Create Interactive Tour

Windows Analysis Report
https://eu-central-1.protection.sophos.com/?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U3gwNDYvRXh1ZWpOb1orVWYwMkVMRzFlQmtmMD0=&h=696c0b13c9bb46b2b210e89a34578cd9&s=AVNPUEhUT0NFTkNSWVBUSVb

Overview

General Information

Sample URL:	https://eu-central-1.protection.sophos.com/?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U
Analysis ID:	1649103
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,13594268504373736940,8813873815472652456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,13594268504373736940,8813873815472652456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4848 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eu-central-1.protection.sophos.com/?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U3gwNDYvRXh1ZWpOb1orVWYwMkVMRzFlQmtmMD0=&h=696c0b13c9bb46b2b210e89a34578cd9&s=AVNPUEhUT0NFTkNSWVBUSVbYlGfZU66j8K_UDSuTsyS5h7hisQMzbX-xxgbWnDCCvg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/843163100:1742992231:wP0hdFGJIGS5iv3ZhJQHj5g1nNi1FppN9LndBuTCmAk/9266e45eafed6a55/lujO2arOxDshkyx.iFpDIlO9clLvfZv.8ac4Yjn5UO0-1742994667-1.1.1.1-PaBs_AnL_8yObLzD.xenz2YSWGJU8rmWcM2eSFuWYeSVK00pj3HjrOWGflwraoD4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3771sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: lujO2arOxDshkyx.iFpDIlO9clLvfZv.8ac4Yjn5UO0-1742994667-1.1.1.1-PaBs_AnL_8yObLzD.xenz2YSWGJU8rmWcM2eSFuWYeSVK00pj3HjrOWGflwraoD4cf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zy2bk/0x4AAAAAABCUPSBq1iEfmAOA/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 13:11:08 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8y7w0Fp%2BoO0F%2FmZzmGegOk0Y7580xyeON3UbxFsPa0QO0ZN9Siw0OhZbX8g8OP1A4zkJeZBK%2FVunruEtan5LiH1eNkgTPmg1f0y5eJ8QczDOagYttsSDFzk4n6509VPBHxlMG6uRso7brJfw0Tg%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9266e4665ec67039-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99404&min_rtt=97914&rtt_var=22895&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1275&delivery_rate=36372&cwnd=245&unsent_bytes=0&cid=aa98e7b1c7974dd7&ts=442&x=0"

Source: chromecache_184.4.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_170.4.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_165.4.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_165.4.dr, chromecache_170.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_165.4.dr, chromecache_170.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.64.68:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.62:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.219.62:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.94.1:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.10:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.10:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.10:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.10:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.173:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.128.29:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.128.29:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.58:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.58:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.128.240.48:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.202.1:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.128.29:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.201.1:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.0.165:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.5:49777 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3800_1318615625

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3800_1318615625

Jump to behavior

Source: classification engine

Classification label: mal56.phis.win@26/39@45/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,13594268504373736940,8813873815472652456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,13594268504373736940,8813873815472652456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4848 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eu-central-1.protection.sophos.com/?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U3gwNDYvRXh1ZWpOb1orVWYwMkVMRzFlQmtmMD0=&h=696c0b13c9bb46b2b210e89a34578cd9&s=AVNPUEhUT0NFTkNSWVBUSVbYlGfZU66j8K_UDSuTsyS5h7hisQMzbX-xxgbWnDCCvg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,13594268504373736940,8813873815472652456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,13594268504373736940,8813873815472652456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4848 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://eu-central-1.protection.sophos.com/?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U3gwNDYvRXh1ZWpOb1orVWYwMkVMRzFlQmtmMD0=&h=696c0b13c9bb46b2b210e89a34578cd9&s=AVNPUEhUT0NFTkNSWVBUSVbYlGfZU66j8K_UDSuTsyS5h7hisQMzbX-xxgbWnDCCvg	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://ynij.mysterycluesolver.de/google.php	0%	Avira URL Cloud	safe
https://7834875907-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://secure.mysterycluesolver.de/w4WYs?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	0%	Avira URL Cloud	safe
https://hirschnar.at/?label=53350f19760da2cf412ccaeaa05c7381&_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	0%	Avira URL Cloud	safe
https://secure.mysterycluesolver.de/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
mailmeteor.com	104.21.92.58	true	false	high
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
ax-9999.ax-msedge.net	150.171.27.254	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	23.209.72.9	true	false	high
ynij.mysterycluesolver.de	172.67.128.29	true	false	unknown
d98lnn3clfp6x.cloudfront.net	18.173.219.62	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
hirschnar.at	172.67.197.173	true	false	unknown
cos.ap-tokyo.myqcloud.com	43.128.240.48	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
resc.cloudinary.com.cdn.cloudflare.net	104.17.202.1	true	false	high
www.google.com	142.250.64.68	true	false	high
cloudflare.klaviyodns.com.cdn.cloudflare.net	104.17.94.1	true	false	high
Ev2-9999.Ev2-msedge.net	150.171.31.254	true	false	high
secure.mysterycluesolver.de	172.67.128.29	true	true	unknown
res.cloudinary.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
7834875907-1317754460.cos.ap-tokyo.myqcloud.com	unknown	unknown	false	unknown
c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com	unknown	unknown	false	high
eu-central-1.protection.sophos.com	unknown	unknown	false	high
ctrk.klclick3.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://tse1.mm.bing.net/th?id=OADD2.10239402414375_1AVQBVS8V3X3ACPMA&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418586_15W93I98EWXDJY7GO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://secure.mysterycluesolver.de/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9266e45eafed6a55&lang=auto	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239400979857_14A87O62ZUJXBN0IX&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://a.nel.cloudflare.com/report/v4?s=8y7w0Fp%2BoO0F%2FmZzmGegOk0Y7580xyeON3UbxFsPa0QO0ZN9Siw0OhZbX8g8OP1A4zkJeZBK%2FVunruEtan5LiH1eNkgTPmg1f0y5eJ8QczDOagYttsSDFzk4n6509VPBHxlMG6uRso7brJfw0Tg%3D	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zy2bk/0x4AAAAAABCUPSBq1iEfmAOA/auto/fbE/new/normal/auto/	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418568_12QU0TF0Q0S6KJNUT&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239400979856_1C4ONTMUVBZM2U4CN&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/843163100:1742992231:wP0hdFGJIGS5iv3ZhJQHj5g1nNi1FppN9LndBuTCmAk/9266e45eafed6a55/lujO2arOxDshkyx.iFpDIlO9clLvfZv.8ac4Yjn5UO0-1742994667-1.1.1.1-PaBs_AnL_8yObLzD.xenz2YSWGJU8rmWcM2eSFuWYeSVK00pj3HjrOWGflwraoD4	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9266e45eafed6a55/1742994668698/c127b3098fd2d7093f33481a3533bcc7d4b263c6d5319cb24f1ac1fe95378694/ERZpNoq7rGbEjj9	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9266e45eafed6a55/1742994668705/DngXSk5u4wJqOpC	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418562_1168Q5I7J0C0R4GX2&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418565_1OUCQO7VP7RV95UTY&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418561_1E2KGQS8IVJEZ1891&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418567_1CP2YH6ACBDMHMMFR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239402414374_1RZXN1BFTHNSAZBQY&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	true		unknown
https://ctrk.klclick3.com/l/01JQ6NWH0WZVGMWKA81MBFF7RT_2	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418566_1KUOCUMD7VRU52NBF&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://hirschnar.at/?label=53350f19760da2cf412ccaeaa05c7381&_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	false	Avira URL Cloud: safe	unknown
https://secure.mysterycluesolver.de/w4WYs?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	false	Avira URL Cloud: safe	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239340418585_1K319IV1QEN3HBC0V&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://7834875907-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://res.cloudinary.com/dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png	false		high
https://ynij.mysterycluesolver.de/google.php	false	Avira URL Cloud: safe	unknown
https://mailmeteor.com/logos/assets/PNG/Microsoft_Logo_512px.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_165.4.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_165.4.dr, chromecache_170.4.dr	false	high
https://getbootstrap.com)	chromecache_170.4.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_165.4.dr, chromecache_170.4.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_184.4.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
43.128.240.48	cos.ap-tokyo.myqcloud.com	Japan	4249	LILLY-ASUS	false
104.21.0.165	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.128.29	ynij.mysterycluesolver.de	United States	13335	CLOUDFLARENETUS	true
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.94.1	cloudflare.klaviyodns.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.21.92.58	mailmeteor.com	United States	13335	CLOUDFLARENETUS	false
18.173.219.62	d98lnn3clfp6x.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.67.197.173	hirschnar.at	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
23.209.72.9	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.64.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.17.202.1	resc.cloudinary.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.17.201.1	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649103
Start date and time:	2025-03-26 14:09:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://eu-central-1.protection.sophos.com/?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U3gwNDYvRXh1ZWpOb1orVWYwMkVMRzFlQmtmMD0=&h=696c0b13c9bb46b2b210e89a34578cd9&s=AVNPUEhUT0NFTkNSWVBUSVbYlGfZU66j8K_UDSuTsyS5h7hisQMzbX-xxgbWnDCCvg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@26/39@45/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, BackgroundTransferHost.exe, RuntimeBroker.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.72.110, 172.253.63.84, 142.251.40.206, 142.250.80.99, 142.250.65.174, 142.250.80.46, 142.251.40.110, 142.250.64.110, 142.251.40.170, 199.232.210.172, 142.250.72.106, 142.251.40.234, 172.217.165.138, 142.250.80.42, 142.250.80.10, 142.250.65.202, 142.251.35.170, 142.250.65.170, 142.251.40.202, 142.250.80.74, 142.251.32.106, 142.250.65.234, 142.251.41.10, 142.250.176.202, 142.250.80.106, 142.250.81.234, 142.250.176.206, 142.250.81.238, 142.251.41.14, 142.250.65.206, 142.251.35.163, 142.250.80.78, 34.104.35.123, 150.171.27.254, 150.171.31.254, 204.79.197.222, 4.245.163.56, 23.219.82.17, 13.107.246.40, 150.171.27.10, 23.219.82.8
Excluded domains from analysis (whitelisted): www.bing.com, fp.msedge.net, ev2-ring.msedge.net, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdnoriginwus2.azureedge.net, tse1.mm.bing.net, clientservices.googleapis.com, ctldl.windowsupdate.com, aadcdn.msauth.net, g.bing.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, ax-ring.msedge.net, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, wu-b-net.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://eu-central-1.protection.sophos.com/?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U3gwNDYvRXh1ZWpOb1orVWYwMkVMRzFlQmtmMD0=&h=696c0b13c9bb46b2b210e89a34578cd9&s=AVNPUEhUT0NFTkNSWVBUSVbYlGfZU66j8K_UDSuTsyS5h7hisQMzbX-xxgbWnDCCvg

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'secure.mysterycluesolver.de' does not match the legitimate domain for Microsoft., The URL contains an unrelated domain name 'mysterycluesolver.de', which is not associated with Microsoft., The use of 'secure' as a subdomain is a common tactic in phishing to create a false sense of security., The domain extension '.de' is not typically associated with Microsoft's global or regional domains. DOM: 0.5.pages.csv
Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'secure.mysterycluesolver.de' does not match the legitimate domain 'microsoft.com'., The domain 'mysterycluesolver.de' does not have any known association with Microsoft., The use of 'secure' as a subdomain is a common tactic in phishing to create a false sense of security., The domain extension '.de' is not typically associated with Microsoft's main services., The URL contains no direct reference to Microsoft, which is suspicious. DOM: 0.6.pages.csv

Source: Yara match	File source: 0.6.pages.csv, type: HTML
Source: Yara match	File source: 0.5.pages.csv, type: HTML

Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: Invalid link: Privacy statement
Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: Invalid link: Privacy statement

Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No favicon
Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No favicon
Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No favicon
Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No favicon
Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No favicon

Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No <meta name="author".. found
Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No <meta name="author".. found

Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No <meta name="copyright".. found
Source: https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: eu-central-1.protection.sophos.com to https://ctrk.klclick3.com/l/01jq6nwh0wzvgmwka81mbff7rt_2
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: ctrk.klclick3.com to https://hirschnar.at?label=53350f19760da2cf412ccaeaa05c7381&_kx=-qunaq-mbntfitandytglw.uxahnr
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: hirschnar.at to https://secure.mysterycluesolver.de/w4wys?_kx=-qunaq-mbntfitandytglw.uxahnr

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.125.47
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.203.74
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.203.74
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.27.66
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: eu-central-1.protection.sophos.com
Source: global traffic	DNS traffic detected: DNS query: ctrk.klclick3.com
Source: global traffic	DNS traffic detected: DNS query: hirschnar.at
Source: global traffic	DNS traffic detected: DNS query: secure.mysterycluesolver.de
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: mailmeteor.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 7834875907-1317754460.cos.ap-tokyo.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: ynij.mysterycluesolver.de
Source: global traffic	DNS traffic detected: DNS query: res.cloudinary.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2025 14:10:37.377629042 CET	56042	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:10:37.496557951 CET	53	56042	1.1.1.1	192.168.2.5
Mar 26, 2025 14:10:55.653184891 CET	53	59550	1.1.1.1	192.168.2.5
Mar 26, 2025 14:10:55.654206991 CET	53	65087	1.1.1.1	192.168.2.5
Mar 26, 2025 14:10:56.203644991 CET	53	53030	1.1.1.1	192.168.2.5
Mar 26, 2025 14:10:56.762747049 CET	53	58208	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:00.107810974 CET	64823	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:00.108093977 CET	57319	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:00.206095934 CET	53	57319	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:00.207202911 CET	53	64823	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:00.811614037 CET	59224	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:00.812011957 CET	51286	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:00.949728012 CET	53	59224	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:00.967677116 CET	53	51286	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:01.783906937 CET	55391	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:01.784183979 CET	51496	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:01.883793116 CET	53	55391	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:01.886006117 CET	53	51496	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:02.372577906 CET	49561	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:02.372725964 CET	50324	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:02.567418098 CET	53	49561	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:02.692590952 CET	53	50324	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:03.990263939 CET	51326	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:03.990427971 CET	58531	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:04.195322037 CET	53	51326	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:04.253644943 CET	53	58531	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:05.223948956 CET	57659	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:05.224227905 CET	61335	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:05.225227118 CET	59026	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:05.225392103 CET	51276	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:05.323359013 CET	53	57659	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:05.324640036 CET	53	61335	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:05.327974081 CET	53	59026	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:05.331849098 CET	53	51276	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:05.792495012 CET	49681	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:05.792649984 CET	49369	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:05.894247055 CET	53	49681	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:05.894756079 CET	53	49369	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:06.435642958 CET	55834	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:06.436336994 CET	60483	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:06.539383888 CET	53	55834	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:06.539436102 CET	53	60483	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:07.901294947 CET	64754	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:07.901637077 CET	64327	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:07.997859001 CET	53	64754	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:07.999005079 CET	53	64327	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:08.953208923 CET	50708	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:08.957427979 CET	52505	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:09.051729918 CET	53	50708	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:09.055711031 CET	53	52505	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:13.815916061 CET	53	59825	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.194684029 CET	58608	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.194951057 CET	50543	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.195446014 CET	52065	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.195662022 CET	59429	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.196114063 CET	57192	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.196455956 CET	57052	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.197568893 CET	53961	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.197832108 CET	49616	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.198385954 CET	54827	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.198385954 CET	51047	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:21.292377949 CET	53	58608	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.293005943 CET	53	50543	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.293346882 CET	53	52065	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.293360949 CET	53	57192	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.294142962 CET	53	57052	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.294159889 CET	53	59429	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.294372082 CET	53	63022	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.295286894 CET	53	53961	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.296329021 CET	53	49616	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.681278944 CET	53	51047	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:21.734479904 CET	53	54827	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:23.968642950 CET	57311	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:23.968965054 CET	53788	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:23.975085974 CET	56206	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:23.975227118 CET	62815	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:24.073012114 CET	53	56206	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:24.073518991 CET	53	62815	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:24.187508106 CET	53	53788	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:24.278651953 CET	53	57311	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:24.616532087 CET	49809	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:24.616683006 CET	54497	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:24.715473890 CET	53	49809	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:24.716957092 CET	53	54497	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:27.187979937 CET	138	138	192.168.2.5	192.168.2.255
Mar 26, 2025 14:11:27.419341087 CET	59958	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:27.419703960 CET	60615	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:27.640398026 CET	53	59958	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:27.699368954 CET	53	60615	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:30.447000027 CET	49222	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:30.447000027 CET	52215	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:30.545892000 CET	53	52215	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:30.546535969 CET	53	49222	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:30.653707981 CET	53	58495	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:30.948122025 CET	58788	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:30.948611975 CET	51202	53	192.168.2.5	1.1.1.1
Mar 26, 2025 14:11:31.046951056 CET	53	58788	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:31.049181938 CET	53	51202	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:32.849672079 CET	53	52911	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:55.407951117 CET	53	58337	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:55.461678028 CET	53	57699	1.1.1.1	192.168.2.5
Mar 26, 2025 14:11:58.331286907 CET	53	56274	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 26, 2025 14:11:02.692689896 CET	192.168.2.5	1.1.1.1	c277	(Port unreachable)	Destination Unreachable
Mar 26, 2025 14:11:04.253717899 CET	192.168.2.5	1.1.1.1	c286	(Port unreachable)	Destination Unreachable
Mar 26, 2025 14:11:27.699470997 CET	192.168.2.5	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Mar 26, 2025 14:11:31.572351933 CET	192.168.2.5	1.1.1.1	c2dd	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:01 UTC	984	OUT	GET /?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U3gwNDYvRXh1ZWpOb1orVWYwMkVMRzFlQmtmMD0=&h=696c0b13c9bb46b2b210e89a34578cd9&s=AVNPUEhUT0NFTkNSWVBUSVbYlGfZU66j8K_UDSuTsyS5h7hisQMzbX-xxgbWnDCCvg HTTP/1.1 Host: eu-central-1.protection.sophos.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 13:11:01 UTC	654	IN	HTTP/1.1 302 Found Content-Type: text/html Content-Length: 0 Connection: close Date: Wed, 26 Mar 2025 13:11:01 GMT X-Amzn-Trace-Id: Root=1-67e3fce5-031569785bf338e106e96bb6;Parent=24f00eabef9feb7f;Sampled=0;Lineage=1:0a944001:0 x-amzn-RequestId: eff21e55-5764-49a3-8fa0-5069dcf5739b Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow x-amz-apigw-id: ICRz7H_3FiAES7Q= Location: https://ctrk.klclick3.com/l/01JQ6NWH0WZVGMWKA81MBFF7RT_2 X-Cache: Miss from cloudfront Via: 1.1 0ee1fe5fcafe794371111733608557fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: 0-STVqL8hJshoNL5kx4gMkpLEYTEr0H5kI9HCNiZ_CRUs2fTLRVWiA==

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:02 UTC	697	OUT	GET /l/01JQ6NWH0WZVGMWKA81MBFF7RT_2 HTTP/1.1 Host: ctrk.klclick3.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 13:11:02 UTC	764	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 13:11:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://hirschnar.at?label=53350f19760da2cf412ccaeaa05c7381&_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr x-envoy-upstream-service-time: 6 cf-cache-status: DYNAMIC Set-Cookie: __cf_bm=W_U06ykJCmewzEi7k22aiBCzGSsFIrOZgLGxJXpNtWw-1742994662-1.0.1.1-5ZdMoF.9H88fGfKC7UanhzQNO4vLNo_3b0gzfKF2bvhwoOt6IRSPmyy7hAstxbn6Ai2d5Id0aSWy72zJOccV2gXOo6V7XzlD4mA_pXRvsHg; path=/; expires=Wed, 26-Mar-25 13:41:02 GMT; domain=.ctrk.klclick3.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9266e43f4c95de92-EWR
2025-03-26 13:11:02 UTC	126	IN	Data Raw: 37 38 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 72 73 63 68 6e 61 72 2e 61 74 3f 6c 61 62 65 6c 3d 35 33 33 35 30 66 31 39 37 36 30 64 61 32 63 66 34 31 32 63 63 61 65 61 61 30 35 63 37 33 38 31 26 61 6d 70 3b 5f 6b 78 3d 2d 51 55 4e 61 51 2d 4d 42 6e 74 46 69 74 61 4e 64 79 54 47 6c 77 2e 55 58 41 48 4e 72 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 78<a href="https://hirschnar.at?label=53350f19760da2cf412ccaeaa05c7381&_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr">Found</a>.
2025-03-26 13:11:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:02 UTC	346	OUT	GET /th?id=OADD2.10239400979856_1C4ONTMUVBZM2U4CN&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:02 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 520601 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 50B52F7A16924420A2AC83030BCC7F5D Ref B: EWR30EDGE0308 Ref C: 2025-03-26T13:11:02Z Date: Wed, 26 Mar 2025 13:11:02 GMT Connection: close
2025-03-26 13:11:02 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 32 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 31 30 3a 31 34 20 31 35 3a 31 33 3a 33 35 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1 r2i``Adobe Photoshop 25.12 (Windows)2024:10:14 15:13:358C
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: e5 43 e6 65 72 94 6d a9 f1 ed 4d 65 a5 64 52 99 07 97 49 e5 d4 d8 f6 a4 c5 2e 52 b9 99 07 97 49 e5 d4 ec 29 19 28 e5 29 4c ae d1 d2 32 54 e4 53 19 4d 49 4a 44 2c 94 d6 4a 99 96 9a 56 82 d4 88 8a d3 59 6a 56 4a 46 5a 0b 52 22 2a 29 bb 6a 56 5a 6b 2d 05 29 11 32 fb d2 62 a5 2b 4d db 41 4a 44 78 f6 a6 d4 8c b4 98 a0 a4 c6 e2 92 9f 8a 4c 7b 55 73 0e e3 68 c7 b5 2e 28 c5 50 c4 61 4d f9 a9 d4 55 73 00 98 a4 c7 b5 3b 1e d4 63 da a9 48 9e 51 98 a4 c7 b5 49 86 a4 c5 57 32 15 99 19 5a 4d b5 26 3d a8 c7 b5 57 30 b9 48 f6 d3 76 d4 d8 f6 a4 db 55 ce 2b 10 ed a4 db 53 6d a4 db 55 ce 2e 52 16 5a 46 5a 99 96 93 6d 57 38 b9 48 36 d2 30 a9 f6 d2 6d aa e7 17 2b 20 c7 b7 e9 43 0a 99 92 93 6d 57 39 3c a4 38 a3 15 2b 28 a4 d9 4f 9c 5c a8 8b 6d 21 15 26 da 46 15 5c e2 e5 43 36 Data Ascii: CermMedRI.RI)()L2TSMIJD,JVYjVJFZR"*)jVZk-)2b+MAJDxL{Ush.(PaMUs;cHQIW2ZM&=W0HvU+SmU.RZFZmW8H60m+ CmW9<8+(O\m!&F\C6
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 79 76 b0 fe f6 da 8a c7 45 b7 ba 93 fd 56 d5 6f bd bb d6 ba 8d 3e d5 20 8d 51 3a 2d 74 46 9b 67 0d 5a c9 2f 31 b1 e9 d0 05 db b7 f8 6a c5 ad a4 50 36 e0 bc b5 4c bc 2d 0c f5 a2 a3 14 70 ca a4 e5 a5 c9 32 28 60 1f ad 42 5b 34 cf 34 86 c5 53 a6 88 e4 65 b5 21 38 14 ab 2e 38 aa ed 26 57 20 d3 1a 5e f9 a9 e4 b1 3e ce e5 b9 80 96 3c 15 dc 6b 36 4b 29 5d 98 9a b2 93 54 f1 c9 59 ca 97 33 b9 51 73 a7 b1 cf ea 5a 7c df 79 3e f7 7a a2 f6 d7 08 bb 9d 59 4f f7 6b af 91 41 eb 51 dc 42 25 5e 6b 1f 64 d1 d1 0c 5b d2 e8 e5 63 b1 bb 96 36 90 2e d0 b4 d6 b5 9c 2b 15 7d d8 fb d5 d6 25 bc 4a b8 14 47 04 49 c0 55 c5 3e 49 07 d6 d7 63 91 f2 2e 86 dc c6 ca 1b a5 17 0b 2d af 32 ae d1 fd ea ec 1a 24 db b7 6a e2 a8 ea 1a 60 b8 5f bc d8 fe ed 57 2c 90 e1 89 8c 9e ba 1c b1 bc 51 47 Data Ascii: yvEVo> Q:-tFgZ/1jP6L-p2(`B[44Se!8.8&W ^><k6K)]TY3QsZ\|y>zYOkAQB%^kd[c6.+}%JGIU>Ic.-2$j`_W,QG
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 55 6f 95 78 c5 1e 1f de 96 f2 33 2b 31 6c 0d df c4 be e0 d0 06 85 b3 4a b0 f9 51 79 8d e5 f2 cb f7 95 41 fe 42 93 4e 74 f3 a2 8f cd 65 5d d8 66 dd d8 74 1f fe ba 65 d1 ca a9 8b e5 95 97 0d b7 2b c1 f7 aa f6 f2 2a c2 df c2 d1 29 fa ff 00 f5 ea 40 e8 75 ab 6c b3 49 61 fb b1 fc 3f 88 cd 73 97 fa 55 e7 96 d7 2d 2f 99 2e ec 7f f5 fb 55 dd 3f 5c b9 bc d3 da 0b 7d bf 6a 58 82 ed 93 1b 64 c7 a7 bd 5c b1 bd 90 ab 4f 7e b1 44 19 40 f9 7d 6a 46 ec 62 68 f7 d6 ff 00 6a 8a ce ee 55 89 77 7c f2 7d de 47 ad 6f 6a 8b 1c b6 79 f9 a4 58 fe ea fd e5 65 e7 f9 55 1d 72 38 ae 24 cc f6 6b 1c 9b 47 cd b7 e6 6e e0 fb 55 bb ad 52 d9 66 86 c2 36 6d d1 2e e6 55 c2 f6 c5 69 ca ac 64 f7 31 ad 62 8e 59 17 64 be 50 6f bb b7 2c b5 62 25 bc b0 92 39 77 32 dc c3 26 f8 e5 8f e4 68 c8 39 0c Data Ascii: Uox3+1lJQyABNte]fte+*)@ulIa?sU-/.U?\}jXd\O~D@}jFbhjUw\|}GojyXeUr8$kGnURf6m.Uid1bYdPo,b%9w2&h9
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 79 50 2b 36 d5 1b 9a 4f bd 93 d7 8a 12 7d 89 64 09 2a 45 1e 2d d9 94 34 99 6d ad fe 7a 53 98 1b 86 57 0c cc bf c5 fc 3b be 98 e6 ab 15 79 6e 18 d9 aa fd df 99 9b 15 66 ce 46 b3 ba 59 e6 97 70 dd 8d d1 36 de 2a f9 44 7a 37 c3 7d 75 e4 b7 fb 04 b0 6f 54 6f 9b 77 ca eb 9e 3f 23 56 f5 6f 03 59 78 8e 39 ae 7c 39 3c 1e 6c 92 33 4b 14 78 5d df 4e c4 ff 00 3a a5 e1 fd 2e da 4d 3d 67 37 5b 5a 55 3b 56 3f 95 98 63 a1 ff 00 1a 8f c6 69 a7 69 2d 6a 34 cd d1 5d 44 b9 8e 58 27 2c b1 9c 82 a4 f6 cf 6e 6b 25 f1 7b a6 df 67 53 26 35 43 6f 2e 8d 7f 2b 5b 34 6b fb bf 97 6b e4 7b 55 4b ad 13 cf b3 f2 c7 ef 15 f0 25 f2 be 65 c9 fe 2e 3d bb d7 4d a0 dc e9 7a ed 9f d8 bc 4b a9 f9 f3 36 4b 5d c9 8f 32 3c 74 18 1f 78 0f ad 35 6c e0 d2 f5 88 2e 6c e7 68 e3 58 d0 45 3a b6 e4 6e 3f Data Ascii: yP+6O}dE-4mzSW;ynfFYp6Dz7}uoTow?#VoYx9\|9<l3Kx]N:.M=g7[ZU;V?cii-j4]DX',nk%{gS&5Co.+[4kk{UK%e.=MzK6K]2<tx5l.lhXE:n?
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: de ce b1 5b 40 b9 92 46 fe 11 4c b3 52 15 45 79 bf ed 05 e2 7d 39 b4 ff 00 ec 0b 7b cd e3 fe 5f 56 29 3e 59 13 3f 77 8f e2 04 67 8f eb 5c f8 9a ca 94 1b 67 46 1e 8c aa ca c8 d6 d3 7e 2d f8 4e eb 5a ba b2 9d a7 b6 8a 0c f9 17 2c bb 96 e3 1d b0 3e e9 f4 ae 77 56 f8 d7 25 ce a5 6a 9a 16 8b 3f 93 15 ce 64 6f 30 6d 9b 03 fd 5b 60 7d d2 48 27 1f 9d 79 ae 97 a0 41 75 e5 07 b3 9e 55 92 4f 96 25 6e 70 79 cb 7b 7b 0a ea b4 dd 37 4f b3 85 63 bb 89 62 2b 93 1a c6 a1 55 7d f0 cc a7 f2 af 1a 58 ea d2 5b 9e ac 70 74 a2 ef 63 4f c5 fe 31 d6 fc 59 63 6b 67 04 fa 85 b4 31 2b 3c b1 c7 85 59 a4 67 27 92 83 3b 55 7e 51 de b9 d9 26 d3 b4 99 14 49 02 c9 32 af dd 89 8a f9 79 ec 0f ca 57 f2 35 4b 5a d7 e5 b9 8e 5b 7b 25 f3 19 be 48 de 48 f7 32 8e 46 ec b7 2a 47 b9 35 94 fa 5c 76 Data Ascii: [@FLREy}9{_V)>Y?wg\gF~-NZ,>wV%j?do0m[`}H'yAuUO%npy{{7Ocb+U}X[ptcO1Yckg1+<Yg';U~Q&I2yW5KZ[{%HH2F*G5\v
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 1d f3 2c 80 c9 2d ca ee 69 1f fd a3 fc 58 1f ad 4f ae 7c 45 d7 3e cb 2f d9 da 3b 5b 65 62 91 a4 58 5d c0 74 fc ab 0a df 59 ab 6b 44 a8 4a 8c 16 ac ee fc 27 e0 dd 33 48 86 48 3e d9 6d 7d 7e cb be 59 67 ce fc 91 c0 ef d3 1d 6a dc 7e 1c 78 2c da ca 2b eb 68 9a 49 4b b4 ea c6 5d bd f6 fd 01 af 02 87 57 d6 2f b5 cf 32 d6 e6 79 2e 65 66 93 f7 6c 77 31 03 27 f9 57 a4 78 37 fe 12 cb 2d 26 49 44 0d 14 97 8b 1c d2 cf 73 87 e0 92 48 da 7a 57 9b 8a c1 56 a6 b9 a5 56 ed f7 3a 68 e2 a9 cb 45 0d 0a de 3c b8 8f 40 d2 64 f0 c6 8f 79 3c 97 33 bf 9d 2d cf dc 69 8b 1f bb 8f a6 3f 2a cd f0 95 bf 89 f5 68 ef ac 75 1d 42 4d 3e d2 df 0d 73 3c b9 fd cf fb be e4 76 1e b5 a7 e3 ef 12 68 f6 9a b4 73 98 23 b9 bc 8e 30 3f 7f 6c 19 a6 39 eb bb 3c 00 73 d3 f5 ac af 8c 1a dd e2 69 b6 36 Data Ascii: ,-iXO\|E>/;[ebX]tYkDJ'3HH>m}~Ygj~x,+hIK]W/2y.eflw1'Wx7-&IDsHzWVV:hE<@dy<3-i?*huBM>s<vhs#0?l9<si6
2025-03-26 13:11:03 UTC	16067	IN	Data Raw: 00 33 f9 9a f4 aa 67 73 bf 2f 2f 2f 7e a7 3c 30 b1 6b 9a f7 39 af 07 f8 92 c0 eb 1a 84 5a 1c 5b 6d da 03 6c ad f7 1a 38 99 31 81 e8 bc 63 ff 00 d7 59 a9 a6 ce 9e 24 67 b2 56 94 45 18 87 fb bc 30 f9 b9 cf 15 d3 e9 5e 14 d0 f4 dd 42 49 ec 67 e2 78 3c bf 2d 9b b2 9d f9 c7 d4 e3 da b6 ae 35 68 ac a4 8e c2 cb 4f 8f e6 62 24 96 45 da 9c 67 93 f4 cd 72 7f 6a 72 d4 6e 9a 6e eb a9 b7 b0 ba b4 b4 3c ba e7 50 bc d5 66 9c c7 a6 5f 5b 5a e9 f7 30 95 92 2d eb f2 0c af de 18 3b 71 9e 6b 43 c3 b6 1a 85 da dc df da db 49 89 62 58 67 b2 69 03 a3 06 21 c1 2d c1 5c 70 48 1c fd 39 ae a6 f3 c7 3e 1c 8e f2 4b 25 be da 20 8f 6c 8b b7 e4 c8 3d 31 83 91 da b8 cf 1e 7c 46 8a 7d 35 b4 fd 12 05 b6 89 79 91 95 42 79 87 3f 2f e5 5e 8e 17 17 8c a9 68 c6 95 93 ea cc 2a d3 a3 1d 5c ee 6f Data Ascii: 3gs///~<0k9Z[ml81cY$gVE0^BIgx<-5hOb$Egrjrnn<Pf_[Z0-;qkCIbXgi!-\pH9>K% l=1\|F}5yBy?/^h*\o
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: ea e9 43 c4 ad ce e9 39 6c d6 c5 ff 00 85 0d fa dc 9d 66 5d d1 cb 13 24 6c df 7a 17 3c 1c 57 45 a4 d9 68 7e 15 87 4f 47 b6 69 ee 95 95 16 4f bc b6 ef 8e 0b 0e 98 01 71 54 35 bd 4b cd 69 cb ee dd 2c 58 5f ee e3 e9 ea 3a 57 2f d6 1c aa 5e 92 b2 ee 69 c9 cb 1b 49 9e 73 6b f0 ed 24 d4 24 7b c9 d9 44 6a 3c 89 63 f9 93 20 f3 9f 5c 1a b3 a8 78 61 d2 6b 1d 36 38 d7 f7 11 ca 66 65 fe 28 c3 9d bf 9f 1c 7b d7 59 a0 93 a9 ea 17 08 7e 55 89 97 6a b3 0d b9 39 dd 9f 6a b9 a9 69 d7 30 5f 42 60 6d a5 99 44 9b 97 fd 8e 9f f7 d5 76 3c 7d 7e 6b 49 9c ff 00 57 85 b4 47 95 f8 8b 49 97 4d d6 34 db 2d df eb 63 60 b2 2f dd 6f de 11 c7 e0 d4 97 d6 8f 67 a8 5e 49 1c 5f ba da cf 14 8c bf 36 18 74 af 4c d5 b4 bb 7b fb a4 b4 95 76 c9 03 13 17 f1 33 76 38 fc 6a be a9 e1 58 b5 0d 3d b4 Data Ascii: C9lf]$lz<WEh~OGiOqT5Ki,X_:W/^iIsk$${Dj<c \xak68fe({Y~Uj9ji0_B`mDv<}~kIWGIM4-c`/og^I_6tL{v3v8jX=
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: cc 32 77 1f 63 d2 a8 6a b1 6a 90 5b c9 75 6f 6c b1 db ab 0d cc 8a 37 c8 5b d3 07 a7 ad 73 eb aa df 5c 5e 79 6a ca aa aa 7e f4 63 6a 90 32 7a d6 f0 84 64 ae 63 2a 8d 0b 1e 9d a8 6b 33 47 71 7f bb c9 66 ff 00 56 aa 55 5b bf f9 c5 6b dc 49 1f 86 f4 fb 5f 2a c7 cc ba b8 93 10 45 72 a5 91 53 bb 01 9e 79 e3 9a e9 fc 1f 6b 6d 7d a4 b5 e6 b1 79 3d ad 8c 4a 5d 62 8a 20 cf 27 6f af 3e d4 ba f6 b7 a3 5c de 7d a6 2d 16 5f 26 05 5f 22 49 d4 ee 57 5f ee 8c e4 8c f6 3c 54 cb 14 93 e5 4b 42 95 05 6b b6 3b c3 be 1d d5 6e 66 69 d2 c6 35 12 30 2d 3b 7e ed 21 00 e5 87 e3 fd 2a fe b9 a5 dc d9 de 40 12 e6 da 25 95 5a 4b 99 9b e7 91 b1 fc 47 eb e8 29 b2 5d 3e b7 34 77 ba bc ba 94 11 46 a0 ac 72 48 23 56 c0 e3 b0 01 49 ee 79 a8 93 52 d5 db 47 8e 38 b4 55 82 de 25 02 d9 64 9c 6e Data Ascii: 2wcjj[uol7[s\^yj~cj2zdck3GqfVU[kI_ErSykm}y=J]b 'o>\}-_&_"IW_<TKBk;nfi50-;~!*@%ZKG)]>4wFrH#VIyRG8U%dn

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:02 UTC	375	OUT	GET /th?id=OADD2.10239400979857_14A87O62ZUJXBN0IX&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:02 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 533604 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 23F747E9FC3A4A048DA1562EC74389E1 Ref B: EWR30EDGE0312 Ref C: 2025-03-26T13:11:02Z Date: Wed, 26 Mar 2025 13:11:02 GMT Connection: close
2025-03-26 13:11:02 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 32 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 31 30 3a 31 34 20 31 35 3a 31 32 3a 32 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1 r2i``Adobe Photoshop 25.12 (Windows)2024:10:14 15:12:228C
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 63 a0 89 94 fa b7 23 f4 a3 ea b5 7b 0b db 53 ee 74 9b e9 b2 4e 91 ae e7 2a 07 bd 73 e7 c4 07 82 42 80 3a e6 aa 5e 6b 2d 2b 07 79 23 da 3a 62 9a c2 d4 ea 83 da d3 3a a5 ba 85 b9 12 2f e3 c5 48 b2 06 5c a9 04 7b 57 12 ba cc 5b f0 64 ff 00 c7 4d 5a b5 f1 02 c3 f2 a4 8b 83 cf 20 d2 78 49 76 0f 69 0e e7 5a 1a 97 75 73 52 78 82 56 60 55 02 28 f7 1c d3 9f c4 99 5c 00 ab 8e b8 39 a8 fa ac fb 07 3c 3b 9d 26 68 cd 73 67 c4 d1 85 1c ae 7b f1 9a 74 3e 27 88 67 cc 00 fa 63 8a 5f 55 9f 60 e6 8f 73 a2 dc 07 24 e2 9b 34 a2 38 cb 7d e2 3a 01 d4 d7 3b 36 bd 1c a8 0f 99 ce 72 00 5e 3f 3a 89 f5 98 c3 61 4b 39 f6 5c 7f 3a 5f 55 9f 61 a7 0e ac e8 12 e9 ff 00 8a 21 f9 d3 fe d0 9f dc 3f 9d 73 5f db 44 f2 21 93 1e e4 53 d7 59 8c 29 2c 24 5f a1 06 a7 ea b5 3b 17 cd 49 9d 24 53 2b Data Ascii: c#{StN*sB:^k-+y#:b:/H\{W[dMZ xIviZusRxV`U(\9<;&hsg{t>'gc_U`s$48}:;6r^?:aK9\:_Ua!?s_D!SY),$_;I$S+
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: e1 b0 dd eb 27 87 92 e8 57 b4 47 43 fd 93 e1 b9 54 db 79 06 32 c3 6f 5c 0a 8a e3 c3 1e 1f 96 dd 61 b8 d3 89 58 72 15 c1 da d8 3c f5 1d 6b 9a 9b 58 57 61 20 97 0c 3d 0f 5a b9 a6 78 89 95 80 69 09 51 ef 52 e9 49 14 a4 5c 8f c2 9e 1e 85 98 5a df dc c2 fe 8f 87 03 f0 e2 ad 5a 78 7b 4e e0 4b a8 2c 8b 8e 72 36 9f c3 06 a9 ea 57 36 da a5 b3 24 2c 23 b8 50 5a 39 07 af a1 f6 ae 4e fb 51 bf d3 ae 7c ab d0 51 88 c8 f9 b2 08 f6 22 a7 95 94 9d ce fd bc 37 a4 86 53 0d cc 8a 54 7c dc 83 ba a6 36 5a 34 7f bb 2a 54 af f1 ab 91 5e 77 1f 8a e6 89 46 49 c1 e9 9e ff 00 4a ab aa 78 ba 40 4a 3b e0 fa 1e 2b 36 99 7a 1e 9f 15 c6 89 6c d9 69 c9 6c f5 63 fd 2a be a1 ad e8 0a c7 cc 1e 67 18 ed 5e 37 79 e2 4f 35 bf e3 e3 0d e9 9a aa 35 79 5d b0 64 04 7b 9a 96 8b 47 ab 4b e2 7d 1a da Data Ascii: 'WGCTy2o\aXr<kXWa =ZxiQRI\ZZx{NK,r6W6$,#PZ9NQ\|Q"7ST\|6Z4T^wFIJx@J;+6zlilcg^7yO55y]d{GK}
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 75 57 3a c2 fa d5 56 d6 32 df c2 6b 91 9f 51 66 62 49 e6 a4 b5 6b 89 97 72 8f 97 d6 b7 58 78 ae 86 12 c4 36 74 cd 72 93 a9 dc 40 07 ae 6b 33 52 80 ca d9 47 00 7b 54 36 b0 4a 39 9e 5d 8b fd d0 79 a7 c9 3d ac 4b c3 fe 35 a4 69 a5 b1 9c ab 36 b5 24 b6 b4 8a 25 cb 8c b5 53 d4 84 45 88 70 29 97 1a 9c 4a bf 2b 13 59 f7 77 66 56 18 22 b5 8d 16 65 2a ea d6 1c ba 75 bc d3 67 cc 23 3d 87 4a 8f 55 d2 63 44 fd cd 34 5f 6c 6f 97 b7 5a 6d d6 a2 cc b9 53 da b4 54 e4 65 2a 91 b1 41 ad c2 30 07 ae 39 15 6e de 05 d8 0f 00 7b d6 6c b7 2e d2 6e ee 7a d4 e9 72 4a 85 cf 35 b7 b3 66 5c e8 d8 f3 e3 48 f0 db 78 ac fb e4 82 e1 48 23 07 d4 75 ac fb 8b 89 56 4c 1f ba 7a 1a 63 5c b6 e1 83 9a 15 3b 09 d4 b8 c9 2d ca cc 50 f2 bd 8d 43 73 09 56 ca d4 ee ee ed b8 9c 52 49 20 38 07 9c 56 Data Ascii: uW:V2kQfbIkrXx6tr@k3RG{T6J9]y=K5i6$%SEp)J+YwfV"eug#=JUcD4_loZmSTeA09n{l.nzrJ5f\HxH#uVLzc\;-PCsVRI 8V
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 07 cc 1c 92 72 30 7d 6b 27 28 d4 56 65 7b d0 77 47 97 ad d4 89 33 db ed 00 96 23 77 7a 92 6b 49 26 b7 dc 9b 5b 1d 53 1c fd 6a d6 bf a5 3d 8d f3 30 01 63 62 5b 0c 08 c0 f6 ff 00 1a a7 1d dc b6 ee 56 40 41 c6 55 c0 e7 f3 ee 2b cf 92 69 ea 77 c1 ab 0c 68 e4 58 59 4c 78 f2 8f a8 ce 6a b2 48 e3 18 3d f1 ef 56 5a 4f 32 ea 46 62 c1 5c 03 83 eb 54 dd 02 49 c7 23 3d 69 0d d8 b9 6a c2 79 1d 0f de eb f2 f7 e3 81 51 cc b2 45 e6 46 77 00 73 b9 3b 13 4a b2 98 66 59 d4 70 46 09 06 ac 47 9b b6 dd 31 63 24 ad 8d f9 e8 3a 0f d6 9d ae 88 bb 4c a5 0e 0b 05 25 57 de 9d b0 1c 83 d3 d2 8e 62 b9 68 66 8c 32 82 54 93 c6 31 dc 1a 9e 6b 88 9a d9 10 00 5a 30 70 e4 10 58 76 35 36 2b 98 83 24 28 1d b1 8c 7a d0 d2 16 c6 00 f7 39 c5 45 e6 e5 b9 1e fc 51 90 1b 04 73 d7 9a 9e 52 b4 26 62 Data Ascii: r0}k'(Ve{wG3#wzkI&[Sj=0cb[V@AU+iwhXYLxjH=VZO2Fb\TI#=ijyQEFws;JfYpFG1c$:L%Wbhf2T1kZ0pXv56+$(z9EQsR&b
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 63 fd d3 8e 2a 0b 4d 0e f6 66 0d 1c 4f b7 3d 71 c5 3d 05 a9 46 de ca 30 c0 e0 b7 d6 b6 f4 ad e9 9d a8 54 0e c3 a5 36 d7 47 ba 13 6d 38 18 23 3e d5 ab 1c 7f 67 6f 2f b9 f4 a2 e3 57 20 ba 69 11 46 e0 d9 23 34 eb 18 65 94 91 1c 64 b0 19 e3 d2 b5 ac 2d 7e d5 24 69 2d be 46 7f 1c 57 6d a0 e8 36 b6 aa 25 50 06 e1 c8 f5 cf d6 b1 95 4e 53 58 c2 e6 0f 83 74 bb 99 18 3b c6 42 1e a1 85 76 51 58 10 98 55 00 55 ab 3b 68 d7 ee 0d a3 d2 b4 61 8f 2a 06 2b 96 75 1b 3a a1 04 91 c9 6a da 4c d3 7c b1 92 06 79 14 9a 7e 87 34 29 82 e3 27 d6 bb 45 b5 8f 76 48 e6 97 ca 88 73 81 9a 9f 68 ca f6 69 9c b4 3a 44 8c c3 27 03 f4 ad 1b 1d 36 28 8e 4f 5a d5 90 20 e0 62 ab 4d 2a 47 de 8e 67 20 e5 48 02 2a 2e 2a bd c3 85 e8 6a 1b 9b bc f1 9a a3 73 73 85 ce 68 51 07 22 4b 89 56 b2 f5 2b 90 Data Ascii: cMfO=q=F0T6Gm8#>go/W iF#4ed-~$i-FWm6%PNSXt;BvQXUU;ha+u:jL\|y~4)'EvHshi:D'6(OZ bMGg H.*jsshQ"KV+
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: dc 43 20 92 56 24 f4 0a 0e 7f 3e 2b 9c d5 3e 26 e8 b0 d8 48 da 55 b5 dd cc c4 10 8d 3c 5e 5c 68 c4 1c 33 03 c9 00 e3 81 c9 ae 6a 98 8a 54 fe 29 6a 6f 4f 0f 56 7b 23 d0 66 ba 87 4f d2 66 bd 9c 85 86 dd 0b b6 5b 19 c7 41 93 dc f4 15 e1 33 f8 e7 c7 17 7e 20 b9 ba b5 d6 56 18 ee 01 85 23 eb 1a 29 c9 1b 54 0f f5 80 77 1c e6 a2 d5 75 bf 12 f8 99 55 2f ee da e6 38 c0 1b 48 f2 60 53 fd e6 55 fb c7 d8 d4 17 d7 b6 da 55 a9 82 c4 2c 97 0a a4 28 8f 2b b4 fb f2 4f 7c e3 92 6b c5 c4 e3 25 56 4b 93 44 7a d8 7c 2c 69 c5 f3 ea cb 51 c5 77 69 04 97 7a a6 b9 7b 2b 5d 7c b2 16 b8 24 b6 46 08 65 27 80 7d 0f 6a c7 ba d4 ef 24 91 3e c3 1f d9 ad 0b 90 b2 12 56 49 7a fc c3 d4 12 08 e3 a5 66 c4 fa b5 ce a0 27 d4 6e 22 92 36 27 f7 47 25 41 3d 31 e9 fc ea e3 cb 96 31 9c 6d 27 a7 35 Data Ascii: C V$>+>&HU<^\h3jT)joOV{#fOf[A3~ V#)TwuU/8H`SUU,(+O\|k%VKDz\|,iQwiz{+]\|$Fe'}j$>VIzf'n"6'G%A=11m'5
2025-03-26 13:11:03 UTC	16067	IN	Data Raw: 4d 45 26 5d b2 2a ba b9 3c 13 52 21 f5 a7 70 1f e5 02 9c d3 5a 0c af 15 22 be 17 02 82 c7 b1 e9 4b 40 2b cb 10 eb 8e 45 54 96 1d cd f2 f5 ad 20 33 d7 8c d4 2d 1a a9 cf ad 29 14 99 1d 9d a9 19 66 e7 da 96 58 81 e0 af 15 34 6f 8e 94 e6 2a dd 46 0d 48 ee 65 de c3 b4 f1 d2 ab 04 f9 ab 5e 40 0f 04 64 54 12 44 39 20 01 4a c3 b9 48 2e 1b 06 8d bb 6a 66 42 7a 52 34 4c 7a 74 a4 03 10 7e 55 62 09 36 ae 0d 42 88 47 5a 30 7a d0 06 80 9c 6d e2 90 cd 9f a5 55 8c e1 70 7a 53 c0 ee 29 dc 0b 00 e7 9a 37 0a 60 e2 95 51 db 25 41 20 75 20 51 70 b0 ed d4 03 4d a6 93 e9 4c 56 1e cf da 99 23 d3 18 e2 98 c6 8b 80 ae d4 c6 6c 53 49 a1 46 e6 c7 7a 91 8e 06 ad 69 f6 ed 34 9c f4 14 96 30 79 8d 82 33 cd 6e 5a db 79 71 80 13 af 26 a9 20 7a 10 41 1e c5 c1 e8 29 eb b8 f4 e9 56 c4 05 97 Data Ascii: ME&]<R!pZ"K@+ET 3-)fX4oFHe^@dTD9 JH.jfBzR4Lzt~Ub6BGZ0zmUpzS)7`Q%A u QpMLV#lSIFzi40y3nZyq& zA)V
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: f9 d7 1d 6f e1 bd 24 2b ea ba d5 d8 7b 7f 30 98 ed ed e4 cb bf 1c 86 61 d3 39 07 8a e7 9d 78 d6 97 34 de 9d 8d 25 19 42 3c b0 dc ce d3 9b c4 1e 27 bc 5b 9d 2b 4f 92 47 57 01 9e 3e 15 7a 90 33 9e d8 35 df 58 f8 19 22 86 6d 47 58 f2 75 06 9f fd 47 9a 0c 51 aa 81 b4 96 e3 24 9c 93 8c 63 81 f8 36 eb c4 36 de 14 d2 ad ed b4 ed 3b ec b6 d1 c6 4c 65 b2 09 63 cf e3 cb 67 35 e7 be 22 f1 9e b1 7f 70 d7 32 ea 32 bb 38 2a 40 38 50 be 80 0e 80 d7 32 8e 2b 14 ed 49 28 43 f1 64 39 51 a3 f1 fb d2 fc 0f 63 8f 59 f0 e7 85 b4 54 58 62 b0 b5 82 30 55 21 8a 20 7e 62 72 48 27 39 ea 6b 92 ba f1 f0 bf 67 b2 d1 9c 5b 2c 80 29 28 00 00 93 92 78 ea 3d ab c7 4d de a7 a8 ea 91 59 cb 3c 8e b9 c8 24 93 85 ed c5 6f e8 1a 72 da 37 17 00 be d0 cd 9e 3a 8e 7f 95 69 1c 96 95 1b ca a4 b9 a6 Data Ascii: o$+{0a9x4%B<'[+OGW>z35X"mGXuGQ$c66;Lecg5"p228*@8P2+I(Cd9QcYTXb0U! ~brH'9kg[,)(x=MY<$or7:i
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 1c 70 31 ef 9e d5 d3 0c c2 0e 09 4e 0e e2 96 12 69 dd 48 e1 fc 3d e3 5b cd 35 98 c3 2b 16 27 25 87 04 e7 aa 93 dc 67 9e 6b a4 5f 18 dd eb 0e 4c 12 98 2e 01 00 5c 34 87 76 e3 d0 03 ed 96 e4 74 cd 57 f0 cf c3 34 bb f1 05 cd ce b5 a8 43 a7 69 ab 29 f2 43 36 59 c3 1c a6 3d b1 d4 93 90 7d 6b ab b1 f0 27 86 f4 9d 0d e0 b8 d5 b3 74 e5 04 84 00 63 61 9c 86 42 39 50 db 7b f2 01 ae 7c 5d 6c 0a 96 8a f2 f4 2e 95 3c 43 8e fa 1e 63 e2 0f 11 dc c5 70 23 3e 6a ae e7 3b b7 9c cb ce 03 1f af 26 a9 5d 5f 9b 9d 5b ed 97 52 e1 55 01 6f f7 7f c9 fd 2a bf 8d a6 b8 9f 53 25 ed 0c 51 23 94 8b 6a 90 18 2e 01 23 23 38 a8 ed 7c a9 b3 13 38 89 cc 65 7e 60 7a 81 c0 fa d7 b3 42 8c 63 14 ec 79 f2 6f 99 a3 d5 be 0b c1 a7 c3 ab 16 bb d4 55 de 73 b6 14 8b 21 08 1c 82 d9 20 92 7b 63 23 f9 Data Ascii: p1NiH=[5+'%gk_L.\4vtW4Ci)C6Y=}k'tcaB9P{\|]l.<Ccp#>j;&]_[RUo*S%Q#j.##8\|8e~`zBcyoUs! {c#

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:02 UTC	375	OUT	GET /th?id=OADD2.10239340418567_1CP2YH6ACBDMHMMFR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:02 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 700191 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DA3B386344B5478AAC6636C8D95B8D20 Ref B: EWR30EDGE1419 Ref C: 2025-03-26T13:11:02Z Date: Wed, 26 Mar 2025 13:11:02 GMT Connection: close
2025-03-26 13:11:02 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 17 6a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 30 20 32 33 3a 35 32 3a 33 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``jExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:10 23:52:308
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 73 6b 27 f7 6b 4b 49 76 f3 37 57 2c d5 ce a8 cb 53 b8 d3 4e e8 29 64 f9 64 aa 7a 3c 9f bb ab bb d5 ab 8d ee 76 c7 63 3f 54 89 5f e6 ac 3b cb 7d b2 7c d5 d1 5e 15 f9 eb 27 5c f9 60 f3 2b 6a 72 30 a8 91 c5 f8 82 25 5f bb 59 b6 b1 6d 93 75 6e 6b db 5b e6 ac 78 64 fd e5 75 c7 63 8e 51 d4 d8 d2 64 55 f9 6b 7e cf f7 91 d7 2b 66 fb a4 f9 6b a9 d3 4f ee fe 6a c6 a1 bd 22 c2 c1 52 32 6c 8e 9d 0d 57 d6 25 f2 a0 76 6a c4 d5 e8 67 6b 97 8b e5 ed ae 2b 5e 91 5a 4f 96 af 6b 57 6c f2 3f ef 2b 0f 50 93 74 7f 35 76 d1 85 8e 1a d3 b9 9f 31 fd e5 4d 6e f5 4e e1 dd a4 a9 6d de ba de c7 1c 5e a6 dd 9b ee ae 93 45 89 9e b9 9d 24 6f 91 2b bc f0 bd be e8 f7 57 25 59 58 ec a2 ae 47 71 13 7d da 19 36 41 5b 4d 65 fc 4d 59 7a c6 d8 3e 55 ac 63 2b 9d 0e 36 45 39 b6 f9 15 4f 62 b5 0d Data Ascii: sk'kKIv7W,SN)ddz<vc?T_;}\|^'\`+jr0%_Ymunk[xducQdUk~+fkOj"R2lW%vjgk+^ZOkWl?+Pt5v1MnNm^E$o+W%YXGq}6A[MeMYz>Uc+6E9Ob
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 19 b4 2b 39 e3 dd 6b 27 cd fd ca a4 b6 f7 9a 6c 9f 2c 92 6d ac 9a 4f 63 45 26 b7 35 b5 4d 06 2f 9e 48 e3 75 6f f6 2a 9d bc fa ad 97 cb 1d c4 8c ab fc 0f 57 34 df 11 b2 fc b7 1f 32 d6 f5 9f d8 f5 18 f7 79 11 ff 00 c0 2b 39 36 b7 34 8a be db 98 31 eb 77 8f 1f ef 23 f9 bf d8 a9 a3 d6 19 7e 59 2b 62 e3 40 b6 6f 9a 39 36 ff 00 b1 59 f7 da 43 45 1f cd 24 6d fe fd 4d e2 ca f7 d7 52 dd 9e a3 be 3d d1 c9 1b 2f fe 3d 44 da c2 ae f5 93 ff 00 1f ae 6e e2 da 58 a7 fd cf ca d4 9f da 17 d1 47 b6 ea 0f 35 7f bf 47 b3 17 b5 36 e3 d5 20 f3 bf d5 ed ad 6d 3e f2 da 58 fe 6f 96 b8 f8 6e 2c 65 93 6f 97 b6 b5 6c 63 b6 f2 f7 47 25 29 47 41 c6 a1 d3 dd 68 9a 7e a3 06 e5 f2 d6 4f ef a5 60 de 78 62 f2 d6 4d cb 04 77 11 ff 00 b1 53 c3 2b db fc cb 26 da d0 b5 d7 e5 83 fd 67 cc b5 9f Data Ascii: +9k'l,mOcE&5M/Huo*W42y+9641w#~Y+b@o96YCE$mMR=/=DnXG5G6 m>Xon,eolcG%)GAh~O`xbMwS+&g
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 96 34 ab b6 e9 11 fe 0a 19 e0 8f fb 94 cf b5 5b fd d5 7a 2c 8c e4 e5 2d 93 2d fc ab 4f 8c d5 38 a4 56 7a b5 09 a6 63 38 d9 13 e6 9b bd 68 61 4d 54 cd 0c cb 41 97 16 71 dd 26 d6 ac 6d 5b 4a fb 3f cd 1f dd ae 85 78 ac fd 70 4f 2c 2c b1 f9 6b 44 a2 ac 6b 46 a4 d4 d2 be 87 2a c9 fd e9 2a 36 8a 2a 92 6b 19 23 7f de 49 1e ea 19 36 7d e9 2b 13 d1 22 f2 e2 5f 99 a9 16 58 97 ee c7 55 66 bb 89 24 f9 be 6a 16 ff 00 7f cb 0c 1b a8 26 f6 2e 7d a6 7f 2f 6c 3f 2d 3e df 45 96 f2 44 93 50 9f e5 fe e6 fa cc b8 b9 95 3f d6 49 b6 99 0d ea b4 9f eb 28 e5 0e 73 ab 8f 4e d3 21 4f 96 08 2a 5f 32 ce d6 3d cd 22 2a d7 35 0d c6 ef f9 69 f2 d3 9a 4b 6f bd 24 9b aa 76 0b 5d 6e 5f d4 bc 66 b6 f2 79 3a 7d 8f 9f fe db 7c ab 52 e9 be 21 d5 6e fe 69 a0 8e 25 ac 16 bc b6 59 36 c3 1d 5c d3 Data Ascii: 4[z,--O8Vzc8haMTAq&m[J?xpO,,kDkF*6k#I6}+"_XUf$j&.}/l?->EDP?I(sN!O_2="5iKo$v]n_fy:}\|R!ni%Y6\
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: ab b0 fe 11 b3 f9 f4 ab f6 35 bf 94 8f 6b 4f b9 ec 0a 1a b8 7f da 23 e2 4d b7 c2 df 05 c3 aa 49 04 17 1a 95 fb b4 5a 75 bc df ea b8 fb f2 49 8f e1 5e c3 f8 9a b1 ed 7f 69 9f 83 fe 42 49 71 7f a9 45 36 c9 1a 6b 4f b2 ee 68 76 7f 79 81 c7 cf da be 47 f8 c5 f1 17 5a f8 9b e3 0b bd 7b 54 9f 6d ae f6 fe ce b7 77 f9 6d a1 dd f2 aa af 41 5d d8 0c be 75 a7 79 ab 24 72 e2 f1 90 a7 0f 75 ea 6e 78 eb f6 81 f8 89 e2 89 de d6 f3 5d 9e d7 4f 97 ef da 69 c9 f6 55 7f f7 b6 73 b7 ea 6b ce 75 6f 18 da 59 40 91 f9 8e d2 4b bb ee 27 f3 ae 77 5c d4 20 fb 77 d9 ed ff 00 7b 1e fd af b1 ff 00 d7 7a e4 d6 0d f5 b3 2c 7f e8 fe 5e d6 7f b9 bf ee 57 b5 2a 2a 09 c2 11 49 1e 64 6b 5d a9 b7 a9 ea 7f 09 fe 3a 78 97 c1 fe 20 49 bc 37 77 3d 9a cb b7 ce 85 fe 68 ae 71 ff 00 3d 13 a3 57 b7 Data Ascii: 5kO#MIZuI^iBIqE6kOhvyGZ{TmwmA]uy$runx]OiUskuoY@K'w\ w{z,^W**Idk]:x I7w=hq=W
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: c5 c3 77 7f 78 7f 6b 62 3b 23 e8 af f8 5d 3e 02 ff 00 9e 9a c7 fe 0b bf fb 2a 5f f8 5d 7e 02 ff 00 9e 9a c7 fe 0b bf fb 2a f9 d9 67 db ff 00 2c e3 ff 00 c7 a8 f3 77 7f cb 08 ff 00 f1 ea 3f b1 70 fd df de 1f da d8 8f 2f b8 fa 2f fe 17 67 80 3f e7 be b1 ff 00 82 ef fe ca 8f f8 5d df 0f bf e7 be b3 ff 00 82 ef fe ca be 74 f3 17 fe 78 47 4d de ad ff 00 2c e3 a9 fe c5 c3 77 7f 78 7f 6b e2 3c be e3 e8 e5 f8 df e0 0f f9 e9 ac 7f e0 af ff 00 b2 a7 2f c6 ff 00 87 df f3 df 58 ff 00 c1 77 ff 00 65 5f 37 e5 3f e7 9c 74 ac 7f bb ff 00 a0 51 fd 8b 86 ee fe f1 ff 00 6b e2 3b 2f b8 fa 3f fe 17 8f c3 ef ef eb 3f f8 2e ff 00 ec a9 df f0 bc be 1f 7f cf 4d 63 ff 00 05 df fd 95 7c df b7 f8 b6 7f e3 94 2e df f9 e7 ff 00 8e 51 fd 87 86 ee fe f0 fe d8 af d9 7d c7 d2 1f f0 bd 3e Data Ascii: wxkb;#]>_]~g,w?p//g?]txGM,wxk</Xwe_7?tQk;/??.Mc\|.Q}>
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 56 bd 8f 4a 6b 39 7c bd ad 77 27 fe 3d 4e b5 82 26 f9 5a 79 1d ab c8 6d 3e 3b 78 6a 67 da b6 fa b5 fa fc bf 25 dd d4 71 2a 7f df 00 fe b5 62 fb f6 85 8a cb 52 55 5d 0a fa de d5 bf e5 e2 29 d6 e7 e5 f5 fb b8 fd 69 f3 43 b9 37 7d 8f 58 9a 4d 2a df fd 76 a5 04 4c bf 2f ef a7 5a 9e 19 74 86 9f cb fe d6 b1 56 ff 00 ae eb 5e 48 df 1e 74 39 ed 61 ba 58 fc 41 75 75 2b fc f6 3f 65 b5 81 76 f6 db 36 0e 5b f0 ac af 11 7c 79 b9 de f6 7a 7f 83 2e 97 e4 ff 00 98 8d d2 cb b1 bf dd d8 b4 b9 a0 ba 95 ef 76 3d e5 65 d2 a2 93 cb 93 5a b1 56 6f fa 6e ad 56 61 bb d0 da 7f 27 fb 77 4d 59 3f b9 be be 7b f0 df 8e fc 5f e2 1b a7 6b ad 4b c2 3e 17 58 91 59 3e d0 93 45 14 cb fd d5 fb 3e ef cc d7 47 ab 78 86 f9 f4 37 8d bc 7d e0 08 bf 72 cd 12 5a 4f a9 5e 33 c9 d8 0f 94 0f cf 8a cd Data Ascii: VJk9\|w'=N&Zym>;xjg%qbRU])iC7}XMvL/ZtV^Ht9aXAuu+?ev6[\|yz.v=eZVonVa'wMY?{_kK>XY>E>Gx7}rZO^3
2025-03-26 13:11:02 UTC	16067	IN	Data Raw: e9 57 4b 83 fe 9a 6e fe e5 5a be bc 89 23 ff 00 57 22 c8 bf 2b d5 18 ef 5b cc ff 00 59 3d 43 8a 4c 14 a5 71 d1 e9 ff 00 c2 c9 f7 be 64 a3 fb 2d 47 de 49 16 97 ed 8a 90 3e ef f5 94 fb 19 a5 b9 9f 6c 70 4f 74 df c6 88 8c df a2 d2 e5 8b ea 2e 66 43 75 a5 4a 89 f2 bc 1f f7 dd 43 0e 9b 72 f2 32 f9 12 7c b5 b1 26 9d ad 5c 27 99 6b a4 ea 31 42 bf 7f 64 32 6d e7 f0 ad 5f 0e f8 5f c5 d7 7b 37 69 37 4b 6e af b5 de e1 3c 85 4f f8 11 e7 14 72 c5 2d 5e 82 95 44 93 d4 e3 ae 34 fb 98 be f4 32 53 52 ca f1 fe 65 b6 93 6b 7f b1 5e c1 71 e0 2b e4 92 19 23 bb b1 66 d9 f3 a3 bf ca 8d df fd ff 00 d2 99 27 82 b7 c9 fb cf 12 da db b2 ed de 9f dc ff 00 75 73 59 ba d8 54 ed ed 57 de 63 1c 52 b5 e5 fa ff 00 91 e4 ab a5 6a 0d f7 6d 24 a6 4d 63 77 17 fa cb 79 16 bd 5e 6f 09 c0 92 3a Data Ascii: WKnZ#W"+[Y=CLqd-GI>lpOt.fCuJCr2\|&\'k1Bd2m__{7i7Kn<Or-^D42SRek^q+#f'usYTWcRjm$Mcwy^o:
2025-03-26 13:11:02 UTC	16384	IN	Data Raw: 52 5e 8f 5f c0 e9 8e 25 c9 2b c2 df d7 a9 7a dd 7c 3f fd 9b e6 5c 6a d2 34 31 26 e8 5f f7 71 46 9e 89 d7 e4 6d de b5 8b ab 6a 7e 0f 79 3c c5 d6 51 bc ad bb d2 de ea 36 f5 1f 75 14 d6 c6 b7 a2 7c 3e f0 f6 97 71 e6 d8 f9 f1 ec 5f dd 4b 3c 97 2c f9 6f 93 f8 b6 ae 57 d7 f3 ac bd 36 f7 c2 e7 c3 ff 00 65 d2 74 9d 0f 49 5b 8f 9a df ed da 72 ac bf 23 7c e8 ce 07 fe 3f 5c 9f 52 84 67 6b c9 bb f4 db fa f4 2e 55 53 8d ec 8c 6b 8f 16 7c 3c bf 8e e1 6f bc f6 8e d7 6c 69 e4 a4 9b 5d 47 2a c8 ca 98 0c 3b 56 ad af 8a 7c 0a 2c 62 8f 47 f0 be a5 7f 22 ed 6f df 25 d4 ac 8b e9 f2 0f 9b f3 c5 74 f6 3e 2a b9 b5 b5 b8 8e 48 ed 6c 2d e5 4f f4 77 4b 5d ad 36 7a 1d ed d7 1d 88 07 3e 95 8f fd b5 7a f6 f3 6a 5f da 57 ca aa ea a8 f6 f7 4d 03 3e 5b 1f 3a 36 47 3e ab f9 54 aa d4 62 b9 Data Ascii: R^_%+z\|?\j41&_qFmj~y<Q6u\|>q_K<,oW6etI[r#\|?\Rgk.USk\|<oli]G;V\|,bG"o%t>Hl-OwK]6z>zj_WM>[:6G>Tb
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: ec 7e d3 e1 cf 19 26 a5 74 bf 2f 95 a9 c0 ab bd 47 dd f9 94 9f 98 74 f9 ab cc 7c 4d a1 f8 8f c0 5a a4 2b e2 7f 0d be 9c ca fb 52 ed 11 7c a7 f7 59 80 61 ff 00 01 24 57 76 bf 17 bc 60 d1 cd 0f fc 24 8e d3 2b f9 48 e9 1b 2a bb 1e 41 5d d1 ff 00 ec bf 8d 63 f8 c3 e2 16 bb ae c3 6e fa a5 bb ea 91 c6 ec cb 15 df 9d e4 23 6d c6 ed aa 3f 22 47 15 e7 e3 71 19 4d 7a 6d d3 a1 28 cb a5 ac 97 e6 cb 8c 67 1d 53 fd 4e 72 df 59 fb 55 8b cd 6f 25 af 99 fc 69 bd 97 e9 c2 9f 9b fa 54 d0 d9 d8 ca ff 00 6a b7 83 6b 2e d6 95 ff 00 85 db 6f e7 bb de 8d 17 5e 4b 8d 3b ce bb f0 f5 ac 13 33 b2 a7 d9 13 ca 57 6e 83 ef 1c e0 f6 cf e3 b6 b4 ec fc 71 2c f3 dc 69 b3 68 be 53 2a 2e c4 f2 21 8b ce c7 f0 8f bc 5b f9 57 cc fb 16 dc 96 d6 f9 9b a9 43 4b 8c b7 b5 96 74 78 63 f3 15 ae b7 2a Data Ascii: ~&t/Gt\|MZ+R\|Ya$Wv`$+HA]cn#m?"GqMzm(gSNrYUo%iTjk.o^K;3Wnq,ihS.![WCKtxc*

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:02 UTC	346	OUT	GET /th?id=OADD2.10239340418568_12QU0TF0Q0S6KJNUT&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:02 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 581717 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 30C3F5033FDF42BF935379D6362BAC14 Ref B: EWR30EDGE0711 Ref C: 2025-03-26T13:11:02Z Date: Wed, 26 Mar 2025 13:11:02 GMT Connection: close
2025-03-26 13:11:02 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 30 20 32 33 3a 35 33 3a 34 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:10 23:53:428C
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: ff 00 7b ef 2d 57 31 0d 26 72 97 96 0d 04 95 51 95 93 e5 ae da 4b 6d fb f7 56 4d f6 8f b7 7b 47 5a 2a 84 38 1c e4 91 ed f9 bf 8a 9f 1a b2 fd ef 9a ad 5c 59 cb 04 9f 2d 40 a3 77 dd fe 1a b4 ee 67 ca 49 0e d7 ff 00 66 ac c2 9f de fe 2a a6 a3 f8 5a ad 43 2b 7f 17 f0 d3 1a 2d db a7 f0 af de a9 5a df 75 36 33 b7 ee d5 cb 76 47 d9 51 72 ac 55 92 df 77 de aa b7 16 9b 7e ef ca b5 b4 d6 f5 14 d0 2f fd f5 45 c5 ca 61 34 79 a3 63 2f fc 02 b4 a6 b4 fd e7 fb 3f c1 55 e4 89 fc cf ef 53 52 44 b4 56 5f 97 e5 a7 28 a7 48 89 f7 bf 79 fe c5 22 ff 00 75 a9 dc 56 17 34 e5 a1 7f d9 a5 5f ee d2 0b 08 a3 6f dd a8 6e 1a ac 67 6d 45 30 5f e2 fb ad 40 8a 7f 73 ef 54 6c 73 52 4c 9f bc db 55 a4 dc 24 db 54 43 12 4f f6 be 5a 86 4a 9b 35 14 82 a8 96 45 fe ef de a9 57 fd 9f bd 49 8d b4 Data Ascii: {-W1&rQKmVM{GZ8\Y-@wgIfZC+-Zu63vGQrUw~/Ea4yc/?USRDV_(Hy"uV4_ongmE0_@sTlsRLU$TCOZJ5EWI
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 7f b5 6b 5e 14 69 23 a2 1d 3f 74 9f 35 67 cd 62 9c 1b 65 ef 0f c5 fb b4 55 8e ba 28 6d f6 c7 f3 55 6d 1e cd 60 8d 3f 77 57 e6 7d b5 cf 27 76 74 45 59 11 dd 0d b1 d6 2d e3 d6 c5 c3 fe ef 75 64 5d 7c d5 93 34 33 6e 83 3c 95 1c 70 6e ab ad 1a d5 7b a9 b6 fe ed 69 14 55 98 ec 92 b3 3c 45 7d b6 3d ab 57 6e 11 9b e6 6f bb 58 ba b2 79 b2 3b 7f 0d 5a 24 c1 bc 92 59 64 a6 c7 03 34 9b 5a ad 48 9b 3e ec 75 7b 4f b4 ff 00 96 92 56 88 ca c4 36 f0 32 47 55 2f 0e e9 2b 47 52 b8 82 28 fe 5f bd 5c f5 e5 cb 3c 8f b7 ee d4 b2 d2 20 bc 91 57 e5 aa 92 33 ff 00 15 4d 22 6e f9 aa 29 85 4d ca 21 91 f1 4d df ba 4d ab 44 82 a4 b5 83 32 52 01 f6 e8 cd 5a 96 30 7f 7a 92 ce d7 fb d5 a7 6b 6f b6 a4 a2 4b 18 95 7e f5 15 66 18 e8 a5 72 8e 3f 58 8e 78 b7 f9 7f f8 e5 73 f7 57 ad 04 9b 64 Data Ascii: k^i#?t5gbeU(mUm`?wW}'vtEY-ud]\|43n<pn{iU<E}=WnoXy;Z$Yd4ZH>u{OV62GU/+GR(_\< W3M"n)M!MMD2RZ0zkoK~fr?XxsWd
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: b1 54 dc a2 3a 4c 54 fe 5d 3b cb a2 e0 56 c5 3b 66 ea b3 e5 d1 b2 97 30 15 bc 9a 2a d7 97 45 2b 8e c7 97 6d f6 a7 6c a7 32 52 e2 be 9c f9 c4 88 f1 46 29 f8 fe f5 3b 6f b5 03 b1 1e ca 55 14 f5 14 ea 02 c4 58 db f3 53 98 7f 76 97 6f b5 2e 29 5c 2c 37 14 62 a4 d9 46 28 b8 58 66 df 6a 3f dd a7 e2 9d 8a 2e 3e 52 2d b4 6d a9 71 46 28 b8 72 8c d9 49 8a 93 1b 69 14 52 e6 1d 86 62 97 1f c3 52 6d f6 a3 6f b5 2b 85 86 62 9b 8a 97 6f b5 1b 7d a8 b8 58 8e 97 15 2e ca 36 51 71 f2 91 d1 87 a9 31 fd ea 5d 95 37 1d 86 6d 6a 72 8d b5 22 d3 b3 45 c6 44 a2 a6 8d 3f 86 85 31 37 de a9 17 c8 fe 2a 86 c0 6f 97 fe c5 35 ad da a7 d9 07 f0 cf 4f ce df bb 25 4f 31 a2 89 52 4b 67 ff 00 9e 75 1f 90 cb 5a 0b 25 3d 64 5a 5c cd 07 2a 33 97 72 d2 ef 65 ff 00 81 56 83 15 3f f3 ce 99 e5 23 Data Ascii: T:LT];V;f0E+ml2RF);oUXSvo.)\,7bF(Xfj?.>R-mqF(rIiRbRmo+bo}X.6Qq1]7mjr"ED?17o5O%O1RKguZ%=dZ\*3reV?#
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 3f 2b 2d 76 1e 30 b8 66 f0 8d dc ca 91 ab 6f 8d 9e 64 dd b7 73 2d 71 ba 5e 95 2e b7 e3 0b 4d 37 47 f9 a4 b8 75 5f 93 ee d7 61 e3 ab 2f 2b 4a b7 d3 56 39 22 86 27 dc fb df fd 76 ce 38 ad ac f9 5b 33 bc 79 d4 2f a9 26 82 91 69 da 6f d9 6e a0 81 a6 8a de 36 4d 9b b7 26 6a 8e a1 a8 5f 3d f7 fa f9 3c c5 ff 00 c7 3d 31 57 3c 65 a8 fd 9e 4f 27 c8 8f 6c b6 f1 ab dc bb fc c9 85 fb a2 b1 7c cd b6 2f 71 24 7b a4 fe 0a b9 36 a3 ca 99 8c 55 e7 ce d6 a4 73 5c 2c af ba e2 79 1b fd fa 86 4b 88 16 37 65 f3 3f 75 4d 86 df cf f9 9a 4f 97 f8 ff 00 86 9d e5 2a f9 d1 c7 3e ff 00 93 76 f4 a1 45 8e 52 8a d4 65 8d c3 4f 71 13 6c 91 55 7e 64 4a 93 56 31 79 7f bb f3 36 ff 00 1e fa 2c 64 65 93 cc 8e d2 45 ff 00 6d ea 6b e9 60 97 7c 31 ff 00 c0 de b9 e4 ee ce 98 ab 22 94 71 4e ff 00 Data Ascii: ?+-v0fods-q^.M7Gu_a/+JV9"'v8[3y/&ion6M&j_=<=1W<eO'l\|/q${6Us\,yK7e?uMO*>vEReOqlU~dJV1y6,deEmk`\|1"qN
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: f7 de 76 ad e2 1f de 36 dd ff 00 b8 93 e4 c7 66 e3 e6 ab 2d 6a b2 c1 fd ad 71 ab 5a ca bb 17 ec e9 e5 fc af 9f 45 fe 11 42 82 96 a9 96 ea 72 f4 3c aa ce c3 c4 37 10 45 0d bc 73 b6 cf 97 63 ff 00 2a 9a df 40 f1 63 c8 f6 bf 60 dd bb ee 6f db 5e 89 6b 73 a1 fc 97 12 6b d6 31 6d 76 f3 b6 27 ef 7f da db 9a cc f1 06 9d e1 ab ad 51 2f 21 f1 2f fa 3a a7 fc bb bf ef 7f 2f ef 54 4a 29 3b 07 b5 e6 39 6b 9f 0d f8 dd 7f 79 71 b1 96 df fe 5a a4 ff 00 2a 7e 55 76 3f 0a 78 9a eb 47 95 a6 bb d3 ad ff 00 db f3 fe 6a ea f4 78 bc 2b 75 7d f6 7b 7d 6b 55 b8 dd 0e e7 7d 8d f2 35 4d 63 e1 74 b5 9e 69 ac 7c fb c5 67 f9 f7 c9 b7 66 69 24 87 cf 73 87 b5 f0 c7 88 ef 7c 95 fe d6 92 f2 dd be 6f dc ff 00 b3 e9 56 ef 34 0b 98 23 7f 32 ef ec ea bf f2 c6 e1 fe e7 d7 fd aa ee d6 c2 cf cb Data Ascii: v6f-jqZEBr<7Esc@c`o^ksk1mv'Q/!/:/TJ);9kyqZ~Uv?xGjx+u}{}kU}5Mcti\|gfi$s\|oV4#2
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 1e eb cf 0f 4f 2c 9f c6 ef 06 ef e5 51 58 6b 92 7d ab fe 26 9a 35 d2 b6 df 9d a1 46 5d 9f 85 74 43 13 45 eb 19 5c 52 8c b6 b1 d0 ff 00 69 f9 5b 5a 4b b9 22 b8 ff 00 61 3e 5a 72 eb 17 cf 26 e8 64 fb 44 2b f2 bf 9d f7 5e b3 6d 6e 2c 6f 3f 79 6f 1c 8c b1 7c ce fe 5e e9 76 ff 00 8d 36 e3 c5 6b 6b fb 9b 7d 0b e6 fe fc c8 cc d5 b7 3a ee 63 ca dc 9a 48 da d3 ed ed b5 19 dd 9a d2 0b 79 bf db dd b7 fc 29 75 2d 29 57 7f ef 3f d5 7d c4 85 d5 96 b9 c6 f1 33 ea 17 48 93 41 35 ba aa 7c fe 54 2d f2 7b 9a bb 1e a7 05 c5 af 93 6f 3f da be 7f be e8 db 68 8d 48 31 f2 49 44 58 ec 2e 6e b7 f9 3f ba db fc 6e fb 99 3f 0a 9f 4d f0 f5 9c 11 fe f9 e3 b8 66 f9 be fd 1a 94 17 8d 75 e7 49 24 8b 6b b3 6a 27 96 db 91 be b8 a8 6d e2 68 f6 4d 6b 76 9b b7 fc e9 f7 7f 3a 34 7b 15 cd cb e8 Data Ascii: O,QXk}&5F]tCE\Ri[ZK"a>Zr&dD+^mn,o?yo\|^v6kk}:cHy)u-)W?}3HA5\|T-{o?hH1IDX.n?n?MfuI$kj'mhMkv:4{
2025-03-26 13:11:03 UTC	16067	IN	Data Raw: d0 d8 b5 d3 74 cb a9 de ce d6 74 b7 93 67 ce f0 ed f9 d7 fd ea dd f0 bf 8b 7c 47 e1 98 11 61 bf 8d ad ed 7e e5 a3 c0 be 6e d6 e9 bb 6f de fa d7 1d 75 a4 e8 cb 23 ae c9 de 45 46 d8 f6 f3 fc bb ab 43 4d b6 d0 e0 8d 6e a6 bf 9d 6e 2d d1 5b 7a 6e 6f fc 7b fb b5 14 b1 d8 ba 3e f5 39 b2 fd c7 ba 3b 4b cf 8b 97 29 bf f7 9a 1b 5c 3b af c9 73 6b b5 53 77 ba 8a d4 b7 f8 a5 ad 59 c8 9f b8 d3 6d fc ad bb e1 87 76 dd c6 bc d2 6d 3b 43 59 3e d1 36 b5 6b 2d 9b cd fb a8 7e ca cd b3 3f ed 55 f8 f4 1b 9b 7d f7 56 37 d1 dc 42 cf b5 21 fb cb 32 ff 00 b7 fd d2 b5 d1 3c fb 31 56 fd eb fc 09 50 d6 c7 5b ac 7c 40 d6 9e 39 af 24 be 93 4b f2 9f cd 7f 25 da 55 75 fe e7 15 5b 4d f8 ab 7d 71 1b dc 5c 78 96 7b 58 57 ee 6f b5 56 6e 7f ba 6b 1e 4b 6d 56 da d7 ed 51 cf 63 2d ae cf 2a e2 Data Ascii: ttg\|Ga~nou#EFCMnn-[zno{>9;K)\;skSwYmvm;CY>6k-~?U}V7B!2<1VP[\|@9$K%Uu[M}q\x{XWoVnkKmVQc-*
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: ed 08 fe 6b 7f 97 c9 4d ac db 7d 7e 53 f3 d4 4a 3e cf 74 f6 71 c7 1a ac b3 2e cf b4 6d f9 1b fe 03 54 21 b0 95 64 9a 68 63 b1 58 ee 9f 6c 33 5b ed 89 93 1f 7b ef d6 1b c7 b3 2a fe f5 d6 c6 dd 9f 8f fc 3c 9a 6e d6 bb dc aa 8a be 4f 90 db 5f f0 db 49 6b e2 18 2e 37 dc 58 df ed 91 92 46 47 86 0f 37 7f fc 03 f8 6b 17 fb 31 9a 0f 31 a7 f3 e3 fb d3 5c 24 eb b9 d7 d9 7f a8 aa 36 b6 4d 6f 23 b4 97 7b 77 3f ef 66 de b1 33 a9 fb bf 8f d2 a6 74 f9 b5 4e c2 f6 8d 68 76 5a 7a 4a f6 b3 49 67 77 fe 90 bb 59 f7 ed f2 9f e5 fe 05 fe 1c d4 cd 61 73 67 27 fa 1c 91 cb 78 a8 cc e9 34 ff 00 7d 7f d9 fe fe 2b 06 c6 7f 2e 0b 85 f3 27 fd d7 ee 91 e1 45 ff 00 56 7a be 6a 58 6d e2 96 08 6c ee 20 92 e3 6a 7c ee f2 79 4c 99 fb b8 26 b5 8c 5c a1 ea 3f 75 f4 25 be b8 f1 2d ad 8f f6 84 Data Ascii: kM}~SJ>tq.mT!dhcXl3[{*<nO_Ik.7XFG7k11\$6Mo#{w?f3tNhvZzJIgwYasg'x4}+.'EVzjXml j\|yL&\?u%-
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: f7 5b da a8 df 78 e7 c6 73 d8 bd aa f8 97 ec bf b9 f2 9e 68 60 8d 77 af fb f5 f4 18 75 8c c4 d3 55 23 78 a7 de 4e ff 00 73 1c 68 c6 1a 3b 0f d4 5f f6 a0 fe d5 76 b2 82 d6 7f de b7 fa 0e f5 95 b6 9e d8 c7 a5 43 3f 83 bf 68 bb 2b 18 57 5f b7 d2 e0 b7 ba 7d d6 f3 79 9b a5 b6 cf 75 db e9 54 34 df 16 f8 ab 4b 92 1b 88 7c 6f 3d bc 8b f7 fe 7d be 77 f7 aa 4b 1f 8b 77 9a 0d f7 9d a5 f8 a3 c4 77 13 6f 66 44 79 da 58 bf ef 96 e2 bb 29 e5 b8 89 4b f7 b1 8b 8f fd bc bf cc 49 51 50 f8 ac ce cb c2 b6 7f 19 b4 8d f2 5d 6a da 6d e4 76 a9 e6 bb fd 87 fd 72 8e c7 a6 da e6 3e 2a 7c 3d d1 75 ed 7e c7 c5 da 96 bd a0 78 6a 4d 5a dd 65 b8 b6 b4 93 cf df 9f e2 d9 d7 76 3d eb 95 f8 85 f1 7f c6 7e 28 b5 b7 6d 63 52 9e ea 15 fb e9 16 d5 df fe f6 df bc be d5 e7 77 1e 24 d4 a2 9a 6b Data Ascii: [xsh`wuU#xNsh;_vC?h+W_}yuT4K\|o=}wKwwofDyX)KIQP]jmvr>*\|=u~xjMZev=~(mcRw$k

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:02 UTC	735	OUT	GET /?label=53350f19760da2cf412ccaeaa05c7381&_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr HTTP/1.1 Host: hirschnar.at Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 13:11:03 UTC	884	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 13:11:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://secure.mysterycluesolver.de/w4WYs?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2By2HXkOVOW7%2BAwXifTaDHqL%2F6K7KEbuuDBs5yUWIwth1xng3RX971FGtD1xK8teck3Up6MVmLbB7OjwF4y8%2Ba84%2BmZVYxGKdeOLlsw%2Fv5mAcmJEF3ZjZEXNgdP4cf4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9266e443dab66a57-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=100193&min_rtt=99887&rtt_var=21362&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1307&delivery_rate=37283&cwnd=172&unsent_bytes=0&cid=5b7ec057d8c210d5&ts=1156&x=0"
2025-03-26 13:11:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:03 UTC	375	OUT	GET /th?id=OADD2.10239340418565_1OUCQO7VP7RV95UTY&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:03 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 436830 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 96D22935813645B7911812D88E2A43CF Ref B: EWR30EDGE0716 Ref C: 2025-03-26T13:11:03Z Date: Wed, 26 Mar 2025 13:11:02 GMT Connection: close
2025-03-26 13:11:03 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 30 20 32 33 3a 35 30 3a 34 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:10 23:50:438C
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 51 92 08 f6 a9 18 8d c1 b1 f5 34 8c 70 dc 8c f6 e9 c7 ff 00 5a b5 84 ba 19 26 44 8c 46 77 0f 4e 3f ad 3a 4e 32 3d 71 92 33 da 89 00 6e 40 c3 7a 9f 7f 5a 74 71 b2 fa 60 f0 7d 0e 29 cb 4d 46 c4 55 dd c1 c6 47 3e d8 a9 08 cf 3c 1f 41 de 90 20 56 ce 7f 03 47 56 c6 46 7d fd 6a b9 93 18 37 cc 84 e3 00 8c 81 f5 a7 63 0c 30 3a e0 11 d4 9e 29 ab cb 28 c7 1d fb 73 4b 18 27 90 7a 67 8c f5 3d e8 b0 59 82 ae 18 00 70 33 ef cd 28 8f 0c 71 d4 9e 3d 8d 48 ab 8e 7a f4 cf bd 3d 53 38 03 3c 80 30 68 02 36 41 b0 ff 00 0f 4c 52 30 5d c0 6e c8 14 97 ac c1 78 e7 b7 1f ca a9 09 36 e0 bf 07 b7 3d e9 09 9a 03 68 ef d3 b6 7d 68 de 15 4e 4f 07 b5 54 13 36 e1 83 81 9a 4f 35 97 91 d4 f1 4c 5c c8 96 47 cf 1d 3b 53 d5 c0 c7 40 bd 33 ef da ab a9 f9 77 1e f5 24 2b b9 f2 72 40 23 bd 05 17 Data Ascii: Q4pZ&DFwN?:N2=q3n@zZtq`})MFUG><A VGVF}j7c0:)(sK'zg=Yp3(q=Hz=S8<0h6ALR0]nx6=h}hNOT6O5L\G;S@3w$+r@#
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: d4 2b 80 d9 6e bf e3 4b 81 bb 93 c7 a7 d3 fa d0 32 49 4e 7a a8 c0 38 1f e7 b9 a6 79 99 c0 3c 0f 6f f0 a4 62 4a f6 18 19 fc ea 3c 65 b1 f9 50 0d 96 16 5f 94 8c 8f e9 8a 78 95 44 20 71 8f d3 9a a7 fc 59 cf 06 90 33 74 ee 30 7f cf bd 04 49 b6 8b 82 61 b7 a3 7b fb 53 95 89 51 9e 0e 7b f6 35 4c 70 c4 f5 26 a5 8c 93 c7 19 ee 09 a0 cf 96 4d 96 15 4e e0 4f 5e 72 7b 10 3f 95 4d 1f 1c e0 9e 7a 1f e5 55 e1 23 cc c7 38 3e b5 6d 06 14 73 c7 a5 07 40 9d 17 38 a8 6e 24 68 d4 f7 53 cf d3 fc 6a d7 94 dc 60 73 e9 43 5b 6f 65 07 04 67 b7 e5 40 15 20 94 ba f2 b8 3e bd 8d 4c af 96 c7 6c f6 a9 05 90 0e 4a 8c 63 20 1e b4 2d b3 2b 70 0f 4f ce 81 0e 8c e1 78 f5 cf be 7f c2 a4 0c 5b 9e 32 47 1f 9f 7a af f3 0c e0 71 9f a5 3d 18 15 ef 90 73 ff 00 eb a0 65 95 c9 72 0e 79 e9 8f 41 d6 Data Ascii: +nK2INz8y<obJ<eP_xD qY3t0Ia{SQ{5Lp&MNO^r{?MzU#8>ms@8n$hSj`sC[oeg@ >LlJc -+pOx[2Gzq=seryA
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 71 d3 1d 31 d2 b9 ab 56 e5 d1 1e 8e 1f 0f cc b9 99 14 68 c2 3f 95 fa 0c 0c e3 9c 55 1b 98 c8 93 21 08 ce 3a 8a d4 91 70 a4 8f 4c e0 d5 39 37 48 a7 24 9e b9 1d c6 2b 9a 12 b3 3b e7 14 d1 4e e0 23 45 9c 83 c6 31 ed 50 a9 da 8b 8f 94 f4 e3 f3 cd 5c 16 df 21 3b c6 33 df 9f cf d2 90 c5 b1 f0 41 52 09 04 1c 11 d3 b5 75 42 a2 ee 70 55 a2 f7 45 56 93 31 e0 92 7b 83 f5 a3 7f ca 31 d4 9c 63 af e3 4c 9c 81 2b 21 18 3e de 94 d8 46 e3 80 7e 5e d5 bf 43 8a d6 91 61 4b b2 e5 7a fa 7b 53 a3 65 38 de 49 cf 5c 76 a2 28 88 50 c3 1c fb 54 db 09 f9 80 c0 1c 81 ef 50 e4 69 ca d8 c8 c3 80 01 03 03 80 7f cf 4a 90 39 2a 40 eb eb 51 90 42 9c f4 e9 c7 5a 64 65 84 c7 3d 3f cf 14 86 a2 d8 eb bc b6 d2 4f dd ef db f1 aa e4 10 f9 20 8e a3 39 ab 87 05 f3 d0 91 df b7 b5 33 23 70 6d 9c e3 Data Ascii: q1Vh?U!:pL97H$+;N#E1P\!;3ARuBpUEV1{1cL+!>F~^CaKz{Se8I\v(PTPiJ9*@QBZde=?O 93#pm
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: e9 d0 7e b5 97 3a bd d1 a7 23 2a a4 0d fc 59 f6 14 3c 58 ff 00 eb d5 bd 80 b7 07 9f 5a 24 8f b9 e5 69 7b 40 f6 65 58 94 06 fb a2 a6 3f 2e 7d 7a fe 34 d9 30 1b 83 f4 cd 35 49 e3 2a 7d 69 a9 5c 5c ac 26 c3 9e 79 e3 bd 44 d0 82 db 89 39 e2 a4 24 ed e7 a5 00 e7 d0 63 ad 35 2b 07 29 0c 96 a0 b6 73 ef 83 da 93 ec d1 f7 1e fc 55 8c fc c7 9e 3b 52 74 6f 5a 7c cc 45 49 ed 89 50 c8 01 eb 91 fd 6a b0 b2 62 b8 d9 d7 9c d6 98 24 b6 07 7e a2 97 d0 01 c7 b5 52 aa d7 50 74 ef d0 ca 92 d8 ae 73 d7 ae 2a 2f 27 2b d2 b7 56 d7 ce 5c b0 e3 b1 34 a9 a6 02 f9 03 24 8e 06 32 0f b8 a7 f5 8b 75 0f 62 63 a5 bb 08 f2 13 8f 4f ad 56 9e dd 83 6e 74 6c 74 ff 00 f5 d7 5b 1d 83 04 c3 7a 8e b4 e5 d3 77 2f ce 38 ce 79 35 2b 16 90 7b 0b 9c 59 8c aa 9c 67 9e 3e 95 1c 80 ab 01 8e 00 eb 5d 8d Data Ascii: ~:#Y<XZ$i{@eX?.}z405I}i\\&yD9$c5+)sU;RtoZ\|EIPjb$~RPts*/'+V\4$2ubcOVntlt[zw/8y5+{Yg>]
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 56 2b b2 9d a4 b0 eb 51 34 24 b9 23 85 ef 56 67 3b 58 0c 64 f5 f6 15 01 24 e7 8a da 32 d2 e6 91 bb 44 12 46 62 60 c3 dc 1a 72 4a e9 9c 9c 93 d2 a5 65 dd d4 67 eb 4a 90 b6 01 0b fe 34 73 f7 2b 44 86 48 f2 3b 0c 64 e2 92 15 91 5b 93 c7 5e 4d 58 f2 88 c0 23 39 ed 40 51 d0 8c ff 00 2a 4a 4a c4 f3 20 43 9c 05 38 fa d4 c8 81 46 3f 2a 21 8c 0c 0e 98 ea 05 39 c2 aa e0 1e 47 43 52 e6 8c e5 2b e8 35 88 0b 93 c8 15 0b 3e e6 e3 8a 24 2c cc d9 5e 46 01 a6 c6 bb 9b 9c 8a 69 95 18 d9 0a fe dc 9f f3 d6 9a dd aa 58 d0 b2 f2 7a fa 51 20 08 c7 77 27 b6 29 8d 4b a0 d4 54 1c b9 e9 d4 63 ad 0c 50 1e 07 07 b8 eb 4c 60 4a d3 70 e7 e6 3d b1 4c 76 bf 51 e5 80 3f d2 85 7c 36 ef e7 4d 8e 32 c0 7b fe 94 e5 4c 90 a7 8c 75 06 a5 c9 21 e8 31 49 39 3f 8d 28 34 ed 8a dd 0f 1f 97 e5 51 ca Data Ascii: V+Q4$#Vg;Xd$2DFb`rJegJ4s+DH;d[^MX#9@QJJ C8F?!9GCR+5>$,^FiXzQ w')KTcPL`Jp=LvQ?\|6M2{Lu!1I9?(4Q
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: f5 45 09 2e 0e 3f 3e b5 32 42 cc e0 2e 4b 1e d4 7b 18 53 7e ea 1c aa d4 96 8d 93 d9 5e 4d 6d 70 25 89 c8 61 e8 7f 9d 7a 0f 81 fc 5f 39 70 b7 32 28 20 0e fd 6b ce e4 80 c5 8d d8 ef 8c 7a 55 dd 36 57 8a 41 b2 b9 31 78 7a 75 a1 aa d4 da 84 9a f7 65 ac 59 eb 96 be 24 13 5e 34 41 86 c1 d1 bd cd 69 2d dc 8c b9 07 39 fd 2b cb 74 fb f6 0c 19 87 3f e7 9a ea 3c 2f a9 cd 3a b1 ea a0 80 32 7a 57 ce e2 30 b2 a6 ae b6 3b 67 85 a5 25 78 1d 5a 5d b2 f5 1d 7d 2a 4f b5 96 f6 fc 6a 9a b1 38 c5 0c 08 ae 03 8f d9 46 fb 12 c9 38 e7 22 a9 4b aa 2c 33 05 75 ea 70 0d 49 32 fc bf 5a a1 78 9b 94 6f 40 76 9e 28 3a 29 53 83 7a 9a a9 73 1b 8e 08 ce 3d 69 19 f0 bb 77 63 eb 59 56 f3 95 65 1d 0f 4e 9d 6a 56 ba 5c e1 c6 07 40 49 a4 ee 37 87 b3 d0 ba 93 03 81 b8 12 38 e6 a6 69 23 58 c0 fe Data Ascii: E.?>2B.K{S~^Mmp%az_9p2( kzU6WA1xzueY$^4Ai-9+t?</:2zW0;g%xZ]}*Oj8F8"K,3upI2Zxo@v(:)Szs=iwcYVeNjV\@I78i#X
2025-03-26 13:11:03 UTC	16067	IN	Data Raw: 93 9c 9c e6 ad 34 6e dd 7d 3d 29 16 03 c6 54 8c 53 8e 88 d2 32 8c 4a d8 c7 3d aa 4b 66 28 e0 8f bd 52 b5 b9 3c e0 fb 52 08 18 60 ed cd 3b ae 85 39 c5 a3 56 df 55 65 87 04 8c 8e dd e9 df db 05 a4 f4 1d 86 3b 56 58 86 53 91 8c 7d 05 3d 2c a4 3d 33 cf 3c d6 5c ab b1 c6 e8 50 bd d9 ad 1e aa 8c 40 3d f8 06 ae fd ac 0c 1c f3 8a e7 3e cf 20 93 92 32 39 a9 76 cd 82 03 64 1a 5e ce 26 33 c2 d3 7b 33 4e eb 58 48 f7 22 64 92 0f 4f 5a c9 96 ea 47 93 7b 48 59 89 ef 4c 68 1c 8c 1f cf b9 a4 fb 37 63 9e 94 e3 18 a3 7a 74 69 53 5a 12 ac ec ad 92 c4 b0 e9 9e 95 25 c6 a9 72 21 f2 d0 ed e3 a0 aa c5 59 4f 4c f4 e3 fc 69 a1 25 72 4f ae 69 db c8 bf 67 07 ab 44 62 e2 5d d9 2d 9c f7 ad 08 ef 8a 43 f2 92 c7 b6 6a a2 59 b1 6e 95 3a 59 30 1c 91 d7 a5 53 71 1d 4f 64 cb 36 f3 5d 49 c9 Data Ascii: 4n}=)TS2J=Kf(R<R`;9VUe;VXS}=,=3<\P@=> 29vd^&3{3NXH"dOZG{HYLh7cztiSZ%r!YOLi%rOigDb]-CjYn:Y0SqOd6]I
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 28 f6 3b 20 a6 d6 ff 00 91 3c da 6c fb 77 c4 01 51 fd d6 aa 37 70 dc 79 85 1a 32 48 f7 cd 5a 8a 62 ab 8f 99 7e 94 d0 fb 9b 92 7a d1 78 f4 35 84 a7 17 ae a6 7b 47 71 fc 51 93 f5 ed 50 c9 1c c5 4e 01 5a da 91 2d cb 60 c8 d8 f7 a6 ad bc 4a 4e c9 95 bd 89 22 aa ee e6 b1 c4 59 6c 73 a6 39 47 3b 0f e3 4c 31 3f a3 7e 15 bd 79 09 68 f6 8d a0 f1 de a9 8b 79 3a 2b 03 cd 57 b4 68 ea 86 26 e8 cc 68 5c 71 b0 d4 4c a4 36 30 6b a3 82 da 4f ba e3 83 ed 53 41 a5 06 38 31 6f cf 7f 4a 6a ac bb 07 d7 a3 1d ce 4b af a8 f5 a1 90 75 39 26 ba ab dd 12 16 6c 22 9c f6 22 aa b7 86 65 2b b8 48 06 7d ea fd a3 65 c7 30 a0 f5 6e c7 38 c3 d8 d3 18 7b 74 ad e7 f0 cd ef 50 77 63 a5 43 27 87 af 57 87 1c 55 f3 a3 a6 38 ca 0f ed a3 17 18 e2 91 81 ed d7 b5 6d 9f 0e 5c e3 3b b1 ec 45 47 36 83 Data Ascii: (; <lwQ7py2HZb~zx5{GqQPNZ-`JN"Yls9G;L1?~yhy:+Wh&h\qL60kOSA81oJjKu9&l""e+H}e0n8{tPwcC'WU8m\;EG6
2025-03-26 13:11:03 UTC	16384	IN	Data Raw: 2d 13 71 ff 00 d7 14 64 1e 0f 6e 95 1a 1c f1 cd 2e d6 1e 9e 95 9e a8 86 89 37 7a 8c d2 ab 64 f1 da 9a b1 9f ca a4 11 8e b8 35 12 64 bb 20 0d 8f 7e 69 c0 e5 40 a4 23 6b 71 8c fb f6 a7 2f 39 3f a8 a8 b1 0c 72 e6 81 9d d8 ed 4a 06 2a 41 04 c7 fe 59 b6 3e 95 56 21 c9 2d c8 c0 ed fa d3 ba d1 28 10 a6 65 60 9e 83 a9 34 d3 91 18 7e de fc 52 d0 5b 8e c8 f5 a3 22 a3 0d bf ee 63 eb 4d dd 9c 64 d0 c7 ca 4c 08 34 31 20 f1 51 e7 14 8c 4f 5a 4c 7c a5 80 f4 f4 6c f4 aa bf 69 52 d8 c5 31 af 22 4e ad 8f 6a c7 91 b2 7d 9c 9f 42 ff 00 02 97 22 b2 8e a7 08 6f e2 fa 81 52 2e a1 0b 0e 09 19 1d 28 f6 52 07 87 9f 63 43 23 3e f4 74 e4 0a a7 f6 a1 ea 4e 69 d1 cc 19 33 9e 07 5a 39 59 3e ce 48 b5 4e f6 aa 8b 71 bb 8e d4 e1 37 ff 00 ae 8e 56 4b a6 c9 d8 2e e1 91 4c 21 4f 01 71 49 e7 Data Ascii: -qdn.7zd5d ~i@#kq/9?rJ*AY>V!-(e`4~R["cMdL41 QOZL\|liR1"Nj}B"oR.(RcC#>tNi3Z9Y>HNq7VK.L!OqI

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:03 UTC	346	OUT	GET /th?id=OADD2.10239340418566_1KUOCUMD7VRU52NBF&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:03 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 344530 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 6B02FDC79E79487BAA87E06349913767 Ref B: EWR30EDGE1609 Ref C: 2025-03-26T13:11:03Z Date: Wed, 26 Mar 2025 13:11:03 GMT Connection: close
2025-03-26 13:11:03 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 30 20 32 33 3a 35 31 3a 34 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:10 23:51:478C
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 00 bd 4d 00 8c 32 bf ed 7f 7b de 85 3f 36 07 f1 52 ee 03 af ff 00 15 49 f3 86 63 db fb d4 b4 01 eb e9 f2 d2 2e 07 4f f8 15 0a a0 2a 83 fc 3c d2 39 23 81 fc 54 00 f5 3e b4 74 db 9e bd 69 8d 8d ac 0f 5f e2 a5 5c f9 4d 8a 77 02 45 27 6e 3e f5 23 1c b3 1f bc 69 ab f7 58 ef e7 fb b4 e6 70 5b 9f 96 8d c0 66 cc ff 00 17 bd 44 c1 84 9b cf f7 4f cd 52 bf dd 61 b3 f8 6a 37 1f 77 d1 7e f5 4b 1a 18 d9 e8 3e 5e cb fe d5 23 2a 98 f2 df 36 df bb 4a d8 0b 81 fd ea 47 63 b9 b1 4c 43 5c ee 5f bb b4 7f b5 48 d8 6f ee fd ec 6d ff 00 eb d0 c3 0d c7 4e 9b a9 18 63 8f bd de 8b 80 c5 50 19 be ea ed fe 1a 63 27 fb 3c b7 f1 53 f1 86 fe f1 5a 14 05 e9 f2 9f fd 06 8b b0 1b 8d cd c2 f3 fd da 4c 7c d8 db c5 3d 48 0d fd e2 b4 9f c5 ee df c4 bf c5 40 0c db f7 bd 68 a5 db 95 f9 bf 87 ef Data Ascii: M2{?6RIc.O<9#T>ti_\MwE'n>#iXp[fDORaj7w~K>^#6JGcLC\_HomNcPc'<SZL\|=H@h
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: d7 68 fe b4 64 8e 4f f0 ff 00 0f f1 53 d0 f6 ff 00 d0 a8 01 ad 8e 9f 2d 23 01 f8 ff 00 b3 4a df 2f 5f bb fe d5 36 41 95 c2 7f 7b f8 7e 5a 16 e1 d0 45 23 b7 5a 91 47 fb cd 4c c0 1f 2f cb fe f5 3f 92 ca 03 f1 5b 5d 19 0a 3d 76 36 29 ea 08 66 f9 57 fe 05 4d 19 ed f2 8f ef 54 90 fd ec 05 ff 00 81 35 56 96 18 e4 00 ed c7 ca 3f d9 fb d4 e2 00 e0 d3 17 69 66 0f ef f3 2d 48 ac 02 b6 7e 63 d1 aa 58 0d 5e 36 91 f4 a4 ce 1b e7 6d c7 af dd a7 c6 07 cc 55 36 d0 43 1e 3b b2 fc cd 47 32 be a0 42 c8 37 2e 37 33 7f 15 23 15 2d 80 bc 7f e3 ab 53 1e 17 60 eb fc 35 16 e0 38 3f 31 dd f7 7a 56 6e 4d b0 5a b1 8b ca e7 6d 4a 80 76 5d db a9 9f 77 76 53 95 6a 53 81 f7 7e 51 ff 00 7d 52 6e ec 7e ce ec 50 10 36 7e f7 fb bf c5 4e 55 f9 b1 b7 8a 15 8a ed c2 f3 fe 7a d0 cc 0f fb 45 79 Data Ascii: hdOS-#J/_6A{~ZE#ZGL/?[]=v6)fWMT5V?if-H~cX^6mU6C;G2B7.73#-S`58?1zVnMZmJv]wvSjS~Q}Rn~P6~NUzEy
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 8f ef 53 ad e3 f9 72 7f e0 55 61 14 2f 1b 7e f7 3f 85 3e 67 62 8b d6 a9 b5 70 7f 87 85 ad 0b 75 43 cf fb 5f 37 d6 b2 e1 98 06 50 3a 36 7f e0 55 a5 6f 20 3b 4b f4 eb 53 d0 87 b9 2b 7c ab 83 fc 35 04 88 77 60 7c c3 f8 6a cb 63 b5 44 f8 3c 05 a0 44 4e 02 c7 91 ff 00 7c b5 23 92 3f bd 8d b4 f7 38 66 1f 2b 6e fb bb a9 af 8d be db 45 34 02 ed c3 60 f4 a7 60 85 c7 cd f3 71 4c 51 8e 3f fd 9a 7a 64 7d e6 66 ff 00 3d 69 00 8e 80 ed 3d ff 00 8a ab dc 47 99 32 ff 00 f0 2a b2 ed 9e bf 37 f7 76 b5 57 b8 6c c9 c2 fd ea a8 6e 04 25 36 ee cd 23 00 1a 9f cf 7d df 7a 9b 5b 14 31 7f 4e 3f 3a 76 07 5f 99 69 7a 6e c2 fc d4 2f 34 19 a8 75 13 07 a5 3b 96 65 a4 c9 e9 ff 00 8f 50 e7 3b 68 2c 4c 63 f8 69 1b 9e 7b d0 d8 ff 00 be be f5 0c 33 b7 e6 5d bf c5 4a e1 71 88 a3 6e 7b d2 b6 Data Ascii: SrUa/~?>gbpuC_7P:6Uo ;KS+\|5w`\|jcD<DN\|#?8f+nE4``qLQ?zd}f=i=G2*7vWln%6#}z[1N?:v_izn/4u;eP;h,Lci{3]Jqn{
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 97 75 2f 9a 5b fb b5 5c ac 95 36 99 7b cd 0f c1 5d db a9 ee 10 ab 11 f3 37 fb 3f 7a b3 92 4c 7d 7f bd ed 53 45 31 59 1b f8 7f da 5a cd d3 b1 71 ab dd 17 03 03 d7 ab 7f 0d 45 71 b0 6d c3 2f de fe 1a 46 6f 33 9f ee ff 00 3a 8d 98 6e 65 6f f8 15 4a 8e a6 bc d1 6f 70 6e 38 1b 57 e5 f9 b7 54 4a 40 6c 8e bf c3 fe d5 39 9f 0b c2 ff 00 c0 bf bb 4c de 7a f6 ad 16 c6 0c 7b 9c 7f b5 bb f8 69 8a c4 ed 07 6f fb 34 72 1b 27 af fb 54 8b f2 f2 57 e5 a0 35 15 8b 16 c1 5a 5f 98 b7 fc 0a a3 52 4e ef f7 a8 c9 0b 8a 05 a9 33 f2 b8 dd 49 81 f3 7c bc 33 61 7f d9 a6 7f e3 c5 7f 85 6a 45 0d b7 9d ad b7 ff 00 1e cd 03 49 bd 81 b3 b7 9e ad c7 e5 42 93 f3 20 f9 7f c6 9c bf 32 fc f4 2a 82 aa 4f f0 d1 a0 72 be c3 55 fe 6d 8e 9b 4a d3 64 55 31 e4 7c bd 7e 5a 92 55 1e 5a 85 db 4c 55 0a Data Ascii: u/[\6{]7?zL}SE1YZqEqm/Fo3:neoJopn8WTJ@l9Lz{io4r'TW5Z_RN3I\|3ajEIB 2*OrUmJdU1\|~ZUZLU
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: b5 58 ba cd b3 a1 61 d2 4b 43 20 06 e9 b7 e6 6f ba b4 28 1d 3f bd c2 ff 00 0d 4d 7c 76 33 13 f5 5a 87 93 c8 56 f9 ab 64 ee 8c d4 6d b0 f8 97 77 03 af 5d cd d2 ac c3 6e 81 b0 ff 00 31 ff 00 67 ee d3 a3 44 da a0 2f 3f d4 54 d8 21 7d eb 19 4e e6 91 82 dc 72 ae 38 0b 57 6d 62 53 f2 06 e7 ff 00 41 aa 96 ea ef b8 6e dd fe 15 a7 6a 88 aa a4 7f 17 f7 ab 9e a4 ac 8e ba 30 b9 66 de 07 da a5 ff 00 e0 3f fd 7a b9 9c 2e 37 53 a0 db b7 95 dd 52 8d a3 f8 6b cd 9d 4b b3 d1 84 34 45 6d 9b 96 88 c3 7f 77 69 ab 1c 0f a5 1d 3e ad 59 f3 1a 72 95 24 4c f2 3e f6 df 99 6b 2a f9 4a ab 7c b5 b8 e9 bb 8a a1 7d 6a 59 77 f7 fe 2a de 95 54 a4 63 52 0d a3 02 45 ce ec af cd 50 dc 0f 99 48 ff 00 ec 6b 4a 48 01 93 3f 7b b5 56 78 48 6c 3a d7 a0 a6 8e 19 53 68 a0 8a e5 be 7a 9a 3f bb b4 7c Data Ascii: XaKC o(?M\|v3ZVdmw]n1gD/?T!}Nr8WmbSAnj0f?z.7SRkK4Emwi>Yr$L>kJ\|}jYwTcREPHkJH?{VxHl:Shz?\|
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 56 ed fc 54 2b 65 73 f2 ff 00 b3 ff 00 d7 a7 28 5e df c5 f7 bf d9 a4 64 cb 71 f2 d5 73 21 d9 0c dd f3 71 f3 53 d5 87 56 fb d5 1e cc 52 6e 27 aa ff 00 ba cb 55 a7 42 5a 1e de a6 93 1d c5 00 80 d4 6e 21 a8 15 b5 19 26 7b 7d ef ee d4 32 03 e5 f2 bf 77 e5 a9 a4 65 31 b7 de c3 54 2c 7e 55 01 9b 0d f7 ab 48 bb 88 6b 60 b6 3f ef aa 14 7e f1 76 7c db 69 b8 1b b9 eb b7 e5 fa 51 8c 2f eb ba ab 50 1c ce 7f d9 fb df c3 4e 57 ff 00 81 6e fe 1f 7a 8d 7d 7f bb fd 6a 55 08 cc b8 ff 00 be a9 35 61 24 96 c4 a8 09 e2 36 fe 1f 99 9b ee e2 a6 87 06 3c fd ed bc 7c d4 c5 00 2a 81 f7 76 e5 96 a4 5e 76 87 f9 76 d4 36 85 61 ec 47 97 83 f2 d2 63 ee 86 f9 97 f8 a9 aa 33 c1 56 f9 be f7 e1 4a bc 70 3e 5d df 76 93 96 81 ca 2b 0f e0 ff 00 d0 bd 29 36 82 b8 75 ff 00 ec a9 54 a6 de 7e 5f Data Ascii: VT+es(^dqs!qSVRn'UBZn!&{}2we1T,~UHk`?~v\|iQ/PNWnz}jU5a$6<\|*v^vv6aGc3VJp>]v+)6uT~_
2025-03-26 13:11:04 UTC	16067	IN	Data Raw: 9f e1 a7 6c 07 aa d4 91 c6 4a fd 2a c5 bd a4 92 c9 90 bb 85 3b 91 2a 89 6e ca 2d 1b 0e 8a ad fd da 36 fc ca 4d 6d 7f 66 b0 ea b5 04 96 2c 5b 02 96 88 ca 38 98 3e a6 7a 02 7a ad 58 8e 33 b7 8e 82 9e 6d b6 32 82 dc f7 a9 78 55 c0 e9 43 1c aa 27 b1 0d ba 95 93 27 ad 5b b7 05 db 1f 8e ea ae 58 05 db fd da 7a c8 47 03 a3 73 41 94 ee cb ec d0 a4 7b 77 55 59 12 25 f9 87 26 a2 dd 9e bf 36 ea 91 13 77 22 8f 53 25 0e 5e a4 b6 2c a2 4c 1f f8 0d 5c f3 01 dd 8a ab 6b 0b ee e1 6a e2 5b 7c b9 7a 5a f4 30 aa e3 7b 90 31 cd 46 f1 93 d5 ab 45 6d d4 2e 07 cd ef 4c fb 3e 3f e0 34 6b 6d c8 8d 54 52 86 d4 9f 7d b5 7a 18 42 ae d3 f3 53 e3 5c 7f b5 4b 96 eb 4f 62 27 51 c8 46 8c 15 ce df 6a 8d a0 1d 05 4c a3 34 6d a6 67 19 34 67 bd b8 dd f7 78 a2 af b0 1d 0d 14 6b d1 1a aa cc f2 Data Ascii: lJ;n-6Mmf,[8>zzX3m2xUC''[XzGsA{wUY%&6w"S%^,L\kj[\|zZ0{1FEm.L>?4kmTR}zBS\KOb'QFjL4mg4gxk
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 74 e9 47 1b 78 a9 62 d3 c3 37 ce bb 6b 50 c5 2a ae 15 76 9a 8a 54 b9 2b 81 1a b0 aa e4 48 c7 eb 33 97 52 8d c4 03 6f 96 b1 b3 05 f4 a8 85 9a ee dc ea c7 da ae b4 73 1e ab b6 a7 1b f6 fd d5 a1 59 b1 fb 69 25 b9 99 70 96 91 fd e8 f9 a8 52 de c2 55 ce df f8 0d 6b 7f 65 c7 3e e7 76 66 f6 a8 64 d3 15 7e ef cb f5 ab f6 72 de da 17 1c 44 36 e6 77 28 b6 91 67 27 21 7f dd f9 6a 36 d1 21 2d f2 aa d6 8a e9 f7 7f 29 46 e1 7e f6 1a a5 5b 29 4a f2 cd 4b 92 eb e1 1f d6 a4 b6 99 97 fd 91 0a 2e 07 97 ff 00 02 a6 c9 a5 c6 3f 86 3a d4 6b 1f 47 6c d4 32 69 d2 1e 97 0d 47 27 f7 47 1c 4b be b3 32 24 d2 a3 6f f9 61 1f fc 06 a2 5d 16 06 e6 45 55 15 b3 fd 9f 70 3f e5 bb 66 91 b4 d9 5b 83 ba a7 97 c8 de 38 b6 be d9 cc ea 1a 34 1b bf 74 cb 59 f3 69 32 03 81 f3 57 6c 34 98 87 de dd Data Ascii: tGxb7kP*vT+H3RosYi%pRUke>vfd~rD6w(g'!j6!-)F~[)JK.?:kGl2iG'GK2$oa]EUp?f[84tYi2Wl4
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: e6 97 3d a9 9b 3e 6a 7a 8f 96 95 84 c5 a6 f5 6e 29 79 a7 ac 65 ba 53 b0 af 62 30 d4 fd c2 b3 a4 d6 f4 28 fc 65 1f 84 9f 57 b6 5d 72 4b 6f b5 2d 8e ef de 79 5e be 99 ef 8e b8 e6 b4 bc a1 fd ef fc 74 d6 92 a5 28 25 cc ad 73 35 52 12 d9 8c 63 ff 00 7c d1 b8 1e 3f bb 52 79 40 ff 00 12 d2 34 04 af 0d ba 95 91 5c c8 63 10 68 6e 7a 52 30 c7 14 e5 8c bf 01 69 58 7b 0d 53 46 7d 28 64 61 d6 98 ff 00 ee f3 49 a4 3d c5 73 ba 3a 85 49 56 cd 3d 98 9e 0d 3a 38 4c 9f 4a 4c b5 a2 d4 6b b6 e5 a8 f3 8e b5 66 6b 72 8b 95 eb fd da ab 20 f4 eb 4b a0 e2 d3 d8 18 d0 ae 3b 50 b0 3c 8d c7 f1 7f 0d 24 90 3c 6b cd 2b 1a 5e 3d c7 6e 04 64 8a 89 a4 cd 31 9f e5 c1 a8 d8 e5 a9 72 9a 46 04 8c fe 95 2d b5 bb cd c8 e9 55 18 91 c8 a9 ec f5 76 b5 83 cb 16 fb 8f ab 52 e5 5d 42 71 9f 2f b8 b5 Data Ascii: =>jzn)yeSb0(eW]rKo-y^t(%s5Rc\|?Ry@4\chnzR0iX{SF}(daI=s:IV=:8LJLkfkr K;P<$<k+^=nd1rF-UvR]Bq/

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:04 UTC	346	OUT	GET /th?id=OADD2.10239402414374_1RZXN1BFTHNSAZBQY&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:04 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 505458 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 9D449E57C51A49449F8B60465B8DE8A0 Ref B: EWR30EDGE0322 Ref C: 2025-03-26T13:11:04Z Date: Wed, 26 Mar 2025 13:11:03 GMT Connection: close
2025-03-26 13:11:04 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 f4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 3a 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 ac 87 69 00 04 00 00 00 01 00 00 00 c0 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 36 2e 31 20 28 32 30 32 34 31 31 30 33 2e 6d 2e 32 38 33 34 20 31 34 64 33 65 37 34 29 20 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 31 31 3a 31 31 20 31 34 3a 34 30 3a 34 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 Data Ascii: JFIFHHExifMM*bj(1:r2i``Adobe Photoshop 26.1 (20241103.m.2834 14d3e74) (Windows)2024:11:11 14:40:438
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 50 a7 68 51 9e 95 cf 8b c5 43 0b 45 d5 9e c8 e8 c2 e1 6a 62 6b 46 94 37 67 a4 fd 9d f6 ef 7f 95 7f bc df 2a fe 66 b8 ef 1e 78 d3 4b d3 ed 64 d2 f4 75 b1 d6 af 2e 54 c7 2c 6d 20 7b 68 41 e3 e7 ea 1c fb 0a f1 1d 6b 5a d5 ef 97 65 ed ca dd cb 27 32 34 b7 2e ff 00 d7 a5 3f 4a d6 e5 b4 b7 5f 2f ec cb 23 47 b2 36 5f bb 1f bf 4e 6b e4 71 bc 4f 52 70 71 c3 c2 d7 ea ff 00 c8 fa ec 17 0c 50 85 45 2c 4c ee 97 44 ad f8 8f d3 fc 1d 3c fa 84 f1 58 5f 58 b4 96 cc 3c cf de 6d 55 27 b0 e3 26 b5 ee 7c 33 aa db ac 6f 2d 8d b4 bb 98 24 72 2c 9b 77 67 8e 0d 61 78 7f c5 17 76 0a c9 1d b5 b4 83 76 5b 72 85 66 35 b9 75 e2 2f b6 cd a7 89 f4 cd a1 98 9f f5 9b 79 ed 8e d5 f2 15 39 ef a9 f5 b4 a3 87 71 f7 74 61 a9 78 46 ee 1d 3d a4 7d 3e 48 8b 2f fa c8 a7 2d df 91 d6 aa 69 fa 25 e5 Data Ascii: PhQCEjbkF7g*fxKdu.T,m {hAkZe'24.?J_/#G6_NkqORpqPE,LD<X_X<mU'&\|3o-$r,wgaxvv[rf5u/y9qtaxF=}>H/-i%
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: bd f9 b6 c8 bb 79 c7 fb 6a 7f 31 50 de 5b 69 1a a4 71 1d 4b 4c b9 b6 12 b0 dd 3a a8 74 52 4f 5c 1f e5 91 51 29 53 97 bd 38 59 f9 16 a9 56 82 e5 a3 5a eb fb ca ff 00 8e 8f f1 3d 4b c2 fa bd c6 b5 e0 b9 2f e4 d4 2d b5 0b cb 68 9a 35 be b4 64 db 74 8c 32 a5 c7 4d d9 eb 90 0e 7a 8e f5 1d af 8a 34 cd 62 e9 ad f5 4d d0 b5 9d a7 93 15 cc 5f 34 7b f7 ed 93 7c 64 67 f8 57 a6 48 c7 7a e0 3c 41 e1 eb 6d 13 56 8c e8 d2 c9 62 b3 d9 2c 77 32 59 49 b6 39 0b 83 9d c8 dc 7e 07 18 fd 4e 8f 88 3f d1 74 58 25 b0 b6 f3 2e 56 24 32 4b 62 bf 78 87 3b bc c8 4e 76 e7 fd 82 46 47 6a f2 a1 42 9b 7c d1 7a 3d ba 58 f7 2a 62 2b 45 72 cd 6b 1d fa df fa fe 99 e9 4b 6d 3c 36 7f e8 72 c3 3f d8 e3 f9 67 56 1f 32 77 50 f9 04 12 07 ae 0f 1c 55 bb ad 56 c9 e1 82 e2 e2 59 34 d9 7c cd 93 ad ca Data Ascii: yj1P[iqKL:tRO\Q)S8YVZ=K/-h5dt2Mz4bM_4{\|dgWHz<AmVb,w2YI9~N?tX%.V$2Kbx;NvFGjB\|z=X*b+ErkKm<6r?gV2wPUVY4\|
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 50 8b f6 ae ca 4b 7e 8e fe 68 e1 bc 59 f0 8f c4 cd a4 79 ba 6d ac 7a ac d6 6e 43 49 66 a0 4c d1 81 93 be 3c fc c4 7c a4 15 27 87 ae 1f 45 d0 ce a9 3f 97 68 ed 67 34 4c 36 79 f9 01 9b ba e4 0c 83 5e e1 a5 6b ba cd c7 86 75 73 e1 5d 5e 29 75 a9 2d 96 36 8d 5b 64 d2 26 42 ab c6 bd 77 a7 fe 3c be e0 55 cb 19 fc 3e 9a 7e 93 a2 df d8 d9 da ea 71 5b 08 d5 f5 25 29 f6 89 17 80 1a 55 19 0e 71 fc 58 23 fd aa f5 63 98 62 29 c1 c6 76 6f a5 bf 55 d8 f9 d7 92 60 b1 38 95 38 b6 a2 d6 b7 eb ad 92 52 de fd fa ed b9 e5 bf 14 b5 dd 48 78 7f 43 b4 d5 ec ae 6d af f4 c7 64 49 19 8e d9 13 19 f9 5f a3 29 f9 78 fe 55 4f 4e bf bc f1 0e 82 f3 e9 b7 9f 65 f1 06 9f f3 e2 39 08 7d 4a 25 19 1f f6 d2 30 38 f5 5c 8e c3 3e b1 f1 33 c3 57 10 78 5f 74 5a 7c fa 86 97 1a 83 73 a5 5d b6 f9 2c Data Ascii: PK~hYymznCIfL<\|'E?hg4L6y^kus]^)u-6[d&Bw<U>~q[%)UqX#cb)voU`88RHxCmdI_)xUONe9}J%08\>3Wx_tZ\|s],
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 72 49 1f 98 23 76 5f 31 76 36 d6 db b8 7a 1f 6a 2b 37 cf 7d 2c 52 e5 b6 b7 38 4a 75 14 57 61 88 51 46 3d a8 a0 02 8a 29 d8 f6 a0 04 5a 5a 5c 51 8a 57 1d 81 69 68 a2 91 01 45 14 50 02 35 32 9c d4 da 68 a0 a4 6a 5a 6b 53 00 a2 8a 00 cd 00 4b 6b 18 96 65 8d e5 58 83 7f cb 49 33 b5 7e b8 c9 af 2d fd a3 fc 75 2e 89 6b ff 00 08 be 95 ff 00 1f 97 91 66 ee 5f f9 e3 19 e8 be c4 ff 00 2a f5 07 9a 0b 4b 59 6f 2e 5d 63 b7 b6 8c c9 2b 37 f0 a2 8c 9a f9 57 c4 1a 8d cf 88 3c 4d 75 aa de ce d2 9b c9 59 d7 77 de f2 c1 f9 14 fa 61 6b c2 ce f1 8e 8d 2e 48 bd 65 f9 1e d6 4b 82 58 8a dc d2 5a 47 f3 e8 62 db e9 f7 bb 9e e2 45 59 9a 5f 92 3f ee c7 9a d1 d3 74 49 21 68 9d db cc 9b f8 63 55 f9 57 dc e6 9d 7d 73 3d 94 2b 24 4b 24 9b 78 8e 36 5e ff 00 5a ad 61 75 ac 5c dd 29 76 66 Data Ascii: rI#v_1v6zj+7},R8JuWaQF=)ZZ\QWihEP52hjZkSKkeXI3~-u.kf_*KYo.]c+7W<MuYwak.HeKXZGbEY_?tI!hcUW}s=+$K$x6^Zau\)vf
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: c4 77 15 da fc 42 f2 35 bb a8 ef e3 56 66 f2 81 92 39 54 2a b6 07 aa e3 9f c2 b8 af 17 21 f0 7e bd 3e 9f ab db 33 db ab 6f 8e 78 bf 84 37 62 3d ba 66 bb 0f 09 ac 1a 87 87 ed a7 37 3f eb 23 22 38 db ae 3b 0c f7 f9 71 51 5d 72 c6 35 3a 1a 60 fd e7 3a 2d eb bd 88 74 ad 3e f5 2f be c9 a6 ff 00 c4 d6 de 38 84 ed 02 47 8b 8b 50 de c3 86 03 f0 35 4f 54 d1 bc 3f 6f aa 4b 2a 2c da 65 c3 46 4b 2d b3 6d 5f 30 7f 7e 36 04 73 e8 00 ad 6d 05 ee 34 4d 79 75 2d 3d 7f 78 a8 63 65 fe 26 00 f6 cf a1 fe 7e f4 9f 10 af cd c4 71 13 02 dc c9 2b 0f 21 17 3b f3 d9 73 d7 6e 7b 64 81 5c ea 72 75 2c b6 67 53 a4 a3 4d ca 4b 63 8e d4 e1 d4 a1 d0 da fe c9 5a ee d2 26 3b 9a 25 2a d0 be 79 2c 9d 40 e7 a8 c8 ab 7f 06 da ee cf c5 56 31 2b 4b 3d 8c b2 6f 95 77 7a 72 5f be 7d c5 76 3e 1d d1 Data Ascii: wB5Vf9T!~>3ox7b=f7?#"8;qQ]r5:`:-t>/8GP5OT?oK,eFK-m_0~6sm4Myu-=xce&~q+!;sn{d\ru,gSMKcZ&;%*y,@V1+K=owzr_}v>
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 6f 9a e8 7a 55 bd b4 f6 d0 c1 6e 8d e6 33 ae 7e 6e 77 7a e0 8e 9f 8d 59 b8 ba 71 0c 90 5c 5a 2c 73 2c 65 e3 6d a5 83 11 e8 6b 2f c2 fe 30 d1 f5 6b 58 ee ad e5 fd e4 8a 13 ee fd dc 9e 8c 47 15 b7 61 71 0b dd 4f 67 25 b3 5a 15 e7 77 f0 f1 d7 af 6c 77 af 1a ad 39 c6 4d 4d 59 9f 4f 42 b5 3a 90 4e 9c ae 9f 62 0d 33 49 b7 16 6b 2d c6 d5 0a a1 e4 6d db 02 e3 9c ff 00 f5 ea da c7 6d 7e d1 0b d5 58 2c 62 7d ea 92 7c bf 68 23 ee 96 1d 94 75 00 f5 38 f4 a9 f4 d1 6d 7d 24 86 3f f8 f4 8a 4d f1 46 df f2 d8 8f e3 23 fb a0 f4 1f 8f a5 45 7d 65 2c d2 37 ef e3 da cc 7c cd cb c6 3a e0 e7 bf bd 67 77 7d ce 8b 26 b6 12 f2 ed 0e d7 32 ac 96 ea df ea e3 e5 63 1d ba 71 52 c7 6d 1d c3 34 96 f1 33 79 ad bf 6a fc bb 6a 94 9a 6b 41 6e c2 26 99 59 5b 31 ed 53 b7 07 d0 57 37 f1 43 c7 Data Ascii: ozUn3~nwzYq\Z,s,emk/0kXGaqOg%Zwlw9MMYOB:Nb3Ik-mm~X,b}\|h#u8m}$?MF#E}e,7\|:gw}&2cqRm43yjjkAn&Y[1SW7C
2025-03-26 13:11:04 UTC	16067	IN	Data Raw: c3 4d be 97 ec 2b 73 0d f6 0c 52 5c c7 e6 35 99 e5 8e c3 ce d5 dd f4 e3 d7 15 1d af 81 6f 35 1b 7d 2b 51 b3 9e 38 27 96 d3 62 c9 0e 5a 3f 31 5c 91 e6 20 18 78 d9 59 90 fb e2 b9 22 a8 a8 27 73 ba a7 d6 5d 56 b9 7f af eb 53 a1 b3 d3 34 fd 42 6b c4 16 2c cb 72 df 33 47 fb c8 63 7c ee 18 fe e8 cf 6e 38 ad 8d 3e 7b d8 66 d3 41 b3 f3 4a db 49 04 f2 da 37 de 3d 00 6d f9 2b e8 41 c8 fe 99 3e 01 4d 57 48 65 b7 12 b2 5a 34 6d 05 dc 0c 9f be 8c 02 76 84 67 19 64 03 20 02 73 f2 f5 e9 8b 8f e2 3d 0a fe e1 67 d3 75 5b 6b e8 a3 92 41 2b 47 94 68 4a a7 de df d4 30 e4 e4 83 c6 7d 2b cd c4 73 5f 4d 51 ea e1 e3 06 97 36 8d 94 7c 51 ac 5e 69 97 17 56 17 68 b7 31 f9 42 4b 68 e4 c2 6e 40 0e ed bd 49 39 e2 b5 7c 03 a8 cb a0 43 11 8a 75 bc d1 75 38 c5 d4 6d 72 c5 9a 10 f8 dc ac Data Ascii: M+sR\5o5}+Q8'bZ?1\ xY"'s]VS4Bk,r3Gc\|n8>{fAJI7=m+A>MWHeZ4mvgd s=gu[kA+GhJ0}+s_MQ6\|Q^iVh1BKhn@I9\|Cuu8mr
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: d5 3d 80 2e 43 7f df 55 c4 af 7b b6 7b 6e 70 8a e5 8a d0 bd 0d e2 58 2c ae 9b 5e 56 c0 56 ea b8 ef 5b 5e 1b b6 7d 43 c3 32 d8 ca aa cb 74 8c 15 5b a7 b1 ae 69 7c b7 5d 9b 97 fd da dd f0 5d c8 48 da d8 ff 00 cb 16 ca fd 0f 6a 25 a2 ba dc d6 84 b9 a7 ca f6 6b fe 1c 6f 84 5a 4b df 0d b4 77 6b fe 93 03 18 27 5f e2 ca 71 cf e1 8a ca d5 96 48 64 8c 7d e5 8b 2b fa f5 ae 82 18 ff 00 b3 fc 61 3e 5b 6d ae b4 a7 6b 7f 76 e1 07 23 fe 04 bc fb 9a ce d7 21 2a cc b2 ae ef 9b 66 ef 6f 5a d6 3f 1d fa 33 1a b4 da a0 a2 f7 8e 9f 76 df 7a b3 33 2d b6 49 33 03 bb 0a d9 fe b5 a3 1c 7e 63 49 10 fb cd cf e3 59 b6 a8 4c 72 91 f2 98 d7 fe fa ab 9a 54 d9 b3 dc 7e 52 b2 61 97 f8 ba 75 fa 56 f6 38 69 c8 cd be 1b 2f 18 9e ad 9a 9b 45 9e 7b 3d 49 67 8d b6 b2 b7 ca df 5a 76 ac 37 ea 5b Data Ascii: =.CU{{npX,^VV[^}C2t[i\|]]Hj%koZKwk'_qHd}+a>[mkv#!*foZ?3vz3-I3~cIYLrT~RauV8i/E{=IgZv7[
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 4a cb f0 b7 67 e4 cf 92 7c 75 a0 78 df e0 ff 00 8e 92 11 2d d4 6e df 3d 9d fd a6 44 77 71 83 dc 77 c7 f1 21 fe 44 1a f6 1f 83 5f 18 b4 eb fd 43 4f f1 46 bb a6 cd a7 6a fa 1c be 5c 97 91 29 6b 6b a8 5f 09 24 6f dd 49 07 b6 70 76 f6 e2 ba 4d 6b 44 d4 67 f0 bc 9e 1c d4 2c e5 d7 f4 98 d4 88 20 95 84 7a 9e 9e 47 00 a3 36 04 8c bf 55 dc bf af 9c f8 77 c3 f1 f8 3e fa 7b 6b 9b 1f ed 6b 36 55 4d 52 c6 e5 76 4b 1d b4 c3 0b 2c 7d 32 43 0c 1e 32 ac b8 20 63 35 ef ac 75 3a d1 8d 5b 5a ac 1a b4 96 9f d7 a3 d0 f9 b8 e5 15 70 95 25 4d cd ba 13 4e f1 7a ad 57 df f3 5a f7 3e d9 f0 ee b3 a5 78 83 47 8f 57 d1 6e d6 ea ce 76 22 39 57 d4 75 04 76 23 fc f5 ab d8 f6 af 9a 7e 06 df 78 87 e1 87 c5 9b 1f 03 5c 4b fd a1 e1 9d 7e e0 45 6d 72 d9 fd cc 8d f7 32 47 1b bf 98 cf e1 f4 ce Data Ascii: Jg\|ux-n=Dwqw!D_COFj\)kk_$oIpvMkDg, zG6Uw>{kk6UMRvK,}2C2 c5u:[Zp%MNzWZ>xGWnv"9Wuv#~x\K~Emr2G

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:04 UTC	716	OUT	GET /w4WYs?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr HTTP/1.1 Host: secure.mysterycluesolver.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 13:11:04 UTC	913	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 26 Mar 2025 13:11:04 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rC6bTwyDn%2BqlFa5SFaW4AuZ1L5aD0V7oyaVFUKH4NtB1gMyowJxhiSdro7c3ZvilobaxL7wAH%2FPxXVyWV6iH6EJguoMyphrZQlviaYiFK5OUhIhOzrd1LY0LAxguKoCmCZHft1nxwNybEBOfi%2Bk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9266e44df85472aa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=96328&min_rtt=96246&rtt_var=20428&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2851&recv_bytes=1288&delivery_rate=38607&cwnd=244&unsent_bytes=0&cid=8eb1dde5aa7a3a49&ts=433&x=0"
2025-03-26 13:11:04 UTC	291	IN	Data Raw: 31 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 6d 79 73 74 65 72 79 63 6c 75 65 73 6f 6c 76 65 72 2e 64 65 2f 77 34 57 59 73 2f 3f 5f 6b 78 3d 2d 51 55 4e 61 51 2d 4d 42 6e 74 46 69 74 61 4e 64 79 54 47 6c 77 2e 55 58 41 Data Ascii: 11c<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://secure.mysterycluesolver.de/w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXA
2025-03-26 13:11:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:04 UTC	346	OUT	GET /th?id=OADD2.10239340418585_1K319IV1QEN3HBC0V&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:04 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 443925 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C62457CA8C8D4579BF09323BB9DF5CEE Ref B: EWR30EDGE1412 Ref C: 2025-03-26T13:11:04Z Date: Wed, 26 Mar 2025 13:11:04 GMT Connection: close
2025-03-26 13:11:04 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 31 20 30 30 3a 32 38 3a 35 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:11 00:28:578C
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 35 1d d6 a9 73 0c af 73 63 1d b4 2e df bb db f3 71 f4 ad 08 f5 2b 0d 22 dd 64 f2 a4 be 93 6f cb 1f 97 f2 d7 3c a0 db 3b 28 d5 b2 d4 d5 d5 27 b6 86 36 b8 8a 75 96 26 5c 7c df 76 b0 e6 f1 21 4b 5f b3 c1 2a cb b6 4c 36 df be a3 bf 1e b5 9f ac 78 87 57 ba 91 4c 9a 2c 1e 54 7f ea e2 fb ad fa 55 9f 0c db 1d 46 d5 64 d4 22 5b 43 b8 fe ed 7e f7 e3 49 46 c1 2a ce 6f dd 29 c3 aa 48 f2 37 da 2d 95 7c be 15 9b e6 6c 7a 9f 73 4f ff 00 84 83 45 2a de 7b 48 b2 2a 9d b1 6d da b9 ad f8 74 cd 3f 74 91 24 ac a5 5b 3f 32 fc bf 52 69 ff 00 f0 8e 09 59 85 a5 9d b5 d4 9d 7c de 1a 9f 3a 25 51 93 39 db 5f 12 3c ed 88 a0 dc ab 81 f3 29 eb 5a f6 77 11 5d ee 7b 8d 2a 39 63 55 ca f9 98 db 9e fc 53 ee f4 9d 76 d6 16 11 41 04 5f ee a8 ef 58 da 86 95 79 22 ec 32 dc c8 59 77 36 cf 97 77 Data Ascii: 5ssc.q+"do<;('6u&\\|v!K_L6xWL,TUFd"[C~IFo)H7-\|lzsOE{Hmt?t$[?2RiY\|:%Q9_<)Zw]{*9cUSvA_Xy"2Yw6w
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 04 52 69 ed 3b 4a df 2e df e1 fa fa 56 6a 33 5b a3 49 4e 94 ba 58 e7 35 6b 29 1f a2 b6 e5 ce d6 5f f0 ac bd 43 c2 ba 55 ca aa df bc 72 05 c7 cc cd b5 b3 ef 5e 8d ff 00 08 d4 77 52 32 3d ca ab f5 93 e6 f9 56 a8 6a 5e 01 53 34 7e 5c 0b 38 93 9d bb b7 74 ad 39 a4 8c 7d 8a 96 c7 05 26 9d 65 a3 da b2 69 5a 63 4f f3 67 cc 5f 95 5b df e9 59 3e 4d e5 fb 6f 8b 4c 92 36 75 ff 00 59 1a 9e fd ab be bb d3 6f 6d 26 68 a5 dd 1f 97 c3 2a ff 00 0f a0 c5 55 49 b5 58 6f 98 c4 aa b1 af de 91 be 5e 7e 95 4e 6c 5e c7 95 ea 70 36 de 13 bf 0d 99 19 a0 2d cb 4a d1 fc cc 7d 16 ad e9 fe 1a 11 c8 d2 5e 36 a0 cd fc 2c d9 db ed c0 e9 5d cd ee a8 f1 ae e3 1a b4 8a b8 5d cd f7 bf 0a af fd bd 72 de 58 dc b1 ab 37 f0 fa 8a 8b b6 3e 58 df 73 16 0d 2c 5b 2b 07 6b 95 66 6c ab 37 cc d9 f7 ab Data Ascii: Ri;J.Vj3[INX5k)_CUr^wR2=Vj^S4~\8t9}&eiZcOg_[Y>MoL6uYom&h*UIXo^~Nl^p6-J}^6,]]rX7>Xs,[+kfl7
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: af 82 a3 4f f5 56 3c ee f9 99 a4 dd b7 f1 ad 6b 5f 08 c6 d0 ec b9 b9 8a 28 d5 be 6f 2d bd 2a fc e2 df ec eb 1b df 6e 0a df 37 96 db 76 fe bc d5 29 b4 6f ed 4d a2 3b e9 22 1b 7f 82 4f bd f5 cd 6b 73 09 41 3e 85 7d 53 43 b0 82 df fd 1a 08 17 a1 56 6f 9b 70 ac c6 d1 03 fe ef ed 96 d1 f5 da aa bb 79 f5 cd 6a dc 78 46 db 6f ef 35 39 24 91 7e f6 eb 9d bd 3b 01 4d 9b 42 b3 86 18 f0 bf 37 f0 ee 9f 70 fd 2a a2 43 4d 18 57 de 1f d3 17 76 6f a4 97 e6 cf 97 1b 7c b9 f7 ae 6b 5e ba 8e da e1 a2 3f 28 55 fb ab f3 57 7e fa 3d a4 96 ac 1e e7 c8 f3 7e eb 2f df f7 ac b8 74 7f 0f 59 5d 2e f9 fc c2 ac 7e 6f bc cd eb 4c 39 53 e8 79 fc 37 6f 2c 8a 9f d9 f3 a8 fb d1 c8 ab f3 35 5c d4 34 ff 00 3a dd 7c d8 2e 63 5d bf 75 58 ee af 53 b7 5d 0b 6a cb 0d 9a c6 cb c6 e6 8f 6f 06 a7 6b Data Ascii: OV<k_(o-n7v)oM;"OksA>}SCVopyjxFo59$~;MB7pCMWvo\|k^?(UW~=~/tY].~oL9Sy7o,5\4:\|.c]uXS]jok
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: fc 3b a9 bb 30 d9 db c3 7f 15 55 da d8 2e 98 fc 0d ad 21 f9 aa 2b a8 56 e2 16 da b4 e1 9d bf e7 e6 a5 8e 40 a8 bb ff 00 1a a8 cd 5c 35 4e e8 e2 7c 49 65 e4 33 3b c4 cd 6d 23 62 54 5f e1 f7 15 83 7d 03 d9 49 b2 35 da ad 83 04 df dd f4 04 d7 a6 ea 56 eb 3c 2d b9 7e 56 5c 7b 57 13 a9 d8 ac 1b b4 eb 8f 96 de 5f f5 12 7f 74 8e c6 bd 7c 26 26 ef 95 9c f8 8a 31 94 79 e2 60 5a 78 c6 f3 49 bc f3 fc 8f 36 38 9b 64 f0 2f ca ad 9e e6 ba 4b 4b 8b 0f 12 5a ac 96 50 46 aa f2 61 64 fb bc b7 63 e9 5c 86 b0 92 1f 36 5f 2b f7 f0 29 49 77 7d d9 07 6a f4 8f 85 fa 66 81 e1 ef 87 77 29 aa 5f 48 da 8e a4 9f 6c 5b 6b 95 f2 45 b9 23 e4 5c f5 e3 af 3c d7 ab 1d 7a 9e 44 ef 17 b1 c3 eb 1a 01 b6 86 73 1c bf 34 6d 8d ab eb f5 ae 6a e3 4a 97 ce 58 bc f8 e2 3b be f3 37 19 fa d7 75 ab 1b Data Ascii: ;0U.!+V@\5N\|Ie3;m#bT_}I5V<-~V\{W_t\|&&1y`ZxI68d/KKZPFadc\6_+)Iw}jfw)_Hl[kE#\<zDs4mjJX;7u
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 40 f1 5c 46 df 2c 4d f7 bf cf 5a 7c 71 4e 6e 94 23 32 ae d0 59 b7 77 f4 a3 99 85 91 99 a9 69 fa eb 5c 28 82 f1 59 55 87 ca cb fe 15 0d d6 93 ad c9 c8 be 8d 65 dc 37 49 e5 86 da 3d 00 ad cf b3 5e 8b cf 3f 73 6d 6f e1 5f e1 a9 3c ab 89 63 6f 3d be 68 f9 dc b5 32 d4 a8 f6 32 23 d2 da 15 6d fb ae 6e 37 67 74 9f 77 f2 a9 55 35 07 91 a3 31 2f 96 cb f3 48 b5 a1 bb c8 8f cc fb 34 92 0f f6 b8 dd 50 c7 35 ec cc ad 27 97 00 6c fc ab f3 36 3d e8 bd 89 94 7c ca b2 58 0b 78 73 1f 98 d2 35 64 dc e9 26 4b a8 f6 41 26 15 89 66 91 87 7a e9 fc a9 55 94 4b 79 f7 aa 38 e1 89 66 c4 4d b8 f5 dc df 35 4d 93 17 53 0a e7 48 d1 e2 85 9e f3 cc 66 e9 f2 fc df 95 64 6a 96 ba 64 10 e6 3b 19 65 66 e7 b7 4f 53 5d 6d f6 9f f6 b6 67 2a b8 ff 00 7b ef 55 67 b1 92 1f 92 de ce 09 06 df e2 6a Data Ascii: @\F,MZ\|qNn#2Ywi\(YUe7I=^?smo_<co=h22#mn7gtwU51/H4P5'l6=\|Xxs5d&KA&fzUKy8fM5MSHfdjd;efOS]mg*{Ugj
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 02 1d cb fe 79 34 cd 17 58 16 56 7f f0 8f 78 99 be d1 a6 c5 91 03 23 7f ab 93 9c 6e 7f ee 8f 4a d9 49 2b 9c 52 8f bc 37 c1 d7 fa 83 5b c9 71 e1 9d 43 fb 1e 5b 1b 60 97 2b 2c 9f f1 f0 33 fc 0b fd ee f5 d8 5a d8 eb 2d 70 b7 12 34 7a 85 bd d4 61 da 7f 3f 74 8a 4f 3f 30 15 c0 eb 1a 37 97 71 ba 29 fc fb 6f 2f 30 34 4b 8e 0f 73 df 15 27 85 fc 64 7c 2b e5 c1 f6 69 e7 0c d9 76 69 36 f9 9e 83 3e 9e c2 bd 0c 2e 21 c7 43 cf c6 61 79 af 23 d5 7c 17 77 6f 6f 7d 25 a4 2d 22 ca aa 4e d9 fe 45 fc 2b 7a 3b 9b db 6b 75 49 2c f7 45 b8 9d cd f7 7e b9 ae 2f 44 d5 f4 bd 76 ce 0b bd 6f 75 9d e4 ac c5 67 db b2 3c 0e 81 0f f1 1c d7 5b e1 c9 cb db a5 bc f7 3f 69 b7 e9 1b 2f dd 6a f5 29 d4 53 d5 33 c6 a9 49 c0 7c 8f 68 57 cc 12 b2 ca df 76 35 f9 ab 3e 49 90 72 8c ad b7 f8 9b f8 4d Data Ascii: y4XVx#nJI+R7[qC[`+,3Z-p4za?tO?07q)o/04Ks'd\|+ivi6>.!Cay#\|woo}%-"NE+z;kuI,E~/Dvoug<[?i/j)S3I\|hWv5>IrM
2025-03-26 13:11:04 UTC	16067	IN	Data Raw: cb e5 6e 0a d9 ac 17 ff 00 89 57 8e 95 fc df dc de 21 1b 7d cd 7b 14 66 a4 ac 72 62 20 e3 25 22 6f 14 a4 97 5e 17 68 c2 af 99 67 20 75 db fc 48 2a ad cd cc 97 3e 1f 8e ed 19 54 b2 8d df 37 61 da b5 24 46 fb 67 d9 e4 66 92 39 63 23 6f b9 e9 58 1e 1d 8d d6 6b 9d 22 ed 5a 42 b9 f2 d9 bf cf a5 74 46 ee 2f c8 e4 a9 1b 4d 79 9a 9a 76 9d 68 3c 01 1f 88 35 18 26 b9 b8 96 fb c9 8a 35 6c 43 1a 8e 9b 87 f1 1c d4 77 fe 22 d7 26 9a 38 25 bc 93 ec 6a e3 74 0a db 55 80 e7 1f 41 4f f0 fe b7 7d e1 d8 7f b2 4c 4b 71 a4 cb 29 f3 22 97 e7 68 41 fb cc be f5 32 d9 f8 67 58 91 7f e1 1e d6 64 69 67 7c 2c 57 71 f9 3b 46 78 f9 9b a6 7b 7b 56 b1 f2 39 65 1b 7c 41 f1 03 5b 6d 5e 48 a5 b0 b6 b9 83 6c 78 66 69 0c 8c df 4f 4a c4 f0 ec 31 41 e2 eb 11 a8 b5 8b 47 2f 37 33 ea 12 1d 91 c6 Data Ascii: nW!}{frb %"o^hg uH*>T7a$Fgf9c#oXk"ZBtF/Myvh<5&5lCw"&8%jtUAO}LKq)"hA2gXdig\|,Wq;Fx{{V9e\|A[m^HlxfiOJ1AG/73
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 37 e6 d4 74 d0 57 ee 26 ff 00 99 7e 6f bd ce da 46 90 85 c2 75 ed bb d7 eb 4e c0 ea 57 91 f8 53 64 20 b3 03 d1 a8 bb ee 0a c2 e0 2b 65 7e 60 b5 32 be 51 72 bf 77 91 f3 7a d5 7d d9 61 f3 7d de 29 c8 72 dc 7f 09 aa 4e db 09 c6 e4 92 67 e6 c7 f1 67 fc 8f 7a 6e d1 bb 68 ea 7e f7 fb 3e d5 22 e4 b3 63 f8 7f cf e3 51 a9 f5 5e 6a 9e 82 88 cc 91 f5 ec bf e1 48 c3 7c 7e e0 73 b6 ac 65 36 f0 ad 8f ef 54 72 21 1d 3f c9 f4 a4 e3 62 94 88 4a 95 e0 2f 1d 36 d0 ac 87 6e e5 e6 a5 5c 18 f6 8f e2 e6 9a ab f2 f1 d7 fd aa 87 72 af dc 89 54 ed 52 3e 50 bf c3 4e 57 3b 94 37 fc 0a 9c ca ea c3 1f dd c5 0b c7 4e bf ee d3 57 4c 2e 33 76 c9 39 56 c7 fb df 95 3f 1b 98 01 b5 b6 ff 00 15 08 33 c7 7a 45 ca ff 00 55 f7 a7 7f b8 05 d9 1f 97 9d df 7a 93 19 6e 7a 67 3f 2f 5a 77 98 76 f2 ad Data Ascii: 7tW&~oFuNWSd +e~`2Qrwz}a})rNggznh~>"cQ^jH\|~se6Tr!?bJ/6n\rTR>PNW;7NWL.3v9V?3zEUznzg?/Zwv
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 26 56 cf dd da b5 6e 3f 2d d9 92 09 7c f0 df 79 bd 85 51 1a 5c ea e4 f1 94 12 49 f3 ed f9 7e ef fb 5f 5f 6a a3 71 e3 09 9a eb cd 8e f2 0c af 3e 5b 7c db 7f 1a e7 e4 b1 b2 3b 9c b3 4a cd fc 2d f2 d5 84 b5 b6 3f ba 31 2a 8f ee a2 8d de 94 6a 27 24 8b ef e3 6b 99 15 93 7c 6c ed fd d6 dc d5 5a 6d 7e 1b b6 fd fc 0d 19 65 fb d2 37 de c7 5a a9 36 9d 0c 5c 45 02 65 54 6e f9 bb 7d 6a 4b 7b 48 db 6b 95 f3 1b 95 dd 1f dd fa 73 40 73 21 eb 7f 13 aa 94 66 50 d8 0d 23 65 9a ae 5c df 5b a2 aa b4 fb 97 fd e2 cd f9 53 2d 62 b2 81 71 e5 2b 16 e7 6d 4a d1 d9 ba ae c8 23 5f f7 be 52 d4 14 4f 14 c9 37 97 e5 4f 1e d5 fe 1f ee e2 b4 ad e0 b7 3b a7 7d ab bb 3b 76 fa 55 4b 7b 08 36 f9 8e ab 96 6f bb 1f cb b7 fc 6a d4 30 ee 6c ed f9 95 a8 26 45 db 75 0a aa 9b 9b cc eb fd ea 9d 54 Data Ascii: &Vn?-\|yQ\I~__jq>[\|;J-?1*j'$k\|lZm~e7Z6\EeTn}jK{Hks@s!fP#e\[S-bq+mJ#_RO7O;};vUK{6oj0l&EuT

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:04 UTC	375	OUT	GET /th?id=OADD2.10239402414375_1AVQBVS8V3X3ACPMA&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:04 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 422551 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D5EC9B812A15472FBA9F5772B929F997 Ref B: EWR30EDGE1019 Ref C: 2025-03-26T13:11:04Z Date: Wed, 26 Mar 2025 13:11:03 GMT Connection: close
2025-03-26 13:11:04 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 f4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 3a 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 ac 87 69 00 04 00 00 00 01 00 00 00 c0 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 36 2e 31 20 28 32 30 32 34 31 31 30 33 2e 6d 2e 32 38 33 34 20 31 34 64 33 65 37 34 29 20 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 31 31 3a 31 31 20 31 34 3a 34 30 3a 30 34 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 Data Ascii: JFIFHHExifMM*bj(1:r2i``Adobe Photoshop 26.1 (20241103.m.2834 14d3e74) (Windows)2024:11:11 14:40:04
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 00 a9 af bc 1b e2 5b 28 fc d5 b7 fb 64 7b 77 16 b3 6d c5 47 fb 4a 70 47 e4 6b d6 ab 2a 33 d1 4f f1 3e 76 85 1c 5d 24 a4 e8 e8 bc bf cb 53 b6 b6 b6 d7 93 49 f3 f4 cb db 5d 66 cb 6e e6 54 f9 b8 1c 7c c8 70 47 e1 59 f6 3a eb 69 5a 83 cb 69 69 36 9b 23 72 d1 c7 21 45 0c 0f 60 72 30 4f 62 31 5c 66 8d a8 de e9 f7 47 ec d7 52 db c8 b9 0e 99 2a c3 3c 10 41 c5 74 d6 da f3 de 32 41 7d 2a b9 7c 80 65 50 c0 93 d3 e6 ed ff 00 d7 af 3e 78 69 42 e9 ab af eb e4 7b 74 73 08 d4 49 c5 b8 c9 7c fe e7 ba 3b eb cd 56 4d 6f 4b f3 60 bb 87 ce 99 42 f9 64 96 8f 27 a9 0b 9c a1 fa 12 3e 94 f9 74 6b 5b bd 16 08 27 b2 bb ba bb b7 63 ba 78 41 79 80 3c e0 32 e1 d8 0e 3b 36 07 e7 5c 46 bc d7 1a 7d e4 17 51 59 4c 8a a0 36 eb 66 20 82 07 50 08 23 f0 e9 5d 7f 81 75 a7 d5 f4 bb a3 a7 5c 47 Data Ascii: [(d{wmGJpGk3O>v]$SI]fnT\|pGY:iZii6#r!E`r0Ob1\fGR<At2A}*\|eP>xiB{tsI\|;VMoK`Bd'>tk['cxAy<2;6\F}QYL6f P#]u\G
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: b6 77 ba 64 68 f1 b2 07 09 80 08 27 b1 ec 7b 8e d5 db 45 b5 1d 4f 2a bd 18 f3 69 a7 55 df fe 01 a5 a6 eb 02 de 41 6d 79 e5 42 e0 8f df 21 26 26 cf 4c 92 32 b9 f4 60 3f 1a d4 d5 2e 6f 20 f3 1e ca 38 d2 74 b5 75 2f e5 86 03 76 36 01 d7 00 9e 73 d0 0c 56 a6 9b a2 69 57 16 2b 3d a7 92 d3 34 45 65 88 80 72 ac 39 56 52 08 23 3d b0 41 ae 35 3c 3f ad e8 ba a3 2d 92 5c 33 42 4c 90 58 4a c5 a3 94 13 93 e4 48 79 8d 88 ec 49 53 8c 73 d0 71 f3 42 a4 9b 5a 35 d1 f5 3b 1f b5 a5 14 9a ba 7d 56 eb fc ff 00 3f 53 3a c3 59 b7 37 26 1b db 8b 8d 32 fb 7b 62 6f 2f 7c 12 31 3f 75 80 c3 46 41 e3 8c 8a 79 bd 10 dd 49 3e 81 3a c7 7c 5c 19 e3 24 79 57 4b dc 3a 74 39 e9 90 01 1e dd 69 6e 24 d2 7c 4f e7 90 5a 0b d8 d8 c5 74 b2 c7 b5 a1 70 31 fb e4 c0 23 1d 37 81 d0 72 2b 98 d1 fe c9 Data Ascii: wdh'{EO*iUAmyB!&&L2`?.o 8tu/v6sViW+=4Eer9VR#=A5<?-\3BLXJHyISsqBZ5;}V?S:Y7&2{bo/\|1?uFAyI>:\|\$yWK:t9in$\|OZtp1#7r+
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: cb 4c 14 ae e6 27 27 80 54 01 ea 73 e9 58 36 76 16 71 f8 66 09 1f 4c 8a fe 59 c9 fb 4a 42 04 91 97 2c 00 94 20 e3 ae 39 18 07 9f 5c d6 87 c3 9f 1b da 78 67 ca f0 e4 f1 4a d6 02 67 df 0e 0b cd 60 c7 a0 db d7 61 20 f5 e3 18 c1 eb 55 92 62 30 f4 f3 28 56 c5 68 a3 7b 76 4d db 56 75 e7 b4 b1 32 ca aa d0 c1 25 79 da fd da 57 d1 7f 5d cf 4e 74 c5 46 c2 ae 42 f6 f7 76 cb 73 6b 3a cd 0c 9c ab a1 04 1f fe b8 f4 a8 64 4c 75 af d7 21 52 33 8a 94 5d d3 3f 10 a9 4e 50 93 8c 95 9a dc ae 45 18 15 26 da 6e 3b d5 dc 8b 0d c0 a2 9f 8a 4d be d4 80 6e 05 04 66 9d 8c 51 40 0c 02 97 02 97 14 62 80 19 4b 8a 7e 05 00 0e 72 dd bf 3a 06 86 62 93 06 a4 c0 a4 c5 02 12 90 8f 4a 5c 1a 30 68 01 00 a4 c1 a7 60 d2 e2 80 19 83 46 0d 38 0a 36 fb 53 b8 09 8a 4c 1a 76 0d 14 5c 2d 61 a4 52 62 Data Ascii: L''TsX6vqfLYJB, 9\xgJg`a Ub0(Vh{vMVu2%yW]NtFBvsk:dLu!R3]?NPE&n;MnfQ@bK~r:bJ\0h`F86SLv\-aRb
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: af d9 e3 c4 da c3 88 26 f1 e5 94 16 5f c5 05 bd 83 f3 e9 92 5f e6 fc 48 aa 7a 0f ec b9 a3 da cc 5b 5c f1 3d ed e2 8e 89 67 6e b0 7e 6c c5 ff 00 41 5f 44 b3 67 ad 43 21 dd 5f 65 87 c9 b0 14 52 8c 29 e9 f3 3f 3b c4 e7 38 ec 44 dd 4a 93 bc 9f 5d 3f a5 f2 3c b6 1f 82 1f 0c e1 b1 36 a3 c3 4f 23 15 00 dc 3d ec de 6e 40 fb c0 86 00 13 ec 31 5e 79 f1 0b f6 73 bc 19 9f c1 3a f1 c1 27 36 5a 9b 05 60 31 fc 32 a8 c1 f4 c3 01 f5 35 f4 74 aa 2a b4 82 ba aa 65 98 3a b1 b3 82 5e 9a 1c d4 f3 2c 5c 1d f9 db 3e 21 f1 57 c3 af 89 1e 1c dc da 9f 87 f5 25 84 31 1e 7c 0a 67 88 e3 be e8 f7 0c 57 2d 75 a8 6a 6d 6e 2c ee 6e a7 31 c4 c7 11 3b 1c 29 ef c7 f4 af d0 06 0c ad b9 1c ab 7a a9 20 fe 95 ce f8 db c1 fe 1b f1 65 9b 5b 78 87 46 b6 bc cf 2b 36 cd 93 a1 f5 12 2f cc 0f b1 24 1f Data Ascii: &__Hz[\=gn~lA_DgC!_eR)?;8DJ]?<6O#=n@1^ys:'6Z`125t*e:^,\>!W%1\|gW-ujmn,n1;)z e[xF+6/$
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: b3 3c 13 c5 9f b3 0f 87 2e 66 96 6f 0d f8 86 fb 4c de 72 96 f7 70 8b 88 94 e7 a6 f0 55 b1 f5 04 fd 6b cc 7c 67 f0 57 e2 37 85 ed 25 b9 7b 18 f5 7b 18 ce 1a 5d 36 43 33 2a f6 63 11 01 c0 f7 db 81 5f 62 b0 34 d0 18 36 41 21 87 42 38 35 e6 57 c9 f0 d5 16 8a cc ee a1 9a 57 a4 fb 9f 9f 6a cc 24 2b 73 3f 92 50 90 41 07 70 23 b1 18 c8 a9 34 db f7 b3 9b 31 2c 72 2b 01 b9 b2 01 fd 78 af b7 bc 73 e0 2f 07 f8 c3 e6 f1 27 87 ed 2f 66 d9 b4 5c e0 c7 38 1f f5 d1 08 27 1e e4 d7 8d 78 fb f6 60 80 ef bb f0 4e bc d1 b8 e5 6c 75 4e 54 fb 2c ca 38 f6 0c bf 8d 78 d5 f2 4a d0 bf 2f bc bc 8f 5a 8e 73 06 d7 47 fd 7c 8f 13 8a f2 2b a9 9e 47 b7 50 55 b7 31 03 d6 a7 8d 6d e4 84 e4 cb 1b 74 04 60 82 7d 08 f7 fa d4 7e 3f f0 5f 8c 3c 11 7f 1c 3e 25 d2 a6 b5 56 39 86 70 44 90 4b fe ec Data Ascii: <.foLrpUk\|gW7%{{]6C3*c_b46A!B85WWj$+s?PAp#41,r+xs/'/f\8'x`NluNT,8xJ/ZsG\|+GPU1mt`}~?_<>%V9pDK
2025-03-26 13:11:04 UTC	16384	IN	Data Raw: 5a 50 29 ca 3d 68 b8 00 04 d4 8a be bd 69 14 63 a5 38 0a 42 b8 a0 52 f4 a2 80 33 40 21 d4 28 cd 14 a0 62 81 8f 51 9e 69 1a 85 a5 c0 a9 00 5e 94 a0 51 8a 50 29 dc 00 0c 51 4e 51 4b 8f 7a 43 b0 ca 31 9a 7e 31 d2 97 14 05 88 f6 d0 54 d4 ca b4 e5 5c d1 70 3c ff 00 e2 d7 c2 ed 13 c7 8d 15 cd cc b3 59 6a 30 20 48 ee e1 01 b2 a0 e4 2b 29 c0 60 32 79 c8 23 3f 85 79 3e b9 f0 13 e2 05 ac 81 34 7d 4b 47 d4 2d d7 3b 0c 8e 60 7f a1 56 e3 3f 42 6b e9 c4 8b 35 32 41 9f e1 ae 0c 46 5f 85 ae ef 38 ea 76 e1 f3 2c 56 1d 72 c2 5a 1f 0c f8 df c3 9f 10 3c 2b 23 1d 6f 47 b8 b5 8e 33 fe bd 22 2d 11 f4 c3 8c a9 fc eb 33 c2 be 29 6b 2b e2 6e e7 91 56 5c 06 2a 01 1e c4 8f 6f 51 5f 7b dc 59 09 23 28 e9 b9 18 61 94 8c a9 1e e0 f0 6b c1 bf 6a 4f 87 ff 00 0d ac b4 19 f5 7b b1 1e 91 ac Data Ascii: ZP)=hic8BR3@!(bQi^QP)QNQKzC1~1T\p<Yj0 H+)`2y#?y>4}KG-;`V?Bk52AF_8v,VrZ<+#oG3"-3)k+nV\*oQ_{Y#(akjO{
2025-03-26 13:11:04 UTC	16067	IN	Data Raw: 57 01 9b 69 71 4b 81 46 05 17 01 b8 34 b8 a5 c1 a5 c5 17 1d 86 e2 8c 53 b1 46 28 0b 0d c5 18 a5 c1 a5 c5 2b 85 86 60 d1 83 4f c5 18 a2 e3 b3 19 83 46 0d 3f 14 05 a5 71 d8 66 0d 18 35 26 da 4c 51 cc 16 3e 2a 5a 72 e2 91 45 3d 56 be e2 e7 83 ca 0b d6 9e b4 aa 29 e0 52 b8 86 a8 34 f5 14 a1 69 c1 69 5c 05 51 4f 0b 48 b4 f0 29 5c 76 15 45 38 0a 14 53 87 b5 2b 8c 50 31 4b 48 05 3b 14 ee 3b 02 8c d3 94 7a d0 a3 14 f0 31 48 60 a2 9d 48 b4 e0 29 5c 62 81 8a 70 e2 9b 4e 03 34 82 c2 81 4a b9 a0 0c d3 80 f4 a2 e3 01 cd 38 0c 50 29 c3 8a 9e 60 10 7b d3 80 34 01 4a 06 68 e6 00 02 94 0a 51 4b 8a 39 83 50 51 de 9d 8a 45 eb 4e a9 1d 84 03 34 b4 60 d1 4e e1 60 a2 8a 29 00 75 a4 22 96 8a 04 37 06 a1 d5 ef e1 d2 74 5b cd 56 e7 98 6c 6d de e2 41 ea a8 09 23 f1 c6 2a c0 19 af Data Ascii: WiqKF4SF(+`OF?qf5&LQ>ZrE=V)R4ii\QOH)\vE8S+P1KH;;z1H`H)\bpN4J8P)`{4JhQK9PQEN4`N`)u"7t[VlmA#
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 72 01 7d bc 06 4c 91 d4 71 c7 bd 69 58 f8 0f 4b b4 fb 56 a9 a0 66 d8 4d 6e 4c b6 71 a9 08 ac 39 3f 2f 46 f6 20 67 a8 e6 b0 ec c5 e5 bf 88 61 37 d7 11 9b 3b 98 9f 74 6a ab 20 64 1d 4a 30 0a 4e 0e d3 c8 04 64 f0 3a d7 24 e4 b9 99 e9 50 e6 e5 dc ee be 01 de a5 97 c6 3b 21 38 0e 97 0b 2d ac 6d 8c 14 91 d0 e3 af 18 38 c7 1e b5 f4 5b 8a f9 2b 4e b9 b8 d3 bc 44 fa 9d b0 64 6b 49 d6 68 65 c7 0c ca 55 d0 9e df 30 c1 ed 90 4d 7d 69 6f 3c 77 76 70 dd c5 fe ae e2 35 95 3f dd 65 04 7e 86 be bb 86 eb 29 50 9d 2e a9 df ef 3f 3d e3 bc 33 58 9a 58 95 b4 93 5f 38 bf f8 23 1a 9a 45 48 d4 d2 2b e8 ee 7c 18 cc 1a 55 18 a5 a2 97 30 09 8a 50 31 45 0b d6 86 c7 61 54 62 96 8a 17 a5 4d c7 60 a5 5a 3d e9 68 b8 ac 0b d2 9d 4d 5e b4 ea 57 1f 28 2f 4a 30 68 a2 95 c7 ca 14 ea 17 a5 03 Data Ascii: r}LqiXKVfMnLq9?/F ga7;tj dJ0Nd:$P;!8-m8[+NDdkIheU0M}io<wvp5?e~)P.?=3XX_8#EH+\|U0P1EaTbM`Z=hM^W(/J0h
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: b2 c7 13 02 8e 87 18 6e c4 90 4e 31 ec 29 7d 6e 3d 86 b0 b2 be a7 d6 0d 19 1d 45 37 69 af 04 5f 89 be 34 d3 a4 8e d6 4b b9 9e 35 42 8a cf 18 72 48 ea df 3a e4 fe 3c d6 a6 95 f1 cb 50 8d 52 de ff 00 4f b5 99 e3 61 e6 4a 32 ae ca 3a f0 0e 32 7d 71 c7 a5 69 1c 45 39 2d c8 9e 1a 51 76 b9 ec d8 34 57 94 cd f1 da d4 42 cd 1f 86 66 67 04 6d 3e 7f ca 47 7c f0 0d 17 df 1d ac 84 70 1b 3f 0e ca 49 61 e7 79 d3 e1 76 f7 da 40 ce 7e a2 b4 55 21 dc c7 92 5d 8f 57 00 d2 a8 35 e4 b3 fc 7b b2 59 36 27 85 e6 6f 90 60 9b a1 8d d9 e9 90 bd 31 e9 55 65 f8 ed a9 1b df 26 df c3 76 20 18 cb 03 25 c3 1c 60 64 73 c7 3e d8 14 7b 48 77 1f 23 3d 27 e2 96 b3 79 e1 cf 87 ba a6 b9 61 68 6e 6e 6d 20 2d 12 05 2c 03 13 8d c4 0e c3 39 fc 2b e4 db 8f 14 ea 1a f6 a1 25 fe b5 78 d7 d7 0d fc 52 Data Ascii: nN1)}n=E7i_4K5BrH:<PROaJ2:2}qiE9-Qv4WBfgm>G\|p?Iayv@~U!]W5{Y6'o`1Ue&v %`ds>{Hw#='yahnnm -,9+%xR

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:04 UTC	717	OUT	GET /w4WYs/?_kx=-QUNaQ-MBntFitaNdyTGlw.UXAHNr HTTP/1.1 Host: secure.mysterycluesolver.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 13:11:05 UTC	1012	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 13:11:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=jg7toa9aai1icnrhkt9rrl8lpc; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OfyAzI3tunAHf7P4muBJ5GCFa%2BbHDIec5%2Bk3QaSw6p8FFrmqx9034pfrWUw9QpbWMFFGIdOHgp%2FdFdhF0PQ%2F%2Fa2n2PZMqkXFUu%2BK%2FgxdOSMz91VaKi2QbCnEXV89DU%2FcbhHNYfU1M8Ghit%2BjPy0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9266e44fdf9a7ced-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=97386&min_rtt=96829&rtt_var=21263&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1289&delivery_rate=37818&cwnd=247&unsent_bytes=0&cid=f6ca814a3555bda4&ts=732&x=0"
2025-03-26 13:11:05 UTC	357	IN	Data Raw: 31 30 66 33 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 62 6c 69 7a 7a 61 72 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 49 6c 20 62 61 6d 62 69 6e 6f 20 72 69 64 65 20 66 65 6c 69 63 65 20 6d 65 6e 74 72 65 20 67 69 6f 63 61 20 63 6f 6e 20 69 6c 20 73 75 6f 20 6e 75 6f 76 6f 20 61 71 75 69 6c 6f 6e 65 20 63 6f 6c 6f 72 61 74 6f 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c Data Ascii: 10f3 <html lang="en"> <head> <meta charset="UTF-8"> <title>blizzard</title> ... <span>Il bambino ride felice mentre gioca con il suo nuovo aquilone colorato.</span> --> <meta name="robots" content="noindex,
2025-03-26 13:11:05 UTC	1369	IN	Data Raw: 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 45 6c 20 6e 69 c3 b1 6f 20 63 6f 6e 73 74 72 75 79 65 20 75 6e 20 63 61 73 74 69 6c 6c 6f 20 64 65 20 61 72 65 6e 61 20 65 6e 20 6c 61 20 70 6c 61 79 61 20 64 6f 72 61 64 61 20 64 65 6c 20 43 61 72 69 62 65 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 44 65 72 20 4b c3 bc 6e 73 74 6c 65 72 20 6d 61 6c 74 20 65 69 6e 20 67 72 6f c3 9f 65 73 20 57 Data Ascii: script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>El nio construye un castillo de arena en la playa dorada del Caribe.</p> --> <style> * /* Der Knstler malt ein groes W
2025-03-26 13:11:05 UTC	1369	IN	Data Raw: 6c 69 66 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 d8 a7 d9 84 d8 b9 d8 a7 d9 84 d9 85 20 d9 8a d8 b7 d9 88 d8 b1 20 d8 aa d9 82 d9 86 d9 8a d8 a7 d8 aa 20 d8 ac d8 af d9 8a d8 af d8 a9 20 d9 84 d9 85 d8 b3 d8 a7 d8 b9 d8 af d8 a9 20 d8 a7 d9 84 d9 85 d8 b1 d8 b6 d9 89 20 d9 81 d9 8a 20 d8 a7 d9 84 d9 85 d8 b3 d8 aa d8 b4 d9 81 d9 8a d8 a7 d8 aa 20 d8 a7 d9 84 d8 ad d8 af d9 8a d8 ab d8 a9 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b Data Ascii: lift { /* . */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px;
2025-03-26 13:11:05 UTC	1252	IN	Data Raw: 9c ac e3 81 ae e4 bc 9d e7 b5 b1 e7 9a 84 e3 81 aa e5 af ba e9 99 a2 e3 81 af e5 a4 9a e3 81 8f e3 81 ae e8 a6 b3 e5 85 89 e5 ae a2 e3 81 ab e3 81 a8 e3 81 a3 e3 81 a6 e9 ad 85 e5 8a 9b e7 9a 84 e3 81 aa e5 a0 b4 e6 89 80 e3 81 a7 e3 81 99 e3 80 82 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 44 65 72 20 4b 6f 63 68 20 62 65 72 65 69 74 65 74 20 65 69 6e 65 20 6b c3 b6 73 74 6c 69 63 68 65 20 53 75 70 70 65 20 6d 69 74 20 66 72 69 73 63 68 65 6e 20 5a 75 74 61 74 65 6e 20 61 75 73 20 64 65 6d 20 47 61 72 74 65 6e 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 Data Ascii: --> ... Der Koch bereitet eine kstliche Suppe mit frischen Zutaten aus dem Garten. --> <span class="cf-turnstile" data-sitekey="0x4AAA
2025-03-26 13:11:05 UTC	7	IN	Data Raw: 32 0d 0a 0d 0a 0d 0a Data Ascii: 2
2025-03-26 13:11:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:05 UTC	375	OUT	GET /th?id=OADD2.10239340418586_15W93I98EWXDJY7GO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:05 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 488476 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 70351C87C86743C5A17CE5E92D3FA710 Ref B: EWR30EDGE0917 Ref C: 2025-03-26T13:11:05Z Date: Wed, 26 Mar 2025 13:11:05 GMT Connection: close
2025-03-26 13:11:05 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 31 20 30 30 3a 32 38 3a 32 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:11 00:28:238C
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: c6 d4 82 da 4f 37 fb aa c3 e5 15 97 71 6a 66 93 7c 7a 7a b4 b2 65 7c c5 f9 9b 1e f4 6e 56 bf 33 2a 3d 37 46 89 54 cf 73 04 65 b1 b9 76 ee dd 57 26 d0 f4 35 ff 00 8f 7d 56 da 49 3a ac 7b 4e e6 fa d4 69 0e 9e b2 2c b3 c5 04 05 73 fb ce ad f8 50 da c6 8d 68 ac 20 82 59 e5 91 71 fb b5 fb bf 53 53 66 8b ba d9 96 a0 f0 f7 92 db 05 8d a3 79 8b f3 34 8c 19 79 f6 15 53 5c 86 e6 1b c5 8e 2f ec f8 02 ae 3e 5f 99 9b f1 a9 ed bc 61 6d 6f 22 c6 9a 67 98 24 5f 2d b7 75 cf d0 7a d6 8d aa f8 6f 53 f2 a7 bf b6 5b 36 6e 3f 78 df 37 ff 00 5a a7 9d ae 83 e5 8d b4 39 79 34 db c4 93 cf 8e e9 54 ff 00 7b cb 1f 8d 44 da 26 a8 aa de 66 a0 aa 1b 95 f2 fd bf cf 4a f4 28 6c 3c 0f 7f 23 41 2e ae cb e5 fd d6 91 b6 2f fc 06 aa dc e8 1e 19 32 66 2f 11 b4 65 7f d5 c5 1c 65 77 7e 74 d4 a2 Data Ascii: O7qjf\|zze\|nV3*=7FTsevW&5}VI:{Ni,sPh YqSSfy4yS\/>_amo"g$_-uzoS[6n?x7Z9y4T{D&fJ(l<#A./2f/eew~t
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 5f ef 37 f1 0f 6a af b6 e6 79 33 71 3c 8c 1b fd 62 ee f9 69 f0 24 71 43 f3 7f c0 7f d9 a9 37 86 6c 8e 8a b5 8b 72 7a 1d 11 84 62 2d 8c 0b 0f c8 3a 6e 3f 95 4a b3 b9 e1 1b e5 66 f9 7f fa f5 0e ef 97 e7 6d bb 9b f8 7f 88 d2 48 fb 17 fb bb b3 fc 34 d2 48 2e c9 d5 cb 33 65 b9 5a 8a ea ec 8d a1 3a 7f 15 46 dc 47 9f ef 67 6d 33 6a 3f fc 07 fe fa a7 cc 67 cb 72 86 a5 79 30 8d 9f f0 f9 be ed 64 cc d7 72 c2 d2 6f fb df 2a af b1 ad db bb 78 26 8f 63 a6 ef 9b ee ff 00 85 52 92 c1 fc b5 28 df 33 37 fc 05 71 54 a4 d8 59 19 ce 9b 15 72 cc c1 78 aa b7 0e 5b e4 8b 73 56 9d d5 8b 2b 2a 0d cd f3 0f 9a a3 6b 54 1f f7 d1 f9 9b e6 a1 93 cb a9 94 ca 4c 6d f3 6e 91 78 f9 5b 6f 35 06 fb 8d db 1b f8 6b 59 e0 70 cd 24 bf 37 fc 07 bf a5 3d 20 47 5f 9e 35 61 fe d7 cb 45 ec 84 cc 75 Data Ascii: _7jy3q<bi$qC7lrzb-:n?JfmH4H.3eZ:FGgm3j?gry0drox&cR(37qTYrx[sV+kTLmnx[o5kYp$7= G_5aEu
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: b1 ae d5 ff 00 68 ee a7 71 f2 dd 6a 42 f6 65 bf da ff 00 81 52 79 27 bb 71 53 21 dc cc 4a ed a8 e6 92 25 e5 db 6f fc 0a b4 52 39 e5 0e c4 4d 6f 95 e5 a9 9f 67 c6 e1 b9 9b e5 db 52 a9 49 39 47 56 ff 00 76 4a 72 ac 9b 72 57 fd df 9a ad 48 cd c5 b2 95 c5 a8 2b b0 ff 00 15 41 36 98 8c bf 22 b6 37 7f cb 36 db 57 dd 98 2f ce bb bf d9 a1 36 18 f8 8b 6d 3e 64 42 8b 31 e6 b1 78 db f7 6d f3 6e f9 59 be 6a af 1c 97 76 cd e5 79 bb 97 9f bc db 9a b7 8c 4a 76 96 45 61 51 49 0a b2 e5 22 ff 00 76 8e 58 b1 f3 49 19 36 ba be a3 1c 8d 15 bc f2 2c 6a c3 76 e5 f9 1b d4 73 da b6 62 6b 4d 46 cf 7c 96 30 fd a7 9d d2 44 bb 79 fa 74 15 9f 73 66 0f 55 e7 fd aa a5 71 15 fc 2d bc 2b 28 8f fb b4 3a 4a fa 07 b6 76 b3 d4 b1 b7 c9 9b 65 c5 b4 78 8f 9f bc 7e 6f ca ad 5a eb 72 45 24 65 d9 Data Ascii: hqjBeRy'qS!J%oR9MogRI9GVvJrrWH+A6"76W/6m>dB1xmnYjvyJvEaQI"vXI6,jvsbkMF\|0DytsfUq-+(:Jvex~oZrE$e
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 4e fa e6 38 1b e5 b6 5c 5b c5 9f c3 92 05 65 78 a3 47 be b3 b8 fb 66 9f 62 b7 97 0c bf 2a ab 7f ab 19 f5 3d 3f 0a d6 9b c4 1a 04 ed 1c f7 37 92 45 2c 79 31 ab 4e 3f 3e 2a e5 bf 89 34 3f b2 b1 b7 d4 2d a4 3c ee dd 26 d3 cf 5c d5 2a 8a db 13 ca bb 98 bf 09 f4 d9 34 7f 19 47 aa f8 86 5b 18 95 97 29 12 e5 db 3e ac c7 a7 e1 5e bd 6f f1 3f c2 f1 5f 4a 65 d6 ad a3 8e d9 7e f3 7f 13 f7 c7 ae 2b cc 2f af ac ee 6c 64 48 1a 1d d2 a9 f9 95 8b 6d 1e cd da b0 e6 f0 f6 99 77 e6 19 22 66 45 ff 00 59 22 c9 f2 af e7 d2 a9 4e 29 6c 68 a5 24 ac 8f 58 93 e3 67 c3 fb 78 ff 00 e4 39 b4 49 29 f9 56 02 19 8f 73 8a c7 d7 7f 68 4f 0c 58 c3 29 b4 5b 9b a2 aa 7c b8 a3 5d ad 31 3e 9e 9f 8d 79 2d d7 86 74 a3 0b 0b 28 15 8b 37 c8 cd 20 dc d5 52 6f 09 d9 5b c2 db e2 dc dd 5b ca f9 9a ab Data Ascii: N8\[exGfb=?7E,y1N?>4?-<&\*4G[)>^o?_Je~+/ldHmw"fEY"N)lh$Xgx9I)VshOX)[\|]1>y-t(7 Ro[[
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: b7 40 17 a5 26 b1 e1 2b 24 d3 d7 64 5e 5b 7f 13 7d e6 c0 ed 8a b5 52 2c 85 1a 89 68 65 5d 7c 48 d3 e0 bc 96 ce d5 a4 b9 ba 69 3e 59 3c bd b0 c7 9f 4f a5 43 e2 0f 8a f7 9a 55 aa db d9 6a ab 79 77 b7 e6 f3 21 db 0c 64 fa 77 63 54 af 3c 1b 66 77 09 f5 a6 8a 39 7e ef 97 17 cf fa 56 15 cf 83 b4 85 b8 91 46 a1 77 24 91 b6 17 f7 7c f1 56 a5 06 63 28 d4 5d 48 67 f8 c5 e2 0f 31 a6 d4 f5 3f 3c ee c4 71 c7 06 d5 fc 00 e8 68 4f 8d de 31 16 b2 47 1f 97 02 ca a7 cb fd d8 67 fc ff 00 86 aa dc 78 5e d6 1f 33 ec ba 64 ec db 7f d6 5c ff 00 0f 7e 00 ac a6 d1 6f 4f 98 77 36 3a b4 6a a2 8f 67 09 2d 89 8c aa c7 4e 63 77 47 f8 db e3 3d 3f e7 92 75 b9 92 46 cb 2c aa 76 af b7 e1 5b 16 bf 1a 7c 51 3d c6 2e f4 eb 19 03 72 d1 ed fb d9 fe 55 c7 c7 a0 ea 93 36 cb 2b 36 6f 97 e6 f3 57 Data Ascii: @&+$d^[}R,he]\|Hi>Y<OCUjyw!dwcT<fw9~VFw$\|Vc(]Hg1?<qhO1Ggx^3d\~oOw6:jg-NcwG=?uF,v[\|Q=.rU6+6oW
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 6d ff 00 81 51 b0 37 f7 73 4d 55 1b bf 8a 9d ff 00 8e fc dd e8 7e 64 75 12 45 23 91 48 ad 8e b5 28 20 b7 3f f0 1f 97 b5 35 d3 b8 eb b7 95 a3 97 b0 b9 bb 8c e7 bf 3e d4 e5 6f 97 14 d2 76 b7 14 32 fc b4 d1 5b 93 a3 7c b4 bb 96 45 c1 6e 6a 15 c0 a7 42 c1 5b f8 a9 c7 56 67 28 89 24 7f e4 53 14 14 6e 7f ef aa 9f e9 4d 20 16 c0 5d b4 72 6a 55 c4 56 ec 69 53 3f 2b 0a 51 11 dd fe 35 19 2c ac c0 fc dd a9 bb ad c5 a3 d8 b0 1c 16 6f e1 ef 4e dc 0a e3 b7 f0 d5 70 c4 f1 dd b8 a9 01 25 b9 6d b4 d4 88 71 18 d1 ed e9 bb 14 85 7e 6c 1e 9d 6a 45 24 70 3a 7a 50 d2 06 5d a4 51 64 55 d9 5e e2 22 39 1f 2e ea 4c e3 86 ed 53 ec 25 72 3e 6a 63 28 1f ec d1 d4 b5 2d 06 47 f7 be f6 55 ba 53 c8 2a b9 da d8 fe f7 f7 6a 2d a4 32 ff 00 0e df e1 ab 36 b2 11 d7 f8 a9 a1 4b c8 40 e4 33 7f Data Ascii: mQ7sMU~duE#H( ?5>ov2[\|EnjB[Vg($SnM ]rjUViS?+Q5,oNp%mq~ljE$p:zP]QdU^"9.LS%r>jc(-GUS*j-26K@3
2025-03-26 13:11:05 UTC	16067	IN	Data Raw: db 96 a9 59 6c 67 2d 48 9e fa d1 b8 2d 3e e6 6c 2f 5a cf ba d5 ad 20 69 16 4f 32 3d b2 6c 59 24 5f 96 43 fe cf ad 6b 5d 2f 9b b7 cb da a1 78 f9 7f 86 a3 9a 08 97 6c 91 aa ee ff 00 69 77 55 26 44 a2 62 dc 6c 7b 5f 37 74 fe 5b 7d e6 dd f7 ab 5a c6 e4 c9 67 1c 02 56 95 57 ef 6e fb b8 1d 85 45 74 d6 93 c6 d1 c8 cc b2 2f f0 ff 00 74 fb 55 6b 3f 3a c2 e2 43 04 ad 20 93 1f 34 9f 75 7d 85 56 ea c4 26 d3 35 35 e8 3f b4 a1 82 4b 0d b1 47 2b 6c b9 67 5d df 4c 7b 55 7b ab 78 05 d2 83 3c b1 c3 12 81 b7 cb f9 58 fa fa d6 a5 85 c3 b2 fd a0 c4 b2 b6 dc 2c 6b c2 e7 fa d5 2b e8 cd e3 49 7a 6e 96 29 a3 52 65 69 3e 65 5c 76 c5 61 ca d3 f2 3a 5c ae af 72 0b ed 47 4c d3 ed e2 8d 2c da 01 b7 3b a4 f9 9a 4f f0 a8 63 d5 25 9a eb f7 71 79 42 5f f9 68 df c5 f4 15 67 4a 1b e4 53 ac Data Ascii: Ylg-H->l/Z iO2=lY$_Ck]/xliwU&Dbl{_7t[}ZgVWnEt/tUk?:C 4u}V&55?KG+lg]L{U{x<X,k+Izn)Rei>e\va:\rGL,;Oc%qyB_hgJS
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 4b 59 1e 3d ab 2f 96 06 ed bd fe a6 b9 ff 00 ec dd 6e fa 6d 92 5c b4 7b 5b e5 55 8f 62 53 75 0f 8a 5a 34 51 ac 92 5b 5c c7 33 37 fa b8 e3 dc ab 8f 7e 94 d4 f8 9c f7 aa a2 ce ce 75 66 5c f9 b2 c8 8b b7 e8 2b 5e 62 a5 1b 92 ea 5a 76 b9 61 6f e6 5b 5b 2d d5 c4 9c 2c 8d 9c 2f b9 af 3c f1 3b 6a 8d 71 22 6a fa d2 c9 23 37 cd 14 0b c4 7e d5 df ac e7 5a 5c de 5f 4e c5 97 7b 34 97 a3 6a e7 db a5 3a db c3 1a 3c 56 ec f6 da 6a df 37 f0 f9 0d bf 71 3e a6 a2 53 43 f6 77 d8 f2 9b 77 f2 97 ca d3 ac 59 99 db 0c cc df 76 b5 57 4d bd 86 16 92 f6 78 d4 c8 b9 58 a3 5d cf f8 d7 76 74 7d 62 5f 31 ad bc 2e b6 d0 af 1b 9a 40 bc fd 7a d3 6d f4 8b c8 6f 3c c8 a2 8d ae a3 5f bc df 32 a9 f4 c9 a4 dd f6 12 8a b9 97 e0 1b 3b b8 24 92 fe 55 58 2d f6 e3 b2 f1 f8 f5 ad ab 9b cf 04 da c3 Data Ascii: KY=/nm\{[UbSuZ4Q[\37~uf\+^bZvao[[-,/<;jq"j#7~Z\_N{4j:<Vj7q>SCwwYvWMxX]vt}b_1.@zmo<_2;$UX-
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: b7 b6 7e e8 e7 ef 7f 16 29 c9 a6 25 7b 96 6c 6d d5 d7 e7 fb aa d5 bb 6e a9 6f 6e df 2a af cb fc 3c 2a d5 1b 25 de ca 47 cc 3a 6e fe f5 37 50 b9 32 49 b1 3f d4 ab 61 7f da c7 ad 64 d9 b4 48 75 8b cd fc ab 7c eb fc 3f c3 58 b1 93 25 c7 98 ff 00 76 9f ab 4e ef fc 3c 74 5f 9b 70 a4 d3 90 bd bf f7 93 f8 a9 c5 75 22 52 bb 2f 59 84 5d a5 3e 6f ee ee ab e1 c3 34 98 da a7 f8 b6 ff 00 2a 82 31 fb b4 67 da ab fc 5f de a7 a3 c7 b5 be 4d ab 4e 56 2e 2c 9a dc 9f 2f 7b 2e e3 bb 0a aa df 7a b7 34 f8 c1 b7 60 15 be 5f bd b9 bf 9d 62 d8 c8 42 a9 3f 31 fe 1f f6 6b 6e cc ba c3 f2 7c a5 9b ef 49 5c 75 11 d5 4a d7 3b ef 87 b2 ee d2 5a 37 db 98 9b 67 7f 94 76 ae 81 5d b7 29 1d 79 db b6 b9 3f 86 f2 e2 1b 98 be e9 dc 19 57 6f 6f 5a eb a2 27 77 ca bf ef 6d af 97 c7 3b 54 91 f7 99 Data Ascii: ~)%{lmnon<%G:n7P2I?adHu\|?X%vN<t_pu"R/Y]>o4*1g_MNV.,/{.z4`_bB?1kn\|I\uJ;Z7gv])y?WooZ'wm;T

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:05 UTC	375	OUT	GET /th?id=OADD2.10239340418561_1E2KGQS8IVJEZ1891&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:05 UTC	855	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 1310684 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C489204ABC4B414AA0A52DF1F7DEF61A Ref B: EWR30EDGE1417 Ref C: 2025-03-26T13:11:05Z Date: Wed, 26 Mar 2025 13:11:05 GMT Connection: close
2025-03-26 13:11:05 UTC	15529	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC8"}!1AQa"q2
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 2c e2 98 4b 20 91 e4 f3 a6 82 32 f9 46 e7 9c 30 18 f3 0a 83 86 93 03 b5 56 b3 f1 25 c6 97 f6 99 ec e7 b1 b7 9a 75 73 2c 36 f0 ab aa 1f 3b 74 5b 24 90 60 b9 50 bc 80 0e 14 f1 cd 52 f2 ed 05 cd bd e2 db c9 13 46 c6 4f de 6e 93 cd 94 00 ca 19 3a 02 c8 17 a6 54 a9 c0 24 e2 b5 f5 cb 67 9f 4c d3 2c ac d2 2b ab 98 e0 dd 0a 48 86 38 65 bb e7 0b bc e0 9c 2e 06 e6 c0 52 a4 67 04 01 8b 8a 0e 5b d8 b3 67 e3 18 af f5 6b bb a8 9d d9 6f 2d 04 d3 df c8 bf bc 5b 86 4c 03 e6 72 a1 95 f7 2a 1c fc a4 f6 e8 28 c1 a2 ea 1a bc 32 3d 9e 97 67 a8 6a 4a b9 83 cc 9f ec fe 58 39 52 56 37 e6 46 f9 c6 f3 b8 92 48 f7 c7 37 6d a6 5d b6 b1 22 42 24 36 6f 33 ef b3 24 aa cf 9c 12 ec 47 31 e4 8c e3 19 05 3d f3 57 2d b5 66 bb b8 8b 75 e6 dd 53 ce 09 3e 98 96 be 4a e7 2c a7 39 24 aa 20 20 95 Data Ascii: ,K 2F0V%us,6;t[$`PRFOn:T$gL,+H8e.Rg[gko-[Lr*(2=gjJX9RV7FH7m]"B$6o3$G1=W-fuS>J,9$
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 69 63 8b 98 c6 09 f3 d9 54 ed 60 08 8b 21 40 2a 00 c8 e0 d3 6f 74 6b fb 39 db 53 ba 96 45 b1 d6 cb 3d 84 8a 84 bc 53 06 2a df 28 3b a3 28 cf b3 00 0d ea 77 63 19 35 76 cf 45 6b b8 2e 25 8a 5d 4a 47 b7 9d 11 04 f6 ab 1c a9 23 8c 1f dc 85 c3 f0 14 7a 1d e3 ee e7 14 35 ad cc 5c 95 d6 a5 ad 3e e7 55 bf d2 e4 b9 bc 82 d5 0d b5 b6 c9 55 c3 34 48 fc 9f 2d c6 38 32 36 de 46 e1 b1 81 c0 cd 73 df d9 fa cd 84 e2 fe d6 68 db ec 86 39 d3 4f 90 7d ef 31 8e c8 8a 21 c1 e5 98 02 09 61 91 91 83 5b 9a c6 a6 f6 b0 8d 33 57 be ff 00 89 7d 98 1e 4d 85 b3 79 6a 40 56 57 2b 2f 38 91 00 6e a5 83 10 41 34 c9 f5 1b 51 a4 5b aa c5 6e d1 ca 56 79 11 61 dc 89 01 8d 96 39 46 c6 e0 8d c4 e4 e3 2d 8e 07 06 a1 dd 5c 23 cc b5 4b 46 4d f0 df 5d d5 ef 3c 71 16 a7 a3 fd a6 d7 53 d3 d9 1b fb Data Ascii: icT`!@otk9SE=S(;(wc5vEk.%]JG#z5\>UU4H-826Fsh9O}1!a[3W}Myj@VW+/8nA4Q[nVya9F-\#KFM]<qS
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: d6 21 16 f1 db 47 1e 07 93 3c c9 90 91 05 54 2a 38 63 c1 1d 6b cd 7e 19 f8 d6 56 d6 ee 60 b3 d3 2d ee ac 74 98 ff 00 b3 6e be c8 86 e2 3d 34 7c d2 c6 bb f1 91 00 42 bb 9c 82 1d 94 02 a4 83 5e 89 a4 34 16 5a 03 e8 9e 23 b0 6b 7d 06 fe 7b 7b 25 b6 6b a9 66 58 22 12 8f 2c 48 e7 ef 3b 05 67 71 ce d2 d1 83 80 0e 39 3d 4f 50 7b 0f 14 ea 56 da 76 80 be 6d bc f2 cd 7d a6 e9 d0 88 65 b6 7d cc f1 c6 ce 08 55 f3 bb 85 dc db a3 ec 09 af 8d a9 4b 99 ce eb 5f eb f4 fc 4a 95 67 68 3b ec 75 fa 1e b1 3e a5 aa 49 ac c5 ab 69 eb 61 69 a5 b4 bf 6a ba 81 64 9a c1 94 65 52 40 30 42 94 56 5e 9b c7 5e c7 3a 33 69 96 9a 67 8e b4 bd 66 e7 57 1a be a9 7f 6b 23 db c0 8d 18 8e de 49 17 e6 78 b1 8d cc f1 7c fb 76 e0 08 57 8c f5 e1 ee 75 3d 68 78 fd 35 2b b4 b6 d2 ae ae 55 17 fb 26 d2 Data Ascii: !G<T*8ck~V`-tn=4\|B^4Z#k}{{%kfX",H;gq9=OP{Vvm}e}UK_Jgh;u>IiaijdeR@0BV^^:3igfWk#Ix\|vWu=hx5+U&
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 33 75 a8 5f 48 ad 1c 65 4a 63 c8 c2 0f 91 30 b1 2f 70 42 91 c9 c1 ae 5f 57 bb bc d4 ad e6 f1 22 5d 5d 59 43 6d 23 5a e8 d6 a6 60 ed 30 6c 6e 3b 4e 36 86 5d c5 51 3e e2 2a e4 56 f5 c6 bf a3 41 e0 9b a3 35 ed b5 99 b3 97 c9 b0 b3 b3 81 da 09 c8 06 59 0a 4b ce 22 59 1d 79 3b 48 38 3e a6 a3 9b 44 67 53 4b 91 0d 62 ee 1b 59 b4 ff 00 16 db 22 cb ad c9 f6 ff 00 32 5b bc 88 ae 82 88 ce e2 8b c3 b6 e2 37 0c 2f cd 83 86 19 25 dd e7 93 1b 5d 48 6e 23 b5 b3 5f 2e 39 96 d5 5a 18 a7 23 16 ee 01 c7 ee f3 bb 7c 98 04 9c 70 37 02 67 f1 4b d8 6b 0b 0d b7 88 24 6d 4a d7 5a 7b 74 66 48 1a 0b a6 fe 23 1b b8 50 bc e2 37 0c 9c 32 b6 7b e4 73 11 e9 77 da 55 8a 6a 49 7d 71 a9 d9 c9 79 3a cf 67 72 bb a3 96 20 36 ae dc e0 87 52 ab 96 38 0e 31 d4 ae d2 a2 ee 72 ca 3c fa 9d 1c d0 cb Data Ascii: 3u_HeJc0/pB_W"]]YCm#Z`0ln;N6]Q>*VA5YK"Yy;H8>DgSKbY"2[7/%]Hn#_.9Z#\|p7gKk$mJZ{tfH#P72{swUjI}qy:gr 6R81r<
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 62 9a 43 80 42 49 fb cf 97 19 63 d7 19 39 e6 ad 35 18 35 4f b3 f8 87 49 bc d4 34 f9 ad ee fc cb a8 a2 b9 4f 32 55 2e c3 ec d2 93 c8 46 68 f0 db 0e 43 64 0e b8 a8 75 46 1a d4 d7 5a 4e b1 6f 6b 1e af a8 5b b5 90 fb 3a 15 b3 9e 00 ed 2a 27 05 43 a9 72 a8 c0 ed 25 9f 19 00 13 5a c2 fd c9 bb e8 6b 5b 41 75 79 6b 35 c5 86 ae bb 62 f3 63 86 f2 c2 37 f2 e3 93 ee b3 b0 8b 25 4a 6e f9 59 58 8d dd 07 55 18 be 0d b4 4d 2b 52 87 57 d2 af 6d b5 28 ed 42 c9 a9 69 33 33 30 f3 12 47 31 4a ac 17 e6 c4 ac 38 07 e7 18 73 ed 52 ef 5b d7 3c 3d a4 a4 3e 29 d3 ef 3c 3f 0c 76 51 dd c9 65 0d e4 4c f1 47 14 81 36 01 c2 ee dc e9 b5 07 ef 48 07 24 e2 ab 5d 78 9e ff 00 e1 67 87 34 fd 36 ff 00 47 bb 82 2b e5 92 45 d3 2d e5 4b b9 6d ee c1 49 e4 11 a2 65 99 25 46 19 00 ed 04 b6 30 78 3d Data Ascii: bCBIc955OI4O2U.FhCduFZNok[:*'Cr%Zk[Auyk5bc7%JnYXUM+RWm(Bi330G1J8sR[<=>)<?vQeLG6H$]xg46G+E-KmIe%F0x=
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: f6 9b 5b bb 8b 98 3f b3 e4 88 e9 90 44 ad 25 84 45 53 74 90 bf fc b7 31 a3 79 6f 21 00 3e 38 c0 19 34 7c 57 65 06 9a 60 d5 ec 16 3b 75 b5 82 0f 2e c6 e3 6c 91 aa 17 f9 a6 8d 00 05 65 18 53 b4 67 76 0f 4c 01 58 fe 06 b7 8a 0b 8d f7 f6 6d 35 9f d9 fe cf 3c 86 e1 e5 ba 74 9a 19 02 42 c0 61 4e dc 31 df 95 f2 d4 8c e7 04 0e 29 6a 85 1e 56 8e 86 3b fb 8d 4f 5a f0 aa dc d8 d8 ea 70 1b 79 ad f5 a6 d4 24 33 47 6b 0a 87 f9 e6 25 c0 89 c2 9d a1 7e fb ed c6 1b 23 3a fa 5d f5 a5 cf 87 e7 d3 35 a9 e0 6b 7b d9 01 56 96 14 92 19 23 52 55 25 85 1b 69 67 5e c1 b0 51 63 5f bd 8c 1c cf 87 b6 36 d1 da 8b 92 92 2d b2 e9 e9 7c 9a 5d b5 c6 47 9b 18 c8 12 80 84 ca 8a 18 1d c0 1c 70 40 ed 54 35 a8 e4 d5 3c 43 35 bd ea 9b c9 a1 b2 f3 26 d3 e2 b9 ff 00 8f 26 4d bb 7e 67 c2 36 36 8c Data Ascii: [?D%ESt1yo!>84\|We`;u.leSgvLXm5<tBaN1)jV;OZpy$3Gk%~#:]5k{V#RU%ig^Qc_6-\|]Gp@T5<C5&&M~g66
2025-03-26 13:11:05 UTC	16067	IN	Data Raw: 63 c9 22 ec 7e 21 d0 e5 b5 89 e3 96 d3 fb 0f 52 9a e2 f2 ea 0b fb b9 66 97 38 24 46 fc 02 59 f7 84 62 0e e1 b4 74 04 55 4d 33 42 d6 51 af b5 bf 0e e8 d6 52 db d8 c2 cd 0b 5b ff 00 ac 67 49 02 a5 b3 0c fe f5 7c b7 1c 7d d1 bb 07 82 4d 5c 65 6d 18 46 4e fb 1d e7 84 7c 1c ba 62 49 7e f7 92 5d 4d 7b 7b f6 58 dd 64 8e d7 cc 9c 02 cc 9b f6 e3 63 38 61 e6 7d e7 0a c7 a3 06 aa f7 1e 1e f1 55 b5 d4 33 78 33 51 ba d2 e2 3a a7 ee de ef 4e 79 a3 2e 8a 76 34 ae a0 31 3c 12 bb c0 5f 94 1c f1 5c 9e a3 f1 13 c5 b6 50 a7 87 bc 49 63 a2 de 58 47 6e 7c 91 ac 86 36 69 30 8f 3f f2 c5 31 85 c0 c2 b7 dd 2a bd 7a 9e b7 c0 bf 14 7c 65 e2 2f 02 cb ad 78 8f c6 57 1a bd cd ac 2d fd a1 63 71 6d 19 81 a3 79 55 36 cc 48 43 1c 6a d9 ca 86 66 5c ae e1 ce 2b 9a a7 35 ae cb e6 f7 6e 71 be Data Ascii: c"~!Rf8$FYbtUM3BQR[gI\|}M\emFN\|bI~]M{{Xdc8a}U3x3Q:Ny.v41<_\PIcXGn\|6i0?1*z\|e/xW-cqmyU6HCjf\+5nq
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 3a 9c 50 ea 96 17 b6 ab 1c 76 57 1a 96 f4 55 e2 4d e1 48 ce e0 0b 31 46 c3 92 bf 2e ee 6b 8a d7 34 ad 67 46 d5 86 a1 69 a7 dd 47 66 d7 62 38 f6 46 f1 ad bc a1 d3 f7 c8 08 f9 93 69 3b a4 ce 0e 3b 10 6b b6 9f c3 63 5a 7b 6a 54 f1 1f 87 f5 5d 27 4f ba 36 d6 49 6b a6 5e 5c c9 04 4f 71 29 85 23 49 06 5f ca 3d d1 36 12 8a 39 19 07 04 8a d5 f8 1f 0e 93 79 0e a1 a2 5f 40 d3 5a dd 5b 05 bc b6 b9 23 ce 85 b6 b6 d4 0c 30 a5 40 0b 23 37 cc 58 01 f7 48 39 87 c6 b0 c5 fd 97 7c fe 1b d5 af ae 6d ee 8b ae a6 b2 1f 31 45 c2 be 4b ee e1 54 ab 15 0a 57 8d 99 db fc 46 af ae 83 e1 d7 f0 35 a6 95 e2 7d 3e fb 4f 9c 97 f3 35 68 95 e4 5f 3d 80 dc bc 1c 6c cb 2e 15 41 56 56 20 11 82 4e aa 57 5e a5 c9 9c 2d 9c 11 dc 78 3f 4f b4 d9 1c 6d 01 fb 59 d4 2d 6e 0c b2 2a 1c c6 8e ea 46 d5 Data Ascii: :PvWUMH1F.k4gFiGfb8Fi;;kcZ{jT]'O6Ik^\Oq)#I_=69y_@Z[#0@#7XH9\|m1EKTWF5}>O5h_=l.AVV NW^-x?OmY-n*F
2025-03-26 13:11:05 UTC	16384	IN	Data Raw: 15 95 80 1d 6b d4 e6 f6 34 d2 6e df d7 e7 a5 f4 bf ce c6 56 e6 67 9d f8 3b 40 f1 25 cf 87 6f b5 2b 2b 73 0d c7 86 ac 67 10 69 f2 a7 93 74 ef 1a 30 8f 7a e0 33 6e f9 c2 b7 4c 2e 30 6b 7b c2 f6 96 56 16 ef e2 1d 7e e6 eb 54 d6 2e 2d e2 df 67 63 18 22 62 e1 4b 23 46 57 e5 70 5c 02 aa 7e 50 37 1e 32 06 83 5e 5e ea 57 96 66 d6 db c8 4b 63 e4 b3 5f 03 0c eb 76 a7 cc 9a 36 23 70 44 db 8c 39 e1 07 4f 5a a7 e0 fd 16 e3 51 f8 96 96 96 53 ea 1f d9 b6 30 8b db f7 bb 8f 30 79 fb cf 97 10 73 92 c0 a8 0d bc 7d ed 83 9c 31 15 e7 ca 51 ac 9a 8a d7 af 9f f5 b7 9b fc 35 b5 8e f3 c0 86 1b 6b 1d 5d ac 74 a9 ac 6e 5a eb cb 9a 4b 88 87 da 65 99 80 cc cd fc 2e 39 5c 60 9d c1 7b 74 ad d9 a0 92 29 a1 49 8a c9 f6 d8 70 cd 82 aa a4 0c 96 2a 0f 19 3c fe 75 91 e1 ab eb bb 5d 0e ea d6 Data Ascii: k4nVg;@%o++sgit0z3nL.0k{V~T.-gc"bK#FWp\~P72^^WfKc_v6#pD9OZQS00ys}1Q5k]tnZKe.9\`{t)Ip*<u]

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:05 UTC	596	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://secure.mysterycluesolver.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 13:11:05 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 13:11:05 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 9266e454ce31c52b-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:05 UTC	667	OUT	GET /logos/assets/PNG/Microsoft_Logo_512px.png HTTP/1.1 Host: mailmeteor.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://secure.mysterycluesolver.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 13:11:05 UTC	1184	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 13:11:05 GMT Content-Type: image/png Content-Length: 2309 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: "fd1dd9eb8405629af71bda9e0fc8400c" content-security-policy: frame-ancestors 'self' *.mailmeteor.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P5rG6VBQ7RWuHPtXrNyaOLw4zuB6s59ONBR%2Bu5Y5bPBQJAkfNWvbCiwVprVsKC8QVzC18k%2BV52qslywb%2BwcBTqUEXL0Vrw%2FZaQZiCrM4MmXdUiCIbbyanCZ%2BmrC81%2BjufQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6785 Accept-Ranges: bytes Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 9266e454c9675f74-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99369&min_rtt=98825&rtt_var=21322&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1239&delivery_rate=37644&cwnd=252&unsent_bytes=0&cid=ad9980a61eebbba9&ts=257&x=0"
2025-03-26 13:11:05 UTC	185	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 9a 49 44 41 54 78 01 ed d6 31 aa 5d 55 14 80 e1 b5 1f 8f 60 23 64 08 b7 b1 cf 10 14 c1 5e b0 b1 74 08 4e c0 c2 09 38 04 3b 3b b1 17 41 87 10 db 54 37 33 78 45 8a 40 20 3b 37 90 22 03 c8 39 24 f9 bf af d9 dd ea d6 5e ff 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRxpHYssRGBgAMAaIDATx1]U`#d^tN8;;AT73xE@ ;7"9$^
2025-03-26 13:11:05 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c aa d6 1c e8 c5 0f 5f fd b6 f7 3c 19 e0 44 eb e1 cb 3f 9f 7d 3f 07 f8 f5 9f 47 bf df e6 5f 06 38 cf 7a fd f4 97 6f 5f fd 3c 1f d8 fd 1c e8 dd f1 ff 7a 80 d3 ac d9 d7 39 c8 5e b7 7d de fb 32 c0 69 d6 be 9b 23 1c 33 15 00 f8 a8 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 Data Ascii: \|_<D?}?G_8zo_<z9^}2i#3$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A
2025-03-26 13:11:05 UTC	755	IN	Data Raw: 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 Data Ascii: A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$ H

Timestamp	Bytes transferred	Direction	Data
2025-03-26 13:11:05 UTC	346	OUT	GET /th?id=OADD2.10239340418562_1168Q5I7J0C0R4GX2&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-26 13:11:05 UTC	855	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 1374508 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: ABB4BE48008B4E1C837BE3E1BDF1FA62 Ref B: EWR30EDGE0422 Ref C: 2025-03-26T13:11:05Z Date: Wed, 26 Mar 2025 13:11:05 GMT Connection: close
2025-03-26 13:11:05 UTC	15529	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 07 80 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC8"}!1AQa"q2
2025-03-26 13:11:06 UTC	16384	IN	Data Raw: b7 e5 57 7c 7b 04 80 b1 70 ce c0 0d c1 ab e8 30 aa e9 5b a9 e5 d7 92 8b 3c fa fb 54 93 47 86 3f 16 68 f0 cf 1c 7a 94 2d 0e 9e e6 71 04 ec 99 55 fb 44 d1 64 aa 16 dc c8 31 84 2a b9 03 27 35 97 e3 1f 12 5d 5c ad be ba fa 4c 36 ba 85 b5 bc 76 37 12 db 0f 2d 04 61 cb 29 07 18 00 29 4e 02 e4 6c 1c 05 eb e9 3e 0b d6 3c 29 61 e1 d8 f4 5d 7a 09 b5 a9 2e 27 7b 61 75 a8 b4 72 5b e9 70 b0 de d3 5b b3 7c e6 45 cb 8f 28 8d 85 c2 02 79 20 f0 9e 27 b6 7b 48 fe c3 ac d9 5e db 43 6f 70 0d 8b dd 15 9e 74 9d e4 2d 1a ca e9 f2 b3 6c 2a 72 03 28 27 6e 39 38 ee 8e e7 0c aa 47 7f ea c4 2b 16 bd a3 46 da be 92 05 8a db a2 79 0a 36 31 0d 31 53 e6 15 e3 61 72 3e e2 e3 a2 ab 75 00 f4 be 22 f1 47 85 3c 53 e1 6b 7b 6d 47 c3 c9 67 24 8a 8b 2d dc 52 b2 cd ae 48 8c 59 e5 b8 44 c6 5b 7b Data Ascii: W\|{p0[<TG?hz-qUDd1'5]\L6v7-a))Nl><)a]z.'{aur[p[\|E(y '{H^Copt-lr('n98G+Fy611Sar>u"G<Sk{mGg$-RHYD[{
2025-03-26 13:11:06 UTC	16384	IN	Data Raw: 2d 84 72 c0 92 b2 c2 bb 8b 20 3b a4 68 d1 41 69 40 c9 1d 00 2a 29 a2 65 64 9d 91 9f f1 7b 4b be b4 f0 cc de 1c ba f0 92 d8 ea d7 37 09 7b a7 41 77 20 8e f0 46 1f 3b c8 1c b2 ed c8 c7 20 04 ce 7e 5c 0e 73 56 d7 34 8b 3d 36 48 2f ef af 6e 35 d6 9a 39 35 0b 88 27 0b 1d c3 8d e1 a4 2a b1 81 08 07 0a 8e c7 3e 5b 83 b1 48 15 e9 1f da 16 de 34 d0 2f f4 3b 9b 54 b5 f1 34 97 90 ea 37 5a 83 5d bc 30 dd db 89 87 cf 0c c0 14 84 6c 28 13 3f 28 3c e5 99 88 12 69 ba 25 ec be 23 d4 3c 73 a7 5b 68 ba b4 37 2d 28 36 b3 c9 1a c5 a7 c0 b1 98 99 e6 40 a0 28 29 1e 76 3a 82 53 6b 7c c5 c8 29 c9 5a c6 6a 51 51 e5 67 33 79 1b dd c5 24 f6 f7 e2 de da f1 96 e1 6c 2c 00 8a 48 54 f0 c1 d3 86 76 2e 85 82 a1 dd 18 3b 89 e7 8d ed 7d 4f f6 2e 9f a7 5b ea 31 4d 09 36 e9 35 c6 99 29 49 b3 Data Ascii: -r ;hAi@)ed{K7{Aw F; ~\sV4=6H/n595'>[H4/;T47Z]0l(?(<i%#<s[h7-(6@()v:Sk\|)ZjQQg3y$l,HTv.;}O.[1M65)I
2025-03-26 13:11:06 UTC	16384	IN	Data Raw: 5c 43 7e 42 85 24 b8 01 9e 1d f0 35 84 ba 85 ae 8b a1 ad ba cd ac 24 b6 66 57 b7 f3 2e e2 66 75 48 03 33 06 16 72 4b c4 a0 90 19 51 99 0b 0c 83 50 d1 3c e9 5b 99 15 f4 99 a1 8f 4c b5 02 58 6e 15 63 88 6f 9a c4 99 96 30 81 64 61 1c 40 6d 1c 32 2a 33 07 ce e9 77 10 05 61 e9 7a d5 e6 89 af 7d b3 c3 da 48 8d 2d 67 9a 08 2e a7 90 19 64 52 e4 05 55 24 97 2c 1b 19 ee 40 f9 82 ee ab 50 68 9a c7 86 35 7b bd 41 e3 91 74 90 d3 0b 47 bc 0e d7 52 cb 14 cb 11 91 62 89 b6 99 91 d3 25 18 ed 2a 87 21 86 d0 57 50 d5 74 c9 64 6b 8d 6e f6 5d 43 55 b8 13 59 dd b5 87 9d 1d c4 6a 64 69 91 e3 90 a1 55 52 1c 96 89 46 02 ed f5 2b 48 cd ef b5 ce 5f 58 d4 67 9a e2 e6 3d 4e ee e6 ea 67 95 85 e4 b7 d7 6c 6e 58 86 52 b9 27 95 5c 00 31 dd b9 51 81 9a af 18 bf bc ba be 68 ad 11 a3 bb 80 Data Ascii: \C~B$5$fW.fuH3rKQP<[LXnco0da@m23waz}H-g.dRU$,@Ph5{AtGRb%!WPtdkn]CUYjdiURF+H_Xg=NglnXR'\1Qh
2025-03-26 13:11:06 UTC	16384	IN	Data Raw: c1 16 9d a2 ea 46 ea fe fa e9 ed 65 bd b9 d5 23 bd 07 ed 2f e6 63 72 95 61 80 ac 06 e6 00 10 d8 dc a7 3b 8e 86 84 fa 56 a2 97 7a 88 d3 61 1a 85 ec 01 2c ee ae 44 b6 81 98 a2 ac 8c 1f ee a4 28 01 61 b8 93 20 56 cb 00 c5 4d 2d 6b 51 d0 34 eb 38 2c e5 f0 de 99 2d c5 d4 02 5b 63 34 98 ba 11 17 c1 82 e1 87 ca ea cc 92 0d 80 0f e1 c1 ce e1 58 fe 11 d6 6f 3e dd fd 81 ae ea 72 c9 63 7b 02 48 2c 25 96 44 8e 52 c4 47 14 70 94 60 4b 2c 62 38 84 b8 2a 02 e0 8d b1 82 72 4a eb 53 24 9b 8f f5 f3 36 34 e9 47 87 a0 b0 f3 b4 7f b7 cd 6b 6d 27 ee f7 89 24 b2 70 eb e4 05 79 7f e5 9c a7 92 18 1d a1 54 29 ef 55 ec bc 67 a0 c9 a5 cb a6 e9 fa 65 c6 9f 24 2f 72 f6 bb 6e 64 f3 ac 6d e4 db e6 92 c5 c3 4a 51 d0 b1 7d c3 79 c0 3c 02 0f 47 a8 59 c5 a9 7f 68 41 71 67 6d 19 d5 a0 8e c9 Data Ascii: Fe#/cra;Vza,D(a VM-kQ48,-[c4Xo>rc{H,%DRGp`K,b8*rJS$64Gkm'$pyT)Uge$/rndmJQ}y<GYhAqgm
2025-03-26 13:11:06 UTC	16384	IN	Data Raw: 3e 25 fc 11 d6 6d ae ed 34 ab 0b 9d 16 f9 1d ad 75 4b 97 8c c4 ae 8c a9 1a 80 f9 0e cc a3 6c 41 99 98 ef dc a0 70 36 be 27 4b ab d8 78 7f 5a 82 e3 c5 77 7a c3 1b b9 1d b5 85 96 45 90 c5 70 e5 55 25 8d 50 60 c6 a3 e4 21 82 17 2c 42 83 d7 a8 f8 27 a2 ef f8 47 65 a3 df 78 16 e0 69 77 d7 52 3d b5 8b 08 ee 2e 35 1c fc e6 e2 60 ca db 99 4b 33 6d 24 be 79 52 05 78 d1 54 a8 25 5d ab c9 49 5b d3 77 bf f5 e6 77 39 4a ab 70 5a 2b 3b 98 bf 09 7c 69 a9 eb 96 96 70 6b fe 2b 9b 4e 7f 10 2a db 5a a5 bd 98 7b 19 75 45 89 d9 24 87 07 16 c3 0b 18 11 3e d2 cf 9f 91 55 c6 33 3e 22 6b 5e 39 d3 3e 2b f8 67 c2 b7 9a c6 a1 af 68 b7 b6 f2 4f 2e 99 24 46 cd ad e3 8e 06 32 5c bf 98 3c b2 44 85 a4 f2 d4 b7 08 40 19 20 8f 3c f1 66 bb 75 e0 2f 15 43 e1 57 b2 d4 2f ad 4f 88 a5 d6 2c cc Data Ascii: >%m4uKlAp6'KxZwzEpU%P`!,B'GexiwR=.5`K3m$yRxT%]I[ww9JpZ+;\|ipk+N*Z{uE$>U3>"k^9>+ghO.$F2\<D@ <fu/CW/O,
2025-03-26 13:11:06 UTC	16384	IN	Data Raw: 96 49 83 7e f0 16 1b 76 00 ae 83 68 72 c4 e6 bd 22 1f 0a f8 7b 47 f0 24 3e 17 bf b5 d3 74 2d 3e 64 83 4f 95 ad 51 63 59 f0 c7 62 21 ea 1f 7b 64 3f df 0d ce 73 cd 6d eb da 66 b9 73 a6 a8 8b c4 ed 6b 79 6a 40 8e 6b 7b 25 6f 35 18 a0 21 e2 62 46 ef 95 97 20 f1 b8 9a fc cb 33 cd 6a 66 18 29 53 92 d7 bb d1 a4 9d de 97 bd b9 6e ad ae ce c7 bd 46 8c 69 c9 5b 6f eb c8 e6 d5 ee f4 dd 72 16 d3 e3 b6 f2 52 d4 c4 ff 00 68 85 56 e6 59 46 59 16 16 67 04 b2 6f 72 4b 8c 1d f9 07 82 2b 9d f0 45 d4 12 8b 78 fc 4d 67 77 a5 3e a1 35 ca c3 a7 cf 03 45 34 73 6f 66 de ac ae 48 0c a7 78 07 95 ce 77 0c 81 5d 0f 8b 62 b2 8f 5b 59 ef 50 b5 fc 57 09 f6 7b 7f bc 50 1c 98 d8 b6 d2 56 31 b1 8b 6c c9 3b b2 48 15 c0 49 06 93 2f 81 13 c4 fe 2b d6 35 89 ef ac 6f 6e ae 34 8b d5 b3 78 af 2c Data Ascii: I~vhr"{G$>t->dOQcYb!{d?smfskyj@k{%o5!bF 3jf)SnFi[orRhVYFYgorK+ExMgw>5E4sofHxw]b[YPW{PV1l;HI/+5on4x,
2025-03-26 13:11:06 UTC	16067	IN	Data Raw: 1b 14 80 7f 73 cf 11 92 52 77 5a 1c f5 1b 7b 16 ae ae ac af a6 33 5b 4c 6d 56 ea da e6 79 22 89 e6 92 1b cb 55 0e 03 96 e4 28 74 42 1a 67 56 62 a3 00 82 57 13 ea d6 cd a8 e9 53 e9 fe 18 f1 75 ca da 69 76 50 49 6f 71 25 c3 c9 6f 1c 8c 59 56 23 12 f0 c2 2c bb 6f 24 33 23 a9 29 9c a9 82 eb 53 d6 74 8d 36 e3 c5 f1 df db cb ae 5c 59 cc 2f cd d5 a4 92 49 35 9b 44 04 32 c4 1d 82 88 f6 02 a4 2a a8 c3 92 53 8c d5 74 9a 1d 27 ec 97 da 6e 8d 73 25 84 7a 78 b8 b7 be 82 e1 22 10 5c 4c b0 cd 92 14 e5 a2 7d aa 41 6c ed c2 f3 ce 69 1c e9 b5 af f5 fd 7e 86 3f 88 2e 1f 40 d1 5f c3 76 da 46 a3 65 aa 6b 17 3f 68 d3 be c9 39 96 16 29 1c 41 9a 06 0c 4c b0 92 10 85 91 46 7f d5 9c e0 92 df 0b ac d0 f8 85 b5 44 bd 95 7e d9 a7 25 9d d6 9b 70 77 34 96 52 96 f3 23 91 9f 3b 1a e1 e3 Data Ascii: sRwZ{3[LmVy"U(tBgVbWSuivPIoq%oYV#,o$3#)St6\Y/I5D2*St'ns%zx"\L}Ali~?.@_vFek?h9)ALFD~%pw4R#;
2025-03-26 13:11:06 UTC	16384	IN	Data Raw: 57 d3 4f 1b 58 69 e8 d7 17 36 e0 87 8d 6f 77 60 aa 96 8c 36 d2 84 24 60 a9 28 bd 7e 6b 1b 5a 15 65 a2 b7 f5 7f 99 e6 4e 3c cf 4d 2f f7 1c 3f 85 f5 39 5e 7b 1d 3b c4 90 5e c3 23 df 4e 0e a5 05 c8 90 cb 04 51 32 b9 92 7c 05 68 d1 dc 46 85 8f c9 b1 f8 38 00 dd 9f ec 3e 24 d3 35 6d 36 ef 59 bd f3 e4 82 16 d3 2f 2d 8f 92 ba 90 8a 58 8b c4 cd 81 14 9b 99 55 77 aa a0 4f 2d 58 e3 18 26 9b 6f 64 fe 28 d5 6c 6c 44 7a 9d 82 b4 73 5f 4b 15 9c 96 c2 78 66 9b 04 da ee cc 6c a2 42 a3 e7 61 cb bb 1c 71 8e 2f c6 a9 ae f8 61 8d d7 89 62 8e dd cc d7 82 c6 f6 c2 fd a6 88 4f 24 9b 5e 3b 70 a4 26 e0 8d 24 9b 06 08 de 37 03 8c 57 34 62 e7 2b c7 7d 3e 7d 4e 4e 59 2d 6d ff 00 04 bb e3 a8 df 47 d7 67 f1 cc 9e 3a d4 f5 eb e3 03 a6 99 1c 4b e4 c0 a9 e6 88 be ce 63 dc 0a 02 c4 90 e0 Data Ascii: WOXi6ow`6$`(~kZeN<M/?9^{;^#NQ2\|hF8>$5m6Y/-XUwO-X&od(llDzs_KxflBaq/abO$^;p&$7W4b+}>}NNY-mGg:Kc
2025-03-26 13:11:06 UTC	16384	IN	Data Raw: b2 8d b1 cc bb 95 5a 3d b8 62 71 c8 24 83 f5 df 8d ac b5 6d 6f c3 f6 d7 1e 07 d5 2f b4 b9 84 d0 de 5a 34 56 cd b8 a2 e0 b4 32 45 37 c8 91 bc 60 ae 58 65 5b 0c 17 70 c5 78 a7 ed b9 e1 7f 88 5e 29 f0 ee dd 37 44 d1 5b c3 3a 7c 37 5a 9c f7 16 b2 97 78 a5 46 46 3f 6b dc 99 78 f6 bc 8c 52 2c 92 cb 96 21 57 9f 4b 05 9d 55 c4 e3 e9 2a d2 ea ed 69 34 b4 bf 95 a4 9d fa 6b b5 ce 5c 56 12 34 f0 f2 50 5f 81 f2 b7 84 f4 9b ad 5f 5f b5 6f 10 dc d8 5d 48 b1 b4 d7 36 ff 00 64 48 da 08 40 33 42 88 e4 f0 b9 4f ba 40 0b bc af 52 01 87 55 f1 0b 5e 78 70 6b b0 4d 07 87 e7 d6 27 78 f5 4b 3d 2a d2 48 e5 b8 7f 3d cb af 96 f9 58 c2 26 d0 02 af 27 80 77 06 15 93 34 3a a6 bf a7 b6 ab 24 0d 36 a5 24 0b 6d 3b de 14 dc d1 00 ae 93 c5 c8 e4 05 24 13 c0 38 04 1c 8c 74 9a ce 9e 2d ef 6e Data Ascii: Z=bq$mo/Z4V2E7`Xe[px^)7D[:\|7ZxFF?kxR,!WKUi4k\V4P___o]H6dH@3BO@RU^xpkM'xK=H=X&'w4:$6$m;$8t-n