Edit tour

Windows Analysis Report
http://support.delfi.com

Overview

General Information

Sample URL:	http://support.delfi.com
Analysis ID:	1648917
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

HTML page contains hidden javascript code

HTML page contains string obfuscation

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2076,i,6030319996926901576,181120289397406770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2104 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://support.delfi.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://support.delfi.com

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://support.delfi.com/en/support/home?site=RepairStatus	Avira URL Cloud: Label: phishing
Source: https://support.delfi.com/en/support/home?site=Download	Avira URL Cloud: Label: phishing
Source: https://support.delfi.com/en/support/solutions	Avira URL Cloud: Label: phishing
Source: https://rmasites.delfi.com/rma-status/en	Avira URL Cloud: Label: phishing
Source: https://support.delfi.com/en/support/home?site=Bookings	Avira URL Cloud: Label: phishing
Source: https://support.delfi.com/	Avira URL Cloud: Label: phishing

Source: https://support.delfi.com/en/support/home

HTTP Parser: Base64 decoded: 1742981142.000000

Source: https://download.delfi.com/_js/xmenu.js

HTTP Parser: Found new string: script // define the default values..webfxMenuDefaultWidth...= 140;..webfxMenuDefaultBorderWidth..= 1;..webfxMenuDefaultPaddingWidth.= 0;..webfxMenuDefaultBorderTop..= 1;..webfxMenuDefaultPaddingTop..= 0;....webfxMenuItemDefaultHeight..= 13;..webfxMenuItemDefaultText..= "Untitled";..webfxMenuItemDefaultHref..= "javascript:void(0)";....webfxMenuSeparatorDefaultHeight.= 6;....webfxMenuDefaultImagePath..= "_img/";..webfxMenuDefaultEmptyText..= "Empty";....// check browsers..var op = /opera 5|opera\/5/i.test(navigator.userAgent);..var ie = !op && /msie/i.test(navigator.userAgent);.// preventing opera to be identified as ie..var mz = !op && /mozilla\/5/i.test(navigator.userAgent);.// preventing opera to be identified as mz..var ieBox = ie && /win/.test(navigator.platform) && (document.compatMode == null || document.compatMode != "BackCompat");.// IE proprietary box model....if (ie && document.getElementById == null) {.// ie4...document.getElementById = function(sId) {....return document.all[sId];...};..}....var webFXMenu...

Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ&co=aHR0cHM6Ly9zdXBwb3J0LmRlbGZpLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=normal&cb=gmnv5m2y7h6a
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/fallback?k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ&co=aHR0cHM6Ly9zdXBwb3J0LmRlbGZpLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=normal&cb=gmnv5m2y7h6a
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/fallback?k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/bframe?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ&co=aHR0cHM6Ly9zdXBwb3J0LmRlbGZpLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=normal&cb=gmnv5m2y7h6a
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/fallback?k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/bframe?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ

Source: https://support.delfi.com/en/support/home	HTTP Parser: No favicon
Source: https://support.delfi.com/en/support/home	HTTP Parser: No favicon
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: No favicon
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: No favicon
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: No favicon
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: No favicon
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: No favicon

Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: No <meta name="copyright".. found
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: No <meta name="copyright".. found
Source: https://support.delfi.com/en/support/tickets/new	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.40.100:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.147:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 16.182.33.72:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.115.43.70:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.217.163.192:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.2.158:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.96.239.178:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.115.43.70:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.196:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.99:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49873 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: support.delfi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /support/home HTTP/1.1Host: support.delfi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _x_w=22; __cf_bm=28HbnawySxiJJCwJulrxIbxs3JaSBzxgCWkYh6tdh7Q-1742981138-1.0.1.1-ZVkT_0Mo8DrOITnYsgcaeYaUZnTLpx5IVrKxeBbq3oMIhoPcFDFhVb6sh5oq1cxt8IQY7NMY9ThoXTtqrWA8HklSRnCq0xizOTcc5i6zB1s
Source: global traffic	HTTP traffic detected: GET /en/support/home HTTP/1.1Host: support.delfi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _x_w=22; __cf_bm=28HbnawySxiJJCwJulrxIbxs3JaSBzxgCWkYh6tdh7Q-1742981138-1.0.1.1-ZVkT_0Mo8DrOITnYsgcaeYaUZnTLpx5IVrKxeBbq3oMIhoPcFDFhVb6sh5oq1cxt8IQY7NMY9ThoXTtqrWA8HklSRnCq0xizOTcc5i6zB1s
Source: global traffic	HTTP traffic detected: GET /support/theme.css?v=4&d=1708592299 HTTP/1.1Host: support.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.delfi.com/en/support/homeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _x_w=22; __cf_bm=28HbnawySxiJJCwJulrxIbxs3JaSBzxgCWkYh6tdh7Q-1742981138-1.0.1.1-ZVkT_0Mo8DrOITnYsgcaeYaUZnTLpx5IVrKxeBbq3oMIhoPcFDFhVb6sh5oq1cxt8IQY7NMY9ThoXTtqrWA8HklSRnCq0xizOTcc5i6zB1s
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal_utils-fe7ee1254a5d27e7550ccf8875cbd6276c5da04436e7f6ea0120b8d6d70e3133.css HTTP/1.1Host: assets1.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/6001136066/logo/3tmHBXh0K38lG3WW2ls0dC67UKkDUoTc5A.png HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal_head_v2-c1e8ae994d3f8763b4a3d180ba8cdccb905bbc2e7f73c03db2dd182e08bbc9de.js HTTP/1.1Host: assets10.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/prism-733177846dd200c6e56035b34e8d52c5352eedcc6dc73f2dcc44a74ecd560ee2.js HTTP/1.1Host: assets5.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download/TeamViewer/TeamViewerLogoTP.png HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/6001136066/logo/3tmHBXh0K38lG3WW2ls0dC67UKkDUoTc5A.png HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal_bottom-b13f0ef6352d3ae3936782ceb4fed0eaa1daf148bfc7776df3256680ae6aa1b6.js HTTP/1.1Host: assets3.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EN HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en HTTP/1.1Host: snlookupv2.delfi.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb82858862f30e630a2a10c2a.js HTTP/1.1Host: assets9.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn-ignored/sprites/portal/dynamic-icon-s85b95186ce-e274bd42cd0ad6ac0c46c7e2bfa705d4b97c6bd0b9c736e0da2d31ffca7d3a09.png HTTP/1.1Host: assets9.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce13150854024baaf983b3f4326.css HTTP/1.1Host: assets6.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/redactor-10a54c9b6ce9a442c8a2e6a131947e0d106a4af7c5b98360494520fc5245be28.js HTTP/1.1Host: assets8.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba7ef13f18c8d691.js HTTP/1.1Host: assets8.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rma-status/en HTTP/1.1Host: rmasites.delfi.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/calendar/ISPSupport@delfi.com/bookings/ HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EN/ HTTP/1.1Host: download.delfi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-1225edac.css HTTP/1.1Host: snlookupv2.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://snlookupv2.delfi.com/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-353af0e1.js HTTP/1.1Host: snlookupv2.delfi.comConnection: keep-aliveOrigin: https://snlookupv2.delfi.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://snlookupv2.delfi.com/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/speculation HTTP/1.1Host: snlookupv2.delfi.comConnection: keep-aliveOrigin: https://snlookupv2.delfi.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: speculationrulesReferer: https://snlookupv2.delfi.com/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /book/ISPSupport@delfi.com/ HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ClientId=819963B6F6364F6A80DB4F1A664CBE11; OIDC=1
Source: global traffic	HTTP traffic detected: GET /rma-form/en HTTP/1.1Host: rmasites.delfi.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-5c915a8f.css HTTP/1.1Host: rmasites.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://rmasites.delfi.com/rma-status/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LekBq0pAAAAAJFeFK14IJXk60_w-iFY6bCA1yZn HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://snlookupv2.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveOrigin: https://rmasites.delfi.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://rmasites.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download/TeamViewer/TeamViewerLogoTP.png HTTP/1.1Host: download.delfi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-5fe7f192.js HTTP/1.1Host: rmasites.delfi.comConnection: keep-aliveOrigin: https://rmasites.delfi.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://rmasites.delfi.com/rma-status/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn-ignored/sprites/portal/dynamic-icon-s85b95186ce-e274bd42cd0ad6ac0c46c7e2bfa705d4b97c6bd0b9c736e0da2d31ffca7d3a09.png HTTP/1.1Host: assets9.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: snlookupv2.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-5c915a8f.css HTTP/1.1Host: rmasites.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://rmasites.delfi.com/rma-form/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.108413409.1742981142; _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1
Source: global traffic	HTTP traffic detected: GET /_css/layout.css HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_css/xmenu.css HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_css/xtree.css HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_css/anylinkmenu.css HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_js/xtree.js HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_js/tree.asp?Language=1 HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /assets/index-5fe7f192.js HTTP/1.1Host: rmasites.delfi.comConnection: keep-aliveOrigin: https://rmasites.delfi.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://rmasites.delfi.com/rma-form/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.108413409.1742981142; _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: rmasites.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/speculation HTTP/1.1Host: rmasites.delfi.comConnection: keep-aliveOrigin: https://rmasites.delfi.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: speculationrulesReferer: https://rmasites.delfi.com/rma-status/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1Host: snlookupv2.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142
Source: global traffic	HTTP traffic detected: GET /_js/xmenu.js HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_js/en_menu.js HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_js/querystring.js HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_js/dk_functions.js HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_js/dk_bestilling.js HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_js/en_menucontents.js HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1Host: rmasites.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LekBq0pAAAAAJFeFK14IJXk60_w-iFY6bCA1yZn&co=aHR0cHM6Ly9zbmxvb2t1cHYyLmRlbGZpLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=l73a8j46yke HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://snlookupv2.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/anylinkmenu.js HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH
Source: global traffic	HTTP traffic detected: GET /_img/ext/folder.gif HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH; _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.5436288692727906:1742977527:nf5zXXOsCF0v085P3H1I6LlkS0QzDSEEehY4tzzmMmk/92659a27e97f8c3b HTTP/1.1Host: snlookupv2.delfi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142
Source: global traffic	HTTP traffic detected: GET /_css/printer.css HTTP/1.1Host: download.delfi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://download.delfi.com/EN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH; _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142; cf_clearance=KsSSO6YrUlG8lOhyurhenc8REbdrguHfxOFWoKUahok-1742981144-1.2.1.1-RAIhDC2SYeCTflGtcjj_Xjgv3Azo6OiCzUJSHybPePilj8oenmciFCHAylyP_CevDRokM06DpxNDBr.0H7DfTXbbL84.ZkiSm.6zWCeB0mCLEZSh5yFv_EnEBWWotU00fv1uggCuVeB6yFmyDhnFzOZZ1mffv4bIVx.WzqlUsRk0tZjbQ2BGAOjGcLZew.3waO2Vy3h7yjV2UKG4dZuQFXvCTPK6n_MBesbGYSaein4nn6op8OrriF7zFAq1kMLHicAVc3DZEaTBjKqq0Qq6vU0CEBBo7qMnYiPWZVw083XNLNJUk072a4OYalidL.3V_8EnL54G.9faYXA809JSW5xRTrAKKilHMl2ydxTCJR8
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: /X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0BSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerSec-Fetch-Storage-Access: activeReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LekBq0pAAAAAJFeFK14IJXk60_w-iFY6bCA1yZn&co=aHR0cHM6Ly9zbmxvb2t1cHYyLmRlbGZpLmNvbTo0NDM.&hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI&size=invisible&cb=l73a8j46ykeUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/6001136274/fav_icon/Delfi%20sort_300dpiww.png HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.18777480660122145:1742977525:mEJn15u2WBc60DTmVqNyqjua1T79VKq7bysXiJeCE_Y/92659a283b9541de HTTP/1.1Host: rmasites.delfi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.18777480660122145:1742977525:mEJn15u2WBc60DTmVqNyqjua1T79VKq7bysXiJeCE_Y/92659a2d4d8188c3 HTTP/1.1Host: rmasites.delfi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142
Source: global traffic	HTTP traffic detected: GET /_img/ext/folder.gif HTTP/1.1Host: download.delfi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH; _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142; __utma=243638416.108413409.1742981142.1742981145.1742981145.1; __utmc=243638416; __utmz=243638416.1742981145.1.1.utmcsr=support.delfi.com\|utmccn=(referral)\|utmcmd=referral\|utmcct=/; __utmt=1; __utmb=243638416.1.10.1742981145
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/6001136274/fav_icon/Delfi%20sort_300dpiww.png HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/support/tickets/new HTTP/1.1Host: support.delfi.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://support.delfi.com/en/support/homeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _x_w=22; __cf_bm=28HbnawySxiJJCwJulrxIbxs3JaSBzxgCWkYh6tdh7Q-1742981138-1.0.1.1-ZVkT_0Mo8DrOITnYsgcaeYaUZnTLpx5IVrKxeBbq3oMIhoPcFDFhVb6sh5oq1cxt8IQY7NMY9ThoXTtqrWA8HklSRnCq0xizOTcc5i6zB1s; _gid=GA1.2.2071628264.1742981142; _gat_gtag_UA_86553024_1=1; _ga_L5G6385RFP=GS1.1.1742981142.1.0.1742981142.0.0.0; _ga=GA1.1.108413409.1742981142; cf_clearance=q.mZrGhGLRWXp947Sd8VmgppNvkQb_n8SZGKrTsxrIA-1742981145-1.2.1.1-kbS_QTdLx7wczcWZ3hV2kDIW0NwxAuYqsQd2OgLW.l5GpVt8HNbILz5j93_7jZDh67B5cFgJxR8LtXEJR_GWoiqw3S41T5He2WA0TM1061JSWt_ZXuN5RlQgHLTvyoNkpY..j_xeu6WO8Sa9JyCdQkVoM7QQyt9Xe0vEdPgJisZ_YVos5SDiZNL8VpUs10qxyrIyZ89IiElDwon9_06VjvqcyzdmS8PjzXV5YCABz7OOJeFx2N1P4eIauH9QR4AnpBx.AkcWlwkdY2A7_jGPkksP86QPMG9eRySGhuPom1yZzWDbngMBbXO9cAEL24vx49N_OH2sYxBEWfM9FVhUn5vHBWfb4TsLz.IQVMmqF9Q
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal_utils-fe7ee1254a5d27e7550ccf8875cbd6276c5da04436e7f6ea0120b8d6d70e3133.css HTTP/1.1Host: assets10.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal_bottom-b13f0ef6352d3ae3936782ceb4fed0eaa1daf148bfc7776df3256680ae6aa1b6.js HTTP/1.1Host: assets5.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/prism-733177846dd200c6e56035b34e8d52c5352eedcc6dc73f2dcc44a74ecd560ee2.js HTTP/1.1Host: assets9.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal_head_v2-c1e8ae994d3f8763b4a3d180ba8cdccb905bbc2e7f73c03db2dd182e08bbc9de.js HTTP/1.1Host: assets8.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/lookup_field-fbaae59ac52f80ac49090db27333b303849342f4c1f4fd8495c6f6a3f1a48e9d.js HTTP/1.1Host: assets3.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/redactor-10a54c9b6ce9a442c8a2e6a131947e0d106a4af7c5b98360494520fc5245be28.js HTTP/1.1Host: assets9.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb82858862f30e630a2a10c2a.js HTTP/1.1Host: assets1.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba7ef13f18c8d691.js HTTP/1.1Host: assets10.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce13150854024baaf983b3f4326.css HTTP/1.1Host: assets2.freshdesk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://support.delfi.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_153.2.dr	String found in binary or memory: U(b)\|\|Gm(a,b)},b)},Gt=function(){return[O.m.R,O.m.T]},Ht=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,It=/^www\.googleadservices\.com$/,Mt=/^gad_source[_=](\d+)$/;function Rt(){return po("dedupe_gclid",function(){return jr()})};var St=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Tt=/^www.googleadservices.com$/;function Ut(a){a\|\|(a=Vt());return a.co?!1:a.dn\|\|a.fn\|\|a.jn\|\|a.gn\|\|a.qf\|\|a.Om\|\|a.hn\|\|a.Tm?!0:!1}function Vt(){var a={},b=Pr(!0);a.co=!!b._up;var c=et();a.dn=c.aw!==void 0;a.fn=c.dc!==void 0;a.jn=c.wbraid!==void 0;a.gn=c.gbraid!==void 0;a.hn=c.gclsrc==="aw.ds";a.qf=Et().qf;var d=A.referrer?bk(hk(A.referrer),"host"):"";a.Tm=St.test(d);a.Om=Tt.test(d);return a};var Wt=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_178.2.dr	String found in binary or memory: function zt(a,b){var c=Qs(b),d=Rs(a,c);if(!d)return 0;var e;e=a==="ag"?Ss(d):Ns(d);for(var f=0,g=0;g<e.length;g++)f=Math.max(f,e[g].timestamp);return f}function At(a){for(var b=0,c=l(Object.keys(a)),d=c.next();!d.done;d=c.next())for(var e=a[d.value],f=0;f<e.length;f++)b=Math.max(b,Number(e[f].timestamp));return b}function Bt(a){var b=Math.max(zt("aw",a),At(Ks(Js())?Ds():{})),c=Math.max(zt("gb",a),At(Ks(Js())?Ds("_gac_gb",!0):{}));c=Math.max(c,zt("ag",a));return c>b};function Rt(){return po("dedupe_gclid",function(){return jr()})};var St=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Tt=/^www.googleadservices.com$/;function Ut(a){a\|\|(a=Vt());return a.co?!1:a.dn\|\|a.fn\|\|a.jn\|\|a.gn\|\|a.qf\|\|a.Om\|\|a.hn\|\|a.Tm?!0:!1}function Vt(){var a={},b=Pr(!0);a.co=!!b._up;var c=et();a.dn=c.aw!==void 0;a.fn=c.dc!==void 0;a.jn=c.wbraid!==void 0;a.gn=c.gbraid!==void 0;a.hn=c.gclsrc==="aw.ds";a.qf=Et().qf;var d=A.referrer?bk(hk(A.referrer),"host"):"";a.Tm=St.test(d);a.Om=Tt.test(d);return a};var Wt=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: return f}kH.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),mH=["www.youtube.com","www.youtube-nocookie.com"],nH,oH=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: support.delfi.com
Source: global traffic	DNS traffic detected: DNS query: assets1.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets10.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets5.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: download.delfi.com
Source: global traffic	DNS traffic detected: DNS query: assets3.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: snlookupv2.delfi.com
Source: global traffic	DNS traffic detected: DNS query: rmasites.delfi.com
Source: global traffic	DNS traffic detected: DNS query: assets8.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets9.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets6.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: assets2.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: rmasites.delfi.comConnection: keep-aliveContent-Length: 1817sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"content-type: application/jsonsec-ch-ua-mobile: ?0Accept: */*Origin: https://rmasites.delfi.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://rmasites.delfi.com/rma-status/enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 09:25:42 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4511Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Wed, 26 Mar 2025 09:25:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WWAteIx1VUwW6IHWdQMXe%2BtsrAKFu%2FuNImIIFUSU4h06BJ%2FercKs2wUvk59CeuWOC2cr%2FdjnTSCnowq2iuVWof9YdNCwAS3HnSU8nDRsCTZP0lMy%2BdGZBx0pJnQibzCl09rLPRgS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}speculation-rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 92659a2d0cca2142-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=101837&min_rtt=100935&rtt_var=22650&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1145&delivery_rate=35933&cwnd=246&unsent_bytes=0&cid=fbe6232cd78bbfb6&ts=256&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 09:25:42 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4511Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Wed, 26 Mar 2025 09:25:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gkCU6Am0DhJP%2BO1NJenmCTFrDrFPCLQ3RgtHPJjxXSfSYf0MACoOkyokN8BBJATLfCPG3z11oiN5S6UgKXH5IRhXGNLKkbdLQ6ELlx%2B%2BA3yVgWrgj%2FYxuFxwFiCIPKl0x9zUVR%2FH"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}speculation-rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 92659a2d0e02423b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99146&min_rtt=98325&rtt_var=21978&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1165&delivery_rate=36949&cwnd=230&unsent_bytes=0&cid=e97a22577847f32a&ts=255&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 09:25:42 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4511Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Wed, 26 Mar 2025 09:25:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WgZX8NxzIzzaLVZo0oUvy2%2FRtLRsSiFdBPt7eBmbIOOxJRW1jx6tH8fWcoNXgdLcnbByJcP6u5X4mUmdjKQu%2BOeJLuioME8vyGKwcEfhmNvIJzRFoh79kDjRM4B7SNZp9e8eJ25E"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}speculation-rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 92659a2d0db47d00-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99582&min_rtt=98766&rtt_var=22075&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1170&delivery_rate=36773&cwnd=230&unsent_bytes=0&cid=921e2771fb30f92d&ts=260&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 09:25:42 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4511Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Wed, 26 Mar 2025 09:25:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h79xO19eokyD80cRHxPt4%2BTDg%2F0QZHYLMPsEK3xAOtglZZQutaBFCToT0Br6bKVyRikbNk2VpdYs2uDvRQoYVCpeOo0HSx7eEXaOEiurpo0LHhGaUnCMPsBfeEkUDYcvevR%2B5Q%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}speculation-rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 92659a2d5d04c351-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=102595&min_rtt=101417&rtt_var=23166&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1152&delivery_rate=35483&cwnd=233&unsent_bytes=0&cid=ccff846e71c7b9f4&ts=260&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 09:25:42 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4511Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Wed, 26 Mar 2025 09:25:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vKWfbmelfCkTWFkmrG06yfrAiAnoLcaaqyTLkA07t7HFSxOwQ34znagkzahBZgMzzbzV9odjYXS4SkVob7nyIKwJyHm%2Fk5KfCuMFb1jBguMXzl%2FgB27rd1EsUe0NnsOQomXDJA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}speculation-rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 92659a2e8f994240-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=100746&min_rtt=100000&rtt_var=22231&sent=6&recv=8&lost=0&retrans=1&sent_bytes=2818&recv_bytes=1170&delivery_rate=36384&cwnd=252&unsent_bytes=0&cid=deb064cbedd08bbf&ts=262&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 09:25:43 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4511Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Wed, 26 Mar 2025 09:25:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qq2U2i%2Be2RrgkVfVsF5bwGdMCkmjKl9olmN9Sywsl2Sg5KtmvBLnQP34VngxxpwlqTauWkc2O2eRt3K%2BbQ23Rs5Y6EgGmFmNCo7YEjMRU7psH1D6ksKLMuYxVtD%2FAHimfl87Vw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}speculation-rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 92659a310c6142e2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=98036&min_rtt=97000&rtt_var=27849&sent=9&recv=8&lost=0&retrans=3&sent_bytes=5636&recv_bytes=1251&delivery_rate=12704&cwnd=233&unsent_bytes=0&cid=6ca10b42f2b9dc34&ts=854&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 09:25:43 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4511Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Wed, 26 Mar 2025 09:25:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n9HILhRzfxHvPS0FrlpGhMLielvvOePY%2FdmkhZ381QzADe%2BEXJq0c5MKBLM6hRfa0KE7%2FC7YBoQ2ubLDNdi5nYxzFk5t%2BkQQXrJSEOQZvxu04A974zMIM%2Fv5iOQNSobv0kddZA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}speculation-rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 92659a319c97c451-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99268&min_rtt=97470&rtt_var=23266&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1269&delivery_rate=36196&cwnd=231&unsent_bytes=0&cid=6b7f9fa7148c38ca&ts=255&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETX-Robots-Tag: noindex, nofollowDate: Wed, 26 Mar 2025 09:25:43 GMTConnection: closeContent-Length: 1245
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 09:25:43 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4511Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Wed, 26 Mar 2025 09:25:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dTH7%2BXrBNZag3CmFqyHQ9RNXY81GfZiBmzS4MQRxWjcp5SYGUvO5o0M%2FiSUwmYsjHmOIldGU0lygyp8zlP%2BdyiGWH7kSHXKyDcoZry9G%2Fd9kTu%2FJAB7jdy7IjSoIvIV%2B8T59Hg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}speculation-rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 92659a325d369d36-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=101682&min_rtt=100821&rtt_var=22158&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1175&delivery_rate=36945&cwnd=228&unsent_bytes=0&cid=080f9207011fade4&ts=258&x=0"

Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: http://download.delfi.com/download/TeamViewer/TeamViewerLogoTP.png
Source: chromecache_155.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_143.2.dr	String found in binary or memory: http://webfx.eae.net/)
Source: chromecache_159.2.dr	String found in binary or memory: http://www.breecesystem.com/EN/
Source: chromecache_182.2.dr	String found in binary or memory: http://www.delfi.com/dk/showpage.asp?pdid=48
Source: chromecache_135.2.dr	String found in binary or memory: http://www.delfi.dk/)
Source: chromecache_155.2.dr	String found in binary or memory: http://www.dynamicdrive.com
Source: chromecache_155.2.dr	String found in binary or memory: http://www.dynamicdrive.com/dynamicindex1/dropmenuindex.htm
Source: chromecache_175.2.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_153.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_157.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_172.2.dr	String found in binary or memory: https://assets1.freshdesk.com/assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb828
Source: chromecache_112.2.dr	String found in binary or memory: https://assets1.freshdesk.com/assets/cdn/portal_utils-fe7ee1254a5d27e7550ccf8875cbd6276c5da04436e7f6
Source: chromecache_172.2.dr	String found in binary or memory: https://assets1.freshdesk.com/assets/misc/spacer.gif
Source: chromecache_172.2.dr	String found in binary or memory: https://assets10.freshdesk.com/assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba
Source: chromecache_112.2.dr	String found in binary or memory: https://assets10.freshdesk.com/assets/cdn/portal_head_v2-c1e8ae994d3f8763b4a3d180ba8cdccb905bbc2e7f7
Source: chromecache_172.2.dr	String found in binary or memory: https://assets10.freshdesk.com/assets/cdn/portal_utils-fe7ee1254a5d27e7550ccf8875cbd6276c5da04436e7f
Source: chromecache_172.2.dr	String found in binary or memory: https://assets10.freshdesk.com/assets/misc/profile_blank_medium-1dfbfbae68bb67de0258044a99f62e94144f
Source: chromecache_112.2.dr	String found in binary or memory: https://assets10.freshdesk.com/assets/misc/spacer.gif
Source: chromecache_172.2.dr	String found in binary or memory: https://assets2.freshdesk.com/assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce1315085
Source: chromecache_172.2.dr	String found in binary or memory: https://assets3.freshdesk.com/assets/cdn/lookup_field-fbaae59ac52f80ac49090db27333b303849342f4c1f4fd
Source: chromecache_112.2.dr	String found in binary or memory: https://assets3.freshdesk.com/assets/cdn/portal_bottom-b13f0ef6352d3ae3936782ceb4fed0eaa1daf148bfc77
Source: chromecache_112.2.dr	String found in binary or memory: https://assets4.freshdesk.com/assets/misc/profile_blank_thumb-4a7b26415585aebbd79863bd5497100b1ea52b
Source: chromecache_172.2.dr	String found in binary or memory: https://assets5.freshdesk.com/assets/cdn/portal_bottom-b13f0ef6352d3ae3936782ceb4fed0eaa1daf148bfc77
Source: chromecache_112.2.dr	String found in binary or memory: https://assets5.freshdesk.com/assets/cdn/prism-733177846dd200c6e56035b34e8d52c5352eedcc6dc73f2dcc44a
Source: chromecache_112.2.dr	String found in binary or memory: https://assets6.freshdesk.com/assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce1315085
Source: chromecache_112.2.dr	String found in binary or memory: https://assets7.freshdesk.com/assets/misc/profile_blank_medium-1dfbfbae68bb67de0258044a99f62e94144f1
Source: chromecache_172.2.dr	String found in binary or memory: https://assets7.freshdesk.com/assets/misc/profile_blank_thumb-4a7b26415585aebbd79863bd5497100b1ea52b
Source: chromecache_112.2.dr	String found in binary or memory: https://assets8.freshdesk.com/assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba7
Source: chromecache_172.2.dr	String found in binary or memory: https://assets8.freshdesk.com/assets/cdn/portal_head_v2-c1e8ae994d3f8763b4a3d180ba8cdccb905bbc2e7f73
Source: chromecache_112.2.dr	String found in binary or memory: https://assets8.freshdesk.com/assets/cdn/redactor-10a54c9b6ce9a442c8a2e6a131947e0d106a4af7c5b9836049
Source: chromecache_112.2.dr	String found in binary or memory: https://assets9.freshdesk.com/assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb828
Source: chromecache_172.2.dr	String found in binary or memory: https://assets9.freshdesk.com/assets/cdn/prism-733177846dd200c6e56035b34e8d52c5352eedcc6dc73f2dcc44a
Source: chromecache_172.2.dr	String found in binary or memory: https://assets9.freshdesk.com/assets/cdn/redactor-10a54c9b6ce9a442c8a2e6a131947e0d106a4af7c5b9836049
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_112.2.dr	String found in binary or memory: https://download.delfi.com/EN
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://download.delfi.com/download/TeamViewer/TeamViewerQS-v15.35.5.exe
Source: chromecache_112.2.dr	String found in binary or memory: https://download.delfi.com/download/freshdesk/blank.png
Source: chromecache_112.2.dr	String found in binary or memory: https://download.delfi.com/download/freshdesk/clock.png
Source: chromecache_112.2.dr	String found in binary or memory: https://download.delfi.com/en/default.asp?dir=
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuHMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuXMRw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDubMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDujMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDunMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDurMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuvMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuHMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuXMRw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDubMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDujMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDunMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDurMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuvMR6WR.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Qb2V6As.wo
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Rb2V.woff2
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Rr2V6As.wo
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8S72V6As.wo
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8SL2V6As.wo
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Sb2V6As.wo
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Sr2V6As.wo
Source: chromecache_112.2.dr	String found in binary or memory: https://outlook.office365.com/owa/calendar/ISPSupport
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_119.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_112.2.dr	String found in binary or memory: https://rmasites.delfi.com/rma-form/en
Source: chromecache_112.2.dr	String found in binary or memory: https://rmasites.delfi.com/rma-status/en
Source: chromecache_112.2.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/6001136066/logo/3tmH
Source: chromecache_112.2.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/6001136274/fav_icon/
Source: chromecache_112.2.dr	String found in binary or memory: https://snlookupv2.delfi.com/en
Source: chromecache_175.2.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_175.2.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_140.2.dr, chromecache_113.2.dr, chromecache_131.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_153.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_153.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_157.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_175.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_172.2.dr	String found in binary or memory: https://support.delfi.com/en/support/home
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://support.delfi.com/en/support/home?site=ActivationKey
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://support.delfi.com/en/support/home?site=Bookings
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://support.delfi.com/en/support/home?site=Download
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://support.delfi.com/en/support/home?site=RepairFormular
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://support.delfi.com/en/support/home?site=RepairStatus
Source: chromecache_112.2.dr	String found in binary or memory: https://support.delfi.com/en/support/solutions
Source: chromecache_172.2.dr	String found in binary or memory: https://support.delfi.com/en/support/tickets/new
Source: chromecache_119.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_157.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://vault-service.freshworks.com/data
Source: chromecache_156.2.dr, chromecache_125.2.dr, chromecache_146.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_178.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_157.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_157.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_157.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_175.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_178.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_157.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_175.2.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: chromecache_113.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6LekBq0pAAAAAJFeFK14IJXk60_w-iFY6bCA1yZn
Source: chromecache_185.2.dr, chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_178.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_157.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_172.2.dr, chromecache_112.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-86553024-1
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__.
Source: chromecache_185.2.dr, chromecache_154.2.dr, chromecache_123.2.dr, chromecache_158.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/bUO1BXI8H9PgjAPSW9hwuSeI/recaptcha__en.js
Source: chromecache_153.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_172.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise.js
Source: chromecache_123.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/
Source: chromecache_172.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/fallback?k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ
Source: chromecache_153.2.dr, chromecache_178.2.dr	String found in binary or memory: https://www.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.40.100:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.147:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 16.182.33.72:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.115.43.70:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.217.163.192:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.2.158:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.96.239.178:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.115.43.70:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.196:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.158:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.143.5:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.99:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49873 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2752_1440866322

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2752_1440866322

Jump to behavior

Source: classification engine

Classification label: mal56.win@25/156@68/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2076,i,6030319996926901576,181120289397406770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2104 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://support.delfi.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2076,i,6030319996926901576,181120289397406770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2104 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://support.delfi.com	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/6001136066/logo/3tmH	0%	Avira URL Cloud	safe
https://support.delfi.com/en/support/home?site=RepairStatus	100%	Avira URL Cloud	phishing
https://snlookupv2.delfi.com/cdn-cgi/rum?	0%	Avira URL Cloud	safe
https://rmasites.delfi.com/cdn-cgi/rum?	0%	Avira URL Cloud	safe
https://download.delfi.com/_js/xmenu.js	0%	Avira URL Cloud	safe
https://download.delfi.com/_css/anylinkmenu.css	0%	Avira URL Cloud	safe
https://download.delfi.com/_js/tree.asp?Language=1	0%	Avira URL Cloud	safe
http://www.delfi.com/dk/showpage.asp?pdid=48	0%	Avira URL Cloud	safe
https://snlookupv2.delfi.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.5436288692727906:1742977527:nf5zXXOsCF0v085P3H1I6LlkS0QzDSEEehY4tzzmMmk/92659a27e97f8c3b	0%	Avira URL Cloud	safe
https://vault-service.freshworks.com/data	0%	Avira URL Cloud	safe
https://download.delfi.com/download/freshdesk/clock.png	0%	Avira URL Cloud	safe
https://support.delfi.com/en/support/home?site=Download	100%	Avira URL Cloud	phishing
https://download.delfi.com/_js/dk_functions.js	0%	Avira URL Cloud	safe
https://support.delfi.com/en/support/solutions	100%	Avira URL Cloud	phishing
http://www.breecesystem.com/EN/	0%	Avira URL Cloud	safe
https://download.delfi.com/_css/xtree.css	0%	Avira URL Cloud	safe
https://download.delfi.com/_css/layout.css	0%	Avira URL Cloud	safe
https://download.delfi.com/download/freshdesk/blank.png	0%	Avira URL Cloud	safe
https://rmasites.delfi.com/rma-status/en	100%	Avira URL Cloud	phishing
https://download.delfi.com/_js/querystring.js	0%	Avira URL Cloud	safe
https://rmasites.delfi.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?	0%	Avira URL Cloud	safe
https://rmasites.delfi.com/rma-form/en	0%	Avira URL Cloud	safe
https://download.delfi.com/_css/printer.css	0%	Avira URL Cloud	safe
https://download.delfi.com/EN/	0%	Avira URL Cloud	safe
http://webfx.eae.net/)	0%	Avira URL Cloud	safe
https://rmasites.delfi.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	0%	Avira URL Cloud	safe
https://download.delfi.com/en/default.asp?dir=	0%	Avira URL Cloud	safe
https://rmasites.delfi.com/assets/index-5c915a8f.css	0%	Avira URL Cloud	safe
https://download.delfi.com/_js/xtree.js	0%	Avira URL Cloud	safe
https://support.delfi.com/en/support/home?site=Bookings	100%	Avira URL Cloud	phishing
https://download.delfi.com/_css/xmenu.css	0%	Avira URL Cloud	safe
https://support.delfi.com/	100%	Avira URL Cloud	phishing
https://snlookupv2.delfi.com/assets/index-1225edac.css	0%	Avira URL Cloud	safe
https://rmasites.delfi.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.18777480660122145:1742977525:mEJn15u2WBc60DTmVqNyqjua1T79VKq7bysXiJeCE_Y/92659a2d4d8188c3	0%	Avira URL Cloud	safe
https://download.delfi.com/_js/anylinkmenu.js	0%	Avira URL Cloud	safe
http://download.delfi.com/download/TeamViewer/TeamViewerLogoTP.png	0%	Avira URL Cloud	safe
https://download.delfi.com/_js/en_menucontents.js	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/6001136274/fav_icon/	0%	Avira URL Cloud	safe
https://download.delfi.com/EN	0%	Avira URL Cloud	safe
https://download.delfi.com/_img/ext/folder.gif	0%	Avira URL Cloud	safe
https://snlookupv2.delfi.com/cdn-cgi/speculation	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
assets5.freshdesk.com	13.33.143.5	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
rmasites.delfi.com	104.26.3.158	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	high
assets6.freshdesk.com	13.33.143.5	true	false	high
beacons-handoff.gcp.gvt2.com	142.251.186.94	true	false	high
www.recaptcha.net	142.251.40.99	true	false	high
download.delfi.com	152.115.43.70	true	false	unknown
assets1.freshdesk.com	13.33.143.5	true	false	high
assets9.freshdesk.com	13.33.143.5	true	false	high
assets8.freshdesk.com	13.33.143.5	true	false	high
ooc-g2.tm-4.office.com	52.96.239.178	true	false	high
s3.amazonaws.com	16.182.33.72	true	false	high
assets3.freshdesk.com	13.33.143.5	true	false	high
assets10.freshdesk.com	13.33.143.5	true	false	high
assets2.freshdesk.com	13.33.143.5	true	false	high
www.google.com	142.251.40.100	true	false	high
snlookupv2.delfi.com	104.26.2.158	true	false	unknown
elb21.freshdesk.com	172.66.0.145	true	false	unknown
beacons.gcp.gvt2.com	unknown	unknown	false	high
outlook.office365.com	unknown	unknown	false	high
support.delfi.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://snlookupv2.delfi.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.5436288692727906:1742977527:nf5zXXOsCF0v085P3H1I6LlkS0QzDSEEehY4tzzmMmk/92659a27e97f8c3b	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js?render=6LekBq0pAAAAAJFeFK14IJXk60_w-iFY6bCA1yZn	false		high
https://assets9.freshdesk.com/assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb82858862f30e630a2a10c2a.js	false		high
https://a.nel.cloudflare.com/report/v4?s=WWAteIx1VUwW6IHWdQMXe%2BtsrAKFu%2FuNImIIFUSU4h06BJ%2FercKs2wUvk59CeuWOC2cr%2FdjnTSCnowq2iuVWof9YdNCwAS3HnSU8nDRsCTZP0lMy%2BdGZBx0pJnQibzCl09rLPRgS	false		high
https://snlookupv2.delfi.com/cdn-cgi/rum?	false	Avira URL Cloud: safe	unknown
https://support.delfi.com/en/support/tickets/new	false		unknown
https://assets3.freshdesk.com/assets/cdn/portal_bottom-b13f0ef6352d3ae3936782ceb4fed0eaa1daf148bfc7776df3256680ae6aa1b6.js	false		high
https://a.nel.cloudflare.com/report/v4?s=e2E9Njez4d5GNBs1ZY6S4q78U4hZSKHho%2BcN5tAUpjv%2BADVVa5DNlMk8c1YCYtlwHG85S73%2Bz6ZAz0lYdJ45B892N67%2B5ansD4jDZ2Quq%2BGVeZn847e4fHP4nExWxwxwHHCgVg%3D%3D	false		high
https://download.delfi.com/_js/xmenu.js	false	Avira URL Cloud: safe	unknown
https://www.recaptcha.net/recaptcha/enterprise.js	false		high
https://rmasites.delfi.com/cdn-cgi/rum?	false	Avira URL Cloud: safe	unknown
https://assets10.freshdesk.com/assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba7ef13f18c8d691.js	false		high
https://download.delfi.com/_css/anylinkmenu.css	false	Avira URL Cloud: safe	unknown
https://download.delfi.com/_js/tree.asp?Language=1	false	Avira URL Cloud: safe	unknown
https://assets8.freshdesk.com/assets/cdn/portal_head_v2-c1e8ae994d3f8763b4a3d180ba8cdccb905bbc2e7f73c03db2dd182e08bbc9de.js	false		high
https://download.delfi.com/_css/layout.css	false	Avira URL Cloud: safe	unknown
https://assets6.freshdesk.com/assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce13150854024baaf983b3f4326.css	false		high
https://download.delfi.com/_js/dk_functions.js	false	Avira URL Cloud: safe	unknown
https://outlook.office365.com/owa/calendar/ISPSupport@delfi.com/bookings/	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=bUO1BXI8H9PgjAPSW9hwuSeI	false		high
https://support.delfi.com/en/support/home	false		unknown
https://download.delfi.com/_css/xtree.css	false	Avira URL Cloud: safe	unknown
https://rmasites.delfi.com/rma-status/en	false	Avira URL Cloud: phishing	unknown
https://assets10.freshdesk.com/assets/cdn/portal_utils-fe7ee1254a5d27e7550ccf8875cbd6276c5da04436e7f6ea0120b8d6d70e3133.css	false		high
https://download.delfi.com/_js/querystring.js	false	Avira URL Cloud: safe	unknown
https://download.delfi.com/_css/printer.css	false	Avira URL Cloud: safe	unknown
https://rmasites.delfi.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?	false	Avira URL Cloud: safe	unknown
https://rmasites.delfi.com/rma-form/en	false	Avira URL Cloud: safe	unknown
https://rmasites.delfi.com/assets/index-5c915a8f.css	false	Avira URL Cloud: safe	unknown
https://download.delfi.com/EN/	false	Avira URL Cloud: safe	unknown
https://rmasites.delfi.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: safe	unknown
https://assets9.freshdesk.com/assets/cdn/prism-733177846dd200c6e56035b34e8d52c5352eedcc6dc73f2dcc44a74ecd560ee2.js	false		high
https://download.delfi.com/_js/xtree.js	false	Avira URL Cloud: safe	unknown
https://snlookupv2.delfi.com/assets/index-1225edac.css	false	Avira URL Cloud: safe	unknown
https://support.delfi.com/	false	Avira URL Cloud: phishing	unknown
https://download.delfi.com/_js/anylinkmenu.js	false	Avira URL Cloud: safe	unknown
https://download.delfi.com/_css/xmenu.css	false	Avira URL Cloud: safe	unknown
https://assets8.freshdesk.com/assets/cdn/redactor-10a54c9b6ce9a442c8a2e6a131947e0d106a4af7c5b98360494520fc5245be28.js	false		high
https://rmasites.delfi.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.18777480660122145:1742977525:mEJn15u2WBc60DTmVqNyqjua1T79VKq7bysXiJeCE_Y/92659a2d4d8188c3	false	Avira URL Cloud: safe	unknown
https://download.delfi.com/EN	false	Avira URL Cloud: safe	unknown
https://assets1.freshdesk.com/assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb82858862f30e630a2a10c2a.js	false		high
https://download.delfi.com/_js/en_menucontents.js	false	Avira URL Cloud: safe	unknown
https://download.delfi.com/_img/ext/folder.gif	false	Avira URL Cloud: safe	unknown
https://snlookupv2.delfi.com/cdn-cgi/speculation	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=3Rxg6KUByKLZOSTr%2B4%2FAUzniIS24kojh5YbHmgb3Zj8iMj7CAyVTGolE4YnU%2F0Bv0tUTjuC3OZBeHuD2bN7diqhkkaSi3RgmMhTJRv41KSwPBlfwmkaNsJ7b8mj3X1OzmyZx6Q%3D%3D	false		high
https://assets3.freshdesk.com/assets/cdn/lookup_field-fbaae59ac52f80ac49090db27333b303849342f4c1f4fd8495c6f6a3f1a48e9d.js	false		high
https://assets9.freshdesk.com/assets/cdn-ignored/sprites/portal/dynamic-icon-s85b95186ce-e274bd42cd0ad6ac0c46c7e2bfa705d4b97c6bd0b9c736e0da2d31ffca7d3a09.png	false		high
https://assets2.freshdesk.com/assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce13150854024baaf983b3f4326.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_153.2.dr	false		high
https://support.delfi.com/en/support/home?site=RepairStatus	chromecache_172.2.dr, chromecache_112.2.dr	false	Avira URL Cloud: phishing	unknown
https://assets1.freshdesk.com/assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb828	chromecache_172.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	false		high
http://www.delfi.com/dk/showpage.asp?pdid=48	chromecache_182.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error	chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	false		high
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/6001136066/logo/3tmH	chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_157.2.dr	false		high
https://assets9.freshdesk.com/assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb828	chromecache_112.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	false		high
https://assets10.freshdesk.com/assets/misc/spacer.gif	chromecache_112.2.dr	false		high
https://www.youtube.com	chromecache_153.2.dr, chromecache_178.2.dr	false		high
https://www.google.com	chromecache_178.2.dr	false		high
https://vault-service.freshworks.com/data	chromecache_172.2.dr, chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://assets10.freshdesk.com/assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba	chromecache_172.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	false		high
https://assets1.freshdesk.com/assets/cdn/portal_utils-fe7ee1254a5d27e7550ccf8875cbd6276c5da04436e7f6	chromecache_112.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_157.2.dr	false		high
https://support.google.com/recaptcha	chromecache_119.2.dr	false		high
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error	chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	false		high
https://assets3.freshdesk.com/assets/cdn/portal_bottom-b13f0ef6352d3ae3936782ceb4fed0eaa1daf148bfc77	chromecache_112.2.dr	false		high
https://assets7.freshdesk.com/assets/misc/profile_blank_medium-1dfbfbae68bb67de0258044a99f62e94144f1	chromecache_112.2.dr	false		high
http://www.breecesystem.com/EN/	chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://support.delfi.com/en/support/home?site=Download	chromecache_172.2.dr, chromecache_112.2.dr	false	Avira URL Cloud: phishing	unknown
https://assets8.freshdesk.com/assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba7	chromecache_112.2.dr	false		high
https://download.delfi.com/download/freshdesk/blank.png	chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://download.delfi.com/download/freshdesk/clock.png	chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_153.2.dr, chromecache_178.2.dr	false		high
https://www.cloudflare.com/5xx-error-landing	chromecache_156.2.dr, chromecache_125.2.dr, chromecache_146.2.dr	false		high
https://assets10.freshdesk.com/assets/cdn/portal_head_v2-c1e8ae994d3f8763b4a3d180ba8cdccb905bbc2e7f7	chromecache_112.2.dr	false		high
https://support.delfi.com/en/support/solutions	chromecache_112.2.dr	false	Avira URL Cloud: phishing	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_119.2.dr	false		high
https://stats.g.doubleclick.net/j/collect?	chromecache_175.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_157.2.dr	false		high
https://download.delfi.com/en/default.asp?dir=	chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_153.2.dr	false		high
http://webfx.eae.net/)	chromecache_143.2.dr	false	Avira URL Cloud: safe	unknown
https://assets10.freshdesk.com/assets/cdn/portal_utils-fe7ee1254a5d27e7550ccf8875cbd6276c5da04436e7f	chromecache_172.2.dr	false		high
https://support.delfi.com/en/support/home?site=Bookings	chromecache_172.2.dr, chromecache_112.2.dr	false	Avira URL Cloud: phishing	unknown
https://assets3.freshdesk.com/assets/cdn/lookup_field-fbaae59ac52f80ac49090db27333b303849342f4c1f4fd	chromecache_172.2.dr	false		high
https://assets9.freshdesk.com/assets/cdn/prism-733177846dd200c6e56035b34e8d52c5352eedcc6dc73f2dcc44a	chromecache_172.2.dr	false		high
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/6001136274/fav_icon/	chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://assets6.freshdesk.com/assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce1315085	chromecache_112.2.dr	false		high
https://www.recaptcha.net/recaptcha/enterprise/fallback?k=6LdvejUUAAAAAEn6wjOFcPVRyQr4KtAJ03ltA1SQ	chromecache_172.2.dr	false		high
https://assets5.freshdesk.com/assets/cdn/prism-733177846dd200c6e56035b34e8d52c5352eedcc6dc73f2dcc44a	chromecache_112.2.dr	false		high
https://cloud.google.com/contact	chromecache_109.2.dr, chromecache_145.2.dr, chromecache_119.2.dr	false		high
http://download.delfi.com/download/TeamViewer/TeamViewerLogoTP.png	chromecache_172.2.dr, chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences?	chromecache_175.2.dr	false		high
https://assets2.freshdesk.com/assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce1315085	chromecache_172.2.dr	false		high
https://assets4.freshdesk.com/assets/misc/profile_blank_thumb-4a7b26415585aebbd79863bd5497100b1ea52b	chromecache_112.2.dr	false		high
https://www.google.com/analytics/web/inpage/pub/inpage.js?	chromecache_175.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.33.143.5	assets5.freshdesk.com	United States	16509	AMAZON-02US	false
52.217.163.192	unknown	United States	16509	AMAZON-02US	false
104.26.3.158	rmasites.delfi.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.196	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
142.250.65.196	unknown	United States	15169	GOOGLEUS	false
162.159.140.147	unknown	United States	13335	CLOUDFLARENETUS	false
152.115.43.70	download.delfi.com	Denmark	31027	GLOBALCONNECT-ASDK	false
142.251.40.100	www.google.com	United States	15169	GOOGLEUS	false
16.182.33.72	s3.amazonaws.com	United States	unknown	unknown	false
142.251.40.99	www.recaptcha.net	United States	15169	GOOGLEUS	false
172.66.0.145	elb21.freshdesk.com	United States	13335	CLOUDFLARENETUS	false
52.96.239.178	ooc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.26.2.158	snlookupv2.delfi.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648917
Start date and time:	2025-03-26 10:24:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://support.delfi.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@25/156@68/16

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.206, 142.251.179.84, 142.250.80.78, 142.250.65.227, 142.250.65.238, 142.250.81.238, 142.250.80.106, 142.250.65.163, 142.250.65.200, 142.250.80.46, 142.250.65.195, 142.250.65.234, 142.250.80.42, 142.250.80.74, 142.251.40.138, 142.251.35.170, 142.251.40.106, 142.251.40.170, 142.251.32.106, 142.250.176.202, 142.251.40.234, 142.250.65.170, 142.250.65.202, 142.250.81.234, 142.251.40.202, 142.251.41.10, 142.250.72.110, 142.251.35.163, 142.250.80.72, 142.250.65.168, 142.251.41.14, 142.251.32.110, 142.251.40.174, 142.251.40.110, 142.250.72.99, 34.104.35.123, 142.251.40.142, 23.204.23.20, 204.79.197.222, 52.149.20.212
Excluded domains from analysis (whitelisted): fp.msedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, ssl.google-analytics.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://support.delfi.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Mon Dec 12 03:44:03 2022, max compression, from Unix, original size modulo 2^32 7152
Category:	downloaded
Size (bytes):	1933
Entropy (8bit):	7.891884409787358
Encrypted:	false
SSDEEP:	48:XmxKcOT/ZzAFcJhavHtzAO7vAEPs7DQZfHHmcR1:V9AGJ4zAOzhADQx1
MD5:	3FE6B912439FAF4F6C5EE07FF731E0D4
SHA1:	2AC8B308CBF2C3E5B6B43B085FE2544A32180F10
SHA-256:	91E98C8C91626FADB04AC12DCC62BE1F01393644C3D181A7EAF5376B490AB7B5
SHA-512:	7FBAB47499D04F705FB9B78DD31DA9137C21EE0D2A62E54DB716802477006BF86B1FCE7FEB876AED8703C4C400DA4FBFE6FF0D3754AE33D4BFAA4A275385F532
Malicious:	false
Reputation:	low
URL:	https://assets8.freshdesk.com/assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba7ef13f18c8d691.js
Preview:	.......c...Xmo.8..+<~X$..$./...8mz...n.C...D[...({}^....P..8M.x._..p8o\|fHi4.u.......;.Z2;].&M\|.qp}...d......8j.Z.S.....#.7b..../.%{...<...........d..7.F.N.1......7.Z....>..H.}/s.V?.{a.........>.p,...q.:.X'5.b..Yo.7.............o....u.!8...L.'.. 2...E"\|p..@V.2.5,.Q...z...T..M.O.&......2b\f4.E.J..3....Fp..Sp..O...L$...+....;......,..........k.pM`(.\|..x..Z.rR.Y..!.3.`W....j..K...=r.U18.zV..n...8....8..p.s.+.[..@xY.{"......h....)......\|..&y.....[Gq/..J..QD..$..]..~&..U..Cv'..j..?@x.O.B%.J....`.@.W.x.E.P..g.t(1.XE#........$9...!.\|....Q..8...F.F....F..q#.O.4.)...3.3.C..5.q.....C@.....Us.L.....^.F..>.D..\|....LE..F..k6.k....B.PT1Vs.].......Nd..T.....B...y.......D.#....._~.wK..oD.\|.......o"a.D....'.}y...R.yk5q.<h...:c....X"..e......."L`?..5..{.-.4...p.4...Ua.5$.X.<......wE....$.Rh...9...:......X.1r?.h.^........rb$....oB......2$.a...a.>.&.d.i.,.A.Fv......Y.R...]}.;bP..;.e.=.K.......H>.+...}..5V?*$e..4....k..uv.]e..5v.]..fR>.9..;....:U}.Eo...\|.U.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2025 10:25:33.092957973 CET	53	52249	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:33.108753920 CET	53	61739	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:33.702433109 CET	53	60797	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:33.838253975 CET	53	57532	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:35.247525930 CET	52813	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:35.248066902 CET	52145	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:35.356062889 CET	53	52145	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:36.270059109 CET	57083	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:36.372476101 CET	53	57083	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:38.201069117 CET	63318	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:38.201241016 CET	62441	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:38.267353058 CET	63435	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:38.267838955 CET	64942	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:38.308656931 CET	53	63318	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:38.312293053 CET	53	62441	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:38.377934933 CET	53	64942	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:38.418107033 CET	53	63435	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.176394939 CET	53132	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.176841974 CET	60918	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.178422928 CET	62933	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.178584099 CET	61953	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.178987980 CET	62283	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.179156065 CET	58912	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.179599047 CET	51740	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.179775000 CET	64886	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.180495024 CET	57867	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.180675983 CET	53492	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.277019024 CET	53	64886	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.277400970 CET	53	55360	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.277421951 CET	53	60918	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.279191971 CET	53	51740	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.279211044 CET	53	58912	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.280221939 CET	53	61953	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.283802032 CET	53	53132	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.286250114 CET	53	62283	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.286433935 CET	53	53492	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.286453009 CET	53	62933	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.290225983 CET	53	57867	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.709361076 CET	53519	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.710197926 CET	59922	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.712749958 CET	50398	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.712749958 CET	52903	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:40.812695026 CET	53	59922	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.814091921 CET	53	52903	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.814109087 CET	53	50398	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:40.820308924 CET	53	53519	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.159652948 CET	59680	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.167423010 CET	59740	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.168049097 CET	49774	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.168364048 CET	56901	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.169047117 CET	50551	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.169307947 CET	50007	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.170185089 CET	53743	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.170772076 CET	64088	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.171643019 CET	55620	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.171844006 CET	60959	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.173363924 CET	56823	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.173607111 CET	49892	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:41.268481970 CET	53	59105	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.270685911 CET	53	49892	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.270734072 CET	53	56823	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.270744085 CET	53	50007	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.270911932 CET	53	64088	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.271660089 CET	53	60959	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.274152040 CET	53	56901	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.276091099 CET	53	50551	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.278124094 CET	53	55620	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.279021025 CET	53	53743	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.283699989 CET	53	59680	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.293639898 CET	53	59740	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:41.315617085 CET	53	49774	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.080523014 CET	55088	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.080828905 CET	50532	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.160068989 CET	62685	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.160219908 CET	62677	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.182801962 CET	53	55088	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.184403896 CET	53	50532	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.227108002 CET	56285	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.227296114 CET	61878	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.259150028 CET	53	62685	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.259439945 CET	53	62677	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.326354027 CET	53	56285	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.327668905 CET	53	61878	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.385633945 CET	53	58102	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.408992052 CET	52979	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.409216881 CET	63256	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.510632992 CET	53	63256	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.517185926 CET	53	52979	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.615593910 CET	57831	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.615946054 CET	62710	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:42.713247061 CET	53	57831	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.713565111 CET	53	62710	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:42.848047972 CET	53	51941	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:44.479226112 CET	50680	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:44.479593992 CET	64704	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:44.580214024 CET	53	50680	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:44.583837032 CET	53	64704	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:44.656512022 CET	53	64668	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:44.686824083 CET	53	58926	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:44.973005056 CET	63186	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:44.973588943 CET	54214	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:45.080044031 CET	53	63186	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:45.082369089 CET	53	54214	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:45.199160099 CET	53	65054	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:45.298439980 CET	53	56467	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:46.987168074 CET	65085	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:46.988282919 CET	61461	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:25:47.090838909 CET	53	65085	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:47.090867996 CET	53	61461	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:47.427092075 CET	53	51110	1.1.1.1	192.168.2.4
Mar 26, 2025 10:25:51.073261976 CET	53	58382	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:09.885879993 CET	53	60439	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:15.177201033 CET	56552	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:15.177433014 CET	59326	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:15.177906990 CET	63239	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:15.178086042 CET	61230	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:15.275990963 CET	53	59326	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:15.276305914 CET	53	56552	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:15.276843071 CET	53	61230	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:15.287662983 CET	53	63239	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:15.856092930 CET	56015	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:15.856457949 CET	52854	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:15.953864098 CET	53	56015	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:15.954660892 CET	53	52854	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:17.920686960 CET	53	58068	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:24.706737041 CET	57709	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:24.707454920 CET	65173	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:24.803582907 CET	53	57709	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:24.806148052 CET	53	65173	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:32.386487961 CET	53	57623	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:32.781450987 CET	53	52992	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:33.448024988 CET	53	54433	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:35.307198048 CET	138	138	192.168.2.4	192.168.2.255
Mar 26, 2025 10:26:41.042815924 CET	52976	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:41.042815924 CET	62132	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:41.142831087 CET	53	52976	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:41.143367052 CET	53	62132	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:42.067518950 CET	52152	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:42.067632914 CET	54573	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:42.164771080 CET	53	52152	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:42.166760921 CET	53	54573	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:42.634529114 CET	63865	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:42.635066032 CET	63619	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:42.732060909 CET	53	63865	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:42.732213020 CET	53	63619	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:44.099220991 CET	52926	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:44.201191902 CET	53	52926	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:45.103791952 CET	52926	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:45.202313900 CET	53	52926	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:46.098717928 CET	52926	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:46.197652102 CET	53	52926	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:48.106223106 CET	52926	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:48.204133034 CET	53	52926	1.1.1.1	192.168.2.4
Mar 26, 2025 10:26:52.113235950 CET	52926	53	192.168.2.4	1.1.1.1
Mar 26, 2025 10:26:52.209846973 CET	53	52926	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:38 UTC	667	OUT	GET / HTTP/1.1 Host: support.delfi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:38 UTC	514	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 09:25:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://support.delfi.com/support/home status: 302 Found Cache-Control: no-cache, no-store, max-age=0, must-revalidate strict-transport-security: max-age=31536000; includeSubDomains; preload pragma: no-cache x-xss-protection: 1; mode=block x-request-id: 5a3eb248-9d52-4d66-8ac3-9a70e607ff90 x-frame-options: SAMEORIGIN x-content-type-options: nosniff
2025-03-26 09:25:38 UTC	5872	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 2a 2e 66 72 65 73 68 63 6f 6e 6e 65 63 74 2e 69 6f 2f 20 2a 2e 66 72 65 73 68 73 61 6c 65 73 2e 69 6f 2f 20 2a 2e 66 72 65 73 68 77 6f 72 6b 73 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 77 6f 72 6b 73 61 70 69 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2d 65 75 63 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2d 69 6e 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 Data Ascii: content-security-policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ *.freshd
2025-03-26 09:25:38 UTC	110	IN	Data Raw: 36 38 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 65 6c 66 69 2e 63 6f 6d 2f 73 75 70 70 6f 72 74 2f 68 6f 6d 65 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 68<html><body>You are being <a href="https://support.delfi.com/support/home">redirected</a>.</body></html>
2025-03-26 09:25:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:39 UTC	876	OUT	GET /support/home HTTP/1.1 Host: support.delfi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _x_w=22; __cf_bm=28HbnawySxiJJCwJulrxIbxs3JaSBzxgCWkYh6tdh7Q-1742981138-1.0.1.1-ZVkT_0Mo8DrOITnYsgcaeYaUZnTLpx5IVrKxeBbq3oMIhoPcFDFhVb6sh5oq1cxt8IQY7NMY9ThoXTtqrWA8HklSRnCq0xizOTcc5i6zB1s
2025-03-26 09:25:39 UTC	545	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 09:25:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://support.delfi.com/en/support/home status: 302 Found Cache-Control: no-cache x-ratelimit-limit: 300 x-ratelimit-reset: 260325092639 strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-remaining: 299 x-ratelimit-remaining: 199 x-xss-protection: 1; mode=block x-request-id: 131c330a-dec2-4b0e-9c57-e656db4f9464 x-content-type-options: nosniff
2025-03-26 09:25:39 UTC	5594	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 2a 2e 66 72 65 73 68 63 6f 6e 6e 65 63 74 2e 69 6f 2f 20 2a 2e 66 72 65 73 68 73 61 6c 65 73 2e 69 6f 2f 20 2a 2e 66 72 65 73 68 77 6f 72 6b 73 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 77 6f 72 6b 73 61 70 69 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2d 65 75 63 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2d 69 6e 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 Data Ascii: content-security-policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ *.freshd
2025-03-26 09:25:39 UTC	113	IN	Data Raw: 36 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 65 6c 66 69 2e 63 6f 6d 2f 65 6e 2f 73 75 70 70 6f 72 74 2f 68 6f 6d 65 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 6b<html><body>You are being <a href="https://support.delfi.com/en/support/home">redirected</a>.</body></html>
2025-03-26 09:25:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:39 UTC	879	OUT	GET /en/support/home HTTP/1.1 Host: support.delfi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _x_w=22; __cf_bm=28HbnawySxiJJCwJulrxIbxs3JaSBzxgCWkYh6tdh7Q-1742981138-1.0.1.1-ZVkT_0Mo8DrOITnYsgcaeYaUZnTLpx5IVrKxeBbq3oMIhoPcFDFhVb6sh5oq1cxt8IQY7NMY9ThoXTtqrWA8HklSRnCq0xizOTcc5i6zB1s
2025-03-26 09:25:40 UTC	1171	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:25:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate x-ratelimit-limit: 300 x-ratelimit-reset: 260325092639 strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-remaining: 299 x-ratelimit-remaining: 198 x-xss-protection: 1; mode=block x-request-id: 1d03dd0b-2f94-41a5-a35e-c2868e143058 x-content-type-options: nosniff Set-Cookie: _x_w=22; path=/; HttpOnly; secure x-envoy-upstream-service-time: 84 x-trace-id: 00-18898d0c5ff299af472e16c9f2b57fd9-e188d907aab11ca0-00 nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} report-to: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} x-fw-ratelimiting-managed: true x-ratelimit-total: 200 x-ratelimit-used-currentrequest: 1 cf-cache-status: DYNAMIC vary: accept-encoding Server: cloudflare CF-RAY: 92659a1c8d7a0f46-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 09:25:40 UTC	198	IN	Data Raw: 32 62 62 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 Data Ascii: 2bbe<!DOCTYPE html> ...[if lt IE 7]><html class="no-js ie6" lang="en" dir="ltr" data-date-format="non_us"><![endif]--> ...[if IE 7]><html class="no-js ie7" lang="en" dir="ltr" d
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 Data Ascii: ata-date-format="non_us"><![endif]--> ...[if IE 8]><html class="no-js ie8" lang="en" dir="ltr" data-date-format="non_us"><![endif]--> ...[if IE 9]><html class="no-js ie9" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 61 64 35 33 39 61 63 63 31 30 63 31 63 32 36 31 31 33 39 37 30 32 33 37 32 38 36 22 20 2f 3e 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 75 70 70 6f 72 74 20 50 6f 72 74 61 6c 22 20 2f 3e 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 20 2f 3e 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 75 70 70 6f 72 74 22 20 2f 3e 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 65 6c 66 69 2e 63 6f 6d 2f 65 6e 2f 73 75 70 70 Data Ascii: ad539acc10c1c26113970237286" /> <meta property="og:site_name" content="Support Portal" /> <meta property="og:type" content="article" /> <meta name="twitter:title" content="Support" /> <meta name="twitter:url" content="https://support.delfi.com/en/supp
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 2f 64 61 74 61 2f 68 65 6c 70 64 65 73 6b 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f 70 72 6f 64 75 63 74 69 6f 6e 2f 36 30 30 31 31 33 36 32 37 34 2f 66 61 76 5f 69 63 6f 6e 2f 44 65 6c 66 69 25 32 30 73 6f 72 74 5f 33 30 30 64 70 69 77 77 2e 70 6e 67 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 34 34 78 31 34 34 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 63 64 6e 2e 66 72 65 73 68 64 65 73 6b 2e 63 6f 6d 2f 64 61 74 61 2f 68 65 6c 70 64 65 73 6b 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f 70 72 6f 64 75 63 74 69 6f 6e 2f 36 30 30 31 31 33 36 32 37 34 2f 66 61 76 5f 69 63 6f 6e 2f 44 65 6c 66 69 25 32 30 Data Ascii: /data/helpdesk/attachments/production/6001136274/fav_icon/Delfi%20sort_300dpiww.png" /> <link rel="apple-touch-icon" sizes="144x144" href="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/6001136274/fav_icon/Delfi%20
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 67 6c 65 20 66 6f 6e 74 20 75 72 6c 20 69 66 20 70 72 65 73 65 6e 74 20 2d 2d 3e 0a 09 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 2b 43 6f 6e 64 65 6e 73 65 64 3a 33 30 30 2c 33 30 30 69 74 61 6c 69 63 2c 37 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 0a 09 09 3c 21 2d 2d 20 49 6e 63 6c 75 64 69 6e 67 20 64 65 66 61 75 6c 74 20 70 6f 72 74 61 6c 20 62 61 73 65 64 20 73 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 20 61 74 20 74 68 65 20 74 6f 70 20 2d 2d 3e 0a 09 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 Data Ascii: gle font url if present --><link href='https://fonts.googleapis.com/css?family=Open+Sans+Condensed:300,300italic,700' rel='stylesheet' type='text/css'>... Including default portal based script framework at the top --><script src="https://assets
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 62 5f 68 6f 76 65 72 5f 63 6f 6c 6f 72 22 3a 22 23 34 63 34 62 34 62 22 2c 22 62 74 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 74 6e 5f 70 72 69 6d 61 72 79 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 31 39 36 37 61 62 22 2c 22 62 61 73 65 5f 66 6f 6e 74 22 3a 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 74 65 78 74 5f 63 6f 6c 6f 72 22 3a 22 23 32 32 32 32 32 32 22 2c 22 68 65 61 64 69 6e 67 73 5f 66 6f 6e 74 22 3a 22 4f 70 65 6e 20 53 61 6e 73 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 68 65 61 64 69 6e 67 73 5f 63 6f 6c 6f 72 22 3a 22 23 33 33 33 33 33 33 22 2c 22 6c 69 6e 6b 5f 63 6f 6c 6f 72 22 3a 22 23 31 39 36 37 61 62 22 2c 22 6c 69 6e 6b 5f 63 6f 6c 6f 72 5f 68 6f 76 65 72 22 3a 22 23 30 31 35 35 39 34 22 Data Ascii: b_hover_color":"#4c4b4b","btn_background":"#ffffff","btn_primary_background":"#1967ab","base_font":"Helvetica Neue","text_color":"#222222","headings_font":"Open Sans Condensed","headings_color":"#333333","link_color":"#1967ab","link_color_hover":"#015594"
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 74 20 50 6f 72 74 61 6c 3c 2f 68 31 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 6e 61 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 2d 6e 61 76 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 20 70 75 6c 6c 2d 72 69 67 68 74 22 20 64 61 74 61 2d 74 61 62 73 3d 22 74 61 62 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 27 74 6f 6f 6c 74 69 70 27 20 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 3d 22 62 6f 74 74 6f 6d 22 20 74 69 74 6c 65 3d 22 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 73 22 20 72 6f 6c 65 3d 22 74 61 62 6c 69 73 74 22 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 Data Ascii: t Portal</h1></div><nav class="banner-nav"><div class="banner-language-selector pull-right" data-tabs="tabs" data-toggle='tooltip' data-placement="bottom" title=""><ul class="language-options" role="tablist"><li class="dropdow
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 65 6c 66 69 2e 63 6f 6d 2f 65 6e 2f 73 75 70 70 6f 72 74 2f 68 6f 6d 65 3f 73 69 74 65 3d 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 22 20 69 64 3d 22 6d 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 22 3e 46 69 6e 64 20 61 63 74 69 76 61 74 69 6f 6e 20 6b 65 79 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 65 6c 66 69 2e 63 6f 6d 2f 65 6e 2f 73 75 70 70 6f 72 74 2f 68 6f 6d 65 3f 73 69 74 65 3d 52 65 70 61 69 72 53 74 61 74 75 73 22 20 69 64 3d 22 6d 52 65 70 61 69 72 53 74 61 74 75 73 22 3e 52 4d 41 20 73 74 61 74 75 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 Data Ascii: <a href="https://support.delfi.com/en/support/home?site=ActivationKey" id="mActivationKey">Find activation key</a> <a href="https://support.delfi.com/en/support/home?site=RepairStatus" id="mRepairStatus">RMA status</a> <a hr
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 68 65 6c 70 20 79 6f 75 20 74 6f 64 61 79 3f 3c 2f 68 32 3e 0a 09 09 09 09 09 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 68 63 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 70 72 69 6e 74 2d 2d 72 65 6d 6f 76 65 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 61 63 74 69 6f 6e 3d 22 2f 65 6e 2f 73 75 70 70 6f 72 74 2f 73 65 61 72 63 68 22 20 69 64 3d 22 68 63 2d 73 65 61 72 63 68 2d 66 6f 72 6d 22 20 64 61 74 61 2d 63 73 72 66 2d 69 67 6e 6f 72 65 3d 22 74 72 75 65 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 63 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 22 3e 0a 09 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 73 75 70 70 6f 72 74 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 22 20 63 6c 61 73 73 3d 22 68 69 64 65 22 3e 45 6e 74 65 72 20 79 6f 75 72 20 73 65 61 72 Data Ascii: help you today?</h2><form class="hc-search-form print--remove" autocomplete="off" action="/en/support/search" id="hc-search-form" data-csrf-ignore="true"><div class="hc-search-input"><label for="support-search-input" class="hide">Enter your sear
2025-03-26 09:25:40 UTC	56	IN	Data Raw: 27 3e 2b 34 35 20 37 38 20 37 36 38 20 35 35 35 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 20 3c 2f 6e 61 76 3e 0d 0a Data Ascii: '>+45 78 768 555</span> </a> </div> </nav>

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:40 UTC	786	OUT	GET /support/theme.css?v=4&d=1708592299 HTTP/1.1 Host: support.delfi.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.delfi.com/en/support/home Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _x_w=22; __cf_bm=28HbnawySxiJJCwJulrxIbxs3JaSBzxgCWkYh6tdh7Q-1742981138-1.0.1.1-ZVkT_0Mo8DrOITnYsgcaeYaUZnTLpx5IVrKxeBbq3oMIhoPcFDFhVb6sh5oq1cxt8IQY7NMY9ThoXTtqrWA8HklSRnCq0xizOTcc5i6zB1s
2025-03-26 09:25:40 UTC	433	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:25:40 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: public, max-age=315576000 strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-request-id: c45c6268-8bd8-4d83-a6fe-95e3d777e6a6 etag: W/"57b0a5dbcdbfd33c0167384b9a6d9c7a" x-content-type-options: nosniff
2025-03-26 09:25:40 UTC	5613	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 2a 2e 66 72 65 73 68 63 6f 6e 6e 65 63 74 2e 69 6f 2f 20 2a 2e 66 72 65 73 68 73 61 6c 65 73 2e 69 6f 2f 20 2a 2e 66 72 65 73 68 77 6f 72 6b 73 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 77 6f 72 6b 73 61 70 69 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2d 65 75 63 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 65 73 6b 75 73 65 72 63 6f 6e 74 65 6e 74 2d 69 6e 2e 63 6f 6d 2f 20 2a 2e 66 72 65 73 68 64 Data Ascii: content-security-policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ *.freshd
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a ef bb bf 2e 63 6c 65 61 72 66 69 78 7b 2a 7a 6f 6f 6d 3a 31 7d 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 68 69 64 65 2d 74 65 78 74 7b 66 6f 6e 74 3a 30 2f 30 20 61 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 Data Ascii: 7ff9.clearfix{*zoom:1}.clearfix:before,.clearfix:after{display:table;content:""}.clearfix:after{clear:both}.hide-text{font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0}input,select,textarea{font-family:Helvetica Neue
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 3a 31 31 70 78 3b 63 6f 6c 6f 72 3a 23 39 39 39 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 2e 38 37 35 70 78 3b 6d 61 72 67 69 6e 3a 32 31 2e 38 37 35 70 78 20 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 63 64 63 64 63 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 20 68 31 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 69 6e 74 72 6f 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 32 30 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6c 6f 72 3a 23 42 32 42 32 42 32 7d 75 6c 2c 6f 6c 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e Data Ascii: -size:11px;color:#999;text-transform:uppercase}.page-header{padding-bottom:20.875px;margin:21.875px 0;border-bottom:1px solid #dcdcdc}.page-header h1{line-height:1}.intro{font-weight:200;margin-top:-6px;margin-bottom:0;color:#B2B2B2}ul,ol{padding:0;margin
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 32 31 2e 38 37 35 70 78 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 47 51 41 41 41 42 6b 43 41 59 41 41 41 42 77 34 70 56 55 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 52 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 Data Ascii: -height:21.875px;color:#222;background-color:#eee;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGQAAABkCAYAAABw4pVUAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyRpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/I
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 6e 6e 48 4e 38 2f 73 58 33 61 34 37 39 32 64 42 30 39 2b 32 36 46 55 36 64 48 4f 71 65 38 34 74 66 2f 4f 4c 63 37 33 33 76 65 39 74 56 72 33 72 56 37 59 39 2f 2f 4f 50 32 2b 74 65 2f 66 6e 76 63 34 78 36 33 33 66 7a 6d 4e 39 2f 2b 2f 4f 63 2f 62 33 2f 36 30 35 2b 32 4c 33 7a 68 43 39 73 66 2f 76 43 48 37 61 35 33 76 65 75 36 58 76 76 61 58 58 7a 78 78 56 75 76 36 31 33 76 65 74 74 31 72 6e 4f 64 37 53 74 66 2b 63 72 68 65 36 39 66 2f 76 4b 58 32 31 57 75 63 70 58 74 54 57 39 36 30 2f 62 44 48 2f 35 77 39 64 76 2f 76 65 72 33 37 4e 6d 7a 32 77 55 58 58 4c 44 64 38 70 61 33 58 47 50 72 61 37 2f 66 48 2b 37 2f 7a 6e 65 2b 73 39 33 37 33 76 63 2b 7a 4b 58 66 74 66 6e 32 74 37 2b 39 33 65 55 75 64 39 6c 2b 2f 76 4f 66 62 37 65 34 78 53 32 32 6d 39 37 30 70 74 Data Ascii: nnHN8/sX3a4792dB09+26FU6dHOqe84tf/OLc733ve9tVr3rV7Y9//OP2+te/fnvc4x633fzmN9/+/Oc/b3/605+2L3zhC9sf/vCH7a53veu6XvvaXXzxxVuv613vett1rnOd7Stf+crhe69f/vKX21WucpXtTW960/bDH/5w9dv/ver37Nmz2wUXXLDd8pa3XGPra7/fH+7/zne+s9373vc+zKXftfn2t7+93eUud9l+/vOfb7e4xS22m970pt
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 77 67 78 59 30 59 41 57 35 42 70 73 49 38 6a 66 39 61 35 33 4c 51 44 5a 7a 43 5a 56 76 31 46 6d 4d 6f 69 4d 61 73 47 78 67 53 61 49 4e 54 57 33 72 72 33 78 6a 57 2f 63 4c 72 2f 38 38 6a 56 32 59 38 59 65 77 36 77 41 32 74 74 6d 39 4e 6c 38 4c 4e 68 6d 31 61 62 78 73 5a 49 41 55 54 39 64 43 33 69 31 38 31 2f 6a 32 59 7a 57 51 77 5a 46 44 59 30 66 6a 42 4c 77 33 64 63 38 57 2b 2b 48 50 2f 7a 68 68 64 69 2f 2f 76 57 76 46 2b 79 36 72 37 36 2f 2b 63 31 76 72 73 2f 75 68 52 43 39 55 6f 53 73 72 38 2f 64 68 52 64 65 75 47 2f 79 41 54 72 41 31 58 46 43 71 42 76 69 2f 57 6c 57 54 65 68 6a 48 2f 76 59 49 6d 75 38 73 34 6e 6a 2f 57 46 31 39 33 66 64 70 72 54 77 50 72 75 75 58 52 73 51 56 74 45 77 36 70 64 6d 30 75 4a 72 46 78 58 46 4c 69 4c 33 46 6c 58 62 37 67 4f Data Ascii: wgxY0YAW5BpsI8jf9a53LQDZzCZVv1FmMoiMasGxgSaINTW3rr3xjW/cLr/88jV2Y8Yew6wA2ttm9Nl8LNhm1abxsZIAUT9dC3i181/j2YzWQwZFDY0fjBLw3dc8W++HP/zhhdi//vWvF+y6r76/+c1vrs/uhRC9UoSsr8/dhRdeuG/yATrA1XFCqBvi/WlWTehjH/vYImu8s4nj/WF193fdprTwPruuXRsQVtEw6pdm0uJrFxXFLiL3FlXb7gO
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 50 6d 66 42 6d 65 6a 47 49 78 59 58 50 32 64 68 47 33 49 48 49 59 46 46 45 34 35 6d 46 43 62 79 43 38 67 39 4c 74 4e 69 72 32 6c 67 74 72 68 4f 39 33 70 54 67 64 4d 67 44 30 45 58 74 2b 4e 55 66 38 77 6b 7a 4f 77 2b 39 71 67 72 74 65 32 4e 6e 37 6e 6e 41 73 68 6f 73 44 59 4a 78 4b 48 72 64 67 4a 67 42 6f 48 4b 36 31 39 47 47 6b 64 56 4f 6e 47 4e 71 2f 75 6a 53 74 45 55 65 61 72 2f 38 5a 73 62 4e 63 49 36 2b 37 4a 68 69 4a 50 36 68 50 31 6f 2b 37 6d 33 32 66 39 6f 4c 43 51 5a 6c 4c 2f 70 4c 6a 6c 76 4f 46 42 6e 51 75 64 32 49 49 4d 45 37 36 41 33 38 33 39 37 76 4f 6e 50 2f 33 70 57 6a 41 41 73 47 6a 37 72 34 31 74 49 67 62 46 42 69 65 5a 6d 6d 6a 49 55 52 2f 39 37 76 2f 36 54 53 6b 49 47 39 75 51 45 47 4a 75 52 41 76 72 66 35 73 37 41 57 48 4d 6b 4f 61 69 Data Ascii: PmfBmejGIxYXP2dhG3IHIYFFE45mFCbyC8g9LtNir2lgtrhO93pTgdMgD0EXt+NUf8wkzOw+9qgrte2Nn7nnAshosDYJxKHrdgJgBoHK619GGkdVOnGNq/ujStEUear/8ZsbNcI6+7JhiJP6hP1o+7m32f9oLCQZlL/pLjlvOFBnQud2IIME76A38397vOnP/3pWjAAsGj7r41tIgbFBieZmmjIUR/97v/6TSkIG9uQEGJuRAvrf5s7AWHMkOai
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 65 4d 4d 78 37 67 34 79 43 61 65 44 61 48 49 58 61 48 6a 78 63 53 71 47 31 73 6c 71 61 46 6e 51 68 77 45 63 7a 36 6a 51 70 73 62 73 72 46 6a 46 79 47 6b 4e 77 79 76 52 6e 4d 49 55 35 74 61 59 4f 4e 57 39 38 68 4d 39 2f 62 37 70 6e 50 66 4f 59 2b 6a 4f 4e 78 62 53 44 2b 4a 42 6a 51 5a 72 47 36 6d 32 7a 78 63 6e 77 77 7a 45 2b 62 69 4a 33 56 42 76 6c 5a 51 41 75 72 58 5a 76 46 32 35 75 79 41 49 41 32 44 48 43 37 74 34 55 6d 61 34 51 32 2b 35 2f 54 6b 76 78 70 63 32 78 75 2f 37 65 5a 74 4b 36 75 52 77 45 70 49 67 6e 57 58 50 67 30 4e 41 34 2f 63 69 42 42 47 31 4c 45 58 72 44 70 78 70 36 78 2b 65 4e 63 67 4e 5a 45 50 6c 46 4f 65 44 51 67 64 4e 64 44 57 76 49 49 65 32 77 7a 6d 32 50 79 4f 71 34 55 39 51 53 4c 45 4b 47 35 72 51 42 56 4e 6b 49 64 59 69 39 39 6a Data Ascii: eMMx7g4yCaeDaHIXaHjxcSqG1slqaFnQhwEcz6jQpsbsrFjFyGkNwyvRnMIU5taYONW98hM9/b7pnPfOY+jONxbSD+JBjQZrG6m2zxcnwwzE+biJ3VBvlZQAurXZvF25uyAIA2DHC7t4Uma4Q2+5/Tkvxpc2xu/7eZtK6uRwEpIgnWXPg0NA4/ciBBG1LEXrDpxp6x+eNcgNZEPlFOeDQgdNdDWvIIe2wzm2PyOq4U9QSLEKG5rQBVNkIdYi99j
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 39 2f 76 47 50 33 30 38 42 72 47 47 62 30 62 56 30 36 37 42 44 66 4a 78 78 4a 78 4b 47 62 39 4f 33 2b 35 34 4c 70 76 76 44 6e 45 67 35 67 36 75 4a 79 32 43 52 6e 43 43 62 70 48 76 69 73 37 4a 63 4a 44 63 33 70 68 53 68 78 6d 6d 4d 74 42 4e 61 69 51 52 78 50 42 6b 37 43 41 67 35 43 37 74 66 46 67 6a 4e 4b 47 32 4e 62 53 49 65 4c 36 2b 73 54 59 42 55 7a 5a 64 57 4e 34 31 50 37 49 6f 42 4f 71 6d 4f 5a 6f 70 43 49 58 48 77 69 7a 56 53 51 46 6a 6f 33 52 74 72 78 62 71 61 33 2b 36 30 38 52 37 77 38 50 55 61 31 69 69 42 47 5a 61 30 65 77 41 51 39 74 55 4a 7a 4b 68 74 67 49 57 42 42 46 35 73 43 68 43 51 4d 49 73 38 67 4d 56 44 30 36 35 6d 63 68 36 57 52 5a 75 68 7a 6b 70 5a 4a 52 50 4d 63 2b 62 76 34 76 30 55 43 67 35 44 4c 46 47 66 73 54 68 71 72 52 49 46 4b 6e Data Ascii: 9/vGP308BrGGb0bV067BDfJxxJxKGb9O3+54LpvvDnEg5g6uJy2CRnCCbpHvis7JcJDc3phShxmmMtBNaiQRxPBk7CAg5C7tfFgjNKG2NbSIeL6+sTYBUzZdWN41P7IoBOqmOZopCIXHwizVSQFjo3Rtrxbqa3+608R7w8PUa1iiBGZa0ewAQ9tUJzKhtgIWBBF5sChCQMIs8gMVD065mch6WRZuhzkpZJRPMc+bv4v0UCg5DLFGfsThqrRIFKn
2025-03-26 09:25:40 UTC	1369	IN	Data Raw: 46 36 38 4e 6b 52 7a 51 52 4e 6f 59 36 66 5a 64 6c 37 34 35 61 2f 4b 6b 39 68 4f 6f 6a 44 64 71 73 62 61 7a 2b 72 56 58 2f 38 4f 6b 61 55 77 47 54 4b 6c 46 78 57 64 55 73 4b 4c 61 2b 67 6b 4a 51 68 69 68 35 4b 70 70 63 38 2b 59 43 30 42 6c 34 4d 6d 62 4a 64 39 6d 71 52 71 6c 67 2f 5a 47 48 65 66 59 44 48 4f 7a 77 57 71 6e 6e 41 38 72 78 4f 36 77 49 39 51 6a 67 57 50 61 61 55 49 44 4f 49 44 4d 46 4b 70 77 53 44 41 72 75 6b 4b 75 33 53 6d 77 6c 70 61 46 5a 61 58 52 52 46 70 4b 74 47 52 4a 77 45 36 65 55 75 70 68 4a 41 77 6a 2b 68 33 62 69 59 4b 36 4c 6e 75 65 49 43 58 45 73 51 6c 61 6a 45 55 47 36 4e 35 52 6c 51 4c 50 57 57 62 57 68 47 47 61 54 66 6e 71 56 37 39 36 2b 46 33 66 74 5a 6b 46 53 41 46 5a 54 6a 48 44 6c 6f 55 74 31 44 77 7a 38 47 57 34 78 77 72 Data Ascii: F68NkRzQRNoY6fZdl745a/Kk9hOojDdqsbaz+rVX/8OkaUwGTKlFxWdUsKLa+gkJQhih5Kppc8+YC0Bl4MmbJd9mqRqlg/ZGHefYDHOzwWqnnA8rxO6wI9QjgWPaaUIDOIDMFKpwSDArukKu3SmwlpaFZaXRRFpKtGRJwE6eUuphJAwj+h3biYK6LnueICXEsQlajEUG6N5RlQLPWWbWhGGaTfnqV796+F3ftZkFSAFZTjHDloUt1Dwz8GW4xwr

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:40 UTC	669	OUT	GET /assets/cdn/portal_utils-fe7ee1254a5d27e7550ccf8875cbd6276c5da04436e7f6ea0120b8d6d70e3133.css HTTP/1.1 Host: assets1.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:40 UTC	680	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 82636 Connection: close Date: Wed, 26 Mar 2025 09:25:41 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Mar 2025 07:05:58 GMT ETag: "333faf725645b42f0c3660a12fd9c139" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Tue, 17 Mar 2026 13:05:57 GMT x-amz-version-id: _Nakrpqls8BDVWLf9POT7HFGRUxl82R8 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c5f8d9953ac8f752d458b0ffba0f2074.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: zdWgT3BVZozlhv8jelhWUrh1QFaTRBhVxZS8YtPq_0RC5jvasbMruw==
2025-03-26 09:25:40 UTC	16384	IN	Data Raw: 1f 8b 08 00 2b c1 d7 67 02 03 ec bd e9 92 ea 48 d2 28 f8 7f 9e 22 6f 97 75 5b 57 73 32 d1 0a d2 39 d6 33 23 90 00 01 12 48 48 80 74 ef b5 32 ed 0b da 40 62 d3 b1 f3 64 f3 63 1e 69 5e 61 42 62 13 4b 2e a7 aa be fe fa bb 37 13 23 81 58 3c 3c dc 3d dc 3d 22 3c 42 ff df ff f3 ff be 18 81 a5 ad 6c 6f f7 fd 1f 79 1c 87 5f e1 1f e7 94 af ba 65 c7 2b eb cb 25 41 b3 33 6b f5 dd f4 d2 24 d0 f6 5f 33 4d 0f ac 6f 46 1c 65 56 94 7d fd cb 5f 7e dc 16 2c 7f 7e d5 e3 cc fd f1 e2 7a a6 f5 9c 59 bb ec bb 0d 2a 7c 85 ea d0 93 06 ea 06 f1 ea 6b b6 d2 a2 34 d1 56 00 ca b7 a2 c4 73 ea 6a 66 bc fd 1a c5 91 f5 4d d7 8c 85 b3 8a d7 91 f9 7c 5f 5a 8f 57 a6 b5 fa 0a fd d0 56 99 07 5a fb a2 a5 a0 99 2f a6 95 69 5e 90 7e b1 3d c7 d0 92 cc 8b a3 e2 eb 1a 74 c5 8e 63 80 d8 17 d7 d2 cc Data Ascii: +gH("ou[Ws293#HHt2@bdci^aBbK.7#X<<=="<Bloy_e+%A3k$_3MoFeV}_~,~zY*\|k4VsjfM\|_ZWVZ/i^~=tc
2025-03-26 09:25:40 UTC	435	IN	Data Raw: b8 51 21 d2 21 f5 55 54 0e d9 37 88 1c 21 e9 86 0e 91 05 af ca 9f 46 b3 89 41 78 85 55 65 ea 35 0a 94 91 79 1b eb c2 be 23 0e c7 e4 57 91 38 e6 37 ae 24 e6 04 4b 37 09 1c 02 58 1c 7f 5b 3a 90 20 e8 82 c6 29 f9 9a 14 27 71 00 a8 58 18 6e 54 c8 71 ce 79 5f 6a 2e 65 9b d7 b2 7c 81 6e 99 08 62 17 24 3a 27 a1 8d e2 55 21 d3 39 07 41 08 cb 86 4f 28 32 ab 55 bc fa a7 4e c0 64 41 fb 13 7a 87 54 88 f8 cd f4 34 27 8e b4 20 fd 0d 68 0d 63 71 87 db a1 20 4c 54 f1 3a a4 19 26 a4 41 1a c0 e9 f0 f3 76 84 9d 52 4d a4 a9 9d 70 19 01 4e 06 da fe 9f 8d f2 ef 82 cd 29 fd 03 f8 9c 8a 22 d0 df e2 eb 14 1c 3a 35 33 71 35 33 de fe 13 2a ff 2e ad 9c 92 e1 df ec 40 bb e7 c2 31 1b 3e 03 3e 26 80 96 4a 54 22 2b 4d 8f 49 38 50 60 b1 6d a7 56 26 c5 c9 31 ed f9 92 38 b4 ec ac 9a 5a 55 Data Ascii: Q!!UT7!FAxUe5y#W87$K7X[: )'qXnTqy_j.e\|nb$:'U!9AO(2UNdAzT4' hcq LT:&AvRMpN)":53q53*.@1>>&JT"+MI8P`mV&18ZU
2025-03-26 09:25:40 UTC	12792	IN	Data Raw: 89 c3 63 23 80 46 f9 eb b7 f2 01 a0 69 b6 0f ac bb de 1a 81 a5 ad 6c 6f f7 55 b7 6c 60 4e bf 3c ca d2 ec cc 5a 7d 37 0e ba f7 eb 5f fe 72 7e 16 67 a6 01 f2 fc 78 a3 4a f1 f3 ab 0e b8 f3 a8 d0 f7 3c 8e c3 af 70 35 2b 2f 92 8f de 43 81 f8 a9 9f c5 f7 2c 4e 8a ee 03 d9 29 48 74 cb 92 cb 73 9e 4e 0f 8b ba 7e 14 14 74 20 78 9a 01 ff e0 19 e0 5f 60 6e 7e 37 d6 ab 34 5e 7d 35 0f 7a bc c2 d6 b2 70 79 6d f2 a9 af 87 07 8e 96 d4 f6 22 b3 20 c4 33 59 fc 01 1f a7 50 c0 76 10 6f bf 1e 44 e7 db 1b 4f b2 2a e1 5e 7c 94 e7 08 c0 7b 3a b5 f5 e5 26 33 59 59 9b 73 e6 f7 47 4d 97 e0 00 bd 1c 2b 7b 8e 0f e3 fc 5e 5a af 29 f7 98 ba 25 a0 e2 99 ab c0 f3 49 02 2b b3 de 03 73 4d b9 5b 09 3b 0a ee 33 60 7d 16 87 cf ab 72 68 7f 2d fc c1 e7 30 ce 41 f2 ee 39 2d 07 fa d7 5f b4 f2 ef Data Ascii: c#FiloUl`N<Z}7_r~gxJ<p5+/C,N)HtsN~t x_`n~74^}5zpym" 3YPvoDO*^\|{:&3YYsGM+{^Z)%I+sM[;3`}rh-0A9-_
2025-03-26 09:25:40 UTC	6396	IN	Data Raw: 7c 22 e0 5d f5 a9 56 3e de 0a 5d 43 97 9b f1 2f 69 6e 1b 7b cf 34 4e 46 9a 5e a8 1f f4 96 0c 12 bb 26 69 de 12 1d 7f 64 a6 20 08 4b 81 11 23 10 24 e2 87 df b3 79 63 c3 99 be 33 7c 3e 2b 09 de 4e a2 14 cd 80 61 4c f8 ac 94 05 85 52 f7 15 54 3b 7f e7 2b 0c 59 d1 c0 36 6c 6b 22 10 5c 62 3e a9 a5 84 fe 54 b6 80 07 38 0a fa 8c ab 52 d5 41 7c 7c e9 da 8b cf 71 13 29 af b8 63 b8 fa 43 29 a8 c5 7c e1 23 04 96 ad 67 21 90 4c d5 34 d5 0f 10 c0 74 31 59 08 ec 62 7e 22 7d 84 20 d8 9a a6 1d 04 59 38 04 a1 a0 a9 c5 0f 70 c4 b6 f9 2c 1c 56 41 b2 64 e1 27 9d 1e 83 50 69 a2 9f 98 4a 13 fc 76 9d 73 0b 98 72 0e fe 8e 1a 9c 7f 45 f0 c9 4f 38 15 e8 07 2e a4 44 36 12 9a ba 91 4a 3b 59 c0 17 3a ee fe 9c b5 83 18 64 5a 4a 8c 35 29 a6 86 8c 15 a7 23 c7 0b d3 07 c0 4a cf cf 91 d8 Data Ascii: \|"]V>]C/in{4NF^&id K#$yc3\|>+NaLRT;+Y6lk"\b>T8RA\|\|q)cC)\|#g!L4t1Yb~"} Y8p,VAd'PiJvsrEO8.D6J;Y:dZJ5)#J
2025-03-26 09:25:40 UTC	12792	IN	Data Raw: 25 75 6b 38 61 49 0e ef aa ba 37 78 32 ec 20 6f da ad ca 5b e9 a1 fb b8 6d 3c af fb 2d b5 d1 6d 99 b9 d7 e6 64 b7 5b ce f7 e1 d3 68 b1 98 4d 77 77 c5 ba eb 9d 40 3f 76 e9 7e 6f d5 d6 4d 7b 55 df 97 d6 fe b4 3f 6b 2d ec e9 40 6f bf 36 9b 9b fd 9b f5 7c 6f 09 b5 63 cb a8 8e 64 43 bb 93 0b 3a 20 32 4a 77 1b 3e bb bb d6 b1 38 90 ab 87 e2 c4 31 57 a5 53 eb f0 f4 56 11 ba a5 fc 6c 2f f7 de 72 5b b7 ab da cf bb fa 49 2d 2e 95 5d 2b 7f 17 04 ad 87 bd 97 2b 6c 0b 8b de b0 e5 1e bc d2 58 98 b8 e3 66 b7 32 7d ec ee c6 2b 47 5e 18 af 7d bf b8 5a 06 8f f6 ae d7 f0 9b eb fe e6 71 5e f0 ec c5 6e 51 9d 35 cc fa c3 be a8 59 9d b7 fb 70 63 eb c7 87 ba 5f 56 1f 6b 85 fb 5d c7 08 e5 82 94 2f 8b bd 46 79 6c 4d 83 41 ab 34 1d 2c c7 4b d5 9b 38 65 c0 bf 8a 2f 73 25 57 be 2b 97 Data Ascii: %uk8aI7x2 o[m<-md[hMww@?v~oM{U?k-@o6\|ocdC: 2Jw>81WSVl/r[I-.]++lXf2}+G^}Zq^nQ5Ypc_Vk]/FylMA4,K8e/s%W+
2025-03-26 09:25:40 UTC	6396	IN	Data Raw: df 1c 98 6f 12 7a 7e ec 5b d4 ce d2 e1 5b b4 ce 0f 3d 5b 26 6f 38 eb 71 18 f0 7f e7 d9 71 7f 66 7c b1 46 ff 2b a7 17 b7 71 1e be fa d8 dd a9 ce b9 e2 2a f8 dc 2b 42 d7 be e1 37 34 7e fe ca 13 4f 8e 15 d7 e1 26 ca 43 cf a9 b6 d3 8f ed 5f d7 81 75 70 ca c5 93 42 13 9c 1d 3c be 3c 79 05 fc fb 4e 5b ce c1 56 ae 23 ac 9c c3 76 be a9 f9 5d 1f 99 0f 44 39 bb 18 7d 7b a1 f9 c9 06 b8 a7 0f 43 d9 9f d6 5f 6e f4 c7 0a 67 9f b0 57 7f 8a 5e cc f6 20 fe c9 56 73 79 f2 6c 0d 07 a0 e3 f3 8d 43 e7 79 48 8a 4b f0 de e1 df fe f8 d2 13 03 fa 66 d6 ab 67 bf 3d 9d 60 bf e7 cb 73 13 f6 f3 ab ef dd cc d9 4b f0 df 6f be 76 15 93 ce 75 7f eb a5 ff cb bd 4b d4 06 0a be 04 7d 74 ca 33 d2 02 9d 06 78 07 fc 63 f2 4c ec f2 e6 5f c1 c6 0e d4 6d fb 37 00 11 9d df c0 ae e7 39 17 22 e4 39 Data Ascii: oz~[[=[&o8qqf\|F+q*+B74~O&C_upB<<yN[V#v]D9}{C_ngW^ VsylCyHKfg=`sKovuK}t3xcL_m79"9
2025-03-26 09:25:40 UTC	6396	IN	Data Raw: 60 2c 51 e9 40 66 d7 b0 60 09 9b b1 36 02 3a 43 1c 32 5b 29 09 92 a1 18 b3 99 ef 39 45 d9 08 68 48 e3 61 97 b7 73 81 f5 61 c3 e4 91 12 03 fa 17 a2 4e 13 85 d9 19 1b 15 5b 9c c4 bd 01 d4 9d 5d ba a6 ac 69 12 c3 34 61 8d 31 2a f0 71 ef e4 e2 13 51 c0 b5 de 60 b0 d9 ef 24 48 6c ad 28 a3 d7 71 54 6e 58 85 c7 65 3f 87 76 a3 d1 88 5a 08 dd 09 27 05 3c f2 3c ca 4a 1a ae e3 f5 25 5d 78 dc ce 4f d7 de 66 8e 57 92 9d a5 68 55 e9 56 3c 96 9c 4e 64 5c cd 17 c7 2c 3b 61 80 ee 13 96 f9 11 19 68 38 50 54 0d ac 70 16 02 41 2a 64 e6 40 e3 0d 73 48 e5 30 9f 1c 8a d4 10 77 86 5e c1 b6 22 ab 95 54 6c c7 14 34 10 1d 57 62 d7 9d c1 45 cc b4 e0 d3 e3 0a 8b c7 fe 50 6f 60 d9 d2 a7 bc 8a c6 3c bb c5 c6 34 b9 10 9a cd 60 cb d6 aa bb 99 9a d9 04 ed f9 ba 19 cf 69 6d 7e 5a 37 51 a2 Data Ascii: `,Q@f`6:C2[)9EhHasaN[]i4a1qQ`$Hl(qTnXe?vZ'<<J%]xOfWhUV<Nd\,;ah8PTpAd@sH0w^"Tl4WbEPo`<4`im~Z7Q
2025-03-26 09:25:40 UTC	7452	IN	Data Raw: 3c e2 40 e4 77 ed 8e 03 ba a9 00 17 33 b2 d1 8e 95 ef 94 19 1d fe 69 ef da 06 98 e1 15 1f f9 1c e2 66 9f fc 1e 47 3b a1 3a 28 24 28 16 b7 87 41 5f 23 15 a3 8b c5 8f 7d 07 76 0a f3 52 64 8e f6 4e f8 5e 9f 0f de 68 7a 7d 87 b8 01 88 11 49 08 41 39 88 b5 5b 4f 42 69 42 0c 77 11 c6 e0 6b 52 bd 3f 67 3a c7 1d 22 9f 37 2b 21 a4 1f ca 42 74 62 de ed aa f4 db a8 a3 c6 3b 36 80 34 1b b8 e5 db 5f 4c 15 30 4b 93 82 40 cc fb dc f7 4f 95 e7 49 cc f9 77 14 dc 5d 0f 86 56 6b 21 08 16 3f 0c 31 4d 03 84 8b 8f 59 d1 ec c3 e8 e3 35 e1 ef 74 c7 a2 a1 14 f3 01 3c 2c 6b 9a fe 4a 2b 98 d1 30 60 d3 e2 75 02 29 66 17 82 3a 4f f2 c9 76 b6 ab 54 74 be dd 65 59 6b 83 80 08 d0 8b 36 f6 3e 5b 4e b1 42 b1 dc 5f f5 fc 13 76 0d e6 b9 44 26 36 fa 0b 13 85 bd 93 c8 b7 7e a8 da 0b 9a c8 38 Data Ascii: <@w3ifG;:($(A_#}vRdN^hz}IA9[OBiBwkR?g:"7+!Btb;64_L0K@OIw]Vk!?1MY5t<,kJ+0`u)f:OvTteYk6>[NB_vD&6~8
2025-03-26 09:25:40 UTC	12792	IN	Data Raw: 44 be af fd 48 15 0d d5 b0 29 ea 16 5a 9d f0 13 99 39 7e e4 51 8f 39 29 67 17 59 b4 fe 1e 29 01 33 0f 1a 5d 0f 63 71 45 f6 9e 81 bd 0f 9a 00 cf 29 2d 56 19 00 af f7 db ad a2 78 2f a2 c2 05 a2 b4 c3 d4 88 a1 d0 21 c3 90 0a 8e c6 6c 48 26 6a fd d5 6d e7 0d 4f 1e e8 85 d7 fe 69 e7 c7 f0 14 78 6e 53 aa e5 1a 77 d2 c0 7e c1 34 bc bd d3 31 82 91 bf 08 79 99 6e ad 53 10 51 cd dc f9 34 e2 9e a9 43 8c 61 f9 b1 44 a5 18 27 5a 59 fb 93 ae 2d cd 66 9d d8 ee be af 2f 39 12 dd 24 7e 00 26 2d 0e fb 10 70 67 9b 63 46 c7 ea 2d f7 a1 ef 4e 2d c0 cc 16 df 6b f0 ec e1 3c dc 52 3c 77 a5 cf 8b 79 c9 ae c7 f1 70 8e fc 23 43 d2 5d f8 fc 7b 7d 5d 9d 4a 0c 0c 52 df c0 78 9f 84 ea 43 56 c7 6c 09 b6 49 7c f4 ae 66 03 47 d2 c7 2a b1 cc 9b 04 f0 9b cd 9c fa 01 61 86 a5 84 19 cd 0b d7 Data Ascii: DH)Z9~Q9)gY)3]cqE)-Vx/!lH&jmOixnSw~41ynSQ4CaD'ZY-f/9$~&-pgcF-N-k<R<wyp#C]{}]JRxCVlI\|fG*a
2025-03-26 09:25:40 UTC	801	IN	Data Raw: 32 66 49 63 b4 5f ee 84 6d d6 7b 31 a6 0d 2d a0 08 c7 c9 43 46 20 c4 08 0f 37 6a 4e 77 b9 d9 eb 95 b1 43 87 8b bf b5 0f 81 b7 9b b6 45 c1 88 c4 19 b6 63 5d 2b 4e 90 1a 7a a7 d1 0a 74 97 ba ba f3 ed c1 e4 2d 52 ec 98 a1 bb 96 2e 55 9a 5c 46 e4 71 66 4e b6 ac 53 7b 1b 33 ef e9 c5 e3 23 6a 73 c5 0d ad a9 03 b6 e1 64 a9 bb cf 07 c5 c7 a0 12 29 ae ee e5 92 6f 44 02 32 9c 53 c3 72 7c 8a 07 75 b1 97 d7 74 93 29 c8 f9 48 9c 5b df 77 8a f6 b8 ad 4e 3c 12 76 88 9b dd 7b f9 11 c4 90 cc 12 d2 de 31 94 ed e1 bc 84 6e 79 75 5b 5b 53 13 b4 b0 db 1b bf 93 d8 8a ef 25 b2 c9 4f 0d 62 6d 03 6e 6a fc f6 bc b3 dc 25 6e cc 54 3e 91 de e9 68 2b d8 8d 5f c2 07 7a 80 b0 0d a3 76 41 c1 ec ea eb 2e 69 bb a2 cd 85 47 7e 61 6d 8c 4c 53 da 69 b4 3a bb 78 59 52 98 f3 3e 64 f1 2c 39 a9 Data Ascii: 2fIc_m{1-CF 7jNwCEc]+Nzt-R.U\FqfNS{3#jsd)oD2Sr\|ut)H[wN<v{1nyu[[S%Obmnj%nT>h+_zvA.iG~amLSi:xYR>d,9

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:40 UTC	727	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/6001136066/logo/3tmHBXh0K38lG3WW2ls0dC67UKkDUoTc5A.png HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:40 UTC	503	IN	HTTP/1.1 200 OK x-amz-id-2: y0NbpeiUsIuxu0y4mNUUfoqLDkSThIe6f0+qCIKd2QJTodK3wshx3xIhS19O6RR4lxF0ekgmO2o= x-amz-request-id: 24CZTF6JK1DJ8E0V Date: Wed, 26 Mar 2025 09:25:41 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 15 Feb 2019 09:19:59 GMT ETag: "fc4be5331055d9b4a853e2c410fe3e21" x-amz-server-side-encryption: AES256 x-amz-version-id: TIvhoaq7zFyNpolb5_MxWqqvTWALk9GB Accept-Ranges: bytes Content-Type: image/png Content-Length: 4584 Server: AmazonS3 Connection: close
2025-03-26 09:25:40 UTC	4584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c5 00 00 00 32 08 06 00 00 00 ec af 1f 51 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 10 dd 49 44 41 54 78 da ed 9d 79 94 9e 55 7d c7 3f bf 99 84 b0 24 10 b6 90 c8 92 90 b0 48 02 11 c4 88 48 12 52 32 13 2c 62 0e 50 84 a2 ad 2c a7 80 b5 5a 39 28 48 3d 05 8b 5a 81 d3 a3 a8 58 b4 2a 48 10 28 14 69 41 2b 48 66 b2 40 d8 d1 48 c3 56 90 40 58 c2 26 44 9a 09 82 2c f7 db 3f 7e f7 99 f7 99 27 ef b3 cc cc 3b 33 2f 87 Data Ascii: PNGIHDR2QgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsIDATxyU}?$HHR2,bP,Z9(H=ZX*H(iA+Hf@HV@X&D,?~';3/

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:40 UTC	657	OUT	GET /assets/cdn/portal_head_v2-c1e8ae994d3f8763b4a3d180ba8cdccb905bbc2e7f73c03db2dd182e08bbc9de.js HTTP/1.1 Host: assets10.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:40 UTC	687	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 81963 Connection: close Date: Wed, 26 Mar 2025 09:25:41 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 04 Mar 2025 05:25:16 GMT ETag: "745a8eb006513169e003e66ce1fc9087" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Wed, 04 Mar 2026 11:25:15 GMT x-amz-version-id: iGbpljbZsMwqR4w3rpxvm1Ti.xgm3s7U Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 417a202d3041fbbec8f1a62f5241641e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: Dk5-deSUTSCXIFkLqjESIMO81S6lY5pYyE8JawrcGhdIOTlhBPvU3Q==
2025-03-26 09:25:40 UTC	15697	IN	Data Raw: 1f 8b 08 00 57 84 c6 67 02 03 d4 bd 7b 5b db 48 d2 38 fa f7 39 9f 02 6b 78 89 14 b7 8d 9d b9 bc bb 72 84 0f 21 64 92 9d 24 64 81 cc 65 8d c3 23 ec 36 68 62 24 47 92 21 0c f6 7e f6 53 55 7d 97 64 92 fc de 7d 9f f3 9c 9d 0d 96 5a 7d ef ea ea aa ea ba cc 96 e9 a4 4c b2 74 6b 7b df e7 c1 7d 32 f3 5b 3c c8 79 b9 cc d3 d1 78 00 af 5e 99 ed e7 79 7c e7 25 e9 d6 d1 c5 9f 7c 52 42 3e 99 63 8b 77 e5 57 3f 18 cc b2 dc bf 89 f3 ad 32 e2 dd 39 4f 2f cb ab d5 aa c7 92 28 e5 b7 5b 22 4f 19 0c ca 4e 67 10 24 a3 72 1c 71 f8 33 90 d5 24 eb 99 ee c6 2d 76 43 a6 8b f6 ba 49 71 52 e6 49 7a 09 5f 86 3e 87 ea 0b 78 5d f8 01 e3 43 78 5e cc 93 d2 df 3d 2b da bb 41 38 1a e3 3f ab b6 97 56 6d d8 91 97 71 71 05 49 56 8e 63 9f b3 92 25 4e 2e d1 ee 71 9c 5e 72 f9 d5 14 98 67 97 7e 70 Data Ascii: Wg{[H89kxr!d$de#6hb$G!~SU}d}Z}Ltk{}2[<yx^y\|%\|RB>cwW?29O/(["ONg$rq3$-vCIqRIz_>x]Cx^=+A8?VmqqIVc%N.q^rg~p
2025-03-26 09:25:40 UTC	293	IN	Data Raw: b3 b5 a8 42 8e 93 ec a8 51 85 e8 e1 83 f8 66 93 94 70 49 54 4c ca 86 38 44 c7 d5 5d a2 6e cf c3 ee 8f 3f 7a 6c f7 43 0f 7e a5 bd d3 71 45 dd 80 c2 0a d5 c7 5a c8 ab f4 70 c2 99 ba 56 0f d1 16 53 6b e8 84 d7 f4 45 bd cd 38 92 b6 96 3a 4d 62 fa 05 e8 f6 13 d7 b7 f3 d1 92 b3 4f dc d2 f5 89 ce 29 c1 54 16 5d 72 fb 8c 97 77 c9 d1 fd fb 57 cf c3 be 10 53 4c 89 e3 15 b7 d7 a2 a9 01 51 ca 37 3c ba e0 4d 8b 47 ad 53 3d e1 1d 47 07 23 c0 7e 7d c4 b9 c7 e0 56 00 6b b7 6a 86 97 44 21 2c 50 9f c0 95 47 5e 95 51 8d 76 7a 01 67 f6 12 80 69 d0 6a 96 2f 7b 5a 5a 2f 3a 49 82 1a 4b 5e 4d 24 49 b7 51 80 8d 07 ab 2e cd 9a aa 07 3a 4a 74 f9 ba 8c 4e f1 e0 15 4a b0 78 e3 88 fe 6e 1e 12 56 43 3f 4e 78 74 5d 0e 0f 78 e8 44 05 dc 24 6b ba 17 29 e1 09 47 f0 95 13 13 fe 89 8b 7e 82 Data Ascii: BQfpITL8D]n?zlC~qEZpVSkE8:MbO)T]rwWSLQ7<MGS=G#~}VkjD!,PG^Qvzgij/{ZZ/:IK^M$IQ.:JtNJxnVC?Nxt]xD$k)G~
2025-03-26 09:25:40 UTC	790	IN	Data Raw: 88 bc 71 d7 8c 17 00 49 dd 18 a1 1e 74 3c b9 22 43 ac 9d 9d 7a 1a 92 41 02 31 7a ec 08 98 77 e9 ed 66 63 78 2e 45 0f 2b 47 96 fe d9 b4 1d fc d7 70 db 52 3d 29 87 2a e2 a7 56 38 71 35 13 4b 75 2b bb 6d 74 dc 95 7a 97 b8 9c 6a 25 96 72 9a 36 49 fc 36 e5 b4 24 8a 87 31 d4 b7 49 39 ad 1c 26 8e 76 8c a3 9c 96 08 bd ae a4 e6 4b a5 d6 5b 49 fc 27 0d ca 68 49 55 19 ad 1c 3b 9a f5 b1 5b 65 36 9b 01 ae f9 0d f5 ce 50 c3 01 95 83 2e e8 3c 7e cd 67 22 d9 63 18 20 14 8d 82 ac af c7 a8 9a e6 7c ce c5 67 49 20 61 69 f5 25 73 be 50 49 f9 49 93 8f 9d b8 53 74 f2 4e 66 bb 3a 21 e7 26 4a bb 92 dc a3 d9 57 69 c6 32 97 6c 92 12 32 7f 28 50 05 9c 49 85 f2 c4 b2 e7 b6 2f cd 1d 8f 6b 50 25 e9 0c 74 82 21 c0 94 7f d6 45 c8 1a fa 8b cf c1 50 ab 0c 98 22 12 92 9d 05 1c 88 bb 2b 4b Data Ascii: qIt<"CzA1zwfcx.E+GpR=)*V8q5Ku+mtzj%r6I6$1I9&vK[I'hIU;[e6P.<~g"c \|gI ai%sPIIStNf:!&JWi2l2(PI/kP%t!EP"+K
2025-03-26 09:25:40 UTC	12792	IN	Data Raw: 6d 95 6d 4d 2b 9c 66 0b 3a 31 4c 0a 9e 16 98 c4 23 77 94 d2 fc cf 74 c5 46 01 47 94 11 4e 79 7b 4f 5f d7 7a c4 6d 1c c0 44 58 84 1e 99 1d ce fc a4 d6 a9 f8 cb 9d 22 91 2d 2e 7f 40 e1 cc a4 ea e7 c3 d3 3a 70 d7 20 15 45 d7 d5 e1 c5 9d 88 6a f0 bd eb 38 bf 4c d2 8e 38 e0 58 52 4d a7 c3 8b 35 cc 46 ec d8 e4 9a 58 f0 72 61 a6 d9 bd 34 39 75 97 b4 46 aa ba b7 25 ab 95 93 dd 5a da ca 97 01 2c 73 03 cd a4 c9 9e 4b fe 87 e8 68 30 8c bb c5 24 cf e6 73 31 f1 61 3d 0b 02 c8 c3 75 fd 5e ad 4b 2e 59 58 cf 23 43 cf 11 14 da ed 0a 28 74 4a 33 77 4f ad bf 19 06 67 95 59 b7 35 88 69 92 2c f8 4c 23 2e 61 11 ba 96 d6 36 48 5a 81 c5 d4 81 44 40 b2 70 4c 68 7c da b0 b7 53 67 6f 0b 78 15 e3 49 a3 b4 82 50 64 57 d2 16 d6 ea 97 1d c8 e0 ce 94 49 91 dd 09 ac ba ac dd fe d5 13 75 Data Ascii: mmM+f:1L#wtFGNy{O_zmDX"-.@:p Ej8L8XRM5FXra49uF%Z,sKh0$s1a=u^K.YX#C(tJ3wOgY5i,L#.a6HZD@pLh\|SgoxIPdWIu
2025-03-26 09:25:40 UTC	3592	IN	Data Raw: de 20 f5 30 52 33 c5 61 c1 26 4a 7b 88 b4 d8 20 0a b7 59 77 2d 05 9b fc 39 bd 6e f1 95 ae 9c 4c 89 5a 69 33 17 0f af de c1 98 9c 9d a9 3c de b4 53 5e 86 25 e2 57 f8 b1 6d 4f 1f 7f 22 06 83 7b 3c 9e 69 b0 d9 8c 35 4a ee c6 13 1d 38 ae df 78 7c e8 a4 4c 66 2a 89 f8 36 a9 9b cf 1f 7e 36 9b 6c 8b f4 7f 77 24 2b ec ff a5 11 95 d2 a5 3f 1d a9 cd 72 02 93 fa 26 16 79 7c ad 3c 16 89 1b 5f cd d4 d6 23 6d 20 bb 1d e4 73 11 40 25 e0 ca 63 96 61 24 c5 e8 13 ff fa 99 7e 7d de b4 6d 36 f2 f8 af dd 57 7f 66 53 08 d6 00 9a 25 72 f3 a6 6e 39 17 c8 ac e0 f8 da b8 c7 d1 be 76 f2 0b 6f bd e2 46 a7 c2 14 9f 9e b6 86 e6 34 4f e3 96 b3 fc c7 f4 da e2 ce c4 11 38 c4 16 7d 26 56 a0 b0 19 ff 4a e3 3c 75 e7 13 21 71 aa f0 d0 c0 b3 cf e8 fb 59 7a 1e d1 f1 3c 2d ea 6f af 08 62 2f 79 Data Ascii: 0R3a&J{ Yw-9nLZi3<S^%WmO"{<i5J8x\|Lf*6~6lw$+?r&y\|<_#m s@%ca$~}m6WfS%rn9voF4O8}&VJ<u!qYz<-ob/y
2025-03-26 09:25:40 UTC	1024	IN	Data Raw: 58 78 ef 34 04 47 ae 2c 56 60 30 3c 36 41 48 60 39 de 3b db 27 5c 5d 4f 57 1a 53 eb 27 0f a1 32 dd 71 ab f2 3a ea 9a 8a c1 0f 73 ef 0c 45 87 fe 71 23 ac 1f 36 b7 db 07 2b 1a ad aa 2b c2 36 11 d0 7f 1b a1 68 70 55 93 69 fa 70 0e 94 92 b1 4c af 43 b4 fd 0f ed 9d e2 5c e4 b6 76 cf 97 ac 5f 3e 27 be 2f ef 18 eb ba ed 21 4d 82 8b 06 b6 7f 73 7b 31 05 3a 35 a6 1a 96 7a c4 f0 72 37 e3 7e 64 b9 b4 0e 45 0c 87 34 ae d4 e5 a2 f0 fa 44 97 9b aa f0 6d 8d a9 19 b7 be 8f 8d a0 5f 56 3c 09 86 cc 3f 2e d9 2d 6a 18 a8 60 4e 35 bd a7 51 b8 03 8f dc 62 a2 08 d0 dc 86 e2 a0 5b b4 bb bd 44 e3 dd 3a 16 45 24 e5 ec 42 6c a1 34 b4 9c dd f1 94 96 4b 10 c6 76 3a 5e 47 17 15 80 0c 58 b7 22 9b bc bd 4e 0f ad ec 1c 4e e7 64 6e 3b 96 f6 4c ea 03 99 3b a5 bd 93 b8 71 89 a2 37 1f f3 bc Data Ascii: Xx4G,V`0<6AH`9;'\]OWS'2q:sEq#6++6hpUipLC\v_>'/!Ms{1:5zr7~dE4Dm_V<?.-j`N5Qb[D:E$Bl4Kv:^GX"NNdn;L;q7
2025-03-26 09:25:40 UTC	16384	IN	Data Raw: e0 ff 85 e2 16 5d 6b b7 00 2d 70 50 4b 14 1d de 21 46 24 6c 0e dc 85 a2 97 e3 0e bd d0 c5 a7 93 70 db f8 1a 8d ae 1c fc 75 90 6d 1d a5 2c c1 c2 e0 2e 17 9b 1d 94 52 2d 4a 76 f6 76 b3 d6 4d 63 9b fe ad 2d 5c 72 e0 29 ad f1 82 d7 f9 7f 1b d1 ca d7 e6 0c 76 5a 49 f0 bb 33 fa df 1f fe f0 0f 51 ac 4a e6 50 4a d8 f0 2d 17 83 72 06 0b 54 5a 35 4f 32 a6 f7 64 31 37 77 a5 b7 fe ef f3 7c f9 30 9b bd 3f 67 38 7d 86 14 9c 1a 7d e9 3a a3 77 fe f7 6d c3 b0 c5 0e 38 95 67 10 c5 5b 30 48 ab c1 44 e6 b7 89 5a b0 41 2b c9 4b 68 06 d4 7a 7f 83 81 70 b9 20 72 cc f6 42 d9 8f b3 b3 a0 dd 9d c2 2f bd 5d ba df 6e de ad ea e0 f4 1d d4 21 b7 5e 85 47 f1 9d 68 5b 72 25 6b e5 e7 1d 0f 03 47 ca 94 ef 0e 11 cc c7 31 fe bd 1b c5 c7 bf 6f dd cc ec 6f 29 7d b2 fb cf 3f d6 a9 5e df 2d 5d Data Ascii: ]k-pPK!F$lpum,.R-JvvMc-\r)vZI3QJPJ-rTZ5O2d17w\|0?g8}}:wm8g[0HDZA+Khzp rB/]n!^Gh[r%kG1oo)}?^-]
2025-03-26 09:25:40 UTC	1024	IN	Data Raw: 74 80 68 d0 ea d6 b9 44 ce 1d 48 39 cd f9 17 e4 c5 03 1c 9c 01 54 1f a9 b9 13 56 70 1f 5d 83 1d 07 0d 5d 88 72 58 19 73 6a c0 13 48 e1 dc db 62 ae a6 e1 66 5c 0f b8 af 31 dc ae 2c 2e 91 84 1f 9c c6 d0 28 97 07 4a a8 dc 6e 91 51 58 25 99 c0 81 57 09 51 5c a8 64 7d 73 a2 0c 33 e6 b6 6c 9a 9f 0a 00 a4 93 4b 00 96 3c 5e 65 f2 9c 18 03 51 01 33 f6 27 b6 05 72 87 e7 a2 4f 96 4f e2 a1 00 8a 56 1b 9d 70 a3 c8 70 ce 48 6d 1e 8d 67 06 4f 9d cb 3b c9 21 5c c7 cc 1d e5 75 32 db 08 5a 5b 6a 0b ca 76 51 ee 48 97 5e aa 5b fe 02 22 3b 4c 30 bb 77 7e 03 4c 98 29 fb b1 45 7a 8e 65 28 e8 52 5f 61 85 d5 1e 2f 04 c4 91 e5 af bc b7 18 a9 ce fc 76 9f 5d 5e e6 f3 82 e0 a2 b7 83 92 d7 d8 54 45 cc ea f0 94 e3 e6 18 38 44 58 38 fb 04 bc e6 de d7 9c d5 ca 79 96 1b c7 a9 10 49 06 51 Data Ascii: thDH9TVp]]rXsjHbf\1,.(JnQX%WQ\d}s3lK<^eQ3'rOOVppHmgO;!\u2Z[jvQH^[";L0w~L)Eze(R_a/v]^TE8DX8yIQ
2025-03-26 09:25:40 UTC	1730	IN	Data Raw: 24 e4 58 99 ac 63 50 60 e1 ee 97 ce 63 ca ec 9e 14 93 17 dd 9d 48 4d b2 63 f3 0a 8c 86 74 2f 21 b9 84 c5 63 0d df 4b 6f c7 94 0f f9 cb d6 36 4e 56 89 c6 2a 32 80 b8 11 e9 3d 43 9f 78 52 28 7b 69 73 fd a7 32 1f fd 08 79 50 89 94 dc ec 47 2c 7e 89 16 15 42 0a e5 8b 79 24 d9 a2 7a 72 33 c7 fa 20 96 b4 2d 34 7b d6 63 35 96 90 b1 dd 55 1d 0b ae f2 9b 9c e4 1d 30 4e fc e5 1b 70 0e 45 9f 9a eb 19 48 97 00 fe f2 50 5a ad ea 30 e0 1e d9 18 43 1c 0b b2 4d d0 60 ca 91 05 50 aa 8f f4 ee 19 d7 0e 0a 3d 55 49 4d 3b 7d 22 4d 57 7b 61 89 39 e9 9b 24 bf de d1 47 52 1b bb 8f 6b ab a5 4c 44 63 09 5d 66 10 5b 7d a5 7e cd d8 ba 6d 13 e2 d3 f0 f9 34 f5 11 7d 13 6b c9 16 fd 14 f4 d3 e7 21 20 9c 2b ec ac 3d 5a 20 86 21 a8 e1 1b c6 36 83 a8 ba 20 59 9c 5b 4a 06 92 c1 73 b6 12 c9 Data Ascii: $XcP`cHMct/!cKo6NV*2=CxR({is2yPG,~By$zr3 -4{c5U0NpEHPZ0CM`P=UIM;}"MW{a9$GRkLDc]f[}~m4}k! +=Z !6 Y[Js
2025-03-26 09:25:40 UTC	12792	IN	Data Raw: a6 3a 99 85 ba 2b 10 40 66 42 eb 32 71 a1 ba a0 4d ec 38 39 9d d1 fa eb 47 7d 8e 1d 59 b1 3b 87 7d 20 ef 58 b1 f4 10 1f 96 45 a5 25 bb 55 53 07 0a bf 1f be 18 0f 19 1d 85 57 ec d4 d0 f1 83 5e 30 d5 4a 9d c2 76 a4 21 60 7f 87 50 99 3e c5 91 f6 92 ef d3 fa 29 55 8a d1 27 69 79 ff 4b 56 77 2a d8 b8 0b a6 fd 53 95 0b 63 f8 2b 45 95 f5 3a 65 47 4f bc 7e 28 4b d8 f0 c1 ff 24 e0 4d 63 93 07 56 a8 72 ef c8 ce aa be d0 99 a8 bd 51 42 c9 54 e7 1c 19 fd 97 48 c6 9d 8b b2 a6 37 a0 81 fb 86 e4 3d 55 37 81 de 1e 15 97 82 e2 35 25 ae d7 13 7a a5 dd 8a be e0 09 aa 89 0c cb fc df a9 45 46 0f 4a 23 05 3e 94 b1 97 46 ca 7d ba e9 e4 54 bb a0 4c 07 89 32 75 8f bd e0 7b 1a af 99 67 7a bf 1c c8 59 d5 8c 12 17 5e 19 20 37 f7 f7 9d 72 63 64 89 17 7f c9 c3 1f db 6d 43 25 08 72 fb Data Ascii: :+@fB2qM89G}Y;} XE%USW^0Jv!`P>)U'iyKVw*Sc+E:eGO~(K$McVrQBTH7=U75%zEFJ#>F}TL2u{gzY^ 7rcdmC%r

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:40 UTC	647	OUT	GET /assets/cdn/prism-733177846dd200c6e56035b34e8d52c5352eedcc6dc73f2dcc44a74ecd560ee2.js HTTP/1.1 Host: assets5.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:40 UTC	687	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 16592 Connection: close Date: Wed, 26 Mar 2025 09:25:41 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 30 Aug 2024 11:27:59 GMT ETag: "41d0a2a6fccbf5062dd56d941fc51fde" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Sat, 30 Aug 2025 17:27:58 GMT x-amz-version-id: KX3UluYFWvIuc1eR4EjRhrZjHZSOI75M Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 bc413bb41d41a5b805e3b9ecdcebc510.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: VnpnATlywxrLxS3nn7z84k1FjPAhcfxVhh1Xw-INz-hR3hlD-vWinw==
2025-03-26 09:25:40 UTC	8192	IN	Data Raw: 1f 8b 08 00 ff a3 d1 66 02 03 dd 7d 7b 77 da c8 b2 ef ff f7 53 60 25 63 23 23 c0 c9 de 67 9f 73 70 64 82 31 b6 d9 83 81 01 9c c7 06 e2 2d 40 b6 35 c1 12 23 89 d8 1e 37 f3 d9 ef af aa 5b 42 e2 e1 38 33 7b ad bb d6 9d 89 a5 56 ab d5 8f ea aa ea aa ea ae e2 9b e5 67 ae 02 7b 7a 6d 6a 73 77 62 5f 3b ae 3d d1 76 cc f0 71 66 7b d7 99 7b c7 9d 78 f7 65 79 2b 6d 2a f1 d1 f3 bf da fe d9 d4 1b 59 d3 ee d8 9b d9 bb bb 54 5b c6 71 83 d0 72 c7 1b 8b 94 a9 44 e9 69 61 b4 7d 27 b8 33 af e7 ee 38 74 3c 37 6b eb 4f 51 3a 13 66 6d 23 34 1c c3 32 5c fd 29 bc 75 82 02 35 68 22 93 d2 63 cf 0d 6d 37 34 43 f9 68 4d 1d 2b 30 1d f9 30 b5 dd 9b f0 d6 3c 10 59 4b 08 4d d3 55 86 7c 79 e3 db f6 e4 d1 dc d9 71 17 df 30 72 c7 2c 0e 46 53 cb bd c9 96 4b 73 eb c6 d6 cb f9 6c 7f 70 9f 1f Data Ascii: f}{wS`%c##gspd1-@5#7[B83{Vg{zmjswb_;=vqf{{xey+m*YT[qrDia}'38t<7kOQ:fm#42\)u5h"cm74ChM+00<YKMU\|yq0r,FSKslp
2025-03-26 09:25:40 UTC	166	IN	Data Raw: b2 07 06 a8 e1 9a e3 7f d8 05 8e 21 81 5a ec 65 0c 90 f9 72 0a 75 23 e9 bb 68 19 73 9d 23 df 2c eb ba cb dd 46 a0 31 be 11 4e 5e ed ee 7e 4b 06 4f f8 66 40 90 bc 82 d4 60 c8 ec ec 35 aa d8 54 e6 86 ca 6c 18 b0 97 8e 2d e2 19 fd a9 f1 66 48 30 18 5b 61 f6 9b ae 2f 01 62 7e 5b c8 48 22 09 e8 fb d9 25 b8 a3 d0 1f de 22 42 85 40 e7 3d 95 cd 3c 42 b9 f5 a5 4f 24 c4 06 12 d2 48 48 09 51 7a bc 52 f4 23 6b 09 5b 37 a2 f3 8c 74 5a 01 aa 04 01 77 22 94 6e 49 9a 0f 14 9a 48 51 61 ed 5f ea 4d ca bc 92 38 Data Ascii: !Zeru#hs#,F1N^~KOf@`5Tl-fH0[a/b~[H"%"B@=<BO$HHQzR#k[7tZw"nIHQa_M8
2025-03-26 09:25:40 UTC	8234	IN	Data Raw: 46 b9 d4 6b a4 46 c2 9b eb ac 31 a9 53 26 4a cd e1 b7 81 54 bc d8 16 93 38 75 a9 54 1c 0c 02 9c 94 ce 2b 48 6b 51 7c 40 db 8d 36 e7 49 1f 62 1b 12 1f 5d 48 ec a7 2a c3 06 9b 15 a4 5a 17 1d 6e 60 ab 0b cd dc 38 bc 9e 2d 4d 0e d2 cc 24 0d 3f ae 45 5b 68 4a b9 92 4a 13 ed c6 f3 a1 04 e5 c0 1f 69 76 e0 ab 2e 5f 78 e0 df c0 f6 83 48 6b 0b 04 a0 2a 87 c0 d5 cd 03 64 d1 31 4e 16 3f 38 76 6c 74 2e 12 a2 07 1f 3a c2 5d 2f e3 6d ca dd 92 ce d2 3d ab 23 a7 37 df 1d 23 25 d0 a8 9d 76 3a d6 74 68 98 59 1d 32 71 71 a9 18 87 c9 5d 82 be bd ee 59 93 50 d0 92 f2 6a 69 50 d2 a9 c7 2c f8 3e e7 46 c1 16 9a 21 fe ae 86 fb 8d 32 9d 02 8e 37 a2 91 13 9b 69 ae 66 b9 7c 72 63 1a b9 f1 eb ab 61 b4 a5 26 1f 92 c7 bf 54 4e b9 3f b9 9e 0e 53 9b d7 eb fe 34 74 c8 8a dd 99 8e d8 ef 20 Data Ascii: FkF1S&JT8uT+HkQ\|@6Ib]HZn`8-M$?E[hJJiv._xHkd1N?8vlt.:]/m=#7#%v:thY2qq]YPjiP,>F!27if\|rca&TN?S4t

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:40 UTC	625	OUT	GET /download/TeamViewer/TeamViewerLogoTP.png HTTP/1.1 Host: download.delfi.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:41 UTC	302	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 09 Jan 2025 14:37:54 GMT Accept-Ranges: bytes ETag: "8c964611a462db1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Robots-Tag: noindex, nofollow Date: Wed, 26 Mar 2025 09:25:40 GMT Connection: close Content-Length: 22947
2025-03-26 09:25:41 UTC	16082	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 93 00 00 00 19 08 06 00 00 00 35 ce 1c ab 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 3b 9b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDR5pHYsZ;iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf
2025-03-26 09:25:41 UTC	6865	IN	Data Raw: 8b 9a 5a 90 22 d3 6a 41 59 5e 8b 7a d6 0a 74 cc e4 ff 3a 32 64 5a 5d 5a ba 5d 92 ba 6e c6 bc 3f 8d 3f 12 66 92 c8 57 75 52 e0 09 c6 8c 4b b5 d4 e0 1b c7 c4 5c 7f 4a 1b 04 ad bf e7 ad 12 e1 15 38 79 51 81 9f 2d 6a f0 c1 35 fd 7c fc c7 25 0e 0d 65 c9 76 0a 6c 32 89 1e 8b 98 9c 60 41 38 82 6c 87 8b e3 59 74 c3 22 84 75 24 76 96 c0 f8 02 ab ff 6f 9a 49 82 27 31 0d 81 ed 75 b0 3a 36 3e a1 11 14 9d f0 75 20 ff ef 1b 52 08 1a ca 32 16 2a 94 05 d7 2a 6a 52 77 75 48 93 93 42 ee b1 34 8f 90 b5 e0 48 c8 a5 1c dc c9 7d c9 05 0e 81 63 3b cb 91 cd 76 f9 76 af 23 6c 87 b0 d6 93 c2 f6 cb c9 93 f7 ea df 3f 20 30 09 1c 69 71 1d 28 59 97 72 39 e4 27 a7 28 3e 72 e2 74 c0 e7 d5 cd 78 15 19 6f be c5 02 40 a4 f8 c0 a9 73 39 b2 b3 8f b3 6f 1c 64 64 28 4f a6 5d 60 8d 05 03 98 e6 Data Ascii: Z"jAY^zt:2dZ]Z]n??fWuRK\J8yQ-j5\|%evl2`A8lYt"u$voI'1u:6>u R2**jRwuHB4H}c;vv#l? 0iq(Yr9'(>rtxo@s9odd(O]`

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	655	OUT	GET /assets/cdn/portal_bottom-b13f0ef6352d3ae3936782ceb4fed0eaa1daf148bfc7776df3256680ae6aa1b6.js HTTP/1.1 Host: assets3.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:41 UTC	688	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 150308 Connection: close Date: Wed, 26 Mar 2025 09:25:42 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Feb 2025 05:47:32 GMT ETag: "63a0caca29a6d4efa50f2835fd5e5879" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Tue, 17 Feb 2026 11:47:31 GMT x-amz-version-id: nwxfIsh46zOCw3B9v3KefqF5_UKGfCVX Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 bc397a5c4f2c5ddf6817ed88b68e4c28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: mdckpX_NjklSfQ8plp3kUzwZQI_Q1GvUCrw9ANXOARDhZJrzaXkfmw==
2025-03-26 09:25:41 UTC	6396	IN	Data Raw: 1f 8b 08 00 fe c4 b2 67 02 03 cc bd 69 7b db 46 d2 28 fa fd fc 0a 12 71 64 20 6c 52 a4 ec 6c a0 61 1c c5 cb c4 f3 c6 b1 4f ac bc c9 bc 14 a3 0b 91 90 84 31 08 70 00 d0 b6 86 e4 fd ed b7 96 de b0 50 56 66 ce 3c cf cd 13 8b 40 a3 f7 ae ae ae aa ae e5 6a 93 2d aa 24 cf 7a 9b 2c f9 c7 26 3e 2d 8a e8 d6 8d bd ed 55 5e b8 1f a2 a2 57 05 f1 68 91 67 8b a8 72 3d 91 04 e3 69 f2 a4 1a a5 71 76 5d dd 4c 07 83 c4 53 f9 a2 20 19 4c a6 91 fd 31 f2 aa 59 32 0f 82 a0 9a 45 f3 a3 a3 6a 54 ae d3 64 11 bb d1 70 28 26 de b4 88 ab 4d 91 f5 aa fd 95 ea c2 75 5c 3d cb f3 f7 49 8c 1d e0 c6 9d 69 cf 19 2c f3 c5 66 15 67 15 74 04 bf 42 37 b8 ae ca a5 cf f1 c0 09 1c 5d df 49 10 24 b2 0f 61 32 5a e7 6b d7 d3 99 1d 78 bc 49 ae 60 28 fe 87 3c 59 f6 c6 a6 ed 65 9c c6 55 cc cd bf c9 4e Data Ascii: gi{F(qd lRlaO1pPVf<@j-$z,&>-U^Whgr=iqv]LS L1Y2EjTdp(&Mu\=Ii,fgtB7]I$a2ZkxI`(<YeUN
2025-03-26 09:25:41 UTC	1929	IN	Data Raw: d8 68 ee 82 ba fe 8c 27 c5 5f 01 18 35 32 ac 2c f0 d9 f3 f5 18 c2 6e bf 06 bb b5 85 52 fa 37 f5 8a 76 3b b7 be 9c 1f 1a 2d 79 de f4 3a b8 74 97 c2 54 2c 0a 6f bf 20 d1 eb 2d b0 3b ae 13 e3 f1 09 40 ba b9 be a9 7c 94 f6 02 33 07 5c c6 72 44 1f 82 5b 28 1a f3 c9 2b 1f f8 cc d7 c2 07 b1 14 5c 07 95 dd 18 b6 0b 10 db f5 35 6e 65 3c 91 5f 70 8e 19 f4 44 dc ce bd bd 46 55 30 39 d0 89 cd 1a f7 7b 4f a6 39 dc 07 f8 8b 9a bb 80 56 17 68 e7 8e 1d 90 8f cd 2e 5c 0b 47 7e 21 91 ff a1 4e bc 53 79 b0 1b 73 ef 70 c6 67 f9 6a 4d 66 f1 32 27 66 ec 0f 87 f1 08 11 f8 87 f8 50 f5 40 3b 3a 78 52 2e 64 71 ec b1 7a 6e cf 5a 14 ea 4e fb 72 06 e1 10 e9 3c 5b 53 89 23 9f b3 07 07 3c 97 d7 44 88 0e 25 22 f5 44 6a 8c 83 eb 20 81 70 b3 17 93 f1 18 19 4f 46 94 6b b9 4f 00 8a 7d 3a 61 Data Ascii: h'_52,nR7v;-y:tT,o -;@\|3\rD[(+\5ne<_pDFU09{O9Vh.\G~!NSyspgjMf2'fP@;:xR.dqznZNr<[S#<D%"Dj pOFkO}:a
2025-03-26 09:25:41 UTC	16384	IN	Data Raw: 4f bb 65 52 3c 15 aa 52 55 de 92 36 79 8d 0d c7 10 75 c8 2d 85 d4 7a e9 00 b4 5e 1b 20 54 d5 16 a1 12 b4 61 84 4f 9b e6 be 56 68 49 de 2a 48 0a 14 75 dd c3 e8 80 a8 f7 2b 07 70 8f d6 59 21 58 cb ea f5 94 a2 10 44 40 01 fb be 21 4a 08 51 f3 52 03 d5 74 29 51 33 94 5d 00 60 95 73 91 07 0b f6 a9 89 64 01 22 0d 98 40 60 91 14 60 2d 18 b0 16 9a 57 df ed 28 4b 3f 58 a0 0d 4f 17 69 13 c3 59 ce 3e 33 e9 d4 b4 73 10 4f 2e b3 45 bc 64 7b 61 be dd d6 bf dd ee 3d 4f 43 26 52 57 e4 68 92 4c b3 81 32 42 b7 8b e9 d1 51 4a d7 b7 55 b1 21 ad ae c0 90 75 05 8c 7c 13 68 3f 14 9b a7 c5 b4 c0 91 77 52 63 b3 42 93 74 ca 63 42 4d 71 d2 76 a9 90 1c a0 e7 68 41 d4 14 aa cb 02 c4 a6 f8 0a 54 07 89 3b 73 38 26 c9 6b 6b 7e 74 d4 bf b1 24 20 7a c6 6f 94 34 a3 b3 9d f5 ff b5 99 dd 1b Data Ascii: OeR<RU6yu-z^ TaOVhI*Hu+pY!XD@!JQRt)Q3]`sd"@``-W(K?XOiY>3sO.Ed{a=OC&RWhL2BQJU!u\|h?wRcBtcBMqvhAT;s8&kk~t$ zo4
2025-03-26 09:25:41 UTC	1024	IN	Data Raw: 16 24 b4 d9 15 d8 c4 b1 58 06 c7 d0 59 95 78 49 0a e5 c7 b0 53 8f 67 e7 83 f3 e1 fc 7c 39 70 cf 47 b3 f3 e5 7c e0 85 5f 86 c7 62 1d 1c ff 71 fe 71 70 2c 6e 82 e3 2f 1f 1c 8b 0b 8e a1 a1 94 23 a7 b1 7e 0c a4 09 cd 65 24 95 c9 6d 7a cb d2 e2 d4 67 58 a6 e2 29 02 59 1a d7 bd 96 4a 6f 90 3e 39 2d 9b b6 7d 98 f2 9c 7e 8d 6e 49 e5 4c d2 b3 f6 50 ca 56 37 e8 a1 d4 aa b4 e6 cd 94 6b 40 93 1c ed c7 54 99 3b 8a 32 88 2c f7 28 16 ec c6 ca bf a9 f2 f9 16 e1 fd 4c 29 57 8b 55 e6 a3 86 d5 8d 70 78 5a 90 23 6a 64 95 d7 b9 6e 42 41 72 6d df a8 78 d5 a3 9d cb 64 41 35 4c c8 c3 19 fb 7e 7d 95 5d e5 5d 16 4a 7a 3f e0 c9 9e 94 ea d2 37 74 1c 00 28 c5 34 b5 8c 7d e8 be e9 cf 97 bc 25 43 0f 35 36 a9 05 8b d3 e9 c8 3b 6a de 88 4f 2a 5b c5 93 73 f3 e0 4b bb 70 64 15 8e b0 30 af Data Ascii: $XYxISg\|9pG\|_bqqp,n/#~e$mzgX)YJo>9-}~nILPV7k@T;2,(L)WUpxZ#jdnBArmxdA5L~}]]Jz?7t(4}%C56;jO*[sKpd0
2025-03-26 09:25:41 UTC	16384	IN	Data Raw: 09 8c ce 4d 7e f7 a1 80 01 cd 2b 08 55 5e 81 cd 33 1c bf c5 df b1 e6 62 85 f0 67 ed 05 68 d4 de 88 11 5f 06 82 4a bc a6 39 a4 a1 05 0d fc e4 6e ba 13 23 fa 1a 67 07 47 18 68 b0 c9 9b e9 06 dc 17 a8 b3 85 ba 39 5f 11 89 4d a5 e0 95 88 19 e5 1d 77 c7 f7 d8 9b 43 ce 39 54 d6 15 65 7d a6 b3 3e 33 b2 ee 38 eb e6 90 df 76 db e6 9f 80 b3 b7 2e 66 57 cd 82 66 b2 18 ae 66 0b b9 64 f5 01 27 48 a2 a1 59 62 42 08 a0 2a e6 ba a8 20 9d 5c 9c 45 72 27 a8 d1 75 9d 1c e6 bb ab bb 47 8f ba 74 98 34 d9 93 3b 88 3f 79 a1 ab 29 b9 3c b1 af af de 40 b2 6a d2 67 4f de 60 32 ae a2 e4 b2 b2 7c 9b 42 b0 f3 bc 03 53 86 2b 78 a8 e0 a1 cf b2 c5 fa a2 b9 83 58 de 55 2b 2e 29 5d 41 52 58 1f b8 c8 84 27 cb f4 ea cb d7 68 47 ce 14 88 da dd 62 21 62 da 62 79 c8 a4 1b a6 b1 60 cb fb d7 8d Data Ascii: M~+U^3bgh_J9n#gGh9_MwC9Te}>38v.fWffd'HYbB* \Er'uGt4;?y)<@jgO`2\|BS+xXU+.)]ARX'hGb!bby`
2025-03-26 09:25:41 UTC	1024	IN	Data Raw: 41 0b 52 75 43 ae cf c2 79 9e 3e 64 b8 c7 fa a1 42 85 1f e9 48 74 23 90 34 d4 f6 7a 73 dd 72 50 3d 63 59 6a 11 7d 27 96 b7 45 be 2d 2e 8b e9 a5 38 79 f5 db 73 ff e6 96 5b fb 5f 46 d4 f9 4e b2 be a3 0a 04 e0 4a 81 be da c3 a9 92 59 31 4a 25 65 65 91 0f 8d 67 7e 68 1e bf 9f 57 93 f0 01 fc 79 35 4d 93 d7 cd fb 7a 15 22 61 16 d3 51 32 a3 80 68 a7 ad 45 60 7e 5e 99 70 dd 93 e8 15 12 6e 10 7d f9 b8 16 11 91 62 35 49 3a 7e 7e 5e 11 2d 67 3b c1 87 e5 e9 1e 34 ac c4 28 d9 2a 48 92 ee ff 82 b5 b3 0e ae 9d 2e b0 76 34 05 fb 69 7d 19 4b e8 74 41 05 b4 b7 97 45 19 45 b0 89 80 cd 04 a8 16 e4 96 7c 94 1d cd 0d 3f 71 73 90 88 c5 d6 bb cb f7 11 8b 5b 76 7e fe cb 34 c8 d8 fa 35 5c 42 0d db 32 f0 3e 6c 2d ec 78 57 7b 0d b8 f2 4a fa 22 d2 87 2f 3e b2 0f 7e 0d 5f 46 fa f0 65 Data Ascii: ARuCy>dBHt#4zsrP=cYj}'E-.8ys[_FNJY1J%eeg~hWy5Mz"aQ2hE`~^pn}b5I:~~^-g;4(*H.v4i}KtAEE\|?qs[v~45\B2>l-xW{J"/>~_Fe
2025-03-26 09:25:41 UTC	10184	IN	Data Raw: 91 00 d0 50 0b e2 a4 de d6 15 d4 9f 5c 9d ad 9b b3 ab b3 e2 75 b3 ed 87 29 9a 50 e6 e2 11 ee bc 75 93 15 90 89 23 88 e2 9e 67 b0 ff 66 69 d4 fb 9d 2c 4c dc 91 f0 7e 2a 66 52 d0 be e2 a2 bc 9c f6 ba aa c0 d7 3a 39 04 d1 f3 9f 9a ef 0e 39 e0 b2 82 f8 51 54 68 4b 35 0b 10 88 8b 13 98 de 92 f4 d2 fa a0 c5 c8 ce 1b 4a cb 2f a5 9a 88 9e 0e 39 10 29 91 fa e0 53 b0 3e fa 60 d6 67 bd e1 fa e8 25 d7 87 4f f1 28 82 81 d8 68 18 e7 5c e4 2a d5 d3 77 b0 03 d5 19 10 44 cb 57 6b 08 2c ce 69 6d c1 2f da 0b 10 db b6 c6 88 b6 68 ea 2a 18 19 08 bb 0a 84 4e 03 81 6e c1 a0 57 2f 24 30 68 a7 39 97 18 6a 30 41 e7 25 bf 84 43 4c fe 2c 67 1a 94 b4 5b d6 82 a5 aa 5a 41 12 a2 f6 9b 52 3c 99 a1 0c 88 1e 26 ac 2a 83 b5 a2 ac 2b 73 cb c3 36 95 16 05 cf 70 b4 30 b2 05 00 ab 17 1e fa f8 Data Ascii: P\u)Pu#gfi,L~fR:99QThK5J/9)S>`g%O(h\wDWk,im/hNnW/$0h9j0A%CL,g[ZAR<&+s6p0
2025-03-26 09:25:41 UTC	16384	IN	Data Raw: 13 82 db 3e 4b ae aa fd fe 5c 30 16 32 92 eb 8f af d3 2a bb 82 c0 1c 0a be 4a 8a cf c2 92 ca 23 43 24 48 8b 4a 2a ac d0 3b 56 10 e2 15 fa b3 fc 67 b5 ce 80 17 74 46 05 23 98 91 0a cb 1b 90 ca 1e 90 5c 16 bc b0 2a a0 8b d4 cb 4c 99 9e 75 ed eb 06 3c fc d0 13 24 75 e9 02 87 3e ab 5c f5 a9 4b 29 46 12 18 6b 53 d4 24 f9 d9 36 bb 3f 30 8f 0c 24 ae b5 86 ad a1 05 46 bb e4 11 14 b3 c5 22 1b 50 f9 46 a4 3a a8 0c ad d9 32 3a 67 df a1 3f c0 cc 93 fe d6 6e 67 48 52 80 71 36 47 b4 cd 3c e7 8a 79 ce 57 f3 26 36 ff ee c0 48 0e d4 bb 5a e9 35 c4 11 f6 a6 43 7e 93 b4 2b 6c e0 54 10 a6 c0 8a 36 6e 31 47 d5 e6 0e 5d 14 ae 88 49 b1 2c 0b 6d 7d 34 8d 40 4b 02 a8 03 ad 2b da 45 cb 18 30 f9 b5 60 87 6e b2 42 f0 e0 3d 82 c1 89 ee 74 a9 d6 3f e6 48 fc c9 75 5f 06 96 a8 b6 1b 18 Data Ascii: >K\02J#C$HJ;VgtF#\*Lu<$u>\K)FkS$6?0$F"PF:2:g?ngHRq6G<yW&6HZ5C~+lT6n1G]I,m}4@K+E0`nB=t?Hu_
2025-03-26 09:25:41 UTC	1024	IN	Data Raw: 87 4f 3c bd 92 47 5e d6 1b 12 67 26 26 9d 24 09 dd e0 14 86 04 6e 89 ad 79 48 64 f7 4f 90 85 1c 1a c0 13 16 8d aa 21 3c d9 25 53 0d 0f 62 7c f7 28 90 89 db bd 08 a1 09 e1 57 38 30 fc 7b f7 1c 76 b5 70 7f 0b 74 ba 7c 57 36 25 9c 18 d9 95 ce 8e b5 e3 6c df 11 37 55 c3 4c 4f a7 d3 e5 2f db b0 42 07 53 84 7d 08 dc 8c 09 a3 41 42 26 95 ef 6a b5 ca d7 94 6d 16 f5 e8 24 c6 4b 23 f2 3e 52 29 1e 9f 77 d7 1c e0 5f 26 eb be 34 71 31 2e eb 37 fc 8b 9a cc 65 da 2c c1 3a 84 47 81 b2 af 51 ab 40 cf 2b f5 0b f9 82 f6 eb 1a 56 a9 8f cd 8e de 3b 3c f8 d3 91 c2 63 01 b5 fd 0c a3 19 2d 56 75 55 7c 5b 2f 8b 78 9f 99 9e c3 4b 40 21 ea 54 01 22 8b 28 c2 e6 0a fa a0 00 84 fd b7 b3 ae b9 be 29 b3 65 b1 80 56 fe f1 fd d3 c7 80 11 a0 cd 0a 51 d5 16 be 5a 5c c6 55 72 b3 c5 5a 79 a8 Data Ascii: O<G^g&&$nyHdO!<%Sb\|(W80{vpt\|W6%l7ULO/BS}AB&jm$K#>R)w_&4q1.7e,:GQ@+V;<c-VuU\|[/xK@!T"()eVQZ\UrZy
2025-03-26 09:25:41 UTC	16384	IN	Data Raw: 38 aa 78 1d b4 b9 29 e6 85 e6 0c 8e 4e f7 a3 3f bd ff e0 83 38 39 18 89 c3 9f 8e d2 d9 67 d9 c9 fc 3f 7e 3a fd e9 ec a7 ff fa df 37 b7 db ff 3e 3b 7a 25 a2 9f 7e fa d3 83 28 c1 50 56 a1 74 3a c1 b0 61 6a cb 31 d3 d3 e1 e2 b2 5c 2d 9b 02 f0 51 0a 94 59 9c 9f 22 7b 72 96 50 02 1b 8b 44 46 3a b8 7c 67 fa b7 b4 48 df 20 f5 de bd 13 e5 ab 89 9e fd 02 29 f4 2e 2f ab 36 b6 67 43 51 cb 4c 7d f4 24 9e fb 07 8e 42 6b 69 42 5f bb 6e 2b aa 59 b1 38 86 88 56 5c b3 8f 4d ac 93 a4 d5 2e 13 3d 23 f4 82 45 e4 95 76 0e d9 ee d3 7f 8a 98 da 39 80 80 60 6a 30 04 a1 77 ae 76 85 35 74 c0 da ae 48 27 c0 a9 e5 c0 b3 5d d5 3a 05 36 2e c1 54 13 f6 fc 1c 61 a5 be 3e bd dc 7c fd 9c 7d ca e0 21 1d eb bc f0 74 33 5a 1d ec 22 51 13 19 78 d6 e9 dd cd dc b6 0d f1 44 73 bb 95 3e 93 2b d9 Data Ascii: 8x)N?89g?~:7>;z%~(PVt:aj1\-QY"{rPDF:\|gH )./6gCQL}$BkiB_n+Y8V\M.=#Ev9`j0wv5tH']:6.Ta>\|}!t3Z"QxDs>+

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	690	OUT	GET /EN HTTP/1.1 Host: download.delfi.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:41 UTC	277	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://download.delfi.com/EN/ Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Robots-Tag: noindex, nofollow Date: Wed, 26 Mar 2025 09:25:40 GMT Connection: close Content-Length: 153
2025-03-26 09:25:41 UTC	153	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 6f 77 6e 6c 6f 61 64 2e 64 65 6c 66 69 2e 63 6f 6d 2f 45 4e 2f 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://download.delfi.com/EN/">here</a></body>

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	692	OUT	GET /en HTTP/1.1 Host: snlookupv2.delfi.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	936	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:25:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Tue, 10 Sep 2024 13:01:17 GMT vary: Accept-Encoding cf-cache-status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kfVfmWVQgQKL%2BQiiFoU%2B0wwYZANjuQxhRNd4ioEzYLxNzaYrWVN88BDJ6zufBAv4F9bhRRpwxkGzUKpUEuTjo7egc287ypWxCgPDq7S9a4gM3VJmNeuCpdzhxn%2FbCf5UeALnhTW8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 92659a27e97f8c3b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101009&min_rtt=100150&rtt_var=22418&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1264&delivery_rate=36258&cwnd=238&unsent_bytes=0&cid=a9a059dec7434661&ts=642&x=0"
2025-03-26 09:25:42 UTC	433	IN	Data Raw: 31 35 39 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 61 76 69 63 6f 6e 2d 61 37 63 36 32 30 39 62 2e 69 63 6f 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 Data Ascii: 1594<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <link rel="icon" type="image/x-icon" href="/assets/favicon-a7c6209b.ico"> <style type="tex
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 30 30 43 2d 32 30 30 44 2c 55 2b 32 30 41 38 2c 55 2b 32 30 42 39 2c 55 2b 32 35 43 43 2c 55 2b 41 38 33 30 2d 41 38 33 39 2c 55 2b 41 38 45 30 2d 41 38 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 6c 61 74 69 6e 2d 65 78 74 2f 33 30 30 2f 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 Data Ascii: 00C-200D,U+20A8,U+20B9,U+25CC,U+A830-A839,U+A8E0-A8FF;font-display:swap;}@font-face {font-family:Poppins;font-style:normal;font-weight:300;src:url(/cf-fonts/s/poppins/5.0.11/latin-ext/300/normal.woff2);unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 46 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 6c 61 74 69 6e 2d 65 78 Data Ascii: e-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20CF,U+2113,U+2C60-2C7F,U+A720-A7FF;font-display:swap;}@font-face {font-family:Poppins;font-style:normal;font-weight:500;src:url(/cf-fonts/s/poppins/5.0.11/latin-ex
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 36 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 6c 61 74 69 6e 2d 65 78 74 2f 36 30 30 2f 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 46 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 Data Ascii: 600;src:url(/cf-fonts/s/poppins/5.0.11/latin-ext/600/normal.woff2);unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20CF,U+2113,U+2C60-2C7F,U+A720-A7FF;font-display:swap;}@font-face {font-family:Poppins;font
2025-03-26 09:25:42 UTC	992	IN	Data Raw: 74 2e 62 6f 64 79 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 66 72 61 6d 65 27 29 3b 61 2e 68 65 69 67 68 74 3d 31 3b 61 2e 77 69 64 74 68 3d 31 3b 61 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 27 61 62 73 6f 6c 75 74 65 27 3b 61 2e 73 74 79 6c 65 2e 74 6f 70 3d 30 3b 61 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 30 3b 61 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 3d 27 6e 6f 6e 65 27 3b 61 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 27 68 69 64 64 65 6e 27 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 69 66 28 27 6c 6f 61 64 69 6e 67 27 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 63 28 29 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 Data Ascii: t.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(wind
2025-03-26 09:25:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	656	OUT	GET /assets/cdn/i18n/portal/en-89d70c1cfc14e8bfd1100be59d517490352cdbdeb82858862f30e630a2a10c2a.js HTTP/1.1 Host: assets9.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:41 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2057 Connection: close Date: Wed, 26 Mar 2025 09:25:42 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 11 Jun 2024 07:51:11 GMT ETag: "986c98b8f9af27fc9a60b9674aea05d6" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Wed, 11 Jun 2025 13:51:10 GMT x-amz-version-id: .G.cwZdYXWOolpiDhiimRzsKXMvuHMkv Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2bfd6688fc2f119397b69ac2ba4187b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: FGE6DhHqxFQdda2TnATZuITIdu2nwJJ5pwoFIWuGWxl1r0LohRFS6w==
2025-03-26 09:25:41 UTC	2057	IN	Data Raw: 1f 8b 08 00 7c f7 67 66 02 03 95 58 6d 6f 1b 37 12 fe 2b bc 3d e4 9c 00 7b 6a 12 20 40 a1 36 3d f8 d2 24 70 51 3b 46 e2 f4 70 9f 08 6a 97 92 58 ef 92 6b 2e d7 92 e0 e8 bf df 33 43 ee 8b 54 a9 87 7e b1 96 f3 46 72 e6 99 17 fa ea d5 f7 76 16 bc b2 6d a5 82 71 b6 fd f6 ed f9 d5 31 ed ed d3 fe 45 fe 07 ea 4c db b7 4c d4 db a0 6d f9 fc 94 c0 b7 6f 4f fb fc a9 70 75 ed ac fc bd 95 53 f6 fc 49 ad b4 0d f8 6d aa ce ab 6a 9e c5 75 96 b7 c6 ae ba 4a f9 44 c9 f6 79 51 48 5d 2b 53 4d 84 8b 42 44 d2 54 be 27 92 4a d7 06 57 6b 3f 55 e9 49 07 2a 89 08 95 52 57 3a 68 69 5d 30 85 1e d5 9e 3d 85 5d a3 f7 62 a3 bd 16 51 a6 9c 5a 18 f8 aa 1d d8 30 e6 36 b6 72 aa 94 95 5a 68 58 f9 39 ad b3 1c 57 d2 5e 2a 1b af 34 cf de d3 5a 28 9b 8e 9e 9b a0 eb 71 77 5a 1d 1c 98 08 b0 5f a9 Data Ascii: \|gfXmo7+={j @6=$pQ;FpjXk.3CT~Frvmq1ELLmoOpuSImjuJDyQH]+SMBDT'JWk?UIRW:hi]0=]bQZ06rZhX9W^4Z(qwZ_

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	750	OUT	GET /assets/cdn-ignored/sprites/portal/dynamic-icon-s85b95186ce-e274bd42cd0ad6ac0c46c7e2bfa705d4b97c6bd0b9c736e0da2d31ffca7d3a09.png HTTP/1.1 Host: assets9.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:41 UTC	668	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5246 Connection: close Date: Tue, 18 Mar 2025 21:15:49 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 12 Dec 2022 04:52:00 GMT ETag: "0cd5e700f0d1f5e0b216936c1494b2d5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Expires: Tue, 12 Dec 2023 10:51:59 GMT x-amz-version-id: 9Prop1rQnHauXMOt7xiuurwmo9t6RADi Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 18ea14e618c57b64a442b054083b4ed6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: Md6gax98fRPSR6P5-xsH5lomlR9pZzYsgfYEAoddVbAjk_lC5u-cxg== Age: 648592
2025-03-26 09:25:41 UTC	5246	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 01 71 08 06 00 00 00 8f d2 a3 9a 00 00 14 45 49 44 41 54 78 da ed 5d 09 58 14 57 b6 2e e8 0d 1a 68 a0 55 20 46 0d 12 91 09 4b 43 12 b7 51 5e 5c 12 8d be e4 69 fc 12 d7 19 5f 5c c6 05 9f 46 27 89 1a 3f cd 33 4c 62 a2 c9 3c 3f 23 8c 8c 26 6a c6 44 0d 6a 14 c6 b8 4e 5c 10 e3 be 01 0f c6 19 25 10 37 50 a4 1b 68 96 a6 e9 6e de 39 f4 29 a7 ec d7 34 dd 5d 55 a8 5f ea 7e df f9 ba ab ba ba fe 3a e7 9e 7b ce 7f 6f dd ba 25 5f b1 62 05 e3 50 e4 20 16 46 b8 a2 00 69 72 04 78 02 a4 8c b6 23 40 4a 40 2e 83 a4 81 ec 04 31 7b 01 24 03 f9 77 90 99 20 2f 83 0c 07 39 4c bf 75 46 d0 1c 90 42 90 74 90 23 20 bf 05 99 0f b2 05 e4 8f 20 7f 06 59 0f 52 ee 06 58 67 90 df 91 74 05 f9 5f 3a d7 49 02 9e 0d 92 80 a0 d5 Data Ascii: PNGIHDRqEIDATx]XW.hU FKCQ^\i_\F'?3Lb<?#&jDjN\%7Phn9)4]U_~:{o%_bP Firx#@J@.1{$w /9LuFBt# YRXgt_:I

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	669	OUT	GET /assets/cdn/portal_print-6e04b27f27ab27faab81f917d275d593fa892ce13150854024baaf983b3f4326.css HTTP/1.1 Host: assets6.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:41 UTC	679	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1049 Connection: close Date: Wed, 26 Mar 2025 09:25:42 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 16 Jan 2023 07:59:45 GMT ETag: "26473e8f74848a765c658c491d85cb60" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Tue, 16 Jan 2024 13:59:44 GMT x-amz-version-id: SmaarxSeETJHSIiufSitn05I56ziJs2m Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 14c5b6fdfe1b1584391cee9b27bdcf4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: QuFcCQ2qLNU8bk6_mfFELgAHc5qbcOizI-Je7rJ7fWSYLqYOlVt71Q==
2025-03-26 09:25:41 UTC	1049	IN	Data Raw: 1f 8b 08 00 2e f1 c4 63 02 03 9d 56 dd 8e e3 34 18 bd e7 29 42 2b a4 19 c9 ce a6 b3 1d d0 a4 42 82 3b ae 78 01 04 23 27 fe 12 5b f5 df 3a 6e a7 a5 ca bb f3 d9 49 bb 4e 67 77 41 b4 52 e5 d8 fe fe cf 39 69 63 f9 f9 a2 a4 01 2a 40 f6 22 d4 9b f2 79 d7 59 13 68 c7 b4 54 e7 7a f5 1b a8 23 04 d9 b2 e2 77 38 c0 8a 14 bf 7a c9 14 29 6e fb a4 18 98 19 e8 00 5e 76 bb d6 2a eb eb 46 b1 76 bf 6b f0 a7 f7 f6 60 78 6d ac 81 c9 ed 20 ff 86 7a 53 b9 30 96 2d 3e 33 0c ed 2f 77 37 47 b1 d8 5a b7 e9 33 fb be 3e bd 49 1e 04 7a aa 7e d8 cd a9 3f b9 d3 4e 33 df 4b 53 3f 81 2e aa 9d 63 9c 4b d3 d7 d5 ae b1 9e 83 bf 3a 2f 07 c7 5a c8 43 bc 09 19 60 0e 90 d6 a3 d8 10 f1 44 c4 47 22 b6 44 3c 13 f1 e3 e5 ff 77 65 6c 2d 87 cb e7 f2 ab f2 05 f4 b2 cb cc 70 a6 a0 d0 d6 58 74 b6 52 87 Data Ascii: .cV4)B+B;x#'[:nINgwAR9ic@"yYhTz#w8z)n^vFvk`xm zS0->3/w7GZ3>Iz~?N3KS?.cK:/ZC`DG"D<wel-pXtR

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	650	OUT	GET /assets/cdn/redactor-10a54c9b6ce9a442c8a2e6a131947e0d106a4af7c5b98360494520fc5245be28.js HTTP/1.1 Host: assets8.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:41 UTC	687	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 27079 Connection: close Date: Wed, 26 Mar 2025 09:25:42 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 12 Jul 2023 10:12:25 GMT ETag: "62a8838c2372995508f89d191f44e6dd" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Thu, 11 Jul 2024 16:12:24 GMT x-amz-version-id: 1uGPkXq5zAUCN.WwcmnvnP6fm2BfwaSe Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3bd704a723998d21cd3d1c7e5aa5b320.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: -a9x-CEdZweMMfG4lBFLwjmVw4cUnR0JN3O0NkjBcSxjFx08gAN4QA==
2025-03-26 09:25:41 UTC	15697	IN	Data Raw: 1f 8b 08 00 b0 58 ae 64 02 03 ec bd 79 7f e3 b8 91 00 fa f7 ee a7 90 39 13 9b 1c d1 b2 0e 9f 52 cb 7e ee 2b d3 d9 9e e9 4e 77 4f b2 fb b3 1d 3f 4a a2 2d a6 25 52 43 52 7d c4 d2 77 7f 75 00 20 40 82 b2 dd 93 ec 6e f6 65 3a 91 49 02 28 5c 85 42 a1 50 c7 cd 32 1e e7 51 12 37 a2 f8 53 f2 31 7c 17 4e 82 71 9e a4 6e e8 e7 7e e4 dd 65 9f a3 7c 3c 75 c3 a1 33 9e 05 59 e6 0c 87 d1 99 d3 72 9a 61 df f9 0e 7e fd dc bb 1b 07 59 e8 e4 d1 f8 63 98 3b fd bf fe 71 19 a6 5f dd d0 6b a5 12 d2 dd 4d 32 5e 66 fd ad 8e 3f 4e e2 4f 61 9a 3f 8f 3e d1 6b 32 ca c2 f4 53 f8 6a 1e dc 86 f0 a1 ed 07 4b c8 1f 66 d1 df 42 4c 8e f0 fb 2f 8b 59 12 4c fa ce 1e 57 90 5d 2f e9 43 38 b9 a6 e4 cc f1 c7 b3 68 31 4a 82 74 f2 ea 21 f9 f7 c6 69 18 e4 e1 f5 4d 34 0b 1d 3f 0b f3 97 49 9c bf 0f f3 Data Ascii: Xdy9R~+NwO?J-%RCR}wu @ne:I(\BP2Q7S1\|Nqn~e\|<u3Yra~Yc;q_kM2^f?NOa?>k2SjKfBL/YLW]/C8h1Jt!iM4?I
2025-03-26 09:25:41 UTC	293	IN	Data Raw: 5d 4c b9 c0 03 21 83 c6 67 21 dd c6 47 e5 f9 80 de 78 f2 45 81 62 f8 b5 95 b4 47 93 26 1e e9 8a 85 1f 53 f1 57 26 4d 65 1b 70 9a 4e 7f f3 3c c5 cd dc 3e 4f 76 0a a8 79 9b 2b 76 34 12 55 95 93 14 c1 b2 a6 aa e5 57 97 ca ea c1 b6 44 45 a3 c9 11 83 32 f3 f9 40 21 64 6b ad d1 6c ce 0d d6 7e 5e 29 44 58 38 a8 58 c4 bb 16 ff 0b 25 87 1c c2 b9 44 ad 07 f7 42 c9 b3 e8 8b 9b 7b 35 36 e9 12 00 2b 71 73 82 57 32 51 37 6d fd 95 09 1a 8b 50 71 5f aa c8 4c 5d e5 5e 57 88 43 03 5d 96 a9 2b 34 17 71 47 6b 32 7b 45 8c 23 a1 41 5f 68 79 6a 36 b5 22 86 51 79 40 d1 aa ac ef d6 38 fc e0 9e 73 1f 85 94 a2 3a a6 74 d5 f0 77 d0 f4 34 dd 1b ab f9 28 e1 d5 ff fc 20 0b 0f 13 c6 20 bf 12 36 ed 1b 86 b9 fd 9b 22 06 a1 8c 54 c4 1e d2 17 09 d4 fe 0a 6f 66 c9 21 74 d5 b9 09 7c 4a b2 dc Data Ascii: ]L!g!GxEbG&SW&MepN<>Ovy+v4UWDE2@!dkl~^)DX8X%DB{56+qsW2Q7mPq_L]^WC]+4qGk2{E#A_hyj6"Qy@8s:tw4( 6"Tof!t\|J
2025-03-26 09:25:41 UTC	1356	IN	Data Raw: 46 57 19 b8 7d 5b 63 d9 88 4c 4e c9 52 44 46 ae a1 e8 92 a6 7f 21 51 42 f7 2f 04 fb 45 91 01 4b e8 0e bb 4b de 17 b8 95 85 d9 aa 51 56 01 ef 6f f4 df a0 91 b5 a2 35 35 01 1d 7d bb d1 30 1a 16 ac c8 72 c1 ee 19 a0 52 3b c6 11 ad 84 c1 2c d2 cc 98 9c a8 c0 c4 21 c5 84 63 22 52 69 72 34 07 a9 c2 f2 82 4d 13 f8 64 29 82 76 d2 b4 b3 2f 06 12 0c 90 0d 84 6e 79 a6 4c cf 8c 0f 96 3e 04 ca eb 84 28 10 b3 71 9b 02 20 0c d9 87 51 61 5a 68 f7 b5 26 e1 d4 3a 5c db 41 df a4 f7 b5 52 f3 10 4e 66 77 6f a3 31 ea 35 a4 e4 fc db 68 9f 96 f3 a5 30 ca ab 64 56 8d 2f 65 46 83 3c 3d 73 91 fa 5c f4 02 be 17 43 53 0e 6b cb 07 c4 54 e0 fc 87 c4 2d 6c af 5b 88 ee 2a 36 da 74 32 fb 11 08 38 02 7d 0e 05 87 b5 1e 94 a6 5a 2e 38 a3 a5 be b2 2a 57 80 de 03 99 ab 07 94 eb f7 09 c2 bf 82 Data Ascii: FW}[cLNRDF!QB/EKKQVo55}0rR;,!c"Rir4Md)v/nyL>(q QaZh&:\ARNfwo15h0dV/eF<=s\CSkT-l[6t28}Z.8W
2025-03-26 09:25:41 UTC	9733	IN	Data Raw: 12 16 6d 44 6b 2c cd 35 9e 2d fe a0 8c 2d 36 c4 9d d5 37 3e bd 19 fd 95 bf 96 cd 1a e0 58 94 85 af 30 ce a2 4a f8 c4 56 d6 3e 30 20 4f 4e ac 61 a0 85 f7 0b b3 52 81 1a aa 85 98 eb 4d 1a dd 46 b1 ab a2 66 6b ad b1 65 27 57 19 a8 41 42 e4 e0 71 4d 3d ed b4 65 e0 08 cd f5 1e 46 a3 d8 10 eb cf ec c1 c5 55 b5 99 e5 6f 18 b4 0d e6 28 1e 4f 93 94 62 83 9b a9 9d 22 95 e3 85 57 20 32 80 22 b6 78 25 bd a3 d2 19 02 05 17 37 1d 17 ea 93 2f 74 62 0c 30 db db b6 af 00 1c 4e cd 4f df 3c ff 2f a7 9c 44 1a be c2 f3 5a 65 62 32 7d cc 38 b5 32 26 95 61 b0 f5 db d6 57 bb b4 84 16 7b e1 8e c8 20 d2 ec 7b f1 81 c4 49 32 55 f6 80 f1 85 95 83 16 34 fe cc c6 61 18 3e aa 5a 19 7a 73 42 82 10 40 03 52 e1 c9 8f 1a ba d5 59 d7 34 ae 4a e6 0c 5f 49 a5 fa 18 a4 24 57 d2 55 57 ee dd ad Data Ascii: mDk,5--67>X0JV>0 ONaRMFfke'WABqM=eFUo(Ob"W 2"x%7/tb0NO</DZeb2}82&aW{ {I2U4a>ZzsB@RY4J_I$WUW

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	649	OUT	GET /assets/cdn/lang/en-4a75f878b88f0e355c2d9c4c8856e16e0e8e74807c9787aaba7ef13f18c8d691.js HTTP/1.1 Host: assets8.freshdesk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:41 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1933 Connection: close Date: Wed, 26 Mar 2025 09:25:42 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 12 Dec 2022 04:52:29 GMT ETag: "3fe6b912439faf4f6c5ee07ff731e0d4" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Tue, 12 Dec 2023 10:52:28 GMT x-amz-version-id: _JKx8QiMWl9mCfLVy6Hwv56ji5ONXpdM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 350c00f07ce2a077574ee5c2ad078d3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: 6bddsOtHm1S5ALA0W4za9Yog5mvx1CjhpxWB71oVtvaqRjeEkyF8Ng==
2025-03-26 09:25:41 UTC	1933	IN	Data Raw: 1f 8b 08 00 83 a3 96 63 02 03 c5 58 6d 6f db 38 12 fe 2b 3c 7e 58 24 80 ce bd 24 dd 2f 2a 82 85 9b 38 6d 7a 89 93 da 6e 83 43 11 08 b4 44 5b dc e8 c5 a5 28 7b 7d 5e ff f7 9d e1 50 b2 ec 38 4d ea 78 b1 5f a4 e1 70 38 6f 7c 66 48 69 2a 34 eb 75 ae da dd 0f a7 8b e5 3b a2 5a 32 3b 5d c4 26 4d 7c fe 71 70 7d c5 bd a9 8a 64 ee f3 cb ac 90 da b0 af 38 6a b5 5a dc 53 a9 18 cb 9a 7f 89 23 cb 37 62 98 00 7f 80 2f ee 25 2a 7b f0 f9 15 3c 89 0e 94 95 af d7 e1 0c b3 eb ca 8c 64 bf d8 37 f7 46 b9 4e 85 31 2a 1b fb fc a2 a6 b9 37 11 5a 8c b5 98 c4 3e bf ad 48 ee 7d 2f 73 03 56 3f e3 8b 7b 61 1e c1 e0 0c 9e dc 8b a5 88 a4 3e 82 70 2c c1 8e 2a d6 71 cd 3a ae 58 27 35 eb a4 62 bd ad 59 6f b9 37 cc 93 c8 e7 ef e1 09 f1 1b 91 a8 10 02 b1 6f f4 1f 84 c0 75 89 21 38 12 a3 c8 Data Ascii: cXmo8+<~X$$/8mznCD[({}^P8Mx_p8o\|fHi4u;Z2;]&M\|qp}d8jZS#7b/%{<d7FN17Z>H}/sV?{a>p,*q:X'5bYo7ou!8

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	701	OUT	GET /rma-status/en HTTP/1.1 Host: rmasites.delfi.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	945	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:25:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Fri, 21 Jun 2024 07:26:39 GMT vary: Accept-Encoding cf-cache-status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CNGHf%2FU8EDDYzZspA%2FquOFRtTP6xyCcPV8KRCatfDTimOOU7lRyoYs%2B%2F0XoNE%2BKkn0V4uns5CpxP4WEkzpotnKLmtyF9JqhlotRpCMIswNjNZa%2B50Nr53VP9iIiebitEOcBLvw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 92659a283b9541de-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=100153&min_rtt=97164&rtt_var=23599&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1273&delivery_rate=38315&cwnd=242&unsent_bytes=0&cid=3b1044489a017b90&ts=588&x=0"
2025-03-26 09:25:42 UTC	424	IN	Data Raw: 31 35 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2e 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 66 6f 6e 74 2d 66 61 Data Ascii: 150a<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <link rel="icon" type="image/x-icon" href="./favicon.ico"> <style type="text/css">@font-fa
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 64 65 76 61 6e 61 67 61 72 69 2f 33 30 Data Ascii: 02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;font-display:swap;}@font-face {font-family:Poppins;font-style:normal;font-weight:300;src:url(/cf-fonts/s/poppins/5.0.11/devanagari/30
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 6c 61 74 69 6e 2d 65 78 74 2f 35 30 30 2f Data Ascii: 2BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;font-display:swap;}@font-face {font-family:Poppins;font-style:normal;font-weight:500;src:url(/cf-fonts/s/poppins/5.0.11/latin-ext/500/
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 6e 61 67 61 72 69 2f 36 30 30 2f 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 39 30 30 2d 30 39 37 46 2c 55 2b 31 43 44 30 2d 31 43 46 39 2c 55 2b 32 30 30 43 2d 32 30 30 44 2c 55 2b 32 30 41 38 2c 55 2b 32 30 42 39 2c 55 2b 32 35 43 43 2c 55 2b 41 38 33 30 2d 41 38 33 39 2c 55 2b 41 38 45 30 2d 41 38 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 6c 61 74 69 6e 2f 36 30 30 2f 6e 6f 72 6d 61 Data Ascii: nagari/600/normal.woff2);unicode-range:U+0900-097F,U+1CD0-1CF9,U+200C-200D,U+20A8,U+20B9,U+25CC,U+A830-A839,U+A8E0-A8FF;font-display:swap;}@font-face {font-family:Poppins;font-style:normal;font-weight:600;src:url(/cf-fonts/s/poppins/5.0.11/latin/600/norma
2025-03-26 09:25:42 UTC	863	IN	Data Raw: 79 6c 65 2e 62 6f 72 64 65 72 3d 27 6e 6f 6e 65 27 3b 61 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 27 68 69 64 64 65 6e 27 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 69 66 28 27 6c 6f 61 64 69 6e 67 27 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 63 28 29 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 63 29 3b 65 6c 73 65 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 64 6f 63 75 6d 65 6e 74 Data Ascii: yle.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document
2025-03-26 09:25:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:41 UTC	769	OUT	GET /owa/calendar/ISPSupport@delfi.com/bookings/ HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	1449	IN	HTTP/1.1 302 Content-Length: 173 Content-Type: text/html; charset=utf-8 Location: https://outlook.office365.com/book/ISPSupport@delfi.com/ request-id: ff100a37-3a08-7341-b008-b1c333a358b3 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedFETarget: AS9P251CU001.internal.outlook.com X-BackEndHttpStatus: 302 Set-Cookie: ClientId=819963B6F6364F6A80DB4F1A664CBE11; expires=Thu, 26-Mar-2026 09:25:41 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=819963B6F6364F6A80DB4F1A664CBE11; expires=Thu, 26-Mar-2026 09:25:41 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Fri, 26-Sep-2025 09:25:41 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: AS8PR01MB8337.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 302 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 50;12;0; X-BackEnd-Begin: 2025-03-26T09:25:41.850 X-BackEnd-End: 2025-03-26T09:25:41.897 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEEFZInfo: MDW X-FEServer: AS9P251CA0023 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: MDW X-FEProxyInfo: CH0P221CA0017.NAMP221.PROD.OUTLOOK.COM X-FEServer: CH0P221CA0017 X-MS-DIAGNOSTICS: Date: Wed, 26 Mar 2025 09:25:41 GMT Connection: close
2025-03-26 09:25:42 UTC	173	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 62 6f 6f 6b 2f 49 53 50 53 75 70 70 6f 72 74 40 64 65 6c 66 69 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://outlook.office365.com/book/ISPSupport@delfi.com/">here</a>.</h2></body></html>

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://support.delfi.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Windows Analysis Report
http://support.delfi.com

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	691	OUT	GET /EN/ HTTP/1.1 Host: download.delfi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	405	IN	HTTP/1.1 200 OK Cache-Control: no-store,private Pragma: no-cache Content-Type: text/html Expires: Wed, 26 Mar 2025 09:25:42 GMT Server: Microsoft-IIS/10.0 X-Robots-Tag: noindex, nofollow Set-Cookie: ASPSESSIONIDAGBSQQDS=MHPDDCOBNKBHAJBOCHLPCIAH; secure; path=/ X-Powered-By: ASP.NET X-Robots-Tag: noindex, nofollow Date: Wed, 26 Mar 2025 09:25:41 GMT Connection: close Content-Length: 9093
2025-03-26 09:25:42 UTC	9093	IN	Data Raw: 09 09 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 61 22 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 20 2d 20 44 65 6c 66 69 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 3c 2f 74 69 74 6c 65 3e 0d 0a 09 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 54 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 44 65 6c 66 69 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 41 2f 53 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 09 09 3c 6d 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html lang="da"><head><title>Download - Delfi Technologies</title><meta name="Title" content="Delfi Technologies A/S"><meta http-equiv="pragma" content="no-cache"><me

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	573	OUT	GET /assets/index-1225edac.css HTTP/1.1 Host: snlookupv2.delfi.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://snlookupv2.delfi.com/en Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	942	IN	HTTP/1.1 403 Forbidden Date: Wed, 26 Mar 2025 09:25:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4511 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Wed, 26 Mar 2025 09:25:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WWAteIx1VUwW6IHWdQMXe%2BtsrAKFu%2FuNImIIFUSU4h06BJ%2FercKs2wUvk59CeuWOC2cr%2FdjnTSCnowq2iuVWof9YdNCwAS3HnSU8nDRsCTZP0lMy%2BdGZBx0pJnQibzCl09rLPRgS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 92659a2d0cca2142-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101837&min_rtt=100935&rtt_var=22650&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1145&delivery_rate=35933&cwnd=246&unsent_bytes=0&cid=fbe6232cd78bbfb6&ts=256&x=0"
2025-03-26 09:25:42 UTC	427	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 63 66 5f 73 74 79 6c 65 73 2d 63 73 73 Data Ascii: content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-width,initial-scale=1" /><link rel="stylesheet" id="cf_styles-css
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 6f 6e 74 61 69 6e 65 72 20 2d 2d 3e 0a 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 Data Ascii: t-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-container --> <div class="cf-section cf-wrapper"> <div class="c
2025-03-26 09:25:42 UTC	1346	IN	Data Raw: 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 39 32 36 35 39 61 32 64 30 63 63 61 32 31 34 32 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 2d 69 70 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 68 69 64 64 65 6e 20 73 6d 3a 62 6c Data Ascii: pan class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">92659a2d0cca2142</strong></span> <span class="cf-footer-separator sm:hidden">•</span> <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:bl

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	593	OUT	GET /assets/index-353af0e1.js HTTP/1.1 Host: snlookupv2.delfi.com Connection: keep-alive Origin: https://snlookupv2.delfi.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://snlookupv2.delfi.com/en Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	940	IN	HTTP/1.1 403 Forbidden Date: Wed, 26 Mar 2025 09:25:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4511 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Wed, 26 Mar 2025 09:25:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gkCU6Am0DhJP%2BO1NJenmCTFrDrFPCLQ3RgtHPJjxXSfSYf0MACoOkyokN8BBJATLfCPG3z11oiN5S6UgKXH5IRhXGNLKkbdLQ6ELlx%2B%2BA3yVgWrgj%2FYxuFxwFiCIPKl0x9zUVR%2FH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 92659a2d0e02423b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99146&min_rtt=98325&rtt_var=21978&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1165&delivery_rate=36949&cwnd=230&unsent_bytes=0&cid=e97a22577847f32a&ts=255&x=0"
2025-03-26 09:25:42 UTC	429	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 63 66 5f 73 74 79 6c 65 73 2d 63 73 73 22 20 Data Ascii: ntent="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-width,initial-scale=1" /><link rel="stylesheet" id="cf_styles-css"
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 6f 6e 74 61 69 6e 65 72 20 2d 2d 3e 0a 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d Data Ascii: container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-container --> <div class="cf-section cf-wrapper"> <div class="cf-
2025-03-26 09:25:42 UTC	1344	IN	Data Raw: 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 39 32 36 35 39 61 32 64 30 65 30 32 34 32 33 62 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 2d 69 70 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 68 69 64 64 65 6e 20 73 6d 3a 62 6c 6f 63 Data Ascii: n class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">92659a2d0e02423b</strong></span> <span class="cf-footer-separator sm:hidden">•</span> <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:bloc

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	598	OUT	GET /cdn-cgi/speculation HTTP/1.1 Host: snlookupv2.delfi.com Connection: keep-alive Origin: https://snlookupv2.delfi.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: speculationrules Referer: https://snlookupv2.delfi.com/en Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	934	IN	HTTP/1.1 403 Forbidden Date: Wed, 26 Mar 2025 09:25:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4511 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Wed, 26 Mar 2025 09:25:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WgZX8NxzIzzaLVZo0oUvy2%2FRtLRsSiFdBPt7eBmbIOOxJRW1jx6tH8fWcoNXgdLcnbByJcP6u5X4mUmdjKQu%2BOeJLuioME8vyGKwcEfhmNvIJzRFoh79kDjRM4B7SNZp9e8eJ25E"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 92659a2d0db47d00-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99582&min_rtt=98766&rtt_var=22075&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1170&delivery_rate=36773&cwnd=230&unsent_bytes=0&cid=921e2771fb30f92d&ts=260&x=0"
2025-03-26 09:25:42 UTC	435	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 63 66 5f 73 74 79 6c 65 73 2d 63 73 73 22 20 68 72 65 66 3d 22 Data Ascii: "text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-width,initial-scale=1" /><link rel="stylesheet" id="cf_styles-css" href="
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 6f 6e 74 61 69 6e 65 72 20 2d 2d 3e 0a 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e Data Ascii: ner cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-container --> <div class="cf-section cf-wrapper"> <div class="cf-column
2025-03-26 09:25:42 UTC	1338	IN	Data Raw: 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 39 32 36 35 39 61 32 64 30 64 62 34 37 64 30 30 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 2d 69 70 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 68 69 64 64 65 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d Data Ascii: s="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">92659a2d0db47d00</strong></span> <span class="cf-footer-separator sm:hidden">•</span> <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:m

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	811	OUT	GET /book/ISPSupport@delfi.com/ HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: ClientId=819963B6F6364F6A80DB4F1A664CBE11; OIDC=1
2025-03-26 09:25:42 UTC	647	IN	HTTP/1.1 417 Expectation Failed Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 X-NanoProxy: 1,1 Request-Id: 9cf23afb-ecf5-8675-f1e6-5ed21f7dd3a9 X-CalculatedFETarget: AS9PR06CU015.internal.outlook.com MS-CV: +zrynPXsdYbx5l7SH33TqQ.1.1 x-besku: UNKNOWN X-BackEndHttpStatus: 417,417 X-BEPartition: CLEURPRD01DHR04 X-CalculatedBETarget: AS8PR01MB8340.EURPRD01.prod.exchangelabs.com X-FEEFZInfo: DHR X-FEServer: CH0P221CA0021 X-Proxy-BackendServerStatus: 417 X-Proxy-RoutingCorrectness: 1 X-FirstHopCafeEFZ: MDW Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 26 Mar 2025 09:25:42 GMT Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	699	OUT	GET /rma-form/en HTTP/1.1 Host: rmasites.delfi.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	948	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:25:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Fri, 21 Jun 2024 07:26:39 GMT vary: Accept-Encoding cf-cache-status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o2ur2GY%2FDYw4qVO%2Fx3kQW1M8Mj2GkIimiX7Xmz1WNU0ECxr2EUsLOQEgGa9WqTl5D4eD%2FdpiOZ6dvMQvd%2B0oRQvJdfwEenXh%2FVm77VW5%2FrJ44wSw6ZB2xn%2FaeF2%2BIOvDmfZcgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 92659a2d4d8188c3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99982&min_rtt=99181&rtt_var=22127&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1271&delivery_rate=36666&cwnd=233&unsent_bytes=0&cid=8b6a51b4acc2263c&ts=581&x=0"
2025-03-26 09:25:42 UTC	421	IN	Data Raw: 31 35 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2e 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 66 6f 6e 74 2d 66 61 Data Ascii: 150a<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <link rel="icon" type="image/x-icon" href="./favicon.ico"> <style type="text/css">@font-fa
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 2d 32 30 30 44 2c 55 2b 32 30 41 38 2c 55 2b 32 30 42 39 2c 55 2b 32 35 43 43 2c 55 2b 41 38 33 30 2d 41 38 33 39 2c 55 2b 41 38 45 30 2d 41 38 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 6c 61 74 69 6e 2f 33 30 30 2f 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 Data Ascii: -200D,U+20A8,U+20B9,U+25CC,U+A830-A839,U+A8E0-A8FF;font-display:swap;}@font-face {font-family:Poppins;font-style:normal;font-weight:300;src:url(/cf-fonts/s/poppins/5.0.11/latin/300/normal.woff2);unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+0
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 64 65 76 61 6e 61 67 61 72 69 2f 34 30 30 2f 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 39 30 30 2d 30 39 37 46 2c 55 2b 31 43 44 30 2d 31 43 46 39 2c 55 2b 32 30 30 43 2d 32 30 30 44 2c 55 2b 32 30 41 38 2c 55 2b 32 30 42 39 2c 55 2b 32 35 43 43 2c 55 2b 41 38 33 30 2d 41 38 33 39 2c 55 2b 41 38 45 30 2d 41 38 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 64 65 76 61 6e 61 67 61 72 69 2f Data Ascii: devanagari/400/normal.woff2);unicode-range:U+0900-097F,U+1CD0-1CF9,U+200C-200D,U+20A8,U+20B9,U+25CC,U+A830-A839,U+A8E0-A8FF;font-display:swap;}@font-face {font-family:Poppins;font-style:normal;font-weight:500;src:url(/cf-fonts/s/poppins/5.0.11/devanagari/
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 70 6f 70 70 69 6e 73 2f 35 2e 30 2e 31 31 2f 6c 61 74 69 6e 2d 65 78 74 2f 36 30 30 2f 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 46 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 3b 66 6f 6e 74 2d 73 74 Data Ascii: ;src:url(/cf-fonts/s/poppins/5.0.11/latin-ext/600/normal.woff2);unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20CF,U+2113,U+2C60-2C7F,U+A720-A7FF;font-display:swap;}@font-face {font-family:Poppins;font-st
2025-03-26 09:25:42 UTC	866	IN	Data Raw: 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 3d 27 6e 6f 6e 65 27 3b 61 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 27 68 69 64 64 65 6e 27 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 69 66 28 27 6c 6f 61 64 69 6e 67 27 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 63 28 29 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 63 29 3b 65 6c 73 65 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 64 6f 63 75 6d Data Ascii: .style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};docum
2025-03-26 09:25:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	580	OUT	GET /assets/index-5c915a8f.css HTTP/1.1 Host: rmasites.delfi.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rmasites.delfi.com/rma-status/en Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	942	IN	HTTP/1.1 403 Forbidden Date: Wed, 26 Mar 2025 09:25:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4511 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Wed, 26 Mar 2025 09:25:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h79xO19eokyD80cRHxPt4%2BTDg%2F0QZHYLMPsEK3xAOtglZZQutaBFCToT0Br6bKVyRikbNk2VpdYs2uDvRQoYVCpeOo0HSx7eEXaOEiurpo0LHhGaUnCMPsBfeEkUDYcvevR%2B5Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 92659a2d5d04c351-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=102595&min_rtt=101417&rtt_var=23166&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1152&delivery_rate=35483&cwnd=233&unsent_bytes=0&cid=ccff846e71c7b9f4&ts=260&x=0"
2025-03-26 09:25:42 UTC	427	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 63 66 5f 73 74 79 6c 65 73 2d 63 73 73 Data Ascii: content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=device-width,initial-scale=1" /><link rel="stylesheet" id="cf_styles-css
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 74 2d 63 6f 6e 74 61 69 6e 65 72 20 63 66 2d 73 63 72 65 65 6e 73 68 6f 74 2d 66 75 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 63 61 70 74 63 68 61 2d 63 6f 6e 74 61 69 6e 65 72 20 2d 2d 3e 0a 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 73 65 63 74 69 6f 6e 20 63 66 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 Data Ascii: t-container cf-screenshot-full"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-container --> <div class="cf-section cf-wrapper"> <div class="c
2025-03-26 09:25:42 UTC	1346	IN	Data Raw: 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 3a 20 3c 73 74 72 6f 6e 67 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 22 3e 39 32 36 35 39 61 32 64 35 64 30 34 63 33 35 31 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 2d 69 70 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 68 69 64 64 65 6e 20 73 6d 3a 62 6c Data Ascii: pan class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">92659a2d5d04c351</strong></span> <span class="cf-footer-separator sm:hidden">•</span> <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:bl

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	700	OUT	GET /recaptcha/api.js?render=6LekBq0pAAAAAJFeFK14IJXk60_w-iFY6bCA1yZn HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://snlookupv2.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 26 Mar 2025 09:25:42 GMT Date: Wed, 26 Mar 2025 09:25:42 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-26 09:25:42 UTC	471	IN	Data Raw: 35 65 64 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5ed/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-03-26 09:25:42 UTC	1053	IN	Data Raw: 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 70 6f 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 70 6f 2e 61 73 79 6e 63 3d 74 72 75 65 3b 20 70 6f 2e 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 76 5a 49 33 76 2b 47 7a 37 4a 66 75 52 6f 6c 4b 4e 4d 34 41 66 66 36 7a 61 47 75 54 37 58 30 6d 66 33 77 74 6f 5a 54 6e 4b 76 36 34 39 37 63 56 4d 6e 68 79 30 33 4b 44 71 58 37 6b 42 7a 2f 71 2f 69 69 64 57 37 73 72 57 33 31 6f 51 62 42 74 34 56 68 67 6f 41 41 41 43 55 65 79 4a 76 63 6d Data Ascii: ment('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcm
2025-03-26 09:25:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	631	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive Origin: https://rmasites.delfi.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://rmasites.delfi.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:42 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 09:25:42 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 92659a2dffa1187f-EWR
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 72 20 69 3d 6e 28 36 39 39 29 2c 6f 3d 6e 28 37 35 32 29 2c 61 3d 6e 28 31 30 34 29 2c 63 3d 6e 28 35 30 38 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3a 22 22 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 2c 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 66 28 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2f 22 29 29 74 2b 3d 65 3b 65 6c 73 65 20 74 72 79 7b 76 61 Data Ascii: r i=n(699),o=n(752),a=n(104),c=n(508);!function(){function e(e){var t="";if(t=window.location.origin?window.location.origin:"".concat(window.location.protocol,"://").concat(window.location.host),e&&"string"==typeof e)if(0===e.indexOf("/"))t+=e;else try{va
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 29 3d 3d 74 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 29 2c 5f 28 74 29 7d 21 62 26 26 77 26 26 28 62 3d 21 30 2c 42 28 29 29 7d 65 6c 73 65 22 76 69 73 69 62 6c 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 29 3b 76 61 72 20 45 3d 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 26 26 28 28 30 2c 61 2e 6f 6e 4c 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 49 44 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 49 4e 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 54 54 46 42 29 28 78 29 2c Data Ascii: )==t&&(null==w?void 0:w.triggered)\|\|P(),_(t)}!b&&w&&(b=!0,B())}else"visible"===document.visibilityState&&(new Date).getTime()}));var E={};"function"==typeof PerformanceObserver&&((0,a.onLCP)(x),(0,a.onFID)(x),(0,a.onFCP)(x),(0,a.onINP)(x),(0,a.onTTFB)(x),
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 2c 70 26 26 28 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 43 29 2c 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 26 26 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 26 26 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 29 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 2c 6e 3d 22 22 3b 74 72 79 7b 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ,p&&((0,o.sendObjectBeacon)("",a,(function(){}),!1,C),void 0!==p.forward&&void 0!==p.forward.url&&(0,o.sendObjectBeacon)("",a,(function(){}),!1,p.forward.url)))},B=function(){var t=function(){var t=s.getEntriesByType("navigation")[0],n="";try{n="function"
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 28 6f 2c 61 2c 63 29 7b 6e 3d 65 28 63 29 3b 76 61 72 20 75 3d 65 28 29 2c 73 3d 21 30 3b 72 65 74 75 72 6e 20 6e 3d 3d 75 26 26 28 73 3d 21 31 29 2c 73 26 26 28 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 75 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 75 29 2c 5f 28 75 29 29 2c 69 28 29 29 2c 72 2e 61 70 70 6c 79 28 74 2c 5b 6f 2c 61 2c 63 5d 29 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 6e 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 Data Ascii: (o,a,c){n=e(c);var u=e(),s=!0;return n==u&&(s=!1),s&&(A()&&((null==w?void 0:w.url)==u&&(null==w?void 0:w.triggered)\|\|P(u),_(u)),i()),r.apply(t,[o,a,c])},window.addEventListener("popstate",(function(t){A()&&((null==w?void 0:w.url)==n&&(null==w?void 0:w.tri
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 45 2e 69 6e 70 2e 65 6c 65 6d 65 6e 74 3d 63 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 45 2e 69 6e 70 2e 6e 61 6d 65 3d 63 2e 65 76 65 6e 74 54 79 70 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 72 65 74 75 72 6e 20 73 2e 74 69 6d 65 4f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 69 66 28 70 26 26 70 2e 73 65 72 76 65 72 54 69 6d 69 6e 67 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 2c 6e 3d 5b 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 72 65 73 6f 75 72 63 65 22 5d 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 72 3d 6e 5b 74 5d 2c 69 3d 30 2c 6f 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 72 29 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 6f 5b 69 5d 2c 63 3d 61 Data Ascii: E.inp.element=c.eventTarget,E.inp.name=c.eventType))}}function F(){return s.timeOrigin}function I(){if(p&&p.serverTiming){for(var e=[],t=0,n=["navigation","resource"];t<n.length;t++)for(var r=n[t],i=0,o=s.getEntriesByType(r);i<o.length;i++){var a=o[i],c=a
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 29 7d 28 29 7d 2c 37 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 69 7c 7c 28 74 2e 73 69 74 65 54 6f 6b 65 6e 26 26 74 2e 76 65 72 73 69 6f 6e 73 2e 66 6c 3f 22 2f 63 64 6e 2d 63 67 69 2f 72 75 6d 3f 22 2e 63 6f 6e 63 61 74 28 65 29 3a 22 2f 63 64 6e 2d 63 67 69 2f 62 65 61 63 6f 6e 2f 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 2e 63 6f 6e Data Ascii: )}()},752:function(e,t){"use strict";t.__esModule=!0,t.sendObjectBeacon=void 0,t.sendObjectBeacon=function(e,t,n,r,i){void 0===r&&(r=!1),void 0===i&&(i=null);var o=i\|\|(t.siteToken&&t.versions.fl?"/cdn-cgi/rum?".concat(e):"/cdn-cgi/beacon/performance?".con
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 76 61 72 20 74 3d 61 28 29 3b 69 66 28 74 29 7b 69 66 28 65 3c 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 29 72 65 74 75 72 6e 22 64 6f 6d 2d 69 6e 74 65 72 61 63 74 69 76 65 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 72 65 74 75 72 6e 22 64 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 61 64 65 64 22 7d 72 Data Ascii: ing"===document.readyState)return"loading";var t=a();if(t){if(e<t.domInteractive)return"loading";if(0===t.domContentLoadedEventStart\|\|e<t.domContentLoadedEventStart)return"dom-interactive";if(0===t.domComplete\|\|e<t.domComplete)return"dom-content-loaded"}r
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 6e 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 72 29 26 26 28 28 6f 3d 74 2e 76 61 6c 75 65 2d 28 69 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 26 26 28 69 3d 74 2e 76 61 6c 75 65 2c 74 2e 64 65 6c 74 Data Ascii: e){Promise.resolve().then((function(){t(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},n\|\|{})),r}}catch(e){}},g=function(e,t,n,r){var i,o;return function(a){t.value>=0&&(a\|\|r)&&((o=t.value-(i\|\|0))\|\|void 0===i)&&(i=t.value,t.delt
2025-03-26 09:25:42 UTC	1369	IN	Data Raw: 7b 7d 2c 50 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 43 28 29 2c 69 3d 70 28 22 46 43 50 22 29 2c 6f 3d 6d 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 76 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 28 21 30 29 29 29 7d 29 29 7d 29 29 3b 6f 26 26 28 6e 3d 67 28 65 2c 69 2c 42 2c 74 2e Data Ascii: {},P((function(){var n,r=C(),i=p("FCP"),o=m("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-v(),0),i.entries.push(e),n(!0)))}))}));o&&(n=g(e,i,B,t.

Timestamp	Bytes transferred	Direction	Data
2025-03-26 09:25:42 UTC	422	OUT	GET /download/TeamViewer/TeamViewerLogoTP.png HTTP/1.1 Host: download.delfi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 09:25:43 UTC	302	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 09 Jan 2025 14:37:54 GMT Accept-Ranges: bytes ETag: "8c964611a462db1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Robots-Tag: noindex, nofollow Date: Wed, 26 Mar 2025 09:25:41 GMT Connection: close Content-Length: 22947
2025-03-26 09:25:43 UTC	16082	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 93 00 00 00 19 08 06 00 00 00 35 ce 1c ab 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 3b 9b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDR5pHYsZ;iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf
2025-03-26 09:25:43 UTC	6865	IN	Data Raw: 8b 9a 5a 90 22 d3 6a 41 59 5e 8b 7a d6 0a 74 cc e4 ff 3a 32 64 5a 5d 5a ba 5d 92 ba 6e c6 bc 3f 8d 3f 12 66 92 c8 57 75 52 e0 09 c6 8c 4b b5 d4 e0 1b c7 c4 5c 7f 4a 1b 04 ad bf e7 ad 12 e1 15 38 79 51 81 9f 2d 6a f0 c1 35 fd 7c fc c7 25 0e 0d 65 c9 76 0a 6c 32 89 1e 8b 98 9c 60 41 38 82 6c 87 8b e3 59 74 c3 22 84 75 24 76 96 c0 f8 02 ab ff 6f 9a 49 82 27 31 0d 81 ed 75 b0 3a 36 3e a1 11 14 9d f0 75 20 ff ef 1b 52 08 1a ca 32 16 2a 94 05 d7 2a 6a 52 77 75 48 93 93 42 ee b1 34 8f 90 b5 e0 48 c8 a5 1c dc c9 7d c9 05 0e 81 63 3b cb 91 cd 76 f9 76 af 23 6c 87 b0 d6 93 c2 f6 cb c9 93 f7 ea df 3f 20 30 09 1c 69 71 1d 28 59 97 72 39 e4 27 a7 28 3e 72 e2 74 c0 e7 d5 cd 78 15 19 6f be c5 02 40 a4 f8 c0 a9 73 39 b2 b3 8f b3 6f 1c 64 64 28 4f a6 5d 60 8d 05 03 98 e6 Data Ascii: Z"jAY^zt:2dZ]Z]n??fWuRK\J8yQ-j5\|%evl2`A8lYt"u$voI'1u:6>u R2**jRwuHB4H}c;vv#l? 0iq(Yr9'(>rtxo@s9odd(O]`