 60 e8 08 55 b5 94 24 98 53 e6 90 6f 5e 7e 7c 9b 64 34 05 d1 9d 4f c4 a8 1a 9c 36 9f c9 23 e8 c7 14 4f 1f 81 70 2a a4 bc Data Ascii: )+\}Uvb[6-EV0X9V\e5+F$Z)UC">]sBN7'TlXozqPo;lpC#%(o6oJ<"n!Xv<rTuC$`U$So^~\|d4O6#Op*
2025-03-26 09:05:42 UTC	538	IN	Data Raw: 59 34 40 32 fd d5 d3 7f 9f 2c 7f fd e4 bf a7 52 f9 7f 75 98 3a f4 da 10 07 0e bd 9f 2c ef be 13 ee c3 13 6a 9c de f6 a2 9a 40 a7 36 68 6d 62 61 0d c7 c0 95 4b 79 7c 99 98 6d e6 d2 6d 1e b2 c8 7a bc ee fb b0 be b6 4d 06 cb b2 42 2d 75 81 27 5f 4c d1 b1 ff 71 92 e9 88 d9 ae 55 f1 db 6b 34 72 17 46 fe 93 96 8c 49 19 c6 a5 67 b1 55 89 f5 cc ce 35 f3 e7 8f 3b 50 5f 71 7c 02 e8 ec 9a 37 cf 29 4f de 6f 4d ab a8 d8 98 67 5d 56 34 b7 fd d9 9f 53 17 48 84 2a 1a d6 c6 a0 31 85 34 12 cc cc b4 53 e8 0e 2a 78 b6 8a 94 bb aa e0 eb 2e ef 97 5d 05 ba 27 93 5d 93 5d e0 7c c1 c3 34 45 0e 9d 6e 2c 21 c9 82 fd 5f e4 85 04 b2 96 c2 17 e7 b9 03 d2 56 0a a5 1c 3a 9d 33 e2 e5 4f 52 a6 fa 59 6c ad 18 5a f7 61 03 c8 39 82 6e 5c 87 ba eb bb ab 32 8a aa ce 55 42 88 a2 01 12 35 1b 0d Data Ascii: Y4@2,Ru:,j@6hmbaKy\|mmzMB-u'_LqUk4rFIgU5;P_q\|7)OoMg]V4SH14Sx.]']]\|4En,!_V:3ORYlZa9n\2UB5
2025-03-26 09:05:42 UTC	4127	IN	Data Raw: bb 13 9b b4 c8 d2 85 e0 fb 7a bd 73 55 ab 2b d2 7c bb 82 7d 5b 12 aa 13 51 ff 43 6d 25 9d 8e 72 60 7d 95 7e 78 6f 6a 5b f1 34 a5 02 e6 f1 61 48 35 0d 3c 09 a9 24 f1 cc 61 6e a1 4c 2c 11 29 85 d4 ac 5f 44 b1 2d 92 e1 fa 54 36 22 62 b1 2c 65 44 89 a7 d9 1d 9a 57 24 57 70 79 2c 39 9b 9e d1 f7 6c be 64 84 21 8d 83 88 a9 f4 7c 6f 2e 0c 3e f7 2b 0f d4 a0 35 07 95 60 4b bf df 61 cb d7 e5 b1 95 c3 8f f6 5b a4 3e 1f 4b a9 54 16 12 9f a5 1f cc e9 0f e9 f7 9a 88 fb 96 d5 3c 9d 80 b3 c8 7f b2 bf 64 03 69 1b a9 08 1c f1 bb 97 6b b6 69 4a ba 90 15 08 f0 a2 57 d1 d2 ad 43 d7 0d 2d be 82 5e b5 97 6c 1b d6 35 ac 04 d0 fa 1f fd 12 8a 86 3e fe a5 78 47 81 6a 14 ac d4 18 b5 87 60 5d b2 46 bb 07 06 23 17 6f 55 b9 4e ba 90 5d 05 60 6f f7 c8 25 56 1b b5 83 64 ff 2e 24 f0 b4 ab Data Ascii: zsU+\|}[QCm%r`}~xoj[4aH5<$anL,)_D-T6"b,eDW$Wpy,9ld!\|o.>+5`Ka[>KT<dikiJWC-^l5>xGj`]F#oUN]`o%Vd.$

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:42 UTC	626	OUT	GET /assets/fonts/poppins-latin-normal-600.woff2 HTTP/1.1 Host: document-baol.b12sites.com Connection: keep-alive Origin: https://document-baol.b12sites.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:42 UTC	323	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Length: 7992 Content-Type: font/woff2 Date: Wed, 26 Mar 2025 09:05:42 GMT Server: Caddy Server: gunicorn/20.0.4 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Connection: close
2025-03-26 09:05:42 UTC	863	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1f 38 00 0c 00 00 00 00 3f 40 00 00 1e e7 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 1e 1c 2e 06 60 00 81 54 0a e6 74 d1 2a 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 54 07 84 0b 1b ea 31 b3 11 15 6c 1c 20 20 e3 cf 25 a2 6a 33 5c f6 5f 24 f0 44 c4 fe 50 91 30 42 ab 3a 8e e3 04 8c 80 e1 18 61 7d d9 6f fb 5e e1 15 3e ec 54 71 56 db 42 bf 3e e2 88 e5 3b 74 d5 6c 84 24 b3 2d cf f3 bf 3f f8 f6 39 f7 fd 11 91 05 a7 59 93 84 0c 37 31 4d 33 42 92 f4 86 c8 cd 1a ed 68 2c 35 46 4d c4 02 08 82 52 aa 0a d2 96 aa 80 05 b4 03 8a 34 15 54 14 14 8d b1 d4 88 a5 27 b9 3b 2f 31 bd bd 9a e4 ba e7 b5 96 52 fd 7c 72 25 c9 95 b4 6b f9 24 0e 06 d3 05 36 4e 16 1d 4f 8b 74 65 dd 9a 5d 43 95 e4 fb 20 ff 30 39 18 d0 ae Data Ascii: wOF28?@.`Tt*66$h T1l %j3\_$DP0B:a}o^>TqVB>;tl$-?9Y71M3Bh,5FMR4T';/1R\|r%k$6NOte]C 09
2025-03-26 09:05:42 UTC	2372	IN	Data Raw: 2d b1 4b 83 df 60 ec c0 db 3c c5 f0 fc 77 58 96 a9 0e 42 11 60 47 2c 7c 62 bd 7b 2c 05 a4 01 76 52 ee 44 1b 93 f8 e0 38 fc f9 7b cd a5 e0 e4 65 c9 56 b9 98 2d 96 4e 29 a5 5d 75 e0 ae d0 10 7f c0 06 ae 5c dc 51 5f 09 c0 e9 77 52 86 96 64 fe 0a d5 06 0a cd 2a 8b 3b e6 b0 65 41 0a aa 3f b1 64 97 f7 46 ba 3d 82 26 26 fc 3a e1 18 7f ee 94 e3 e3 a7 31 3d b8 3f c4 aa c0 06 7d 6f ba db e7 9a 03 ed 33 58 b7 34 e3 1b 29 0c 49 7d 9c f6 0c 96 ff ea cf d4 5c 85 e2 57 08 9c 76 37 b0 fc 93 ca f6 1a 14 3f 7c 8b b3 ce 7a 87 60 7d f0 c1 79 da 3d 10 28 94 4a 61 48 91 b5 66 90 0f ce 36 89 d5 8b 97 6b 4b a4 d2 d2 e6 57 a9 ae 3b cc 95 3d f4 43 d7 39 2c 63 ac d2 3d e8 08 67 d0 3c 91 58 d9 f0 5c 5b 90 2f bf 30 07 4d f2 c1 aa 08 4b cb a0 5a ca a5 69 01 95 0e 04 1d 33 a2 48 32 7b Data Ascii: -K`<wXB`G,\|b{,vRD8{eV-N)]u\Q_wRd*;eA?dF=&&:1=?}o3X4)I}\Wv7?\|z`}y=(JaHf6kKW;=C9,c=g<X\[/0MKZi3H2{
2025-03-26 09:05:42 UTC	538	IN	Data Raw: ec f9 6e ec de 5a 65 85 c4 40 a7 96 d1 ba df 3a fd 0e 35 83 c5 a6 52 59 5c 1a 25 93 cb 04 c9 3d d7 ee dc 22 27 6e 4f 07 3a a3 9c f1 4e f8 ef 3a 28 e2 9d dc fe 91 9c bc 7e 07 58 bf e9 a8 af aa dc ac 37 7a 64 b7 79 1e c4 15 96 e3 98 d8 44 6c 6a 3c b6 77 1d 45 6d a4 08 f5 57 5d fc 91 fa 62 ec a0 b2 e4 0d 7d 1e 7d a2 a6 58 42 fe 77 60 a5 14 4b ca 56 96 c8 a5 cc ae 3a 19 a4 7a d1 d3 9c 1a 90 10 1c 45 8b 4a c2 f3 a2 aa 49 ad 53 bd 03 b6 45 8b f1 52 73 fb 64 df 80 56 9c 10 56 5a 81 6a aa df 5f 50 fa 86 61 6a f0 f7 27 43 73 b2 d4 c5 04 28 19 f3 1d 1a d1 be 49 98 8c de 92 0c fe e8 8d c4 f5 4e fd bb b4 fb d3 3b 9d ff 4c 97 a8 db 6b e0 5f 22 55 b3 e8 d4 02 43 9a 10 b7 04 17 ea 71 e4 5c 32 93 9d ab 78 4d 2a 88 65 18 4c 39 b1 f3 9d cb 63 58 dc 29 d2 d6 0b 23 20 e1 c3 Data Ascii: nZe@:5RY\%="'nO:N:(~X7zdyDlj<wEmW]b}}XBw`KV:zEJISERsdVVZj_Paj'Cs(IN;Lk_"UCq\2xM*eL9cX)#
2025-03-26 09:05:42 UTC	4219	IN	Data Raw: 6a 5e e7 5a 72 cb 6d a0 d1 b5 ac 8f 75 4d 78 7d a3 f5 33 2b c8 76 9a 3a 96 52 2b c5 8d 2e 97 6d e3 a5 bd 7d 5a 38 45 ef 9c c5 f7 9f 0a 38 ba 3d 88 1b ec 5a f2 ce 6d a0 d3 35 99 90 dc 22 0b df 17 bd b9 a5 99 61 27 e0 9b 18 cd e0 91 77 13 81 57 1e 34 8b d1 e2 09 1d c8 b8 c2 fe 8d bc b0 02 64 a6 8c cb 62 96 5a f1 a2 da 7e a3 77 f9 8e b0 d1 34 34 2c 39 96 af df c4 0b 53 a2 98 72 0e 9d a1 b6 d2 73 40 dc 62 c3 92 d8 25 5e 6a 00 5f 2e 9e 10 8a 25 3c be 58 22 3c 31 72 bc 38 db d9 c9 94 cb 3a 98 62 67 f1 71 70 7e f1 f5 e2 a1 d7 8b b3 ef 60 2e 61 00 6b 61 e9 fd c5 bd dd 7f 0c fe b1 1b 2c 2f cd 3a 37 8e 6c 7c b3 2f ba 2d 1a fc 34 fb 60 f0 c1 fc 0d f5 ed e2 5d b3 bf 0c fc 32 7f bd e2 76 09 b0 2e 3e 5c 79 ea 7a fa 68 65 7e 86 35 cd 02 df 35 a7 db 6f d6 d2 ae d0 7d 12 Data Ascii: j^ZrmuMx}3+v:R+.m}Z8E8=Zm5"a'wW4dbZ~w44,9Srs@b%^j_.%<X"<1r8:bgqp~`.aka,/:7l\|/-4`]2v.>\yzhe~55o}

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:42 UTC	626	OUT	GET /assets/fonts/poppins-latin-normal-500.woff2 HTTP/1.1 Host: document-baol.b12sites.com Connection: keep-alive Origin: https://document-baol.b12sites.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:42 UTC	323	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Length: 7740 Content-Type: font/woff2 Date: Wed, 26 Mar 2025 09:05:42 GMT Server: Caddy Server: gunicorn/20.0.4 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Connection: close
2025-03-26 09:05:42 UTC	863	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e 3c 00 0c 00 00 00 00 3f 70 00 00 1d eb 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 1e 1c 2e 06 60 00 81 54 0a e7 30 d2 04 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 48 07 84 0b 1b 38 32 b3 22 d8 38 00 20 a1 17 15 45 c9 a0 94 82 ff 3a 81 ce e1 80 d8 a2 7f e8 08 9d c6 0d c5 10 0c 65 e3 75 cb 6d 28 18 2c cf 40 9c ec b1 ef 23 bf 33 2b 1b 05 78 f1 04 8e 5b a6 23 24 99 6d 79 a2 df 8f d7 b3 7b 5f 80 14 00 0b 0f 00 36 0a 55 84 8e 4a da 5a d6 9d 08 d9 1a 15 61 4a e3 89 65 ff 1d 9e df e6 ff d1 9e 6b a3 a7 cc 00 03 10 29 49 e1 12 d5 da 60 00 57 c5 1c ea a2 da b9 ea ff 26 9b f3 b5 fd 96 2f 72 2f fe 9f 8b 7a d5 ee 3b 10 a7 13 e2 a4 65 e2 7a 39 5a 6b b3 d0 66 5e 2a 6a b2 52 03 19 4f ef 98 c9 09 2a 0d 4e Data Ascii: wOF2<?p.`T066$h H82"8 E:eum(,@#3+x[#$my{_6UJZaJek)I`W&/r/z;ez9Zkf^jRON
2025-03-26 09:05:42 UTC	2372	IN	Data Raw: 89 35 79 8c f4 d5 16 ab b6 a9 de 04 1b b8 dc c0 92 9b cc 37 14 18 b8 72 c5 72 1a 59 82 a9 1b 7f d6 34 2e f1 8f 0d c6 4d bb b9 ca b5 fc 95 a9 14 a5 d1 05 d6 ef e5 c1 48 87 cf 97 b9 ea f0 0d 3c bb cf 1c d8 ab 3c 79 37 a9 d6 a1 a3 61 d7 60 b3 07 51 be 85 0e d5 db ac c2 67 4f e2 93 bb 5c 55 fa ec 7d 36 d1 1e dc 3b 27 c0 5b 4f 0f c1 96 2d ec 6e 6c 77 b6 54 28 9a 11 e2 4b d9 1e 74 74 72 df ad 79 62 d5 b3 92 7b 0f 41 bd 47 21 18 a9 27 cf 6e 4f 52 b1 79 8c 3d f0 32 32 e4 6e 23 38 63 5d fd c8 d2 cc 87 40 21 ae 4f e8 62 64 8d 47 fc 4b 6e 1a e4 9d 1f 0c e3 5b d4 8c e2 96 b7 36 4d 96 2b b6 e0 bb 27 23 b1 e2 e8 8d c0 13 a9 54 8d 8f b2 4a a0 94 c0 59 c9 91 d3 9f a0 4d 91 dc 46 40 52 81 e2 07 ba db c0 4d 08 9c 2a e8 51 dc 4a cd 62 2e 0e 64 d7 bb 4f da b6 89 d8 c3 3f 45 Data Ascii: 5y7rrY4.MH<<y7a`QgO\U}6;'[O-nlwT(Kttryb{AG!'nORy=22n#8c]@!ObdGKn[6M+'#TJYMF@RM*QJb.dO?E
2025-03-26 09:05:42 UTC	538	IN	Data Raw: 6c 8c 73 25 ba 12 fe 77 5b 00 bc d2 ad 8f 7f 09 a0 e1 9d 2e 6f 45 4d 6f 8d 27 42 51 15 79 70 69 45 2d 41 4c fa 80 4c fe 82 d8 c0 20 d9 ab 09 5c c7 44 01 fc f7 7c 73 d5 09 ad 61 77 b5 8a bc ad d6 2a 20 1c ac 7f 62 c7 10 e4 06 9b 4a 56 be c2 af 10 1a 8b fa ab 4a 97 e4 2d 4a 17 67 20 49 92 f4 26 62 ef 8e 55 9b 02 c3 5e f7 fb 1d 7d 7b 56 6d 72 0a 72 16 48 2d 48 7f d3 a0 da bc bb 7a cb ca 17 2f d6 ee 92 12 79 38 94 0a 8b 93 e1 8a d9 c4 1c 2d b6 e4 d3 12 f0 6a 53 6e e9 a6 f6 3f 43 2b ff 0c 75 a8 9f fb 38 7e 0e f8 dd 22 af 28 27 91 75 75 38 7e 72 68 8e b0 a6 84 a0 c2 33 58 4a 4d 18 66 13 e5 7f b8 92 19 ca a6 8f fe 85 ca f0 04 3e 9d b6 fb 8b fd 20 ef 3d c7 c0 31 4b 85 f7 7c 23 b2 6a dd 49 27 89 c5 6f 60 32 5a e4 72 46 4b 43 39 9f e5 24 9d 5c 87 ac 3a df e0 ad 1c Data Ascii: ls%w[.oEMo'BQypiE-ALL \D\|saw* bJVJ-Jg I&bU^}{VmrrH-Hz/y8-jSn?C+u8~"('uu8~rh3XJMf> =1K\|#jI'o`2ZrFKC9$\:
2025-03-26 09:05:42 UTC	3967	IN	Data Raw: 0e fa 82 6c 36 8b 4c fe 17 0a 82 67 d1 5e 1c cb cc e8 62 3c a3 d2 21 0a 26 77 c3 84 9d bb 58 97 47 97 43 0c ba b9 a1 44 58 d3 57 1d 6d 0c e6 43 24 72 e9 fd 12 44 7d 88 c9 8b 37 e4 33 14 1c 12 c5 de 48 91 80 b9 43 f6 1b 16 d8 32 6c 07 37 87 6e 2a 35 4a 89 54 a3 54 de 84 6f e8 c5 6d dd 54 a9 b4 8b 2a 6c d3 df 00 03 43 91 43 2b a3 86 ba 6e 43 77 20 c0 e4 84 6e 0f f5 6f 9b bf 7f 7e 2f 18 0d 75 6e 21 1d 20 f5 6d c5 6f c5 83 75 96 cf 2c 7d 07 ff d9 fe 4f ef 67 96 cf ad 7d 87 66 77 cc f6 02 f9 d0 a3 e1 7f e1 7f 1f 0f f7 1e d5 1d d5 81 eb 95 dc aa 69 33 f4 37 47 f6 01 24 73 4f 3a 6a 06 6b 9c f7 5c e0 ee c5 f8 51 a7 8f 55 a0 bc 71 cf 39 7d df 38 ee 81 7d a7 02 2f 17 36 be 5a d8 7e 6e 15 38 87 f2 60 3d e0 f1 80 ee 41 63 05 c8 ab e7 f5 06 04 22 c8 85 1f 53 b5 a0 5a Data Ascii: l6Lg^b<!&wXGCDXWmC$rD}73HC2l7n5JTTomTlCC+nCw no~/un! mou,}Og}fwi37G$sO:jk\QUq9}8}/6Z~n8`=Ac"SZ

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:42 UTC	626	OUT	GET /assets/fonts/poppins-latin-normal-700.woff2 HTTP/1.1 Host: document-baol.b12sites.com Connection: keep-alive Origin: https://document-baol.b12sites.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:42 UTC	323	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Length: 7848 Content-Type: font/woff2 Date: Wed, 26 Mar 2025 09:05:42 GMT Server: Caddy Server: gunicorn/20.0.4 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Connection: close
2025-03-26 09:05:42 UTC	863	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e a8 00 0c 00 00 00 00 3e 50 00 00 1e 55 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 1e 1c 2e 06 60 00 81 54 0a e5 14 cf 2e 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 44 07 84 0b 1b de 30 15 e3 98 55 c0 c6 01 cc 66 cb 0d c9 fe bf 4c e0 c6 10 ac 0f 79 62 42 8c 08 70 0c 40 21 8e 03 86 92 15 eb 78 73 b2 9f cd b4 e2 0e 18 3f 02 0b 96 3c 5b e5 b0 b9 fd b8 b5 de 4c e5 b4 1f 64 99 9e d5 ab 4e 34 0c b9 3f 42 92 59 9e e7 7f 7f f0 ed 73 ee fb 66 52 fd ce 1e 3a 43 69 f2 4c 22 aa b3 1a bc fa 84 0a 87 64 df e1 f9 6d fe 1f 45 7b 6b 6d 14 c4 40 91 16 b0 10 51 52 11 95 2a 0b 15 c4 c0 2c d4 19 f5 e7 5a df ca c8 eb 5c bd b9 78 ea aa ff f6 6a 91 be ea f5 4b 35 01 02 0c 14 ac 73 48 9d 03 34 e9 35 7b ca f9 fa 9e Data Ascii: wOF2>PU.`T.66$h D0UfLybBp@!xs?<[LdN4?BYsfR:CiL"dmE{km@QR*,Z\xjK5sH45{
2025-03-26 09:05:42 UTC	2372	IN	Data Raw: 25 0a 51 73 83 2a b9 64 e1 40 c2 0f 9a 2f ed 01 8e bb d7 97 c1 f4 4c 9c 78 37 2f b4 a9 b3 bd 04 d9 ba cf b4 6a 73 dd 84 f2 3e 9d 6f e1 22 36 97 58 0a 84 7a 18 ab 1c 4b ab 8a c9 04 f1 e7 2f 86 56 52 46 0f 1c 1f 7c 08 15 46 5a f5 b5 52 9a 26 c6 43 bb d3 f7 b8 91 ed cf 06 ea 23 df b0 ea 7d ab 2a 36 2b 1b 5a d6 5d 28 bf a0 41 0f cf 5c 88 de 46 50 3a d7 7f 58 d1 b6 b7 f5 ed ec c2 f8 a5 31 17 c2 2c b5 a7 4e 78 94 c2 ec ee 81 bb 3f e7 f2 ef 50 1e 59 88 6f df 6b 3e 9a f6 05 a6 6c 73 ca 6a 80 f2 53 ce 77 50 f3 44 ab b1 56 87 2b 93 ed 3c 96 82 58 db a7 41 23 a5 6c 1e 9b 8f 44 2f b6 2e d8 c5 f0 d6 f9 ed c6 8e 76 09 04 0a 78 75 42 9f 20 6f 14 21 ad 58 5d 32 2f dc f2 00 83 8e fa 65 73 ce df ee 6b a1 51 07 dd d6 a5 7d 18 ad 55 8c 06 09 80 e6 53 ae 15 91 18 fd 0c 4d 9b Data Ascii: %Qsd@/Lx7/js>o"6XzK/VRF\|FZR&C#}6+Z](A\FP:X1,Nx?PYok>lsjSwPDV+<XA#lD/.vxuB o!X]2/eskQ}USM
2025-03-26 09:05:42 UTC	538	IN	Data Raw: 70 57 c5 e9 93 2d f8 a9 22 45 46 92 29 3a 22 33 ea 60 fd d2 16 2c 31 0c 8b 0d c0 87 06 10 01 ac f9 d6 33 37 e9 e1 ed 67 fd 40 59 f0 5e e2 5e c2 ea da 03 18 51 0f a3 7e 10 a0 e2 db 66 73 6e 5a ad 31 1b d8 24 ee b1 39 4b 17 a6 06 92 fd 15 a8 80 6a ff 61 38 2d b3 20 42 58 f4 6b a5 fe 77 7f f9 d1 51 65 da e1 3c 59 d4 40 a9 3c 85 ca 0e 39 35 af c0 50 12 a5 4a 61 42 74 73 9e 30 5e fa b4 ad 3b f4 1f bf 0d 58 34 91 5c 9b 5a b6 dd d2 5a 3c 9f 6f 38 57 5c d3 bb ad 49 2f f4 f7 2a c8 c4 d4 96 ce 2a 74 c3 05 7b fb de fd 35 18 12 a1 ad 6e f8 a1 d4 7e d8 48 01 c5 cf dd 0f bc a9 b3 0b a9 3b b9 b2 78 6d 65 f1 94 6c 4d 4e 06 c0 a2 4e 48 8b 51 d6 e6 16 f1 96 e8 f9 d5 99 52 06 53 94 be 12 59 8c b9 12 10 70 15 53 3c 35 f3 7d 60 a0 63 68 fd 47 8d 00 79 5d 35 72 58 9d db 70 bc Data Ascii: pW-"EF):"3`,137g@Y^^Q~fsnZ1$9Kja8- BXkwQe<Y@<95PJaBts0^;X4\ZZ<o8W\I/**t{5n~H;xmelMNNHQRSYpS<5}`chGy]5rXp
2025-03-26 09:05:42 UTC	4075	IN	Data Raw: 30 98 15 92 ee 98 0e 90 aa 54 d5 55 41 7a 46 76 35 7f 17 93 38 78 86 58 b7 e4 ca a4 dc 2c 60 6c c0 21 c4 11 93 10 92 f2 b7 22 9b c1 4d 2e 4c 72 1b 76 ad b3 98 08 bf 61 82 7f 23 98 c0 ef 76 35 24 7e a6 15 7b 9e f6 28 30 e8 04 c2 cb 2f f0 37 96 8b 2c 24 46 14 9f d5 57 54 5a ce 1f 11 9b ac b3 9b 1f 04 20 52 11 a8 f7 2c 57 96 9b 34 24 26 25 96 4e cf 2c 8b 4c 01 b4 c5 ae 73 54 88 7a ae 0b 7c b7 38 16 1b c3 a2 d3 63 59 b1 63 d0 68 5a 8a a5 3d 4e 22 69 61 0a 5a d2 46 c1 fd c5 bf 16 1f e8 b7 70 fe c8 e6 b9 cd 80 19 bf 34 bf 78 cf 7c b7 ec ee bd e3 8b a7 b3 57 eb 57 17 aa 56 73 56 c1 af fd 0f 1a 1e 5c 5a ce fe 4e 79 bd f7 f3 ba cf 2f bd c8 fc 41 03 f6 2e be f9 f2 47 e8 c7 b9 d2 a5 8e c0 f6 40 f0 b6 07 df fb aa 25 f4 28 d6 3c 04 f0 62 0d 74 f7 0a 7b 7b b0 59 e0 d2 Data Ascii: 0TUAzFv58xX,`l!"M.Lrva#v5$~{(0/7,$FWTZ R,W4$&%N,LsTz\|8cYchZ=N"iaZFp4x\|WWVsV\ZNy/A.G@%(<bt{{Y

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	4184
Entropy (8bit):	5.832887265640808
Encrypted:	false
SSDEEP:	96:KGclG6gH6666/+XC6VITtooYh7KiW/Ic1FENysGQffffo:KGqGHH66662XITioYJKiWh1GEl
MD5:	AE5226E4E3B3286B4416C4819D99160B
SHA1:	631533A11876FA100FFAB6F5DCAAFBD5BDA42EF5
SHA-256:	F4DF007525A325073F6FC436D77280FFD6D50807B4F4E70738376C728F69CF3F
SHA-512:	0449B51631875F8A510380846B2491F9E9987A8CA0ACA0CD70971D42275FCDBF4572CD2E91C8E7607DBB2A6BE57E707812C9B9B2E8836B32469C5FD5D859AB01
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["nyt crossword clues","gable steveson ncaa wrestling","tesla stocks","moonshot games wildgate","spacex rocket launch spiral","storm weather forecast","wvu basketball coaching search","school of the arts rochester ny"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"google:entityinfo":"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

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:42 UTC	699	OUT	GET /client_media/LTWlEPPJ/4a217452-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg HTTP/1.1 Host: cdn.b12.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:42 UTC	605	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 181723 Connection: close Date: Wed, 26 Mar 2025 09:05:43 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Mar 2025 12:54:30 GMT ETag: "29dc7870c1a2c687be9c04bc94f2d466" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: GpbC6Gen4rrPiwSihNHXHesQ_IlxCRPI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 05b3bdb53d1146d1176c185d2da0d530.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: p_rZ1tLewrTLF_w6KdScLnBvRQv2z0Tq8RhrMFr5EaKDvHN5tSZqYg==
2025-03-26 09:05:42 UTC	15779	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 03 e0 05 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 06 05 01 04 02 03 07 00 08 ff c4 00 5e 10 00 01 03 02 01 04 0b 09 0d 04 08 06 02 01 01 09 01 02 03 00 04 11 05 21 12 31 06 41 13 71 51 d1 91 14 81 61 15 92 22 32 52 c1 a1 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222 "^!1AqQa"2R
2025-03-26 09:05:42 UTC	605	IN	Data Raw: c9 24 35 c2 9b 65 a5 c2 c0 a7 31 bb f7 a2 26 63 77 d0 20 63 d3 0a 6b 7c 9a fc 91 3d 30 a7 23 e4 d7 c5 04 0a 73 11 bc 22 6d 6d ef 08 17 f4 c2 98 7d 5a e4 4e b9 53 df e4 9c f2 41 02 ad ad 07 60 44 da 9b b6 81 02 de 99 53 fc 52 f9 c4 43 ae 0c 6c 36 be 28 20 52 5a 6c e9 12 3b 5a 47 40 81 91 ae 2c fc 5a a7 7a 5e c1 04 16 d7 04 09 43 49 02 f7 36 91 71 94 38 32 95 74 1b c0 ca b5 ad 95 27 34 25 62 2a 75 b1 a4 a6 db 5a cc 11 5b bf 37 d8 52 f1 05 d6 87 ab 03 8a 56 79 4e dd 74 df 70 88 6e 8c 15 90 d1 6c bc fd 8e f2 80 c9 cc 21 67 a5 ad 7c 4a b8 e2 fa 5a d7 c4 af 8e 42 0e b0 fc 3a 9f 0c a7 4b 14 c1 49 6c 1b 81 7b e5 8f 92 ac e2 72 9b c0 b9 d6 c6 be 29 53 86 b6 b4 3e a5 70 40 a7 37 2f 7c 78 e7 66 df 66 05 bd 2e 6b e2 57 25 e9 73 39 3e e5 72 90 27 cd 00 e9 31 48 3b 0a Data Ascii: $5e1&cw ck\|=0#s"mm}ZNSA`DSRCl6( RZl;ZG@,Zz^CI6q82t'4%b*uZ[7RVyNtpnl!g\|JZB:KIl{r)S>p@7/\|xff.kW%s9>r'1H;
2025-03-26 09:05:42 UTC	509	IN	Data Raw: e6 c5 0c a3 c0 47 14 0e e1 9a c4 e6 22 e3 88 0c e6 e6 00 6f 9d 7b cb 71 0c 7c d0 6d 61 6d df 3e fb 3b d2 90 78 69 da 20 5d a4 64 e8 91 34 74 e7 21 65 1d 81 03 07 5c 00 1f 22 4f ad 10 6b 9a b6 69 7f 9e 08 14 1a 3a 75 0b 29 a4 1f 56 43 ab a8 fe 21 1c 50 36 35 c4 13 73 4c 7b 53 8e b8 03 a5 85 0d c5 08 20 47 d5 b4 47 ea 53 22 ac 2e 88 9c 8c 81 b9 03 de 98 a0 0c ac 2b 8c 45 1a e4 df d1 d7 da 10 40 81 38 5d 22 7d 83 c6 62 2b 0b a2 2a ca 82 4e e9 84 3e 98 b4 7f 0e be 31 24 35 c1 8d 96 1c e3 10 41 ca b0 4c 3d 42 c5 9c 83 79 47 86 34 56 a9 60 85 f2 ff 00 24 01 e3 ed e7 1b c6 5e 97 d3 9f a9 73 c9 17 d2 ea 7f 89 73 c9 04 d3 95 6a 95 02 82 ec e5 42 54 bc 85 41 79 6d bc 32 64 11 19 d4 ec 2a 9d b2 db 61 e0 09 b9 39 f9 49 e9 8d 8e b7 d3 ec 32 e7 92 77 a5 ac 1f aa 73 c9 Data Ascii: G"o{q\|mam>;xi ]d4t!e\"Oki:u)VC!P65sL{S GGS".+E@8]"}b+N>1$5AL=ByG4V`$^ssjBTAym2da9I2ws
2025-03-26 09:05:42 UTC	16384	IN	Data Raw: 45 f4 56 bb 02 05 95 ae 2e 9f a9 47 1c 81 d7 37 86 86 90 79 cc 28 59 c8 29 53 de d3 32 37 1b 11 39 2b 57 c8 d2 07 aa 20 41 7a eb 51 6c 8d 23 8c c6 ea d7 7a 91 ec 22 20 1a 38 d2 50 93 60 00 e8 94 61 c4 1d be c3 eb 0c 05 bd ae f5 2e 0c cc c6 c5 e0 93 56 6a 1c 7f 0f 53 ae 1e e9 4b 24 c4 8a 3b 79 96 9e 6c b6 eb 68 71 07 4a 54 2e 0f 31 95 37 86 d1 24 77 34 8c 24 f4 34 38 25 38 ad 5a a8 b0 e7 aa 10 01 28 17 b1 81 b4 eb 7b 9b 2d 8e 38 40 ab aa e8 33 ca b9 1d 3e 71 d2 43 62 f1 46 19 44 8c a9 a7 6c 1e 81 68 18 f4 b9 c3 f5 63 8e 77 a5 8e 5b e4 87 1c 01 49 c3 e9 55 f5 43 8c c4 ea ca 3f 8a fe 63 c3 02 e9 d6 a7 40 c8 d8 e3 32 5e 97 3c 3e a5 27 9e 10 26 ea da 41 f5 4a cb fb 47 86 77 56 d2 fc 59 ed 18 18 3a dc e9 fa 90 3d 69 de 96 bb 93 ee bf 9a 3d 50 98 e1 b4 9a 36 b3 Data Ascii: EV.G7y(Y)S279+W AzQl#z" 8P`a.VjSK$;ylhqJT.17$w4$48%8Z({-8@3>qCbFDlhcw[IUC?c@2^<>'&AJGwVY:=i=P6
2025-03-26 09:05:42 UTC	16384	IN	Data Raw: 7c ab 36 39 37 8f bb 2e 68 07 d1 60 65 40 39 58 f6 62 7c 14 9c bc 7b 10 ed 8a fa 2a 04 ed 54 6c e7 2b f6 76 77 4c 2e a5 c3 de aa ee ea 5e cd 40 ca 6e 74 78 a3 e4 62 18 5e 1b 91 84 ed ce 0d 94 e8 e3 e0 8d 6b 03 cd 51 76 b1 fa 77 8b e8 6d bb 90 50 93 7b da 0a 93 58 ed b3 39 3b 85 43 64 5a de 59 9a ea f6 b1 62 2a ac 0e 75 7b ae d1 80 41 4b 2d 15 65 d8 ca 60 b0 6b 32 af dc e0 95 fd 3f 71 27 a9 a1 2b 4f ad 29 b2 ae 0e c8 d3 69 67 29 23 66 fc d0 2e 75 95 d5 58 8c 0e bc db fa 28 a3 59 ea 3f b0 ab fd ee 54 81 3e de b3 6b 5a 45 55 0b 03 62 f0 33 e9 2d 4f f6 1d 7f bd ce f4 92 a6 df f0 3a ff 00 7b 82 04 bc a4 f4 48 f2 a2 6e 0f ff 00 30 34 35 96 a0 69 c1 6b bd ee 77 a4 ce ec e0 f5 be f4 60 08 95 55 a7 26 51 d1 17 94 e5 d1 93 66 06 ce b3 2e ff 00 f0 9a d1 ea 19 13 ad Data Ascii: \|697.h`e@9Xb\|{Tl+vwL.^@ntxb^kQvwmP{X9;CdZYbu{AK-e`k2?q'+O)ig)#f.uX(Y?T>kZEUb3-O:{Hn045ikw`U&Qf.
2025-03-26 09:05:42 UTC	1024	IN	Data Raw: 87 96 6f b8 b3 77 0a df bf 0c c2 71 74 66 6b 1d 6a 7f a6 54 d7 53 4e 68 c7 74 20 8a 85 3a 21 05 10 ca 20 8e 85 3a 26 7b 37 83 fa 34 e4 10 57 85 7c 84 0b d2 6c 41 4e 17 f2 3c f3 97 eb 4a 35 a5 81 51 ab 95 8c 95 84 05 a3 34 a8 e8 1d 30 b7 e6 ee 9b 0b d5 9a 1a a6 1c c5 e9 de 72 a1 c4 ac 5b b9 b0 02 d6 cb 0e 71 d1 7c 21 fb 8c 96 1e 78 6d 4f 84 50 ad 84 15 52 32 4d 87 b0 26 f3 58 d3 e1 55 4a 7f 10 d1 f5 c4 92 5e a7 f8 f6 fb 62 34 38 1e 1c b1 73 48 d7 66 56 75 7b 0c bd b9 1b 7c 53 4c c1 88 71 93 f5 a8 ed 09 c4 b7 f1 88 e3 10 bf d1 cc 30 fe 15 12 27 56 f0 cf a3 27 8e 01 95 9b f8 c4 f1 ce cd 47 86 9e 38 57 e8 d6 1b 7f cb db d6 33 bd 1b c3 f6 1b 23 d7 30 0c ca 13 6e fd 3c 73 b3 07 84 9e 38 56 75 6e 87 c1 58 f5 cc 4f 46 e9 36 0b c3 71 c3 00 d3 6b 1e 10 e3 89 b5 f4 Data Ascii: owqtfkjTSNht :! :&{74W\|lAN<J5Q40r[q\|!xmOPR2M&XUJ^b48sHfVu{\|SLq0'V'G8W3#0n<s8VunXOF6qk
2025-03-26 09:05:42 UTC	15990	IN	Data Raw: bf 44 07 74 a7 09 fe 22 60 9b 05 ac 4e 2d 47 b7 d3 b4 e2 12 0e 69 cf 03 4f 46 fc 30 18 7a 55 95 49 37 dc 13 9d d6 e6 01 89 c0 28 3c 07 4f af 7f 34 97 50 d0 7c 53 bd a3 06 1d 58 d5 f2 23 8c 49 0c 31 bf 8a 11 c8 98 06 f5 0e 1c 74 b6 f8 e7 33 bd 1e c3 4f c7 0e 73 c1 06 9d 56 df 80 27 75 5b 77 ef 4f 96 4e 5a 40 2f d1 9c 38 fb 6f 0f 5f dc 9d e8 ad 01 d0 f3 c3 d6 1c 10 69 d5 88 fd a1 ce 62 8c 2d 19 32 9e 38 e5 a4 02 3d 13 a4 3d ed 43 d9 37 22 1d 51 64 db 36 a9 c1 cc 20 e7 aa d1 be 24 ba a5 3b e2 5e 5a 40 05 5a a0 9d 8a d3 ce 8f 76 44 ea 82 fd 9a d1 ce d9 e1 9a 08 c2 46 ff 00 96 2f 55 27 a2 39 69 31 9c ab 54 2a 41 b2 6a 9a 3b a0 89 05 6a 8d 78 d0 fb 07 d6 3c 13 4b 18 5e 4d 3e 58 a3 0d 3e 19 93 96 93 19 81 d5 4c 48 68 53 07 71 72 3e 8a e2 db 0d 36 ad c7 44 d4 c6 Data Ascii: Dt"`N-GiOF0zUI7(<O4P\|SX#I1t3OsV'u[wONZ@/8o_ib-28==C7"Qd6 $;^Z@ZvDF/U'9i1T*Aj;jx<K^M>X>LHhSqr>6D
2025-03-26 09:05:42 UTC	2442	IN	Data Raw: bf 7a 57 04 e3 8e d0 8d 97 3d e9 5c 11 a8 db c7 d7 36 7d 76 ff 00 4c 50 2a 36 1d 41 e6 6c f8 e2 ac 5e 71 fc 3c 69 52 fd e9 5c 12 07 58 b0 d1 90 ad 43 ec 95 c1 11 29 a9 f6 ca 08 e8 42 78 64 1d 53 e9 be d6 da 14 7d 51 e3 8a 93 12 f4 8b 0b 3f 5b ff 00 e9 ab 82 47 af f0 cb db 94 5b d4 57 04 69 b6 57 93 dd 51 26 dd 0e a3 82 4d 4b 77 34 e7 52 3c 3a 50 a4 18 ab 30 17 d6 0c 5c 3f 56 e0 6d 29 52 06 83 6d 22 03 6b ab 54 09 39 a9 e3 9a 2d 6a e9 1c ba 73 4a 57 ed 05 21 27 8c 5a 06 31 1a 4a 02 da 81 65 a5 13 b3 99 6f f2 99 31 59 d5 6e 2b b6 2d 48 cc ca 0d 8c 79 a8 8a be bb e1 c7 7d 6a ff 00 29 8c b1 b6 a9 9a a9 52 11 4b b5 ab 48 52 56 6c 79 8c 75 a8 66 da eb 86 ff 00 10 ff 00 94 ce 9f 8c fe bd 08 91 92 10 6b 90 ff 00 4b 62 1f c2 30 fd 26 10 eb 8f fd 2d 88 7f 04 ce 58 Data Ascii: zW=\6}vLP*6Al^q<iR\XC)BxdS}Q?[G[WiWQ&MKw4R<:P0\?Vm)Rm"kT9-jsJW!'Z1Jeo1Yn+-Hy}j)RKHRVlyufkKb0&-X
2025-03-26 09:05:42 UTC	16384	IN	Data Raw: e9 96 f2 76 af f2 49 ec c5 0c a0 0e f1 3c 51 48 a3 6d c7 06 87 f0 d1 ba f8 f1 26 44 3f 8f fd 2b 0d e6 7c f8 84 72 1b 6e fd e0 e2 92 da d3 a4 21 37 dc 8a 43 6d bb 1d fa 65 0f 33 e7 c6 24 0a f1 d2 2c 6b a8 39 dd 07 fa b1 e8 48 de 11 46 6d ed 61 1c 88 2e 71 38 d8 40 2d e2 38 6e 75 f4 12 2c 7f 96 44 3d 8e a4 77 4a c3 dc fb 54 8f ea 43 33 9b 61 90 1e 69 d9 0e c0 8e 4b 05 e9 aa c5 01 ee e9 a8 15 f6 e8 fd 12 c1 53 54 7b fa 2a 23 f6 e8 fd 31 df 70 3d 91 c5 13 b8 d8 4a 78 a4 e4 41 75 75 30 ad 6a fb 4d 3b 4f 24 77 0b 4b e3 21 85 28 c1 9f 5a bf 7c 7d 8c dd 19 cd ac 5f 9f 62 09 4e 6d bb c4 f1 48 12 9d e4 c7 22 00 1a c7 a9 d8 73 b4 ab a8 4d 73 68 75 29 36 52 8d 81 e8 80 cd 48 4e 66 ba e1 a3 fa 52 3c 86 6c d5 b4 94 d5 d4 cb a7 7d a4 ad 0b 16 22 d3 3d a4 d5 be a7 d7 6c Data Ascii: vI<QHm&D?+\|rn!7Cme3$,k9HFma.q8@-8nu,D=wJTC3aiKST{*#1p=JxAuu0jM;O$wK!(Z\|}_bNmH"sMshu)6RHNfR<l}"=l
2025-03-26 09:05:42 UTC	15990	IN	Data Raw: 04 ca 8d fb 81 f8 8c bd 29 89 9a ab 1c d7 f3 89 d1 dc 7b b0 ab a8 2a ae 33 b1 2a 8b 8d e9 23 81 d5 0b 5b 11 a9 16 d9 88 0c 9b 55 43 49 ee 90 b7 72 ec 04 8f 39 96 72 87 36 69 de 03 75 1c 30 a9 18 6d 5a 3f c4 de 3b a4 70 cb 39 0d 5d c5 b1 17 bc 91 10 63 ca 0e cd 3d 4f 61 26 4b 94 27 25 d9 a8 f7 b8 59 c8 ab 6c 7f dc 5d ec 5e 48 51 d6 0b 5f 11 7a ff 00 03 dc 80 65 cb 10 0f c8 bf ef 5e e4 e1 5c 8f 8a 7b de 4c 2e 34 95 84 e5 af 70 7a 91 05 15 58 39 6b 9d 23 e0 42 f8 32 e5 bf d1 3b ef 46 27 2d 4d ed b4 bd ef 46 17 f2 0a b3 94 d6 b9 ef 72 2b a4 ad 16 b5 63 9b df 27 00 cf 94 24 83 f7 2e db e0 46 ca 56 62 d4 a6 a9 5f 55 cd c9 ff 00 e4 c6 82 83 10 52 6e 2a ca b7 5b 95 9a 1c 58 12 13 54 93 ba df b9 01 fe de fd b2 52 39 73 d2 9e 19 c9 7a a0 2a dc 91 76 3f b4 9e 18 5f Data Ascii: ){3#[UCIr9r6iu0mZ?;p9]c=Oa&K'%Yl]^HQ_ze^\{L.4pzX9k#B2;F'-MFr+c'$.FVb_URn[XTR9szv?_

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:43 UTC	706	OUT	GET /recaptcha/api.js?render=6Ld1R8kUAAAAAGEYGyd1RXFcdSGY03uF4y_yN40A HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:43 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 26 Mar 2025 09:05:43 GMT Date: Wed, 26 Mar 2025 09:05:43 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-26 09:05:43 UTC	471	IN	Data Raw: 35 65 64 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5ed/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-03-26 09:05:43 UTC	1053	IN	Data Raw: 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 70 6f 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 70 6f 2e 61 73 79 6e 63 3d 74 72 75 65 3b 20 70 6f 2e 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 76 5a 49 33 76 2b 47 7a 37 4a 66 75 52 6f 6c 4b 4e 4d 34 41 66 66 36 7a 61 47 75 54 37 58 30 6d 66 33 77 74 6f 5a 54 6e 4b 76 36 34 39 37 63 56 4d 6e 68 79 30 33 4b 44 71 58 37 6b 42 7a 2f 71 2f 69 69 64 57 37 73 72 57 33 31 6f 51 62 42 74 34 56 68 67 6f 41 41 41 43 55 65 79 4a 76 63 6d Data Ascii: ment('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcm
2025-03-26 09:05:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:48 UTC	583	OUT	GET /prod_traffic/global.js HTTP/1.1 Host: cdn.b12.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:48 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 71295 Connection: close Date: Tue, 25 Mar 2025 19:51:06 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 21 Nov 2019 08:37:38 GMT ETag: "9ca4809d57257e2816c1aa0a50fc8dea" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cedbf7a51c689bd1e26af4b73768d270.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: y-zk7Dr7ChjG-qxLgJM9ZCWT7ZgIZW8JY4iakJzTFuPzyGLzGz_TEA== Age: 47683
2025-03-26 09:05:48 UTC	15851	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2025-03-26 09:05:48 UTC	16384	IN	Data Raw: 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 6c 2c 66 2c 64 29 7b 72 65 74 75 72 6e 20 73 28 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 61 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 69 28 7b 63 6f 6e 76 65 72 73 69 6f 6e 49 64 3a 65 2c 63 6f 73 74 4d 6f 64 65 6c 3a 74 2c 63 6f 73 74 3a 6e 2c 63 61 74 65 67 6f 72 79 3a 72 2c 61 63 74 69 6f 6e 3a 61 2c 70 72 6f 70 65 72 74 79 3a 6f 2c 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 63 2c 61 64 76 65 72 74 69 73 65 72 49 64 3a 75 2c 63 61 6d 70 61 69 67 6e 49 64 3a 6c 7d 29 7d 2c 66 2c 64 29 7d 2c 74 72 61 63 6b 53 6f Data Ascii: sion:function(e,t,n,r,a,o,c,u,l,f,d){return s({schema:"iglu:com.snowplowanalytics.snowplow/ad_conversion/jsonschema/1-0-0",data:i({conversionId:e,costModel:t,cost:n,category:r,action:a,property:o,initialValue:c,advertiserId:u,campaignId:l})},f,d)},trackSo
2025-03-26 09:05:48 UTC	16384	IN	Data Raw: 2c 46 3d 4d 5b 74 79 70 65 6f 66 20 72 5d 26 26 72 26 26 21 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2c 42 3d 4d 5b 74 79 70 65 6f 66 20 6e 5d 26 26 6e 26 26 21 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2c 7a 3d 46 26 26 42 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 4f 62 6a 65 63 74 26 26 65 2c 52 3d 4d 5b 74 79 70 65 6f 66 20 73 65 6c 66 5d 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4f 62 6a 65 63 74 26 26 73 65 6c 66 2c 71 3d 4d 5b 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5d 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 4f 62 6a 65 63 74 26 26 77 69 6e 64 6f 77 2c 56 3d 42 26 26 42 2e 65 78 70 6f 72 74 73 3d 3d 3d 46 26 26 46 2c 48 3d 7a 7c 7c 71 21 3d 3d 28 74 68 69 73 26 26 74 68 69 73 2e 77 69 6e 64 6f 77 29 26 26 71 Data Ascii: ,F=M[typeof r]&&r&&!r.nodeType&&r,B=M[typeof n]&&n&&!n.nodeType&&n,z=F&&B&&"object"==typeof e&&e&&e.Object&&e,R=M[typeof self]&&self&&self.Object&&self,q=M[typeof window]&&window&&window.Object&&window,V=B&&B.exports===F&&F,H=z\|\|q!==(this&&this.window)&&q
2025-03-26 09:05:48 UTC	16384	IN	Data Raw: 64 7c 7c 2f 6c 6f 61 64 65 64 7c 63 6f 6d 70 6c 65 74 65 2f 2e 74 65 73 74 28 63 2e 72 65 61 64 79 53 74 61 74 65 29 29 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 69 29 2c 66 28 29 29 7d 29 2c 31 30 29 29 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 22 6c 6f 61 64 22 2c 66 2c 21 31 29 2c 6e 65 77 20 61 2e 49 6e 51 75 65 75 65 4d 61 6e 61 67 65 72 28 6f 2e 54 72 61 63 6b 65 72 2c 75 2c 6c 2c 65 2c 6e 29 7d 7d 28 29 7d 2c 7b 22 2e 2f 69 6e 5f 71 75 65 75 65 22 3a 31 35 2c 22 2e 2f 6c 69 62 2f 68 65 6c 70 65 72 73 22 3a 31 38 2c 22 2e 2f 6c 69 62 5f 6d 61 6e 61 67 65 64 2f 6c 6f 64 61 73 68 22 3a 32 30 2c 22 2e 2f 74 72 61 63 6b 65 72 22 3a 32 34 2c 75 75 69 64 3a 31 32 7d 5d 2c 32 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: d\|\|/loaded\|complete/.test(c.readyState))&&(clearInterval(i),f())}),10)),r.addEventListener(s,"load",f,!1),new a.InQueueManager(o.Tracker,u,l,e,n)}}()},{"./in_queue":15,"./lib/helpers":18,"./lib_managed/lodash":20,"./tracker":24,uuid:12}],24:[function(e,t,
2025-03-26 09:05:48 UTC	6292	IN	Data Raw: 6d 69 6e 69 6d 75 6d 56 69 73 69 74 4c 65 6e 67 74 68 20 61 6e 64 20 68 65 61 72 74 42 65 61 74 44 65 6c 61 79 2e 22 29 7d 2c 75 70 64 61 74 65 50 61 67 65 41 63 74 69 76 69 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 46 65 28 29 7d 2c 65 6e 61 62 6c 65 46 6f 72 6d 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 67 2e 68 61 73 4c 6f 61 64 65 64 3f 28 6b 65 2e 63 6f 6e 66 69 67 75 72 65 46 6f 72 6d 54 72 61 63 6b 69 6e 67 28 65 29 2c 6b 65 2e 61 64 64 46 6f 72 6d 4c 69 73 74 65 6e 65 72 73 28 74 29 29 3a 67 2e 72 65 67 69 73 74 65 72 65 64 4f 6e 4c 6f 61 64 48 61 6e 64 6c 65 72 73 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 65 2e 63 6f 6e 66 69 67 75 72 65 46 6f 72 6d 54 72 61 63 6b 69 6e 67 28 65 29 2c 6b 65 2e 61 64 64 46 Data Ascii: minimumVisitLength and heartBeatDelay.")},updatePageActivity:function(){Fe()},enableFormTracking:function(e,t){g.hasLoaded?(ke.configureFormTracking(e),ke.addFormListeners(t)):g.registeredOnLoadHandlers.push((function(){ke.configureFormTracking(e),ke.addF

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:48 UTC	699	OUT	GET /client_media/LTWlEPPJ/4aa9faf2-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg HTTP/1.1 Host: cdn.b12.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:48 UTC	605	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 197550 Connection: close Date: Wed, 26 Mar 2025 09:05:49 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Mar 2025 12:54:31 GMT ETag: "7a50878ed7c0a495830d15d487f82b54" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: pkPtskOWiE2cxAVdGAxMJE40SkDjv0Rz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 97e44a27a616410da5792d77e9d25f52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: Q9Y38fVNlXMnKZ-zH0RnlMZJwXM8L9LcloRURfLqxY9dbVw_J2WLGg==
2025-03-26 09:05:49 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 03 e0 05 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 02 05 03 01 04 07 00 08 ff c4 00 62 10 00 01 03 02 02 02 09 0e 09 08 08 04 06 01 01 09 01 02 03 00 04 05 11 06 31 21 12 71 d1 41 91 81 51 13 32 92 15 c1 16 14 61 07 22 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222 "b1!qAQ2a"
2025-03-26 09:05:49 UTC	477	IN	Data Raw: f5 57 16 dd 79 2e 30 82 a4 8c 46 07 bc 67 20 33 e8 ff 00 08 ee 06 32 3d c0 e0 0e c9 bd 8f 09 13 e7 03 a6 7a ff 00 4d e2 e5 d7 97 a3 9d a9 92 eb c4 0d e1 1b 21 1e 5e 67 14 a9 c3 37 dc d4 27 3e 5d 1b 29 da ae 96 e6 4d 6d 3b 3d d6 97 13 b1 09 52 8a 52 9d 7a f0 1a f5 ea d3 0a 11 57 79 20 63 67 46 3d e7 4f cd 97 e0 fa a1 6e da 1e 61 63 53 6b 05 3c 70 c3 62 30 9e 76 a6 42 62 a6 ee 46 bb 42 7d e9 dc 97 cf dd 4f e8 b4 fb d3 f3 61 5e c4 4f 6c 44 52 58 57 9d b8 ef db 07 bc 3f 36 51 72 bf 7e d7 8f 9f fe 98 55 b1 9e d8 c5 2d 84 8b b5 7e b5 ac f1 60 7b 22 7b 9d 77 d6 b6 39 d4 93 fa d0 b7 61 3d cd 6d 45 19 04 0b a9 f5 ad ae 8f 93 3b b1 25 ea 7f 5a 8d c1 f2 47 e7 43 1e 64 4a e6 13 c8 38 24 a3 20 77 74 51 61 ad 97 47 9a 47 90 99 e2 fd bc e9 2a 1b 78 ee 42 f3 4a 83 a5 29 Data Ascii: Wy.0Fg 32=zM!^g7'>])Mm;=RRzWy cgF=OnacSk<pb0vBbFB}Oa^OlDRXW?6Qr~U-~`{"{w9a=mE;%ZGCdJ8$ wtQaGG*xBJ)
2025-03-26 09:05:49 UTC	12792	IN	Data Raw: ea 78 cc 8c e5 eb 80 d1 77 7e 4c 57 28 36 9a 3b b0 fa 94 71 91 b9 10 59 bb 27 e8 e8 3e 72 77 23 a1 b0 dc 87 e9 67 78 04 41 b2 5d 46 8b aa f8 d2 24 c4 c8 d8 a1 74 1a 68 81 da 5a 77 24 2a 72 e6 0e ba 17 38 9c 4c 75 55 9e f0 34 5c ff 00 a0 22 0d a6 f6 34 5c 13 d4 09 71 5b 83 5a 9f af df a1 77 aa 41 ec c8 95 55 58 3e 82 f7 16 c7 e7 47 53 6c be 8f a7 20 f9 92 25 db af a3 4d 53 67 cc 92 92 cd 2b ad ab 03 5d 0b fd 48 f9 d2 15 d5 bd 86 26 89 e3 b4 06 ec 74 5d 15 ed 3e bb 27 cd 83 75 b7 7b f5 1b eb 69 cb 41 58 49 c0 2d 03 52 bb fa 84 b1 0b 6c f7 56 e8 1e a7 5b f5 b6 87 14 84 27 12 e1 d8 a4 81 b7 8c e7 15 05 95 54 38 69 d2 a4 b4 55 e2 25 47 12 07 7e 1d d5 e6 7a b5 b2 b6 aa ec ca 53 6a 18 29 2b 2a c0 8e 08 0d 52 b4 39 52 b5 36 d0 69 04 ea 40 38 ec 78 e7 6f d5 71 e5 Data Ascii: xw~LW(6;qY'>rw#gxA]F$thZw$r8LuU4\"4\q[ZwAUX>GSl %MSg+]H&t]>'u{iAXI-RlV['T8iU%G~zSj)+R9R6i@8xoq
2025-03-26 09:05:49 UTC	3592	IN	Data Raw: 5f 9c 1d f9 61 d1 cb 2e 10 64 25 37 da 8f c4 39 d5 99 e1 7e a8 fc 43 9d 51 83 7c e8 de c7 82 57 3b b7 18 41 90 9b af d5 1f 88 73 aa 32 8d f9 ff 00 b7 73 ab 30 67 9d 1c b2 b9 d1 18 41 90 a0 5f ea 01 fb f7 3a a3 2f b6 1a 93 f5 ee 75 50 5b 9d 9e e7 bf e3 18 c0 c8 4f d7 fa 8f b7 73 ab 31 43 31 d5 27 e9 2e 75 66 0b 73 b3 dc ec 61 09 90 a4 e6 3a a2 71 35 0e 75 66 7b b6 3a 8f c4 39 d5 98 2f ce 4f 6c cc 63 06 52 29 ed 92 a3 ed dd ea cc f7 6c 95 3f 88 77 ab 30 5b 66 79 0c ad 99 93 18 5c a4 55 db 1d 47 e2 1d ea cc f7 6c 2f fe 21 ce ac c1 6d 99 96 0a 8e 80 4e d0 8c 60 b1 47 6c 0f 7e 21 ce ac cb ed 85 e1 f5 ee 75 50 69 2c d4 2f a2 c3 a7 69 06 48 28 ab 4e 8a 3a 83 f2 4a dc 8c 60 b1 18 cc b5 23 45 43 83 cf 32 fb 69 aa 1f 49 77 ab 30 77 b8 2b ff 00 07 51 ee 95 b9 12 68 Data Ascii: _a.d%79~CQ\|W;As2s0gA_:/uP[Os1C1'.ufsa:q5uf{:9/OlcR)l?w0[fy\UGl/!mN`Gl~!uPi,/iH(N:J`#EC2iIw0w+Qh
2025-03-26 09:05:49 UTC	12792	IN	Data Raw: f6 92 40 01 17 17 d3 86 8c 08 1d 89 47 26 d4 e1 aa f5 59 d5 98 d9 71 ec 2d da 15 a1 43 52 dc f7 c6 78 e4 2b 5a 47 8a 01 3f 94 49 ec c2 53 92 eb 06 25 37 ca a1 8f 2a 8e ec b4 e4 fb 82 7f 4f d5 f1 19 76 5c 7b 0c 9c bf 59 4c 9d 8d 12 69 90 3f 21 1b 1f 22 a6 65 65 ec c0 e6 3f 9d c3 69 63 b2 0c 31 39 46 e1 fc 7e b2 24 e5 1b 87 f1 ea cf 82 4a 32 80 83 79 3a f2 e1 1c e3 8e a7 be 1d 40 fd 58 e7 4f 92 2a 46 05 57 1a 94 9d f1 e2 1e c4 79 39 42 e2 06 ab ed 67 0c 4f 6a 97 24 9f ed da ce aa 28 ca 01 97 cf 07 af d4 d5 29 f5 d7 b8 56 46 1b 25 a3 78 68 d1 06 6a f2 2d 75 30 2a 45 4d 33 a0 7e 51 49 9d 59 dc a7 5a ea 76 2e dd eb 16 3b eb 98 8e 41 a7 c7 15 a9 6e 1e 55 a8 99 b8 eb a8 4d 38 e3 96 ca 86 56 50 a4 02 47 22 81 9e 14 4e 8d 2d 9c 67 63 ed 26 9d 03 00 d8 88 56 4e 6b Data Ascii: @G&Yq-CRx+ZG?IS%7Ov\{YLi?!"ee?ic19F~$J2y:@XOFWy9BgOj$()VF%xhj-u0*EM3~QIYZv.;AnUM8VPG"N-gc&VNk
2025-03-26 09:05:49 UTC	7370	IN	Data Raw: 5e 8f d0 95 be f9 5f 3e 25 ca 6b 82 bf 41 5c 0e d3 cb f9 f1 3f f8 32 a3 25 57 ba 36 43 2b a1 1e d5 e7 5f c0 89 6a c8 b7 0f e0 2c 8d bb c1 f9 92 61 4d 71 07 55 8e e4 36 9e 5f cf 8a e6 ee 63 f4 25 cf df 2b e7 c9 7f 4b fd 64 ed 1a e8 0f 8b 63 68 6d 5e 55 f3 25 f6 93 79 de b2 d3 f1 dd d7 f3 26 9d 8d d0 69 b3 5c fd ea be 7c a2 9b 97 f0 4b 89 f9 45 1f d7 8f e0 cf da 55 ff 00 d5 b2 52 79 d7 57 37 22 86 4d cc 89 d1 69 b6 0e f2 ae 2e 9e c4 93 1b 8e fe 5f b8 1e 33 f3 a2 90 ed c1 1a 32 ed 7f 00 ec aa 2f e8 47 da ae 68 46 8b 3d 9b ce ae 59 97 da c6 69 23 fb 0e c8 af ef 8b 92 aa a2 e6 74 65 da ee 04 76 55 12 97 2e 84 6b cb f5 c3 6d 0d f6 15 1f c2 be d0 2b 2a e6 5c 75 e5 cb 01 3f 95 52 a3 d9 9e 19 5b 33 0f fd 33 61 3b 55 07 76 69 e7 6e 63 51 b1 d6 8d a6 d3 f3 a2 0b b7 Data Ascii: ^_>%kA\?2%W6C+_j,aMqU6_c%+Kdchm^U%y&i\\|KEURyW7"Mi._32/GhF=Yi#tevU.km+*\u?R[33a;UvincQ
2025-03-26 09:05:49 UTC	12792	IN	Data Raw: 3e eb f5 37 e7 8f 9d 8c 6c b8 40 6c 4d 9d e8 95 58 10 47 46 68 39 5b 32 b7 d0 bd 13 ed 20 1e c4 49 b1 66 d4 e8 b8 b4 ad b6 a4 d9 66 f7 b2 fa 00 d4 98 19 7e a5 0c 56 25 90 3b f0 f1 db 56 6e 4a 4e 35 0c 28 77 9a 83 f7 0b 2d d8 2f 9d a8 0d a9 d4 e8 3b 02 30 96 24 39 64 f6 9b bd 50 bb b3 40 d9 b0 a0 9e 2c 35 79 21 0a b2 f3 58 ea 44 0b b3 56 5f 72 ff 00 3d dc cd 52 bb cf a8 29 65 63 5e 23 68 88 ea 73 9e 65 4e 9b 6d 32 b0 e4 07 76 5a 4d 9f 4e 5f 6b 1e 87 c1 2b b5 e6 bd 01 18 fb 79 cc 09 3e 35 99 93 b4 15 2c 67 eb c8 c7 65 61 6f 85 62 31 92 e4 f5 da eb 5e 80 e0 94 72 f3 58 f4 3e 08 d1 fb c2 b9 0e 95 85 3d 5a b7 25 8f 08 b5 7e b5 84 f1 38 7e 6c 63 25 c9 df b5 c6 7d 0f 82 78 e5 b6 3d 01 1a 93 e1 21 40 78 f6 37 06 d3 bf 14 58 f0 92 d7 ad 67 7c 6d 38 37 25 c6 4b 93 Data Ascii: >7l@lMXGFh9[2 Iff~V%;VnJN5(w-/;0$9dP@,5y!XDV_r=R)ec^#hseNm2vZMN_k+y>5,geaob1^rX>=Z%~8~lc%}x=!@x7Xg\|m87%K
2025-03-26 09:05:49 UTC	4616	IN	Data Raw: 6f 1d 6c 3f 48 63 de 09 e2 d5 b9 58 e0 fb 1e f0 4e 22 19 a9 fb 34 f5 31 61 aa 9f b3 4f 53 17 06 2e d2 69 ed ff 00 6e c7 bc 12 25 53 5a f1 d7 51 4d 8f f3 13 38 f0 6e ab 0c 36 00 79 b2 44 b3 56 7d 50 3c d9 2e 17 17 5c 14 b6 9f c4 53 7b c4 ee c9 10 d5 ac 1d 55 54 de f5 3b b3 90 8a 4a c3 ff 00 f4 88 b4 db eb 15 be 78 24 b8 31 75 fd 8d b8 7d 2a 9f de 27 76 21 d7 28 1a 4e c9 2e a1 d3 8e a4 b6 a0 a2 67 2d 62 d1 58 b2 3c 65 c3 3c bd 6b 5d 1d 12 f6 60 a9 6b 56 27 1d 7b d2 64 b8 d1 15 4d 38 eb ee 2c 36 a4 05 28 91 8e b8 09 98 a9 0b 35 45 45 38 a5 7e 59 d4 9c 40 09 d6 30 82 59 aa 99 b2 c0 38 03 ae 5e 66 a5 5c cd da 7d 8e b6 c9 c3 4e c4 ef 48 76 61 49 21 63 58 e5 8e 35 0d 96 d4 70 d6 26 35 a5 2b e9 0d 7c b3 d3 cc b9 4c 52 14 a0 f4 9b 51 da 33 b0 f8 20 5a d7 6c b9 15 Data Ascii: ol?HcXN"41aOS.in%SZQM8n6yDV}P<.\S{UT;Jx$1u}*'v!(N.g-bX<e<k]`kV'{dM8,6(5EE8~Y@0Y8^f\}NHvaI!cX5p&5+\|LRQ3 Zl
2025-03-26 09:05:49 UTC	12792	IN	Data Raw: 5a 46 c2 fe 52 73 d7 b5 fb a1 b9 3d ff 00 84 88 d3 6c f7 42 67 16 6c b6 be 85 c2 81 5b 7c df 62 2d 36 0b 0a b4 54 db ce d0 4e ec 50 9b 0c a6 7d 7b 59 f3 04 ae 6f 2a 1f e1 9d 4e 1d 99 e1 97 2c 87 00 1d a7 3e cb a5 3e 45 49 86 5b b4 2c 8c 15 ac 0c 31 4d 42 b7 64 a2 d0 f7 36 57 57 44 5a 4e da be 39 46 83 2d 2b ea ad 27 e5 0c 9d 59 42 da e8 c0 ba e8 1d e7 31 f2 88 9e d1 ad b8 60 16 b1 b6 94 7c d8 a5 b8 f6 42 2c f9 7d c1 f9 ba 6b 5a bd 97 0c b3 97 6d 8a e8 50 5b ce d3 ca 1d 89 63 22 50 a7 5a 2a 54 9f 93 46 e4 85 79 0d 9d 7b 0b 82 86 3c ac a2 28 b8 f6 94 e5 aa 1d eb 65 19 f9 65 7c d8 83 96 29 77 ad 54 fc 55 24 7e ac 8c e4 57 07 42 e4 81 b6 c9 1e 45 44 9c 95 5e 07 89 73 6b 8d 2b 1f ad 15 25 fd a4 56 56 a6 c7 fb 2d 1c 55 84 7e ac 41 ca 94 e7 f4 7a d3 ec d7 01 fa Data Ascii: ZFRs=lBgl[\|b-6TNP}{YoN,>>EI[,1MBd6WWDZN9F-+'YB1`\|B,}kZmP[c"PZTFy{<(ee\|)wTU$~WBED^sk+%VV-U~Az
2025-03-26 09:05:49 UTC	9988	IN	Data Raw: b1 ad 4d 1d 03 5e 98 ff 00 95 53 fd 53 8e 35 67 f5 0a 7a ba 37 42 02 96 5a 50 1d ed 73 9a fe 42 f4 d4 8d 36 39 da b5 0e 5c 09 f2 c9 9c bb ad 64 33 42 d9 c4 ea 07 0d 67 68 49 ad d9 6e be ea a4 bd 56 a3 4e c6 90 54 3c 63 b4 9d d8 63 6f b4 d1 5a d1 85 33 3e 3e 18 17 15 ad 47 8f 72 67 ae a2 3c b7 17 3e 0c 56 7b 05 62 1d 4d 6d 73 85 b5 8d 61 1a 57 c6 7d 5f 2e d4 9e b5 85 d5 56 b7 dd 2e 6c 29 1b e8 b4 83 86 3b 71 ee a0 29 48 20 2f 63 df 8c 35 14 0f 38 a3 85 5a c8 ef 27 09 cb 2b 96 a3 96 6a 9a aa 7a 60 50 c3 4d b4 9f 59 61 3a f6 b1 9d 1f 29 5e eb 1b cb 54 c1 ab 4b 8e b4 9c 42 56 87 51 e3 0c 4e bc 09 c4 4e 66 68 6d cd 2b fa d5 53 8b e5 4a 4e 26 3f 53 ab 2b 53 d2 25 49 ab ba 36 0e bd 58 a4 24 f7 b0 9b e6 63 f0 cf 51 6e 8e 33 15 58 3e 35 8e b4 6d 6c 0f 90 cb ed a1 Data Ascii: M^SS5gz7BZPsB69\d3BghInVNT<ccoZ3>>Grg<>V{bMmsaW}_.V.l);q)H /c58Z'+jz`PMYa:)^TKBVQNNfhm+SJN&?S+S%I6X$cQn3X>5ml

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:49 UTC	1146	OUT	GET /i?stm=1742979947772&e=pv&url=https%3A%2F%2Fdocument-baol.b12sites.com%2F&page=DOCUMENT%3A%20Streamline%20Your%20Documentation%20in%20Toronto&tv=js-2.9.0&tna=cf&aid=ca%2FLTWlEPPJ&p=web&tz=America%2FNew_York&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=4297aec2-1792-4bd5-8acd-4551805cf503&dtm=1742979947770&vp=1280x897&ds=1265x3342&vid=1&sid=df5802e2-194e-4308-9daf-af5aa5f1cb1e&duid=3f336497-7342-4311-8b5f-9dc582f5fe36&fp=2128515719 HTTP/1.1 Host: prod-traffic.b12.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:49 UTC	490	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 43 Connection: close Last-Modified: Mon, 30 Sep 2019 16:09:54 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 25 Mar 2025 19:51:06 GMT ETag: "fb02f374b8f73825415db1bccd4bd76d" X-Cache: Hit from cloudfront Via: 1.1 bc06e962b99bba0a18da728b3e764202.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: 4q5Oou6m6hviATFsfC0sVK7mnbB1vC7ASvciCx3gW9-kfEI1o27XGA== Age: 47684
2025-03-26 09:05:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:49 UTC	899	OUT	GET /i?stm=1742979947772&e=pv&url=https%3A%2F%2Fdocument-baol.b12sites.com%2F&page=DOCUMENT%3A%20Streamline%20Your%20Documentation%20in%20Toronto&tv=js-2.9.0&tna=cf&aid=ca%2FLTWlEPPJ&p=web&tz=America%2FNew_York&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=4297aec2-1792-4bd5-8acd-4551805cf503&dtm=1742979947770&vp=1280x897&ds=1265x3342&vid=1&sid=df5802e2-194e-4308-9daf-af5aa5f1cb1e&duid=3f336497-7342-4311-8b5f-9dc582f5fe36&fp=2128515719 HTTP/1.1 Host: prod-traffic.b12.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:50 UTC	490	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 43 Connection: close Last-Modified: Mon, 30 Sep 2019 16:09:54 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 25 Mar 2025 19:51:06 GMT ETag: "fb02f374b8f73825415db1bccd4bd76d" X-Cache: Hit from cloudfront Via: 1.1 e9786b36047f45c75c77de67db1be0fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: B1MV7_a4-CqivqiJeawavCLw18hqbQ48c3o5ctgGk5k15YTKwLnIBA== Age: 47685
2025-03-26 09:05:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:51 UTC	452	OUT	GET /client_media/LTWlEPPJ/4aa9faf2-0978-11f0-a278-0242ac110002-jpg-hero_image.jpeg HTTP/1.1 Host: cdn.b12.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:51 UTC	605	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 197550 Connection: close Date: Wed, 26 Mar 2025 09:05:52 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 25 Mar 2025 12:54:31 GMT ETag: "7a50878ed7c0a495830d15d487f82b54" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: pkPtskOWiE2cxAVdGAxMJE40SkDjv0Rz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7edae070a6a25cc68c970c1111701a20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: FzWvvNPQnJQDCa-WpsmiCYxv4M1WNwIWbsVL0RxCcjbHLiqcOTiiEQ==
2025-03-26 09:05:52 UTC	8192	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 03 e0 05 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 02 05 03 01 04 07 00 08 ff c4 00 62 10 00 01 03 02 02 02 09 0e 09 08 08 04 06 01 01 09 01 02 03 00 04 05 11 06 31 21 12 71 d1 41 91 81 51 13 32 92 15 c1 16 14 61 07 22 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222 "b1!qAQ2a"
2025-03-26 09:05:52 UTC	8192	IN	Data Raw: 95 53 86 fc 6f 53 f2 25 3a 54 70 12 c7 25 9c 9b 7c bc f2 51 8e ac 75 ce bb 96 11 ff 00 26 63 8e 71 ea 04 e0 b0 67 67 ca c3 fe 4a cf 1c 9d 79 27 c2 0c c4 90 39 92 40 24 63 80 8c ce 32 51 4f b3 57 4a 4f 9d 6b 9f a5 b9 5b 98 69 1b 24 b8 95 29 7c 44 46 c5 5e a9 1d 50 66 a1 cd 8a 34 13 38 f7 1b 6f 9f 06 76 b3 2d 5d 05 72 d6 db 68 5b 43 51 04 69 e3 9d 12 dc 95 d5 53 b5 56 fd 31 61 d7 90 95 14 10 49 48 c3 6a 0e 35 49 64 ae 48 6e 8e bd ba 77 71 18 10 00 31 c4 65 5b b8 40 e6 b3 13 a4 61 a8 92 a3 d9 92 6a 56 64 40 5a 6f 7c a7 8f 19 1a a8 69 97 a5 a6 95 c1 07 d5 95 f3 18 3e 26 60 57 19 54 41 cb 79 b0 74 6f 49 56 d9 3b 91 4c 88 4d a2 95 43 f6 74 71 09 1a ac 34 8a d2 c7 01 30 7c e5 fc e0 9d 17 16 15 b7 86 e4 41 b3 67 44 e8 ab a7 3c 1b 91 4a 7e 56 5c a4 57 a8 a1 c6 77 Data Ascii: SoS%:Tp%\|Qu&cqggJy'9@$c2QOWJOk[i$)\|DF^Pf48ov-]rh[CQiSV1aIHj5IdHnwq1e[@ajVd@Zo\|i>&`WTAytoIV;LMCtq40\|AgD<J~V\Ww
2025-03-26 09:05:52 UTC	16384	IN	Data Raw: f5 57 16 dd 79 2e 30 82 a4 8c 46 07 bc 67 20 33 e8 ff 00 08 ee 06 32 3d c0 e0 0e c9 bd 8f 09 13 e7 03 a6 7a ff 00 4d e2 e5 d7 97 a3 9d a9 92 eb c4 0d e1 1b 21 1e 5e 67 14 a9 c3 37 dc d4 27 3e 5d 1b 29 da ae 96 e6 4d 6d 3b 3d d6 97 13 b1 09 52 8a 52 9d 7a f0 1a f5 ea d3 0a 11 57 79 20 63 67 46 3d e7 4f cd 97 e0 fa a1 6e da 1e 61 63 53 6b 05 3c 70 c3 62 30 9e 76 a6 42 62 a6 ee 46 bb 42 7d e9 dc 97 cf dd 4f e8 b4 fb d3 f3 61 5e c4 4f 6c 44 52 58 57 9d b8 ef db 07 bc 3f 36 51 72 bf 7e d7 8f 9f fe 98 55 b1 9e d8 c5 2d 84 8b b5 7e b5 ac f1 60 7b 22 7b 9d 77 d6 b6 39 d4 93 fa d0 b7 61 3d cd 6d 45 19 04 0b a9 f5 ad ae 8f 93 3b b1 25 ea 7f 5a 8d c1 f2 47 e7 43 1e 64 4a e6 13 c8 38 24 a3 20 77 74 51 61 ad 97 47 9a 47 90 99 e2 fd bc e9 2a 1b 78 ee 42 f3 4a 83 a5 29 Data Ascii: Wy.0Fg 32=zM!^g7'>])Mm;=RRzWy cgF=OnacSk<pb0vBbFB}Oa^OlDRXW?6Qr~U-~`{"{w9a=mE;%ZGCdJ8$ wtQaGG*xBJ)
2025-03-26 09:05:52 UTC	16384	IN	Data Raw: 67 a6 1d fe 7c 93 e5 8b 95 36 b5 97 6d 8e 6b 45 b2 80 81 fc c4 93 c2 98 e0 d6 53 b2 ba 35 d1 b0 83 c8 10 4f 97 08 83 66 be ab 0c 6d 34 fe f8 fc e9 3b 36 4b df f0 ba 41 8f a4 e9 dd 8b 92 be d4 ac 91 69 51 c1 14 c8 c7 d8 ff 00 54 4b 99 16 8b 0f 12 9d b0 7b d8 6e 1f 2c 78 a2 b3 54 24 9e b8 53 d3 32 8c 35 16 96 71 91 55 54 5b 68 1c 52 12 56 ea d3 bc 8c 70 e1 c7 09 10 cb fb bf c5 64 a1 b4 e1 c9 e2 8c 3f a1 16 3c 1f bb e8 01 df e7 12 3f f8 e6 85 e6 37 34 34 c8 6c 7e 53 84 f9 22 4e 63 73 d7 7d 5b 48 4a b7 62 d7 64 a3 c1 ff 00 8c 0b c5 64 0f 55 0f e1 8f 18 48 89 7f 26 25 b4 92 cd b5 e7 cf e5 54 a8 79 57 14 33 1a 0a fc 64 55 2c 6f 91 f1 93 34 a6 f2 c2 87 8a 8a bc 76 91 06 cd 09 ca f7 00 9d 59 7d 29 c7 d2 a8 c7 f5 e2 46 56 bb eb c2 d7 4e 9c 7d 27 c7 ce 31 e4 54 55 Data Ascii: g\|6mkES5Ofm4;6KAiQTK{n,xT$S25qUT[hRVpd?<?744l~S"Ncs}[HJbddUH&%TyW3dU,o4vY})FVN}'1TU
2025-03-26 09:05:52 UTC	16384	IN	Data Raw: 67 62 7b 31 c9 37 8b 32 b4 5c 29 f8 d5 26 4d c2 d4 bd 15 d4 c7 e5 04 69 4c dd b4 b4 3e f2 d3 70 46 db 38 cf 76 d9 6f 1d 3a 7a c4 6d d3 aa 3e 8a 8b 7a b4 55 53 9f 3c 4b d9 d1 ab 43 ac 9e 31 26 83 0f 6d b6 5c 70 53 8e 20 fe 53 2a 1d 89 b2 9f 31 da 6a 41 0d 55 b6 a1 be 35 8c 23 97 33 44 b3 86 2c 1c 79 70 90 d4 59 e9 94 09 14 cc 1c 46 90 91 13 40 7f 34 d3 22 ae de 2a 59 50 58 1b e9 d6 08 9c ca b1 94 b8 08 27 1c 34 19 d1 2e 16 57 29 d2 e0 a0 a8 5d 38 57 4d 93 e3 21 5c 47 41 80 37 26 02 14 b6 5c 25 2b df 23 78 cd f1 2b 31 a3 0a d1 b1 38 63 88 e5 9d 63 c0 d8 fe ad 77 f6 da f2 2a 72 a5 a1 4d 1d 78 11 bc 44 eb 1e 06 f5 d2 dd fd b6 fc 8a 9d e7 c3 95 08 b3 e9 52 2c 89 71 1d 34 38 14 36 e0 03 19 fe fa 86 14 e2 29 5a 52 01 c0 a9 28 d5 8c e8 99 e9 38 d8 17 ed 08 0b 64 Data Ascii: gb{172\)&MiL>pF8vo:zm>zUS<KC1&m\pS S1jAU5#3D,ypYF@4"YPX'4.W)]8WM!\GA7&\%+#x+18ccw*rMxDR,q486)ZR(8d
2025-03-26 09:05:52 UTC	16331	IN	Data Raw: 32 34 96 c4 5a db 9e 31 6b 6e a5 82 eb cb 6c 60 31 28 20 e3 39 ad 6b 64 57 3c 0a 0a 7c 72 52 95 0c 08 18 ea 9f 47 8b 0d 2a 77 db 3b 66 43 59 96 ed 15 cd 94 57 35 4a ea 70 c0 15 01 88 da 3a 44 df eb ef 19 da 75 b7 cd fb 1c 22 d1 aa 75 eb df 83 9c b1 49 66 ac aa 66 b9 da 75 b4 d9 58 5a dd 0a 48 23 78 8d 3a f4 4e 44 04 f5 73 d4 75 1a 72 98 a6 96 dc c3 6e 6c 69 45 47 12 66 26 19 71 68 53 89 42 94 84 61 b2 50 1a 86 3a 31 9b 59 c2 67 a6 a1 d8 b2 12 bf e4 c0 4c be 10 6a 85 3b 74 47 1c 31 2a ec 49 32 19 c6 d3 19 7c 2b 2d 49 45 bb 62 75 e2 be c4 e5 57 a2 35 20 da 9b 88 d6 4a b1 99 59 2a a9 5e cd c2 76 1e 8f 2c 6a 5a ce cb 12 71 ef 49 9b ae c3 51 d5 35 85 78 5c 84 cc bd 86 18 6f 68 9d 33 c1 cd cd 2e d3 d4 50 2d 43 66 15 ce 20 72 8d 07 b1 38 e3 15 c9 38 6b 8f b6 6b Data Ascii: 24Z1knl`1( 9kdW<\|rRGw;fCYW5Jp:Du"uIffuXZH#x:NDsurnliEGf&qhSBaP:1YgLj;tG1I2\|+-IEbuW5 JY*^v,jZqIQ5x\oh3.P-Cf r88kk
2025-03-26 09:05:52 UTC	1675	IN	Data Raw: 23 bd b0 3d 88 8e 56 9d d3 9b a4 1a 29 db e2 6c 6e 4b e6 e9 be c1 be a0 6e 4e 00 e6 69 cf 03 a5 70 ab 1e ca 13 d8 13 23 99 c7 37 a3 a7 76 ad 4e d8 03 b1 35 82 3e 8a d8 53 ef 30 8e a0 6e 4b d8 b1 f6 28 ea 44 f9 b8 e7 4c d1 bf 7b ac ea e2 0e 72 cc a7 4d f2 b7 de 4b 84 a3 e9 50 19 fb 14 f5 22 2c 73 43 43 49 ea 44 f9 8c e6 dc c4 74 de eb fd f1 88 56 67 bf ab 4d e6 bc ff 00 78 56 ec 61 23 ea 0c 11 bc d0 ea 62 80 3b cd 8e 09 f2 d1 cc 57 c3 d2 bb d7 9d ba 85 ee c4 f5 f6 ee 74 dd 2b 4f f7 85 6e c6 05 be a7 c1 5c 92 c1 23 4c f9 54 de 6e 67 4d c2 ac ed bc ad d8 83 73 ae 56 9a da 83 f2 aa dd 8c 0b 7d 5e 1c c3 7f e1 97 ce 8f 4b e1 9f 26 1a ea b3 a6 a9 f3 f2 87 76 24 d5 54 1d 2f ba 7c f3 18 4a 3e b5 e7 93 e9 8e 19 5d d0 d8 d2 e2 3a a9 f2 51 a8 78 fd 73 9d 51 89 e7 9d Data Ascii: #=V)lnKnNip#7vN5>S0nK(DL{rMKP",sCCIDtVgMxVa#b;Wt+On\#LTngMsV}^K&v$T/\|J>]:QxsQ
2025-03-26 09:05:52 UTC	16384	IN	Data Raw: bb a2 f3 42 f3 6e 52 a1 84 34 b0 49 4a c2 b6 47 78 81 88 d6 34 4d f1 31 12 4c 4b 9c 88 b4 c4 09 22 67 69 66 1a 1a 9b d8 d2 26 16 b4 cd cc 63 88 9c fa 74 e5 d0 b2 c6 ba 6d 11 8f 3f 2d 68 b9 51 21 b1 ad 4d 1d 03 5e 98 ff 00 95 53 fd 53 8e 35 67 f5 0a 7a ba 37 42 02 96 5a 50 1d ed 73 9a fe 42 f4 d4 8d 36 39 da b5 0e 5c 09 f2 c9 9c bb ad 64 33 42 d9 c4 ea 07 0d 67 68 49 ad d9 6e be ea a4 bd 56 a3 4e c6 90 54 3c 63 b4 9d d8 63 6f b4 d1 5a d1 85 33 3e 3e 18 17 15 ad 47 8f 72 67 ae a2 3c b7 17 3e 0c 56 7b 05 62 1d 4d 6d 73 85 b5 8d 61 1a 57 c6 7d 5f 2e d4 9e b5 85 d5 56 b7 dd 2e 6c 29 1b e8 b4 83 86 3b 71 ee a0 29 48 20 2f 63 df 8c 35 14 0f 38 a3 85 5a c8 ef 27 09 cb 2b 96 a3 96 6a 9a aa 7a 60 50 c3 4d b4 9f 59 61 3a f6 b1 9d 1f 29 5e eb 1b cb 54 c1 ab 4b 8e b4 Data Ascii: BnR4IJGx4M1LK"gif&ctm?-hQ!M^SS5gz7BZPsB69\d3BghInVNT<ccoZ3>>Grg<>V{bMmsaW}_.V.l);q)H /c58Z'+jz`PMYa:)^TK
2025-03-26 09:05:52 UTC	1533	IN	Data Raw: 64 2e 27 91 da f5 7c a6 1d 98 e8 fd a6 9a 98 63 51 75 a2 67 6c 01 d9 8d 55 0a b5 a3 52 6e 75 75 07 92 95 95 ab 1e 3c 48 92 a5 72 43 82 b1 d6 2b cf 7c ac 1e cc a0 14 01 01 aa a5 0e fb 61 5e 49 95 e0 f3 ba a9 2d d7 c7 3b eb 70 35 e5 99 3a d7 99 56 bc 59 a1 a8 6c 7f 9d 70 1d 80 25 c2 d7 28 86 d6 c3 8a 59 49 a3 d5 e9 29 2a 4e 3c 22 68 71 1c cb 49 71 6d 2d 29 3b e0 cd 36 eb 4d ef 9b 1d d1 51 cc ab f2 6a 8a cf c2 98 e2 9b 55 63 94 2e 30 6b 92 1f 2a c4 3e 06 8e 2c 66 67 f5 9f 21 85 35 4c fa 4a 1b 71 5d d0 c9 d2 a1 c6 89 a5 fc a9 7e 3a da bd b4 af 6d 81 b8 66 07 32 c6 6e 47 dd d6 50 39 b6 8c 3f 56 66 7f 54 b5 1f b3 94 fc f3 07 7d 07 84 4f 02 c1 1a 90 9e 25 46 e5 d9 33 b3 7a 29 6d ee ed 28 0e cc ce ba 1c e8 de 3b 2b 15 3b 9e c3 83 76 67 e2 e9 ac f9 3d 6c 18 3a 5b Data Ascii: d.'\|cQuglURnuu<HrC+\|a^I-;p5:VYlp%(YI)N<"hqIqm-);6MQjUc.0k>,fg!5LJq]~:mf2nGP9?VfT}O%F3z)m(;+;vg=l:[
2025-03-26 09:05:52 UTC	15990	IN	Data Raw: 4f f0 40 30 4d d7 56 fb 7e 45 4e 5c 49 df 9d 4b c0 ee 24 5d 71 3b ed f9 0c d4 f8 62 45 39 cd 6b 6e dc 85 23 1d 4e 24 9c 39 31 11 f6 8a e7 4b 50 de cd 0f 34 a2 7d 15 09 8b 30 b2 97 a8 1c 4a 86 3e 29 9c 0e e9 4c ba 6a a7 02 49 48 0a 3a 24 a3 cc 3e 94 35 2d 7a 69 e1 95 dd cc 27 4b ed 8d b5 89 f2 ca 9d 74 7d 62 ba a3 23 2b 51 d2 a2 78 e6 b0 65 f5 49 b9 d1 a7 a5 57 4e 36 dd 4e ec 4f 5e ad a9 d3 5f 48 3e 59 3b b3 e5 6c 65 1c 3b d1 80 fa a0 e6 3b 42 34 dc e8 86 db e9 dd 88 39 ae c8 9e 95 de 83 df a7 76 7c b3 80 e4 13 d8 4b 80 fa 90 e7 3c b8 06 bb d5 08 f9 61 10 73 c6 5a 1a 6f 74 7c 4e 4f 97 b0 9e 8c 07 d3 a7 3f 65 74 e9 bd d2 f5 51 3f bc 2c aa 34 de e9 be 1d c9 f3 26 13 d8 46 03 e9 85 78 47 ca 43 f4 d3 3c 0a dc 91 ab c2 66 51 4f e9 86 ce d3 6b 3d 89 f3 64 f4 98 Data Ascii: O@0MV~EN\IK$]q;bE9kn#N$91KP4}0J>)LjIH:$>5-zi'Kt}b#+QxeIWN6NO^_H>Y;le;;B49v\|K<asZot\|NO?etQ?,4&FxGC<fQOk=d

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:52 UTC	1185	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Ld1R8kUAAAAAGEYGyd1RXFcdSGY03uF4y_yN40A&co=aHR0cHM6Ly9kb2N1bWVudC1iYW9sLmIxMnNpdGVzLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=bdexqwdvwnbi HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:53 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 26 Mar 2025 09:05:53 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-iTADUZqhw0926DpA7TSK5g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-26 09:05:53 UTC	59	IN	Data Raw: 37 31 38 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 Data Ascii: 7189<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 Data Ascii: http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weig
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c Data Ascii: /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1,
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a Data Ascii: src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style:
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 Data Ascii: U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d Data Ascii: boto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 43 45 2d 30 32 44 37 2c 20 55 2b 30 32 44 44 2d 30 32 46 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 44 30 30 2d 31 44 42 46 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d Data Ascii: boto/v18/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 36 54 78 32 4e 73 46 76 63 32 57 32 63 5a 32 46 4b 78 52 56 59 64 31 36 32 6f 35 41 5f 4f 47 37 4b 47 32 71 32 33 69 33 4e 76 67 62 75 50 73 4d 76 39 77 75 44 6f 54 6a 36 30 5a 48 65 76 34 6e 5a 48 41 6a 32 36 38 4e 35 69 55 48 6e 47 79 71 72 62 35 6d 35 30 68 73 42 57 49 79 78 62 59 4a 5a 4b 79 6a 54 71 67 55 41 39 77 54 76 36 70 6a 6f 50 46 65 77 34 36 74 6f 42 6a 7a 78 38 32 79 78 5f 70 68 72 4e 6f 50 52 68 49 50 46 4e 50 73 64 5a 45 58 54 70 42 59 48 4d 61 73 71 49 4c 5f 33 41 55 61 41 47 58 31 70 36 67 5f 43 6e 73 63 63 45 5a 5a 6a 43 39 39 43 4c 72 73 4f 7a 71 73 73 51 32 79 74 48 4e 6f 6b 77 7a 6e 32 57 48 69 4b 4d 34 56 5a 54 47 78 31 39 42 73 6b 51 44 38 2d 68 50 34 74 73 48 79 47 41 47 30 31 73 4b Data Ascii: value="03AFcWeA6Tx2NsFvc2W2cZ2FKxRVYd162o5A_OG7KG2q23i3NvgbuPsMv9wuDoTj60ZHev4nZHAj268N5iUHnGyqrb5m50hsBWIyxbYJZKyjTqgUA9wTv6pjoPFew46toBjzx82yx_phrNoPRhIPFNPsdZEXTpBYHMasqIL_3AUaAGX1p6g_CnsccEZZjC99CLrsOzqssQ2ytHNokwzn2WHiKM4VZTGx19BskQD8-hP4tsHyGAG01sK
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 4c 6d 35 32 6f 73 66 53 39 63 74 79 64 46 71 64 51 62 6d 39 4e 69 51 41 53 72 61 6d 70 58 6a 71 4d 57 6b 56 6f 31 57 52 6b 33 36 78 72 49 32 59 76 38 7a 6a 51 5f 65 7a 45 43 4e 66 49 34 4f 71 56 79 74 45 6b 53 39 6d 77 5f 32 72 44 79 31 61 59 4f 6a 62 6c 4f 64 79 63 6e 72 6c 4b 77 4c 75 6f 45 31 6b 43 77 59 63 74 62 5a 5a 55 71 5a 5f 62 38 58 2d 32 35 66 75 7a 4f 48 6b 6a 34 65 65 65 33 36 41 38 56 41 48 31 6d 78 51 50 54 30 37 32 57 39 49 4c 45 36 37 30 37 35 42 78 44 31 47 47 38 54 48 49 56 68 45 66 42 53 55 4e 4c 62 5a 65 49 30 66 30 46 58 67 39 56 79 36 72 76 41 49 39 51 49 56 65 45 36 61 79 71 6e 30 69 38 34 32 50 38 70 36 39 6a 31 63 43 42 4b 58 47 69 47 66 55 6e 49 4d 4e 75 6d 62 44 78 79 47 69 5a 57 35 43 34 69 66 31 62 6e 52 70 79 39 58 64 72 77 Data Ascii: Lm52osfS9ctydFqdQbm9NiQASrampXjqMWkVo1WRk36xrI2Yv8zjQ_ezECNfI4OqVytEkS9mw_2rDy1aYOjblOdycnrlKwLuoE1kCwYctbZZUqZ_b8X-25fuzOHkj4eee36A8VAH1mxQPT072W9ILE67075BxD1GG8THIVhEfBSUNLbZeI0f0FXg9Vy6rvAI9QIVeE6ayqn0i842P8p69j1cCBKXGiGfUnIMNumbDxyGiZW5C4if1bnRpy9Xdrw
2025-03-26 09:05:53 UTC	1220	IN	Data Raw: 56 51 62 32 78 70 59 33 6b 6f 49 6d 4a 6e 49 69 78 37 59 33 4a 6c 59 58 52 6c 53 46 52 4e 54 44 70 4c 4c 47 4e 79 5a 57 46 30 5a 56 4e 6a 63 6d 6c 77 64 44 70 4c 4c 47 4e 79 5a 57 46 30 5a 56 4e 6a 63 6d 6c 77 64 46 56 53 54 44 70 4c 66 53 6c 39 59 32 46 30 59 32 67 6f 52 79 6c 37 65 43 35 6a 62 32 35 7a 62 32 78 6c 4a 69 5a 34 4c 6d 4e 76 62 6e 4e 76 62 47 55 75 5a 58 4a 79 62 33 49 6f 52 79 35 74 5a 58 4e 7a 59 57 64 6c 4b 58 31 79 5a 58 52 31 63 6d 34 67 61 33 30 37 4b 44 41 73 5a 58 5a 68 62 43 6b 6f 5a 6e 56 75 59 33 52 70 62 32 34 6f 61 79 78 53 4b 58 74 79 5a 58 52 31 63 6d 34 6f 55 6a 31 35 4b 43 6b 70 4a 69 5a 72 4c 6d 56 32 59 57 77 6f 55 69 35 6a 63 6d 56 68 64 47 56 54 59 33 4a 70 63 48 51 6f 49 6a 45 69 4b 53 6b 39 50 54 30 78 50 32 5a 31 62 Data Ascii: VQb2xpY3koImJnIix7Y3JlYXRlSFRNTDpLLGNyZWF0ZVNjcmlwdDpLLGNyZWF0ZVNjcmlwdFVSTDpLfSl9Y2F0Y2goRyl7eC5jb25zb2xlJiZ4LmNvbnNvbGUuZXJyb3IoRy5tZXNzYWdlKX1yZXR1cm4ga307KDAsZXZhbCkoZnVuY3Rpb24oayxSKXtyZXR1cm4oUj15KCkpJiZrLmV2YWwoUi5jcmVhdGVTY3JpcHQoIjEiKSk9PT0xP2Z1b

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:05:59 UTC	964	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: / X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCL7VzgEIgdbOAQjI3M4BCIrgzgEIruTOAQiL5c4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Sec-Fetch-Storage-Access: active Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld1R8kUAAAAAGEYGyd1RXFcdSGY03uF4y_yN40A&co=aHR0cHM6Ly9kb2N1bWVudC1iYW9sLmIxMnNpdGVzLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=bdexqwdvwnbi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:05:59 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 26 Mar 2025 09:05:59 GMT Date: Wed, 26 Mar 2025 09:05:59 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-26 09:05:59 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 62 55 4f 31 42 58 49 38 48 39 50 67 6a 41 50 53 57 39 68 77 75 53 65 49 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js');
2025-03-26 09:05:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:00 UTC	761	OUT	GET /favicon.ico HTTP/1.1 Host: document-baol.b12sites.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://document-baol.b12sites.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _sp_ses.493b=; _sp_id.493b=3f336497-7342-4311-8b5f-9dc582f5fe36.1742979948.1.1742979948.1742979948.df5802e2-194e-4308-9daf-af5aa5f1cb1e
2025-03-26 09:06:00 UTC	310	IN	HTTP/1.1 404 Not Found Alt-Svc: h3=":443"; ma=2592000 Content-Length: 979 Content-Type: text/html; charset=utf-8 Date: Wed, 26 Mar 2025 09:06:00 GMT Server: Caddy Server: gunicorn/20.0.4 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Connection: close
2025-03-26 09:06:00 UTC	876	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 32 2c 20 32 35 32 2c 20 32 35 32 29 3b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 32 32 32 32 32 3b 0a 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Not Found</title> <style> body { background-color: rgb(252, 252, 252); color: #222222;
2025-03-26 09:06:00 UTC	103	IN	Data Raw: 3e 0a 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 74 65 78 74 22 3e 0a 20 20 20 20 20 20 48 65 61 64 20 62 61 63 6b 20 3c 61 20 68 72 65 66 3d 22 2f 22 3e 20 68 6f 6d 65 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 70 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: > <p class="error-text"> Head back <a href="/"> home</a>. </p> </div></body></html>

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://document-baol.b12sites.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Windows Analysis Report
https://document-baol.b12sites.com/

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:13 UTC	695	OUT	GET / HTTP/1.1 Host: withamprospect.museandhemarketplace.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:06:14 UTC	1149	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:06:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=uqls6fj35k2lea336n33iai05c; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B%2BnWy4U92uGuB55%2BLk97dJP7pd8UDQt9U%2FcnPN6Nj%2F4GoLOziH4LxrsdHEV5%2B52Sn%2B3PKTXHEhmt5%2BycSVcc2BuuYdANKpf7giL1uw5A4umoDhv3Qbr7nr0hobm1oxnxDfR9G2cPIeVbuEBrBPLx982TU3KQZhJZl1Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92657da48a8b8cd4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=139061&min_rtt=138262&rtt_var=30367&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2866&recv_bytes=1267&delivery_rate=26482&cwnd=215&unsent_bytes=0&cid=8c6bfd4feae31e4f&ts=823&x=0"
2025-03-26 09:06:14 UTC	220	IN	Data Raw: 66 61 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 69 73 70 6c 61 79 69 6e 67 20 61 20 70 61 67 65 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 2e 64 Data Ascii: fa7<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Displaying a page...</title> <style> body.d
2025-03-26 09:06:14 UTC	1369	IN	Data Raw: 65 6c 69 76 65 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 34 66 34 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 Data Ascii: elivered { display: none; } body { font-family: Arial, sans-serif; line-height: 1.6; margin: 0; padding: 0; background-color: #f4f4f4; } .c
2025-03-26 09:06:14 UTC	1369	IN	Data Raw: 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 6f 72 6d 61 3c 61 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 74 69 6f 6e 3c 2f 68 31 3e 0d 0a 20 20 20 20 3c 2f 68 65 61 64 65 72 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 20 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 46 6f 6f 64 20 53 65 63 74 69 6f 6e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 46 6f 6f 64 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 45 78 70 6c 6f 3c 61 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 72 65 20 61 20 76 61 72 Data Ascii: MiP2gkyNjo"></a>orma<a class="MiP2gkyNjo"></a>tion</h1> </header> <div class="MiP2gkyNjo container"> ... Food Section --> <div class="section"> <h2>Food</h2> <p>Explo<a class="MiP2gkyNjo"></a>re a var
2025-03-26 09:06:14 UTC	1056	IN	Data Raw: 61 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 61 6c 2c 20 69 6e 63 3c 61 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 6c 75 64 69 6e 67 20 73 3c 61 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 6f 66 74 20 64 72 69 3c 61 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 6e 6b 73 2c 20 63 6f 63 6b 74 61 3c 61 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 6c 73 2c 20 61 6e 64 20 63 6f 3c 61 20 63 6c 61 73 73 3d 22 4d 69 50 32 67 6b 79 4e 6a 6f 22 3e 3c 2f 61 3e 66 66 65 65 2e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 53 3c 61 20 63 6c 61 73 Data Ascii: a class="MiP2gkyNjo"></a>al, inc<a class="MiP2gkyNjo"></a>luding s<a class="MiP2gkyNjo"></a>oft dri<a class="MiP2gkyNjo"></a>nks, cockta<a class="MiP2gkyNjo"></a>ls, and co<a class="MiP2gkyNjo"></a>ffee.</p> <ul> <li>S<a clas
2025-03-26 09:06:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:14 UTC	807	OUT	GET / HTTP/1.1 Host: withamprospect.museandhemarketplace.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://withamprospect.museandhemarketplace.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=uqls6fj35k2lea336n33iai05c
2025-03-26 09:06:15 UTC	1090	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:06:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oNOUBcdEJkuzi0jqQSnzyLxW5J%2Fm0ziEtss3w%2B%2FxkETNaj%2BUnI8n5sHuczhaBsn%2FifQ1w5u4SMPBm81FXpzLtLeNc9C2blZz60zUFzacBRaCRE3wQ8vC7YE8dfWl8Shra2rr9S5RgZCcjeu1UzuBZLU9fXbYM3%2BaPRY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92657da8af054544-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=141023&min_rtt=138689&rtt_var=31685&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2865&recv_bytes=1379&delivery_rate=26855&cwnd=220&unsent_bytes=0&cid=fa06a179f1f2026d&ts=1460&x=0"
2025-03-26 09:06:15 UTC	279	IN	Data Raw: 37 63 33 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 23 72 65 67 69 6f 6e 28 63 6f 6c 6c 61 70 73 65 64 29 2d 2d 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b Data Ascii: 7c3a<!DOCTYPE html><html lang="en-US"> ... #region(collapsed)--> <head> <style> * { box-sizing: border-box; margin: 0; padding: 0; } html {
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 20 31 2e 31 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 31 33 31 33 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 79 73 74 65 6d 2d 75 69 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 Data Ascii: eight: 1.15; -webkit-text-size-adjust: 100%; color: #313131; } html, button { font-family: system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetic
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 64 69 6e 67 2d 66 61 76 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 6f 6f 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 2e 35 72 65 6d 3b 0d 0a Data Ascii: ding-favicon { width: 1.5rem; height: 1.5rem; } } .main-content, .footer { padding-right: 1.5rem; padding-left: 1.5rem;
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2e 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: .h1 { line-height: 1.75rem; font-size: 1.5rem; } .h2 { line-height: 1.5rem; font-size: 1.25rem; }
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 4e 4f 6f 6f 77 6c 46 4b 72 46 73 73 59 54 74 6d 76 75 4f 58 70 70 32 48 74 54 36 6c 55 45 33 66 31 31 62 48 31 49 51 75 39 71 62 59 55 42 45 72 37 79 71 38 7a 43 78 6b 57 75 76 61 38 2b 72 74 46 34 52 72 6b 50 36 45 53 78 46 50 6f 6a 37 72 74 57 33 30 2b 6a 49 34 55 51 6c 5a 75 69 65 6a 45 77 5a 34 63 4d 67 36 35 52 4b 6a 6a 55 44 7a 36 4e 64 77 57 76 78 77 36 6e 6e 4c 45 53 45 41 6c 32 33 30 4f 35 63 6c 64 55 41 64 79 38 50 34 34 68 4a 5a 54 59 68 34 30 44 4f 49 4b 7a 46 77 33 51 4f 49 36 68 50 6b 39 61 44 69 46 48 4a 63 33 6e 4d 69 72 4b 45 52 67 45 50 64 37 46 4b 4b 67 69 79 35 44 45 6e 33 2b 35 4a 73 72 41 66 48 4e 74 66 6a 56 52 4c 75 63 54 50 54 61 43 41 31 72 78 46 56 7a 36 41 58 38 79 59 73 49 55 6c 58 6f 4d 71 62 50 57 46 55 65 58 46 31 43 79 71 Data Ascii: NOoowlFKrFssYTtmvuOXpp2HtT6lUE3f11bH1IQu9qbYUBEr7yq8zCxkWuva8+rtF4RrkP6ESxFPoj7rtW30+jI4UQlZuiejEwZ4cMg65RKjjUDz6NdwWvxw6nnLESEAl230O5cldUAdy8P44hJZTYh40DOIKzFw3QOI6hPk9aDiFHJc3nMirKERgEPd7FKKgiy5DEn3+5JsrAfHNtfjVRLucTPTaCA1rxFVz6AX8yYsIUlXoMqbPWFUeXF1Cyq
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 20 2e 63 61 72 65 74 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 32 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 43 41 41 41 41 41 67 42 41 4d 41 41 41 43 42 56 47 66 48 41 41 41 41 45 6c 42 4d 56 45 55 41 41 41 41 77 4d 44 41 78 4d 54 45 79 4d 6a 49 77 4d 44 41 78 4d 54 46 2b 38 39 48 54 41 41 41 41 42 58 52 53 54 6c Data Ascii: .caret-icon { display: inline-block; transition: transform 0.2s; background-image: url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgBAMAAACBVGfHAAAAElBMVEUAAAAwMDAxMTEyMjIwMDAxMTF+89HTAAAABXRSTl
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 33 31 33 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 62 69 67 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 65 62 61 75 74 68 6e 2d 70 72 6f 6d 70 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 Data Ascii: line-height: 1.313rem; font-size: 0.875rem; } .big-button:hover { cursor: pointer; } .webauthn-prompt { align-items: center;
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 20 20 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 30 33 36 38 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 33 36 38 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 6f 6f 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .pow-button:hover { border-color: #003681; background-color: #003681; color: #fff; } .footer { margin: 0 auto; width: 100%;
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 20 20 20 20 20 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 69 74 69 61 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .diagnostic-wrapper { display: flex; flex-wrap: wrap; justify-content: center; } .clearfix:after { display: initial;
2025-03-26 09:06:15 UTC	1369	IN	Data Raw: 20 77 69 64 74 68 3a 20 31 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6c 64 73 2d 72 69 6e 67 20 31 2e 32 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 2c 20 30 2c 20 30 2e 35 2c 20 31 29 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2d 30 2e 34 35 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 Data Ascii: width: 1.875rem; height: 1.875rem; animation: lds-ring 1.2s cubic-bezier(0.5, 0, 0.5, 1) infinite; } .lds-ring div:nth-child(1) { animation-delay: -0.45s; }

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:16 UTC	639	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://withamprospect.museandhemarketplace.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:06:16 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 09:06:16 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 92657db77c104398-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:17 UTC	623	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://withamprospect.museandhemarketplace.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:06:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:06:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 92657dbb6a588cb1-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 09:06:17 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-26 09:06:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:18 UTC	864	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://withamprospect.museandhemarketplace.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:06:18 UTC	1297	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:06:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28125 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-YkqfrOyTiAc03WwK' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-26 09:06:18 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-26 09:06:18 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 59 6b 71 66 72 4f 79 54 69 41 63 30 33 57 77 4b 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-YkqfrOyTiAc03WwK' 'unsafe-
2025-03-26 09:06:18 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-26 09:06:18 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-26 09:06:18 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-26 09:06:18 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-26 09:06:18 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-26 09:06:18 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-26 09:06:18 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-26 09:06:18 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:19 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92657dc20d9f42a7&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:06:19 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:06:19 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115544 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 92657dc65c6e4358-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 09:06:19 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 Data Ascii: er%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_footer_terms":"Terms","feedback_report_output
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 54 2c 65 55 2c 66 6b 2c 66 6c 2c 66 70 2c 66 71 2c 66 72 2c 66 79 2c 66 43 2c 66 46 2c 66 49 2c 66 4b 2c 66 4c 2c 66 Data Ascii: 0persists.","turnstile_expired":"Expired"},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_guideline":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eT,eU,fk,fl,fp,fq,fr,fy,fC,fF,fI,fK,fL,f
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 6f 5b 68 7a 28 31 38 31 31 29 5d 28 66 6f 2c 68 29 2c 67 5b 68 7a 28 36 35 35 29 5d 5b 68 7a 28 31 37 31 30 29 5d 26 26 28 78 3d 78 5b 68 7a 28 31 38 34 34 29 5d 28 67 5b 68 7a 28 36 35 35 29 5d 5b 68 7a 28 31 37 31 30 29 5d 28 68 29 29 29 2c 78 3d 67 5b 68 7a 28 31 37 33 35 29 5d 5b 68 7a 28 31 33 31 34 29 5d 26 26 67 5b 68 7a 28 37 34 35 29 5d 3f 67 5b 68 7a 28 31 37 33 35 29 5d 5b 68 7a 28 31 33 31 34 29 5d 28 6e 65 77 20 67 5b 28 68 7a 28 37 34 35 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 41 2c 48 29 7b 66 6f 72 28 68 41 3d 68 7a 2c 47 5b 68 41 28 31 32 35 35 29 Data Ascii: ,H,I){return G(H,I)}},h===null\|\|void 0===h)return j;for(x=o[hz(1811)](fo,h),g[hz(655)][hz(1710)]&&(x=x[hz(1844)](g[hz(655)][hz(1710)](h))),x=g[hz(1735)][hz(1314)]&&g[hz(745)]?g[hz(1735)][hz(1314)](new g[(hz(745))](x)):function(G,hA,H){for(hA=hz,G[hA(1255)
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 6b 54 6e 4e 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 4e 72 65 62 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 5a 66 49 4b 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 51 4b 49 6c 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 69 43 6d 4c 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 5a 62 74 45 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6d 6c 68 7a 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e Data Ascii: on(h,i){return i\|h},'kTnNh':function(h,i){return i&h},'Nrebu':function(h,i){return i==h},'ZfIKv':function(h,i){return h-i},'QKIlW':function(h,i){return h(i)},'iCmLZ':function(h,i){return h\|i},'ZbtEr':function(h,i){return h<<i},'mlhzJ':function(h,i){return
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 37 34 37 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 68 46 28 31 34 33 36 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 68 46 28 36 34 38 29 5d 5b 68 46 28 31 30 31 33 29 5d 5b 68 46 28 31 33 37 31 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 64 5b 68 46 28 31 36 38 35 29 5d 28 43 2c 4b 29 2c 4f 62 6a 65 63 74 5b 68 46 28 36 34 38 29 5d 5b 68 46 28 31 30 31 33 29 5d 5b 68 46 28 31 33 37 31 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 20 69 66 28 68 46 28 31 34 35 35 29 21 3d 3d 68 46 28 31 35 39 34 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 68 46 28 36 34 38 29 5d 5b 68 46 28 31 30 31 33 29 5d 5b 68 46 28 31 33 37 31 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 68 46 28 37 32 33 29 5d 28 30 29 29 7b 66 6f 72 Data Ascii: 747)];J+=1)if(K=i[hF(1436)](J),Object[hF(648)][hF(1013)][hF(1371)](x,K)\|\|(x[K]=E++,B[K]=!0),L=d[hF(1685)](C,K),Object[hF(648)][hF(1013)][hF(1371)](x,L))C=L;else if(hF(1455)!==hF(1594)){if(Object[hF(648)][hF(1013)][hF(1371)](B,C)){if(256>C[hF(723)](0)){for
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 42 29 2c 43 28 29 7d 69 66 28 64 5b 68 46 28 31 34 39 35 29 5d 28 27 27 2c 43 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 68 46 28 36 34 38 29 5d 5b 68 46 28 31 30 31 33 29 5d 5b 68 46 28 31 33 37 31 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 68 46 28 36 30 31 29 5d 28 32 35 36 2c 43 5b 68 46 28 37 32 33 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 64 5b 68 46 28 36 35 38 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 68 46 28 37 36 32 29 5d 28 64 5b 68 46 28 31 34 30 35 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 46 28 37 32 33 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 68 46 28 31 32 38 39 29 5d 28 48 2c 31 29 7c 4d 26 31 2e 39 36 2c 64 5b 68 46 28 37 39 31 29 Data Ascii: B),C()}if(d[hF(1495)]('',C)){if(Object[hF(648)][hF(1013)][hF(1371)](B,C)){if(d[hF(601)](256,C[hF(723)](0))){for(s=0;s<F;H<<=1,d[hF(658)](I,j-1)?(I=0,G[hF(762)](d[hF(1405)](o,H)),H=0):I++,s++);for(M=C[hF(723)](0),s=0;8>s;H=d[hF(1289)](H,1)\|M&1.96,d[hF(791)
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 4a 28 31 37 30 30 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 68 4a 28 37 31 35 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 4a 28 36 39 30 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 4a 28 31 37 35 32 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 68 4a 28 35 36 39 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 4a 28 31 37 30 30 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 4a 28 31 37 35 32 29 5d 28 64 5b 68 4a 28 31 33 31 33 29 5d 28 30 2c 4c 29 3f 31 3a 30 2c 46 29 2c 46 Data Ascii: J(1700)](2,8),F=1;d[hJ(715)](F,K);L=G&H,H>>=1,H==0&&(H=j,G=d[hJ(690)](o,I++)),J\|=d[hJ(1752)](0<L?1:0,F),F<<=1);M=d[hJ(569)](e,J);break;case 1:for(J=0,K=Math[hJ(1700)](2,16),F=1;K!=F;L=G&H,H>>=1,0==H&&(H=j,G=o(I++)),J\|=d[hJ(1752)](d[hJ(1313)](0,L)?1:0,F),F
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 69 38 3d 67 4a 2c 67 3d 7b 7d 2c 67 5b 69 38 28 31 35 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 21 3d 3d 73 7d 2c 67 5b 69 38 28 31 30 32 38 29 5d 3d 69 38 28 38 39 35 29 2c 67 5b 69 38 28 31 34 33 33 29 5d 3d 69 38 28 39 33 31 29 2c 67 5b 69 38 28 35 35 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 69 38 28 31 32 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 25 73 7d 2c 67 5b 69 38 28 31 32 38 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2d 73 7d 2c 68 3d 67 2c 6d 2c 6a 3d 33 32 2c 6c 3d 68 5b 69 38 28 35 35 33 29 5d 28 68 5b 69 38 28 35 35 33 29 5d 28 65 4d Data Ascii: ,j,k,l,m){for(i8=gJ,g={},g[i8(1559)]=function(n,s){return n!==s},g[i8(1028)]=i8(895),g[i8(1433)]=i8(931),g[i8(553)]=function(n,s){return n+s},g[i8(1226)]=function(n,s){return n%s},g[i8(1281)]=function(n,s){return n-s},h=g,m,j=32,l=h[i8(553)](h[i8(553)](eM
2025-03-26 09:06:19 UTC	1369	IN	Data Raw: 35 37 29 5d 28 67 2c 33 29 2c 61 32 28 63 5b 69 62 28 31 33 34 33 29 5d 28 61 33 2c 61 34 2c 67 29 2c 61 35 5b 63 5b 69 62 28 31 32 38 36 29 5d 28 61 36 2c 31 36 29 5d 29 29 29 7d 2c 65 29 7d 2c 65 4d 5b 67 4a 28 31 30 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 69 63 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 76 2c 78 2c 42 29 7b 6b 3d 28 69 63 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 69 63 28 31 30 32 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 7d 2c 6a 5b 69 63 28 31 34 32 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 69 63 28 31 36 35 32 29 5d 3d 69 63 28 31 37 32 32 29 2c 6a 5b 69 63 28 31 36 38 33 29 5d 3d 69 63 28 31 Data Ascii: 57)](g,3),a2(c[ib(1343)](a3,a4,g),a5[c[ib(1286)](a6,16)])))},e)},eM[gJ(1052)]=function(g,h,i,ic,j,k,l,m,n,o,s,v,x,B){k=(ic=gJ,j={},j[ic(1022)]=function(C,D){return C instanceof D},j[ic(1423)]=function(C,D){return C+D},j[ic(1652)]=ic(1722),j[ic(1683)]=ic(1

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:20 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:06:20 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:06:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 92657dccc8a642cc-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 09:06:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:20 UTC	699	OUT	GET /page/images/favicon.ico HTTP/1.1 Host: withamprospect.museandhemarketplace.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://withamprospect.museandhemarketplace.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=uqls6fj35k2lea336n33iai05c
2025-03-26 09:06:21 UTC	1082	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:06:20 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1150 Connection: close Last-Modified: Tue, 17 Sep 2024 02:03:54 GMT ETag: "47e-6224719f87680" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2ByMFHfBahRhx4Z0su%2BuuuvE7EvhDFHyK6o4q42bkL9iWYwW7kS%2FW6pYEzwMC84ZiS1gdGFYi9MXq31Gi%2BMV0Qhj660Ba79%2FVyHy1UArS6%2FiN5kj23wuOXBJKkZHGlaknAQJhhVcbhnOJt0e%2FRVNj5rwEyauKqOS83n8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92657dd009acc334-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=125279&min_rtt=125204&rtt_var=26527&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2865&recv_bytes=1271&delivery_rate=29700&cwnd=249&unsent_bytes=0&cid=831016875308bf3f&ts=6327&x=0"
2025-03-26 09:06:21 UTC	287	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 f5 c2 50 ff f3 b2 24 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b2 22 ff f9 d2 7d ff 8a a4 fa ff 39 65 f5 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3b 66 f6 ff 63 86 f8 ff f3 b7 32 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a4 00 ff f7 ca 66 ff 77 95 f9 ff 18 4b f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1a 4c f3 ff 49 71 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 Data Ascii: h( P$%%%%"}9e<h<h<h<h;fc2fwKNNNNLIq3gwLOOOONJr
2025-03-26 09:06:21 UTC	863	IN	Data Raw: 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 b6 32 ff f0 a4 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a3 00 ff f7 ca 66 ff 75 94 f8 ff 15 49 f3 ff 19 4c f3 ff 19 4c f3 ff 19 4c f3 ff 19 4c f3 ff 18 4b f3 ff 47 70 f6 ff fa d5 86 ff f8 cb 67 ff f8 cb 69 ff f8 cb 69 ff f8 cb 69 ff f8 cb 69 ff f8 ca 66 ff fb e0 a5 ff Data Ascii: LOOOONJr3gwLOOOONJr3gwLOOOONJr2fuILLLLKGpgiiiif

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:21 UTC	1190	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/109354503:1742977610:vBcNnr8NMUJMjR8QdEocKteNJAN-hlPdGxlfnGEXtEU/92657dc20d9f42a7/mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3401 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2f cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/2ht1w/0x4AAAAAABCV9v5JRMLZrYfd/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:06:21 UTC	3401	OUT	Data Raw: 55 64 66 6d 41 6d 62 6d 4b 6d 66 6d 32 56 46 67 56 46 53 6d 56 34 70 72 57 6b 56 24 46 57 46 54 78 34 4f 58 38 46 79 43 72 6d 6e 38 70 43 46 31 46 49 38 57 72 35 38 5a 62 69 35 46 24 38 4f 35 46 39 46 55 73 6d 46 41 43 6d 46 7a 4f 46 7a 61 64 5a 71 46 4b 66 45 43 43 35 4f 38 70 33 46 76 34 70 54 46 4b 48 50 79 46 59 46 70 4e 46 57 24 32 39 30 4d 46 76 48 73 53 47 2d 48 30 38 5a 65 46 36 53 48 59 76 48 55 4e 4a 6b 67 4a 72 64 69 59 79 72 58 72 36 46 66 4e 4e 67 4b 52 24 54 4b 72 36 46 71 73 78 4d 52 6c 38 57 48 70 75 69 55 4e 46 30 43 78 73 2d 44 43 36 24 46 70 48 72 56 52 76 78 46 5a 6e 43 4b 4e 34 37 58 34 46 75 74 4e 46 34 37 6c 36 2d 6d 56 33 46 5a 4e 46 43 37 6c 6d 70 66 6b 46 38 65 41 33 37 4e 77 54 4d 6d 34 43 24 66 64 46 54 58 64 46 49 6a 72 6b 46 Data Ascii: UdfmAmbmKmfm2VFgVFSmV4prWkV$FWFTx4OX8FyCrmn8pCF1FI8Wr58Zbi5F$8O5F9FUsmFACmFzOFzadZqFKfECC5O8p3Fv4pTFKHPyFYFpNFW$290MFvHsSG-H08ZeF6SHYvHUNJkgJrdiYyrXr6FfNNgKR$TKr6FqsxMRl8WHpuiUNF0Cxs-DC6$FpHrVRvxFZnCKN47X4FutNF47l6-mV3FZNFC7lmpfkF8eA37NwTMm4C$fdFTXdFIjrkF
2025-03-26 09:06:21 UTC	1115	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:06:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 241980 Connection: close cf-chl-gen: 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$CuwuwvhQAMqjRuYwCgExHQ== Server: cloudflare CF-RAY: 92657dd24c92c3ff-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 09:06:21 UTC	254	IN	Data Raw: 64 70 56 50 6c 56 4a 61 6b 56 32 62 6d 57 39 77 64 4a 4f 44 6e 57 4f 69 6d 6f 46 6a 6c 6d 75 69 70 4b 6c 71 72 58 2b 68 6b 61 47 45 70 58 53 72 6b 58 4f 65 73 4a 79 65 74 4c 32 73 6c 62 6d 59 76 70 36 6b 74 72 65 46 68 61 69 6e 6e 4d 2f 4d 72 36 79 68 70 4d 33 50 74 5a 4f 37 75 72 4b 30 77 4c 79 64 31 63 47 79 73 73 4b 32 32 64 66 6c 33 61 6a 47 35 4e 7a 50 77 4d 43 74 74 4e 54 76 74 39 48 42 37 63 6a 4a 75 4d 79 39 36 72 50 39 2f 76 7a 39 78 51 50 61 43 73 51 4a 37 4f 33 35 33 50 6e 72 78 4d 6f 51 41 73 6a 4f 45 77 2f 76 47 52 66 62 44 74 73 42 39 76 48 62 45 41 41 47 43 66 30 64 39 79 63 70 35 78 6b 59 4c 53 6a 37 4a 79 73 75 4b 68 45 58 47 79 59 62 4d 52 4d 74 48 78 77 66 4a 43 49 53 46 68 30 41 46 7a 59 32 48 7a 55 69 51 42 30 63 48 30 55 2f 45 52 Data Ascii: dpVPlVJakV2bmW9wdJODnWOimoFjlmuipKlqrX+hkaGEpXSrkXOesJyetL2slbmYvp6ktreFhainnM/Mr6yhpM3PtZO7urK0wLyd1cGyssK22dfl3ajG5NzPwMCttNTvt9HB7cjJuMy96rP9/vz9xQPaCsQJ7O353PnrxMoQAsjOEw/vGRfbDtsB9vHbEAAGCf0d9ycp5xkYLSj7JysuKhEXGyYbMRMtHxwfJCISFh0AFzY2HzUiQB0cH0U/ER
2025-03-26 09:06:21 UTC	1369	IN	Data Raw: 45 78 54 45 49 30 4d 46 4d 33 4a 6b 30 36 49 43 38 6a 50 6a 52 68 4d 42 39 5a 4d 69 55 2b 58 6d 74 4e 52 47 4e 71 58 30 51 7a 59 47 42 75 56 45 31 4a 55 31 30 77 57 6b 70 2f 65 6b 34 39 58 6a 31 78 56 34 68 67 51 6b 52 6a 62 57 6c 49 6a 57 6c 74 6a 6f 2b 54 63 5a 69 55 62 57 78 58 57 59 31 62 69 31 69 63 6d 33 6d 42 63 71 64 37 6d 6f 70 6a 5a 48 71 4a 6e 57 65 68 6b 71 79 69 67 33 4b 51 6a 35 53 4f 74 35 4f 75 6a 6f 79 74 63 37 72 43 6c 4a 69 34 67 35 71 31 6e 4d 43 38 71 4b 75 73 71 70 36 72 70 62 47 79 79 4d 65 35 31 4b 36 72 32 4c 66 4f 31 64 79 75 75 4d 54 58 31 64 6e 57 79 64 7a 6c 77 63 6d 6b 31 2b 76 43 36 4e 44 4c 31 4d 47 32 38 75 79 31 31 4e 76 75 39 4c 44 5a 38 39 4c 68 39 51 44 44 41 65 69 2b 42 38 51 47 31 4e 58 6c 43 4d 33 48 43 75 59 46 37 Data Ascii: ExTEI0MFM3Jk06IC8jPjRhMB9ZMiU+XmtNRGNqX0QzYGBuVE1JU10wWkp/ek49Xj1xV4hgQkRjbWlIjWltjo+TcZiUbWxXWY1bi1icm3mBcqd7mopjZHqJnWehkqyig3KQj5SOt5Oujoytc7rClJi4g5q1nMC8qKusqp6rpbGyyMe51K6r2LfO1dyuuMTX1dnWydzlwcmk1+vC6NDL1MG28uy11Nvu9LDZ89Lh9QDDAei+B8QG1NXlCM3HCuYF7
2025-03-26 09:06:21 UTC	1369	IN	Data Raw: 56 55 54 55 39 56 44 74 4f 50 31 63 66 49 7a 39 52 5a 69 6c 42 50 56 64 45 49 6b 35 4a 4d 58 55 2b 4d 54 46 75 56 6e 63 7a 4f 46 4a 6d 54 46 70 68 57 57 41 36 57 30 4a 6f 63 6d 6d 47 51 56 6c 58 62 70 43 45 65 6d 68 6b 5a 32 42 52 69 70 61 43 6c 6f 78 31 64 48 39 32 66 48 4f 4e 64 6e 64 63 6d 32 46 67 59 34 75 6e 66 48 32 59 62 71 4e 35 70 6e 4e 2f 6c 71 47 44 62 6f 6d 6c 6d 4c 4f 57 64 37 6d 2f 6a 48 75 59 75 5a 33 41 75 5a 69 6b 78 70 71 35 79 5a 32 6b 6a 36 6e 4c 30 61 43 65 70 64 47 32 70 4e 53 38 75 62 57 74 6e 37 6d 37 30 72 2f 52 32 64 6e 69 31 61 4f 2f 36 2b 43 39 79 62 65 2f 7a 73 6a 6a 78 4f 7a 65 36 64 54 48 32 38 2b 38 35 66 4c 39 32 50 47 30 33 76 66 6d 2f 63 62 31 78 4f 44 4a 78 65 73 4d 32 77 54 68 30 75 44 6d 44 41 37 56 42 75 7a 76 31 41 Data Ascii: VUTU9VDtOP1cfIz9RZilBPVdEIk5JMXU+MTFuVnczOFJmTFphWWA6W0JocmmGQVlXbpCEemhkZ2BRipaClox1dH92fHONdndcm2FgY4unfH2YbqN5pnN/lqGDbomlmLOWd7m/jHuYuZ3AuZikxpq5yZ2kj6nL0aCepdG2pNS8ubWtn7m70r/R2dni1aO/6+C9ybe/zsjjxOze6dTH28+85fL92PG03vfm/cb1xODJxesM2wTh0uDmDA7VBuzv1A
2025-03-26 09:06:21 UTC	1369	IN	Data Raw: 50 31 68 48 4f 45 4d 68 57 43 64 44 58 6a 5a 67 55 47 56 54 4c 32 46 47 50 7a 64 74 64 46 63 30 65 54 64 31 56 55 70 69 63 47 4a 36 5a 6b 4a 61 56 6e 74 56 51 6d 70 62 5a 6b 5a 6d 54 6e 32 4e 69 33 57 43 6a 49 42 57 54 47 35 39 64 56 43 64 61 49 43 63 59 4a 61 45 6c 6f 47 62 63 36 57 68 71 6d 79 58 66 58 36 75 66 70 4e 6d 70 4b 39 77 6a 4b 69 69 71 48 57 35 74 49 65 72 74 6f 4b 74 6c 38 61 42 76 71 47 37 6d 35 69 69 76 59 32 42 70 37 47 78 7a 63 47 7a 30 4d 33 53 6c 4a 71 32 74 74 43 61 75 4d 6d 78 32 72 62 57 74 39 4c 63 32 4f 48 58 30 38 7a 59 33 75 37 61 79 4d 48 77 35 50 58 67 7a 66 47 35 75 4e 6a 33 2b 4e 33 71 41 73 48 79 2b 67 58 46 2b 39 34 4b 31 4d 50 43 35 64 6a 68 34 63 66 38 34 63 33 6c 42 66 59 4e 34 2b 50 32 43 2f 6e 32 35 68 58 78 49 42 6b Data Ascii: P1hHOEMhWCdDXjZgUGVTL2FGPzdtdFc0eTd1VUpicGJ6ZkJaVntVQmpbZkZmTn2Ni3WCjIBWTG59dVCdaICcYJaEloGbc6WhqmyXfX6ufpNmpK9wjKiiqHW5tIertoKtl8aBvqG7m5iivY2Bp7GxzcGz0M3SlJq2ttCauMmx2rbWt9Lc2OHX08zY3u7ayMHw5PXgzfG5uNj3+N3qAsHy+gXF+94K1MPC5djh4cf84c3lBfYN4+P2C/n25hXxIBk
2025-03-26 09:06:21 UTC	1369	IN	Data Raw: 57 78 6b 52 6c 74 68 58 46 31 49 53 46 4e 73 50 69 38 75 55 6c 70 53 5a 48 4d 36 64 6a 6c 74 51 6e 41 2f 57 6e 69 44 66 6c 32 42 56 46 52 6a 64 33 6c 73 65 34 52 78 6a 58 31 54 63 5a 65 50 68 59 32 4d 6d 59 70 79 64 34 42 61 6e 33 79 64 67 33 79 42 6d 6d 70 6e 65 71 79 62 62 70 68 38 66 4b 4f 47 6e 6f 52 70 6c 59 32 57 75 71 53 38 75 33 79 58 66 70 42 31 76 37 71 58 6e 4b 4b 56 78 37 61 64 68 37 75 64 76 6f 6d 53 74 4e 4b 6e 31 4c 43 69 73 36 6e 62 71 4d 79 32 73 62 61 5a 34 39 37 4e 74 4b 48 46 73 73 50 4a 75 71 66 6d 37 71 48 77 78 50 4c 78 72 72 54 78 74 66 4c 5a 72 4c 54 6f 33 73 2f 71 37 4f 48 51 31 66 62 58 32 51 49 46 77 39 62 58 43 73 54 4a 42 50 41 48 79 78 50 55 43 2f 62 6c 32 4e 54 61 35 68 66 64 43 42 59 41 41 51 37 38 34 65 54 6b 37 78 30 72 Data Ascii: WxkRlthXF1ISFNsPi8uUlpSZHM6djltQnA/WniDfl2BVFRjd3lse4RxjX1TcZePhY2MmYpyd4Ban3ydg3yBmmpneqybbph8fKOGnoRplY2WuqS8u3yXfpB1v7qXnKKVx7adh7udvomStNKn1LCis6nbqMy2sbaZ497NtKHFssPJuqfm7qHwxPLxrrTxtfLZrLTo3s/q7OHQ1fbX2QIFw9bXCsTJBPAHyxPUC/bl2NTa5hfdCBYAAQ784eTk7x0r
2025-03-26 09:06:21 UTC	1369	IN	Data Raw: 31 51 58 47 4a 6f 58 32 64 6a 64 47 56 70 4d 6c 46 49 4f 32 42 7a 67 58 31 33 5a 58 70 78 65 45 56 54 51 33 31 74 6a 6d 69 41 63 4a 4e 6c 68 57 42 6d 62 32 42 68 6a 48 69 63 62 47 39 59 63 35 69 53 6d 36 4a 6a 59 49 2b 70 69 6e 75 70 6d 49 75 4c 6a 49 75 50 6e 47 71 4f 6f 61 57 49 68 36 75 62 65 4b 71 37 6c 6f 31 38 75 6e 69 4f 76 37 2b 55 68 49 4b 49 74 35 6e 49 6a 4b 50 4b 72 63 54 42 7a 35 43 6c 31 71 33 4d 75 74 4b 38 7a 64 4f 55 7a 74 57 65 75 4e 48 61 6f 4b 54 57 32 61 57 63 33 65 44 56 76 4e 43 6f 37 50 4c 54 36 64 57 7a 37 4c 54 61 38 62 53 37 32 2f 47 33 32 4e 6b 44 41 41 4d 46 78 4d 54 52 42 39 37 58 77 67 7a 68 78 74 7a 49 35 74 33 4e 45 41 41 54 41 75 67 55 46 77 7a 61 31 77 45 58 34 4e 67 59 31 68 4d 48 38 4e 6f 70 2b 77 54 73 48 2b 55 6a 36 Data Ascii: 1QXGJoX2djdGVpMlFIO2BzgX13ZXpxeEVTQ31tjmiAcJNlhWBmb2BhjHicbG9Yc5iSm6JjYI+pinupmIuLjIuPnGqOoaWIh6ubeKq7lo18uniOv7+UhIKIt5nIjKPKrcTBz5Cl1q3MutK8zdOUztWeuNHaoKTW2aWc3eDVvNCo7PLT6dWz7LTa8bS72/G32NkDAAMFxMTRB97XwgzhxtzI5t3NEAATAugUFwza1wEX4NgY1hMH8Nop+wTsH+Uj6
2025-03-26 09:06:21 UTC	1369	IN	Data Raw: 34 52 6c 42 47 65 33 31 66 54 54 36 42 65 6c 39 74 62 6e 68 2b 56 6d 56 72 56 49 70 32 67 57 4b 4e 58 6b 39 4d 5a 59 47 54 55 59 5a 75 67 33 42 62 69 6f 2b 52 58 48 65 42 63 71 56 35 58 71 47 59 64 70 65 4a 5a 33 65 6c 61 71 6c 39 72 5a 79 47 72 62 57 32 72 49 61 56 74 4c 74 36 65 5a 6d 41 76 58 68 36 67 72 4b 45 78 35 65 38 6c 72 6e 45 68 4b 4f 37 77 73 6d 4a 72 4d 72 49 79 63 32 59 6b 6f 79 71 72 35 4f 37 33 63 6d 31 32 73 2b 66 78 4e 2f 69 76 65 53 71 31 2b 79 74 33 37 33 69 77 73 2b 2b 72 39 57 6f 72 65 33 30 79 4e 66 51 37 65 33 34 74 75 76 69 35 4e 7a 30 2f 64 50 46 78 66 58 33 2b 4d 66 59 2b 51 4c 68 43 73 6b 4f 37 75 51 49 39 74 49 4d 31 51 62 59 44 4e 2f 35 46 42 59 61 37 69 51 42 42 69 62 6d 33 50 30 41 35 76 6b 41 2f 50 34 4a 2f 65 30 41 44 79 Data Ascii: 4RlBGe31fTT6Bel9tbnh+VmVrVIp2gWKNXk9MZYGTUYZug3Bbio+RXHeBcqV5XqGYdpeJZ3elaql9rZyGrbW2rIaVtLt6eZmAvXh6grKEx5e8lrnEhKO7wsmJrMrIyc2Ykoyqr5O73cm12s+fxN/iveSq1+yt373iws++r9Wore30yNfQ7e34tuvi5Nz0/dPFxfX3+MfY+QLhCskO7uQI9tIM1QbYDN/5FBYa7iQBBibm3P0A5vkA/P4J/e0ADy
2025-03-26 09:06:21 UTC	1369	IN	Data Raw: 62 7a 6c 62 65 6d 35 77 5a 6b 61 48 55 6c 78 2b 58 31 74 6b 61 6c 36 48 51 32 52 6c 58 59 42 77 5a 59 46 54 55 56 56 72 58 56 74 6f 69 58 35 32 70 48 6d 57 62 6d 46 78 6f 4b 71 49 66 36 42 6d 6a 70 36 4a 6b 37 4f 69 67 49 32 57 6a 36 39 79 74 35 69 59 65 36 79 77 6b 61 79 67 6f 72 65 32 6d 34 53 64 70 36 4f 39 68 37 71 36 77 73 47 4f 72 36 2f 4a 70 36 69 76 32 61 4f 7a 7a 4d 71 6f 79 39 47 5a 33 4e 4b 64 6e 71 4c 5a 78 65 58 72 76 4c 53 6c 33 61 37 5a 37 4e 76 79 76 76 62 47 38 74 6a 4a 2b 66 48 61 36 39 6e 78 32 41 50 38 39 76 4c 2b 2f 64 32 2f 43 50 59 46 34 50 58 66 79 4d 37 75 37 65 41 4e 46 4e 41 53 31 38 73 55 47 4e 4c 32 48 4e 6a 66 48 68 77 69 31 69 4d 69 45 2f 58 68 46 43 6b 44 4a 51 34 6f 4b 42 4d 51 4b 41 45 57 44 66 59 74 39 69 67 32 42 54 6f Data Ascii: bzlbem5wZkaHUlx+X1tkal6HQ2RlXYBwZYFTUVVrXVtoiX52pHmWbmFxoKqIf6Bmjp6Jk7OigI2Wj69yt5iYe6ywkaygore2m4Sdp6O9h7q6wsGOr6/Jp6iv2aOzzMqoy9GZ3NKdnqLZxeXrvLSl3a7Z7NvyvvbG8tjJ+fHa69nx2AP89vL+/d2/CPYF4PXfyM7u7eANFNAS18sUGNL2HNjfHhwi1iMiE/XhFCkDJQ4oKBMQKAEWDfYt9ig2BTo
2025-03-26 09:06:21 UTC	1369	IN	Data Raw: 55 2b 42 59 6c 4e 4a 68 6d 4e 5a 69 49 31 69 62 48 4a 4d 5a 33 42 76 61 32 70 30 6d 4a 4a 6c 57 4a 68 2f 57 31 70 71 6b 4a 68 74 58 5a 53 70 65 71 5a 6e 6e 61 6c 39 6d 70 47 47 67 49 57 46 68 33 36 52 69 61 53 44 65 72 6d 51 6b 70 53 49 63 33 6a 44 67 5a 35 2f 67 5a 79 37 74 62 4f 72 6a 49 69 76 6a 61 79 37 75 37 50 50 78 37 69 69 79 36 4b 55 32 39 6d 30 32 74 50 53 73 35 72 6c 75 2b 47 66 36 62 36 2b 76 61 6a 6e 77 65 48 63 35 4f 6e 75 33 38 2b 73 78 2b 61 77 73 4e 58 46 39 73 37 31 39 4c 6a 75 77 73 2f 32 41 4e 48 33 35 73 6b 42 35 4e 67 4d 44 77 44 4f 41 42 58 72 2f 52 58 6d 37 63 2f 77 31 74 76 6e 48 78 66 33 49 75 4c 69 33 42 67 6f 45 69 55 4c 41 53 4c 33 41 2b 76 39 45 52 4d 77 2f 54 49 6a 41 66 62 78 43 44 51 59 2f 41 6b 54 4f 52 59 74 45 7a 30 69 Data Ascii: U+BYlNJhmNZiI1ibHJMZ3Bva2p0mJJlWJh/W1pqkJhtXZSpeqZnnal9mpGGgIWFh36RiaSDermQkpSIc3jDgZ5/gZy7tbOrjIivjay7u7PPx7iiy6KU29m02tPSs5rlu+Gf6b6+vajnweHc5Onu38+sx+awsNXF9s719Ljuws/2ANH35skB5NgMDwDOABXr/RXm7c/w1tvnHxf3IuLi3BgoEiULASL3A+v9ERMw/TIjAfbxCDQY/AkTORYtEz0i

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:06:22 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/109354503:1742977610:vBcNnr8NMUJMjR8QdEocKteNJAN-hlPdGxlfnGEXtEU/92657dc20d9f42a7/mgdcirA7YJM26DqSd5cf85xQ.z9hCMkiVOH252kFskk-1742979978-1.1.1.1-Lue9kjwxLXmPqH3uMvopsJ15zkl_xlrCoObp_nXc9pSjYYChpWxXdYr5e3lwIT2f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:06:22 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 26 Mar 2025 09:06:22 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: nuXvAwNmd9KkfKqQOvKU4WOkMlzocY/XLjp1V/Rp7ul8ptAUYYuonhxn06TWqCPrAfU/o3WebW659xwCgORrXw==$cg8cYYCXB9cJQcLP/IFoPA== Server: cloudflare CF-RAY: 92657dda6ce04333-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 09:06:22 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}