Edit tour

Windows Analysis Report
https://14qingchu.top

Overview

General Information

Sample URL:	https://14qingchu.top
Analysis ID:	1649783
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected BlockedWebSite

Yara detected Powershell download and execute

Creates files inside the system directory

Deletes files inside the Windows folder

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2132,i,12311470536058563131,5588663483224515973,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2248 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://14qingchu.top" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author
dropped/chromecache_214	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security
dropped/chromecache_145	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security
dropped/chromecache_223	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-27T04:30:54.907687+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49831	172.66.0.227	443	TCP
2025-03-27T04:30:54.920140+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49832	172.66.0.227	443	TCP
2025-03-27T04:30:56.335608+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49882	104.18.26.193	443	TCP

HTTP traffic detected: POST /report/v4?s=IRrGJNkKou0pD7wiv6U3s7Q%2F0yK0vNVwhphldUGP%2FowrYvdByaDvqAvMdG4XNHsKYSe1GzbPK8jdzyPhVJpJS%2Fwlo4Oafj7IeRmAZLgELUPwLG1Ek99zxIwoAB7fkI6W HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 384Content-Type: application/reports+jsonOrigin: https://14qingchu.topUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Mar 2025 03:30:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IRrGJNkKou0pD7wiv6U3s7Q%2F0yK0vNVwhphldUGP%2FowrYvdByaDvqAvMdG4XNHsKYSe1GzbPK8jdzyPhVJpJS%2Fwlo4Oafj7IeRmAZLgELUPwLG1Ek99zxIwoAB7fkI6W"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 926bcf6b29a942a5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Mar 2025 03:30:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8gjSTUj%2BjYCkiitZVnxseWWqRQuPWY2EUxQLzgRXlNscRqgGDBvClHGVGY68Qg20KuS4O6GpDIPCWcWCgVzaI9tgYB0AEVwqEigbtCCbbFHKlMXdtucm97rftIplte1F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 926bcf738d3506a1-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Mar 2025 03:30:50 GMTContent-Type: text/html; charset=UTF-8Content-Length: 7702Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="926bcfbb2da160e6"x-content-options: nosniffx-frame-options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Mar 2025 03:30:57 GMTContent-Type: application/json; charset=UTF-8Content-Length: 24Connection: closeAccess-Control-Allow-Origin: https://www.cloudflare.comAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Content-Type,AcceptAccess-Control-Allow-Methods: GET,POST,OPTIONSX-Robots-Tag: noindexReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dMqndNov6uBbjpLPHM0saK0Lj2u8bkdFkMVLZv2OKXFFOcBQDgPFOIDArtCwT5kUqj9II%2ByjxfvOJzQkcNRJGts48%2BrqpUkf4LHhv3xIrgYk34SKcziVkVCjUFBhw9EMme3CBUPRekI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 926bcfe2de0441f3-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 4dcc90b0-a78d-43e1-b55a-0d583327bb92vary: Origindate: Thu, 27 Mar 2025 03:30:58 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: abd7e060-81bd-4de4-b07a-979ce0f7f26evary: Origindate: Thu, 27 Mar 2025 03:30:59 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: adc40c21-cb28-4c42-a3b4-83614f02bc42vary: Origindate: Thu, 27 Mar 2025 03:30:59 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 289e8e0a-ca90-4feb-a202-22e9db6ab1c5vary: Origindate: Thu, 27 Mar 2025 03:30:59 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

Source: chromecache_160.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_156.2.dr, chromecache_160.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_160.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_220.2.dr	String found in binary or memory: https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1743046253594&uuid=42803ae1-793a-4f1
Source: chromecache_233.2.dr, chromecache_164.2.dr	String found in binary or memory: https://api.www.cloudflare.com/api/v1
Source: chromecache_188.2.dr	String found in binary or memory: https://app.qualified.com
Source: chromecache_152.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js
Source: chromecache_197.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti
Source: chromecache_130.2.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC392ad6d4bbf94c7283b4eda6cbf689a
Source: chromecache_206.2.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC55904e5e1abc4d38a5f1ac3dea0edaa
Source: chromecache_226.2.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js
Source: chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_177.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/17RhepZZwxiD452Hs0gKFk/5324e2c81dcdef79c74efea2c60
Source: chromecache_170.2.dr, chromecache_184.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2dlg4oApldWlYGAWdzwN7C/3b0f1908d3e4ca00a193c2fd679
Source: chromecache_189.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b
Source: chromecache_177.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3aiXyraQa82SPHcEOgsxLq/ace1025cc5204f2ca8885646b8b
Source: chromecache_126.2.dr, chromecache_129.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad8
Source: chromecache_126.2.dr, chromecache_129.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab
Source: chromecache_189.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264
Source: chromecache_127.2.dr, chromecache_229.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea69065480
Source: chromecache_127.2.dr, chromecache_229.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6
Source: chromecache_132.2.dr, chromecache_178.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_150.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1758943854&external_user_id=1f071e4
Source: chromecache_189.2.dr	String found in binary or memory: https://github.com/jonsuh/hamburgers
Source: chromecache_223.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_160.2.dr	String found in binary or memory: https://google.com
Source: chromecache_160.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_189.2.dr	String found in binary or memory: https://jonsuh.com/hamburgers
Source: chromecache_188.2.dr	String found in binary or memory: https://js.qualified.com
Source: chromecache_160.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_150.2.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=1f071e40-814f-4866-91fe-018465a6f638
Source: chromecache_150.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=1f071e40-814f-4866-91fe-018465a6f638&v
Source: chromecache_220.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Fac
Source: chromecache_220.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif
Source: chromecache_188.2.dr	String found in binary or memory: https://schedule.qualified.com
Source: chromecache_120.2.dr	String found in binary or memory: https://schema.org/Answer
Source: chromecache_189.2.dr	String found in binary or memory: https://schema.org/FAQPage
Source: chromecache_120.2.dr	String found in binary or memory: https://schema.org/Question
Source: chromecache_220.2.dr	String found in binary or memory: https://scout-cdn.salesloft.com/sl.js
Source: chromecache_200.2.dr, chromecache_135.2.dr	String found in binary or memory: https://scout.us4.salesloft.com
Source: chromecache_220.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_144.2.dr	String found in binary or memory: https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/
Source: chromecache_220.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_187.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_187.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_170.2.dr, chromecache_184.2.dr	String found in binary or memory: https://support.cloudflare.com/)
Source: chromecache_220.2.dr	String found in binary or memory: https://tag.demandbase.com/1be41a80498a5b73.min.js
Source: chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_177.2.dr, chromecache_120.2.dr	String found in binary or memory: https://unctad.org/page/data-protection-and-privacy-legislation-worldwide
Source: chromecache_233.2.dr, chromecache_164.2.dr	String found in binary or memory: https://www.cloudflare.com
Source: chromecache_214.2.dr, chromecache_145.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_214.2.dr, chromecache_145.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: chromecache_177.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-browser-isolation/
Source: chromecache_170.2.dr, chromecache_184.2.dr	String found in binary or memory: https://www.cloudflare.com/lp/forrester-tei-study-2024/
Source: chromecache_188.2.dr	String found in binary or memory: https://www.cloudflare.com/lp/multi-channel-phishing-demo?utm_medium=banner
Source: chromecache_151.2.dr, chromecache_202.2.dr	String found in binary or memory: https://www.cloudflare.com/saas/)
Source: chromecache_160.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_156.2.dr, chromecache_160.2.dr	String found in binary or memory: https://www.google.com/gmp/conversion;
Source: chromecache_160.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_160.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_156.2.dr, chromecache_160.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_187.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	String found in binary or memory: https://www.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902

Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.18.120:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.18.120:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.18.120:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.30.78:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.57.57:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.216.21.105:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.212.111:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.88.157:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.6.193:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.71.105:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.108:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.45.140:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.60:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.16.5:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.216.21.105:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.39.248:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.135:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.179.155:443 -> 192.168.2.4:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.200.179.28:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.169.180.31:443 -> 192.168.2.4:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.4:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.35.174:443 -> 192.168.2.4:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.56:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.71.22:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.154.8:443 -> 192.168.2.4:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.135:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.16.5:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.17.5:443 -> 192.168.2.4:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.68:443 -> 192.168.2.4:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.33:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.4:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.28.144.124:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.102:443 -> 192.168.2.4:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.102:443 -> 192.168.2.4:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.39.117:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.4:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.146.5:443 -> 192.168.2.4:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.169.220.34:443 -> 192.168.2.4:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.102:443 -> 192.168.2.4:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.226:443 -> 192.168.2.4:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.4:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.221.75.135:443 -> 192.168.2.4:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.45.140:443 -> 192.168.2.4:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.212.111:443 -> 192.168.2.4:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.39.72:443 -> 192.168.2.4:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.4:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.229.41.78:443 -> 192.168.2.4:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.4:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.4:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.4:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.56:443 -> 192.168.2.4:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.135:443 -> 192.168.2.4:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.135:443 -> 192.168.2.4:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.135:443 -> 192.168.2.4:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.38:443 -> 192.168.2.4:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.21:443 -> 192.168.2.4:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.135:443 -> 192.168.2.4:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.102:443 -> 192.168.2.4:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.146.5:443 -> 192.168.2.4:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.138:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.138:443 -> 192.168.2.4:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.200.66.0:443 -> 192.168.2.4:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.4:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.226:443 -> 192.168.2.4:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.33:443 -> 192.168.2.4:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.102:443 -> 192.168.2.4:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.102:443 -> 192.168.2.4:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.4:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49999 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1236_319824455

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1236_319824455

Jump to behavior

Source: classification engine

Classification label: mal72.phis.evad.win@27/202@162/53

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2132,i,12311470536058563131,5588663483224515973,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2248 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://14qingchu.top"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2132,i,12311470536058563131,5588663483224515973,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2248 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: dropped/chromecache_223, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://14qingchu.top	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://14qingchu.top/favicon.ico	100%	Avira URL Cloud	phishing
https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/	0%	Avira URL Cloud	safe
https://14qingchu.top/cdn-cgi/images/icon-exclamation.png?1376755637	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod-default.lb.logrocket.network	104.198.23.205	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
pixel.rubiconproject.net.akadns.net	69.173.146.5	true	false	high
segments.company-target.com	13.226.94.33	true	false	high
scout-cdn.salesloft.com.cdn.cloudflare.net	104.16.71.105	true	false	high
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
e10776.b.akamaiedge.net	23.204.6.193	true	false	high
scout.us1.salesloft.com	35.169.180.31	true	false	high
adservice.google.com	142.250.65.226	true	false	high
platform.twitter.map.fastly.net	199.232.88.157	true	false	high
stats.g.doubleclick.net	142.251.179.155	true	false	high
ot.www.cloudflare.com	104.16.123.96	true	false	high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	44.216.21.105	true	false	high
l-0005.l-msedge.net	13.107.42.14	true	false	high
tag.demandbase.com	52.85.61.60	true	false	high
t.co	172.66.0.227	true	false	high
performance.radar.cloudflare.com	104.18.30.78	true	false	high
ws.qualified.com	104.18.17.5	true	false	high
www.google.com	142.250.80.100	true	false	high
demdex.net.ssl.sc.omtrdc.net	63.140.39.248	true	false	high
api.www.cloudflare.com	104.16.124.96	true	false	high
partners-1864332697.us-east-1.elb.amazonaws.com	35.169.220.34	true	false	high
cf-assets.www.cloudflare.com	104.16.124.96	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
tag-logger.demandbase.com	18.164.116.68	true	false	high
a798.dscd.akamai.net	23.219.36.135	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
s.twitter.com	172.66.0.227	true	false	high
14qingchu.top	104.21.18.120	true	false	unknown
cm.everesttech.net.akadns.net	34.200.179.28	true	false	high
ad.doubleclick.net	142.250.80.102	true	false	high
js.qualified.com	104.18.16.5	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
di.rlcdn.com	34.49.212.111	true	false	high
www.cloudflare.com	104.16.124.96	true	false	high
cdn.logr-ingest.com	104.21.32.1	true	false	high
reddit.map.fastly.net	151.101.45.140	true	false	high
ln-0002.ln-msedge.net	150.171.22.12	true	false	high
dsum-sec.casalemedia.com	104.18.26.193	true	false	high
e7808.dscg.akamaiedge.net	23.51.57.57	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
adobedc.net.ssl.sc.omtrdc.net	63.140.39.117	true	false	high
analytics.google.com	142.251.35.174	true	false	high
td.doubleclick.net	142.251.40.130	true	false	high
api.company-target.com	13.33.252.56	true	false	high
app.qualified.com	104.18.16.5	true	false	high
713-xsc-918.mktoresp.com	192.28.144.124	true	false	high
a1916.dscg2.akamai.net	23.219.36.108	true	false	high
alb.reddit.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	high
scout.salesloft.com	unknown	unknown	false	high
scout-cdn.salesloft.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
adobedc.demdex.net	unknown	unknown	false	high
s.company-target.com	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
munchkin.marketo.net	unknown	unknown	false	high
r.logr-ingest.com	unknown	unknown	false	high
partners.tremorhub.com	unknown	unknown	false	high
cdn.bizibly.com	unknown	unknown	false	high
cloudflareinc.demdex.net	unknown	unknown	false	high
cdn.bizible.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
edge.adobedc.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	false		high
https://14qingchu.top/	true		unknown
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://analytics.twitter.com/1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=1da4bfff-59dd-426c-9cda-d983857d26e1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=92ac9621-fb81-4374-857e-074b9c6d3470&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/669972801:1743042376:dUBHh-XV9_IUWo2VB_6uVrfWn1P80f6A9SsQQ-cHIwQ/926bcfc6bc92c360/mwWQS1UfsPdS52sCRYW1Kko3wUxNY56qQIvoqQsuBK4-1743046252-1.1.1.1-ZrJAZJr_SFOU_hZ1qGJbVYKsUlEKCpQ2mWAtfJ.zvFxNuJc.yuWwQHZjcsaZwJhh	false		high
https://www.cloudflare.com/page-data/learning/access-management/what-is-identity-and-access-management/page-data.json	false		high
https://id.rlcdn.com/464526.gif	false		high
https://cloudflareinc.demdex.net/dest5.html?d_nsid=0	false		high
https://r.logr-ingest.com/i?a=ykolez%2Fcloudflarecom&r=6-0195d5a7-1084-7d82-b4ae-9a99ce38307a&t=1e294ec6-637d-40a8-9e41-a87eb7fec26c&s=0&rs=0%2Ct&ct=32.94543674367469	false		high
https://app.qualified.com/w/1/37pXYrro6wCZbsU7/events/trace	false		high
https://a.nel.cloudflare.com/report/v4?s=8gjSTUj%2BjYCkiitZVnxseWWqRQuPWY2EUxQLzgRXlNscRqgGDBvClHGVGY68Qg20KuS4O6GpDIPCWcWCgVzaI9tgYB0AEVwqEigbtCCbbFHKlMXdtucm97rftIplte1F	false		high
https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1743046253594&uuid=42803ae1-793a-4f15-81d4-386f439addcb&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://a.nel.cloudflare.com/report/v4?s=dMqndNov6uBbjpLPHM0saK0Lj2u8bkdFkMVLZv2OKXFFOcBQDgPFOIDArtCwT5kUqj9II%2ByjxfvOJzQkcNRJGts48%2BrqpUkf4LHhv3xIrgYk34SKcziVkVCjUFBhw9EMme3CBUPRekI%3D	false		high
https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js	false		high
https://www.cloudflare.com/static/z/i.js	false		high
https://di.rlcdn.com/api/segment?pdata=d%3Ddesktop%2Clc%3DUS%2Cref%3D14qingchu.top&pid=710030&redirect=1	false		high
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1743046253594&pid=28851&conversionId=13043044&cookiesTest=true&liSync=true	false		high
https://www.cloudflare.com/page-data/sq/d/3934964512.json	false		high
https://edge.adobedc.net/ee/va6/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=289e8e0a-ca90-4feb-a202-22e9db6ab1c5	false		high
https://cdn.logr-ingest.com/logger-1.min.js	false		high
https://www.cloudflare.com/page-data/plans/page-data.json	false		high
https://scout.salesloft.com/i	false		high
https://www.cloudflare.com/static/z/s.js?z=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	false		high
https://tag.demandbase.com/1be41a80498a5b73.min.js	false		high
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1743046254032&pid=28851&conversionId=10249833&cookiesTest=true	false		high
https://munchkin.marketo.net/munchkin-beta.js	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png	false		high
https://www.cloudflare.com/page-data/plans/enterprise/contact/page-data.json	false		high
https://api.www.cloudflare.com/api/v1/marketo/form/2459	false		high
https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC55904e5e1abc4d38a5f1ac3dea0edaab-source.min.js	false		high
https://14qingchu.top/favicon.ico	true	Avira URL Cloud: phishing	unknown
https://www.cloudflare.com/img/learning/security/threats/phishing-attack/diagram-phishing-attack.png	false		high
https://www.cloudflare.com/a06cff934e9579536ce1c10bad21c1d6d7f63ae0-90484db4602d401d94ca.js	false		high
https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%2F%3Ffmt%3Djs%26v%3D2%26url%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26time%3D1743046253594%26pid%3D28851%26conversionId%3D13043044%26cookiesTest%3Dtrue%26liSync%3Dtrue	false		high
https://cdn.bizible.com/u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-8cace7ca3a8e531b507f63cae47fc4f7&_biz_u=dc3dd3fc4c7c4951b03e7613b3c025d4&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1743046254628&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=2&rnd=16831&cdn_o=a&_biz_z=1743046254729	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.min.js	false		high
https://scout-cdn.salesloft.com/sl.js	false		high
https://static.ads-twitter.com/uwt.js	false		high
https://cdn.bizible.com/ipv?_biz_r=https%3A%2F%2F14qingchu.top%2F&_biz_h=-1777624096&_biz_u=dc3dd3fc4c7c4951b03e7613b3c025d4&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1743046253585&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=539504&cdn_o=a&_biz_z=1743046253586	false		high
https://www.cloudflare.com/174-242772ef10d8d161ae24.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/926bcfc6bc92c360/1743046255153/vGGk3AGXk0rC7wr	false		high
https://tag-logger.demandbase.com/bg9s?x-amz-cf-id=ngsgQMv7iKthId4T6-ACpN-JW7OpDaNfbEjxJu_fNOVKJ9vgEdcKoA==&api-version=v3	false		high
https://www.cloudflare.com/page-data/app-data.json	false		high
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1743046252257	false		high
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=22b211f1-326a-4b90-b55f-3900fd5786fe&_u=KGDAAEADQAAAAC%7E&z=1247154057	false		high
https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297xmvuuv4c_-bba63g-gxLZu52zIFi1J1SG-zRFGWSkBI	false		high
https://app.qualified.com/w/1/37pXYrro6wCZbsU7/visitor_events	false		high
https://px.ads.linkedin.com/wa/	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.min.js	false		high
https://713-xsc-918.mktoresp.com/webevents/visitWebPage?_mchNc=1743046253680&_mchCn=&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-8cace7ca3a8e531b507f63cae47fc4f7&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Flearning%2Faccess-management%2Fphishing-attack%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A7%3A06341732495994438542746821978794446434&_mchHa=&_mchRe=https%3A%2F%2F14qingchu.top%2F&_mchQp=	false		high
https://cdn.bizible.com/xdc.js?_biz_u=dc3dd3fc4c7c4951b03e7613b3c025d4&_biz_h=-1777624096&cdn_o=a&jsVer=4.25.02.19	false		high
https://www.cloudflare.com/component---src-components-page-page-template-tsx-86f28de83faf58f598b9.js	false		high
https://www.cloudflare.com/cdn-cgi/rum?	false		high
https://www.cloudflare.com/page-data/sq/d/3199558980.json	false		high
https://performance.radar.cloudflare.com/beacon.js	false		high
https://ws.qualified.com/cable?wv=9&token=37pXYrro6wCZbsU7&vu=11953ff5-2295-4c39-aaef-71caaa8f1ea7&wu=91f65089-54c2-4fc9-bdc4-a3ab110da012&ca=2025-03-27T03%3A30%3A53.820Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2F14qingchu.top%2F&pv=1&fv=2025-03-27-d7e1c004f0&iml=false&bl=en-US&ic=false	false		high
https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/p18wv/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/	false		high
https://edge.adobedc.net/ee/va6/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=adc40c21-cb28-4c42-a3b4-83614f02bc42	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=22b211f1-326a-4b90-b55f-3900fd5786fe&_u=KGDAAEADQAAAAC%7E&z=1247154057&slf_rd=1	false		high
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1743046253594&pid=28851&conversionId=13043044&cookiesTest=true	false		high
https://s.company-target.com/s/sync?exc=lr	false		high
https://www.cloudflare.com/page-data/learning/access-management/what-is-sase/page-data.json	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/926bcfc6bc92c360/1743046255160/bb3cc5fcda53cbde3a29a74e821d1868bfbbdb8fc8e7d4afc81c52897d1428ca/2RTQZUAw_4nzNoH	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=926bcfc6bc92c360&lang=auto	false		high
https://api.company-target.com/api/v3/ip.json?referrer=https%3A%2F%2F14qingchu.top%2F&page=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&page_title=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare	false		high
https://cdn.bizible.com/u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_06341732495994438542746821978794446434&_biz_u=dc3dd3fc4c7c4951b03e7613b3c025d4&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1743046253591&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=1&rnd=159814&cdn_o=a&_biz_z=1743046254152	false		high
https://14qingchu.top/cdn-cgi/images/icon-exclamation.png?1376755637	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_187.2.dr	false		high
https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif	chromecache_220.2.dr	false		high
https://unctad.org/page/data-protection-and-privacy-legislation-worldwide	chromecache_177.2.dr, chromecache_120.2.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea69065480	chromecache_127.2.dr, chromecache_229.2.dr	false		high
https://www.cloudflare.com/saas/)	chromecache_151.2.dr, chromecache_202.2.dr	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	chromecache_197.2.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab	chromecache_126.2.dr, chromecache_129.2.dr	false		high
https://www.youtube.com	chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	false		high
https://www.google.com	chromecache_160.2.dr	false		high
https://schema.org/FAQPage	chromecache_189.2.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad8	chromecache_126.2.dr, chromecache_129.2.dr	false		high
https://www.cloudflare.com/learning/access-management/what-is-browser-isolation/	chromecache_177.2.dr, chromecache_120.2.dr	false		high
https://www.google.com/gmp/conversion;	chromecache_156.2.dr, chromecache_160.2.dr	false		high
https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1743046253594&uuid=42803ae1-793a-4f1	chromecache_220.2.dr	false		high
https://scout.us4.salesloft.com	chromecache_200.2.dr, chromecache_135.2.dr	false		high
https://pixel.rubiconproject.com/tap.php?nid=5578&put=1f071e40-814f-4866-91fe-018465a6f638&v	chromecache_150.2.dr	false		high
https://schema.org/Answer	chromecache_120.2.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264	chromecache_189.2.dr	false		high
https://www.cloudflare.com	chromecache_233.2.dr, chromecache_164.2.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/17RhepZZwxiD452Hs0gKFk/5324e2c81dcdef79c74efea2c60	chromecache_177.2.dr, chromecache_120.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	false		high
https://www.cloudflare.com/5xx-error-landing	chromecache_214.2.dr, chromecache_145.2.dr	false		high
https://www.cloudflare.com/lp/forrester-tei-study-2024/	chromecache_170.2.dr, chromecache_184.2.dr	false		high
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_132.2.dr, chromecache_178.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_187.2.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2dlg4oApldWlYGAWdzwN7C/3b0f1908d3e4ca00a193c2fd679	chromecache_170.2.dr, chromecache_184.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_223.2.dr	false		high
https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/	chromecache_144.2.dr	false	Avira URL Cloud: safe	unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3aiXyraQa82SPHcEOgsxLq/ace1025cc5204f2ca8885646b8b	chromecache_177.2.dr, chromecache_120.2.dr	false		high
https://js.qualified.com	chromecache_188.2.dr	false		high
https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js	chromecache_226.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.28.144.124	713-xsc-918.mktoresp.com	United States	15224	OMNITUREUS	false
35.169.220.34	partners-1864332697.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.164.116.38	unknown	United States	3	MIT-GATEWAYSUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
3.229.41.78	unknown	United States	14618	AMAZON-AESUS	false
104.198.23.205	prod-default.lb.logrocket.network	United States	15169	GOOGLEUS	false
63.140.39.72	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.21.18.120	14qingchu.top	United States	13335	CLOUDFLARENETUS	false
69.173.146.5	pixel.rubiconproject.net.akadns.net	United States	26667	RUBICONPROJECTUS	false
104.18.30.78	performance.radar.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
150.171.22.12	ln-0002.ln-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.124.96	api.www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.35.174	analytics.google.com	United States	15169	GOOGLEUS	false
162.159.140.229	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.80.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.80.100	www.google.com	United States	15169	GOOGLEUS	false
104.21.32.1	cdn.logr-ingest.com	United States	13335	CLOUDFLARENETUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
13.226.94.33	segments.company-target.com	United States	16509	AMAZON-02US	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.42.14	l-0005.l-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.71.105	scout-cdn.salesloft.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.18.16.5	js.qualified.com	United States	13335	CLOUDFLARENETUS	false
23.219.36.135	a798.dscd.akamai.net	United States	20940	AKAMAI-ASN1EU	false
151.101.45.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
52.85.61.60	tag.demandbase.com	United States	16509	AMAZON-02US	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.226.94.21	unknown	United States	16509	AMAZON-02US	false
63.140.39.248	demdex.net.ssl.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
35.169.180.31	scout.us1.salesloft.com	United States	14618	AMAZON-AESUS	false
199.232.88.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
13.33.252.56	api.company-target.com	United States	16509	AMAZON-02US	false
23.219.36.108	a1916.dscg2.akamai.net	United States	20940	AKAMAI-ASN1EU	false
44.216.21.105	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
34.200.66.0	unknown	United States	14618	AMAZON-AESUS	false
34.200.179.28	cm.everesttech.net.akadns.net	United States	14618	AMAZON-AESUS	false
23.51.57.57	e7808.dscg.akamaiedge.net	United States	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false
63.140.38.138	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
63.140.39.117	adobedc.net.ssl.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
34.49.212.111	di.rlcdn.com	United States	2686	ATGS-MMD-ASUS	false
18.164.116.68	tag-logger.demandbase.com	United States	3	MIT-GATEWAYSUS	false
104.18.26.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
104.18.17.5	ws.qualified.com	United States	13335	CLOUDFLARENETUS	false
23.204.6.193	e10776.b.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
142.251.179.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.65.226	adservice.google.com	United States	15169	GOOGLEUS	false
172.66.0.227	t.co	United States	13335	CLOUDFLARENETUS	false
104.16.123.96	ot.www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
3.221.75.135	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649783
Start date and time:	2025-03-27 04:29:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://14qingchu.top
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.evad.win@27/202@162/53
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.227, 142.251.40.174, 172.253.63.84, 142.250.72.110, 199.232.90.172, 184.31.68.248, 142.250.176.200, 142.251.40.170, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.250.65.170, 142.250.65.202, 142.250.65.234, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.251.40.106, 142.251.40.138, 142.250.80.78, 142.250.80.99, 34.104.35.123, 23.9.183.29, 172.202.163.200, 150.171.27.10
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, edgedl.me.gvt1.com, www.googletagmanager.com, bat.bing.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://14qingchu.top

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	3.636842188131012
Encrypted:	false
SSDEEP:	3:YXULWA3+4:Yr4
MD5:	13EA2E58A8C2AC93A0E3BD16CF54B407
SHA1:	FE382AC6B27A5EC8798BDA1524EC8C9170207B4E
SHA-256:	3CF8176780FE43C4CD52C3F031CE21F05BDAC7BEC0B30DD7F4DEFB268EF13A12
SHA-512:	FDCD7BFC18CE1BEDD6234A192B5AADB46E23E68B16A05005CE21E750F46151552F00DF9712FB5B1EAEC7F9D98B17D18417F4ABDFCE8ADDE080EEAF513C14FA61
Malicious:	false
Reputation:	low
Preview:	{"response":"Forbidden"}

Source: https://14qingchu.top/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://14qingchu.top/cdn-cgi/images/icon-exclamation.png?1376755637	Avira URL Cloud: Label: phishing

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_214, type: DROPPED
Source: Yara match	File source: dropped/chromecache_145, type: DROPPED

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=2108672179.1743046253&gtm=45je53p4v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109~102887800~102926062&z=1888322962
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=1984749768903;npa=0;auiddc=440676635.1743046252;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1743046252463;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1800362652;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=KlA;gtm=45fe53p4v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109~102887800~102926062;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=2108672179.1743046253&gtm=45je53p4v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109~102887800~102926062&z=1888322962
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=1984749768903;npa=0;auiddc=440676635.1743046252;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1743046252463;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1800362652;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=KlA;gtm=45fe53p4v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109~102887800~102926062;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=2108672179.1743046253&gtm=45je53p4v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109~102887800~102926062&z=1888322962
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=1984749768903;npa=0;auiddc=440676635.1743046252;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1743046252463;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1800362652;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=KlA;gtm=45fe53p4v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109~102887800~102926062;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=2108672179.1743046253&gtm=45je53p4v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109~102887800~102926062&z=1888322962
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=1984749768903;npa=0;auiddc=440676635.1743046252;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1743046252463;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1800362652;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=KlA;gtm=45fe53p4v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109~102887800~102926062;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=2108672179.1743046253&gtm=45je53p4v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109~102887800~102926062&z=1888322962
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=1984749768903;npa=0;auiddc=440676635.1743046252;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1743046252463;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1800362652;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=KlA;gtm=45fe53p4v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109~102887800~102926062;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=8970271744718;npa=0;auiddc=440676635.1743046252;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1743046252463;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1503210285;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=KlA;gtm=45fe53p4v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109~102887800~102926062;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=1783927751158;npa=0;auiddc=440676635.1743046252;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1743046252463;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1577101430;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=KlA;gtm=45fe53p4v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109~102887800~102926062;epver=2?

Source: https://14qingchu.top/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49832 -> 172.66.0.227:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49831 -> 172.66.0.227:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49882 -> 104.18.26.193:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.201.4
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_220.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-8b896682-ae7d-439e-8d8b-00296db41c04%5C%22))%7D%22%2C%22order-id%22%3A%228b896682-ae7d-439e-8d8b-00296db41c04%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-ab078d10-de8d-48f1-b6c1-094ef3645739%5C%22))%7D%22%2C%22order-id%22%3A%22ab078d10-de8d-48f1-b6c1-094ef3645739%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1743046253594&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,"mode":"no-cors"}],["https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1743046253594&uuid=42803ae1-793a-4f15-81d4-386f439addcb&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280",{"mode":"no-cors","keepalive":true,"credentials":"include"}]]})})(window,document)}ca
Source: chromecache_220.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-8b896682-ae7d-439e-8d8b-00296db41c04%5C%22))%7D%22%2C%22order-id%22%3A%228b896682-ae7d-439e-8d8b-00296db41c04%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-ab078d10-de8d-48f1-b6c1-094ef3645739%5C%22))%7D%22%2C%22order-id%22%3A%22ab078d10-de8d-48f1-b6c1-094ef3645739%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1743046253594&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,"mode":"no-cors"}],["https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1743046253594&uuid=42803ae1-793a-4f15-81d4-386f439addcb&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280",{"mode":"no-cors","keepalive":true,"credentials":"include"}]]})})(window,document)}ca
Source: chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	String found in binary or memory: U(b)\|\|Gm(a,b)},b)},Gt=function(){return[O.m.R,O.m.T]},Ht=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,It=/^www\.googleadservices\.com$/,Mt=/^gad_source[_=](\d+)$/;function Rt(){return po("dedupe_gclid",function(){return jr()})};var St=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Tt=/^www.googleadservices.com$/;function Ut(a){a\|\|(a=Vt());return a.co?!1:a.dn\|\|a.fn\|\|a.jn\|\|a.gn\|\|a.qf\|\|a.Om\|\|a.hn\|\|a.Tm?!0:!1}function Vt(){var a={},b=Pr(!0);a.co=!!b._up;var c=et();a.dn=c.aw!==void 0;a.fn=c.dc!==void 0;a.jn=c.wbraid!==void 0;a.gn=c.gbraid!==void 0;a.hn=c.gclsrc==="aw.ds";a.qf=Et().qf;var d=A.referrer?bk(hk(A.referrer),"host"):"";a.Tm=St.test(d);a.Om=Tt.test(d);return a};var Wt=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_156.2.dr, chromecache_187.2.dr, chromecache_160.2.dr	String found in binary or memory: return f}lH.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),nH=["www.youtube.com","www.youtube-nocookie.com"],oH,pH=!1; equals www.youtube.com (Youtube)
Source: chromecache_160.2.dr	String found in binary or memory: var AG=function(a,b,c,d,e){var f=wD("fsl",c?"nv.mwt":"mwt",0),g;g=c?wD("fsl","nv.ids",[]):wD("fsl","ids",[]);if(!g.length)return!0;var k=BD(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);S(121);if(m==="https://www.facebook.com/tr/")return S(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!iC(k,kC(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 14qingchu.top
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cf-assets.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: performance.radar.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ot.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: api.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: scout-cdn.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: cloudflareinc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: js.qualified.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: scout.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bizibly.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ws.qualified.com
Source: global traffic	DNS traffic detected: DNS query: app.qualified.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: 713-xsc-918.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: segments.company-target.com
Source: global traffic	DNS traffic detected: DNS query: r.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: edge.adobedc.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 27, 2025 04:30:31.856487989 CET	53	64935	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:31.976917982 CET	53	54887	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:32.598515034 CET	53	61322	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:32.750188112 CET	53	49803	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:35.850944042 CET	52693	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:35.851218939 CET	53106	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:35.934107065 CET	53	52693	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:35.934165955 CET	53	53106	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:37.482748985 CET	58577	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:37.488290071 CET	53533	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:37.586220026 CET	53	58577	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:37.591475964 CET	53	53533	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:38.294385910 CET	58369	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:38.294600964 CET	52984	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:38.377324104 CET	53	58369	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:38.377351046 CET	53	52984	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:38.952616930 CET	61404	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:38.952754021 CET	61401	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:39.035619974 CET	53	61404	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:39.035667896 CET	53	61401	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:48.447237015 CET	62895	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:48.448798895 CET	51775	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:48.530522108 CET	53	62895	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:48.531624079 CET	53	51775	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.232235909 CET	58719	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.232368946 CET	62458	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.280942917 CET	63969	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.281071901 CET	61430	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.321185112 CET	53	58719	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.321379900 CET	53	62458	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.364166021 CET	53	63969	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.364206076 CET	53	61430	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.392334938 CET	51453	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.392469883 CET	50603	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.475514889 CET	53	51453	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.475558043 CET	53	50603	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.726353884 CET	57753	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.726463079 CET	55219	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.726705074 CET	51386	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.726830959 CET	53084	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.727209091 CET	51811	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.727307081 CET	51855	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.809477091 CET	53	57753	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.809518099 CET	53	51386	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.809549093 CET	53	53084	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.809952974 CET	53	51811	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.811968088 CET	53	51855	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.812319994 CET	53	55219	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.870328903 CET	53	52004	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:49.986701012 CET	60671	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:49.986974955 CET	64791	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:50.069848061 CET	53	60671	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:50.069890976 CET	53	64791	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:50.685087919 CET	49944	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:50.685239077 CET	56466	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:50.768297911 CET	53	49944	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:50.768312931 CET	53	56466	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:50.826121092 CET	52881	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:50.826267004 CET	58771	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:50.910635948 CET	53	52881	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:50.910651922 CET	53	58771	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:52.232270002 CET	51558	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:52.232392073 CET	64548	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:52.234194040 CET	54058	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:52.234313011 CET	56918	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:52.315561056 CET	53	51558	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:52.315592051 CET	53	64548	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:52.316320896 CET	53	59761	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:52.319958925 CET	53	54058	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:52.322555065 CET	53	56918	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.254343033 CET	56947	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.254472971 CET	64832	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.337201118 CET	53	56947	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.337289095 CET	53	64832	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.341768026 CET	51034	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.341984034 CET	64477	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.360703945 CET	53	49878	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.424657106 CET	53	51034	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.424776077 CET	53	64477	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.470108986 CET	65195	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.470235109 CET	55739	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.551743984 CET	53	62959	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.552983046 CET	53	55739	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.569900990 CET	53	65195	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.760495901 CET	55034	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.760639906 CET	50153	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.761579990 CET	53043	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.761781931 CET	54281	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.762267113 CET	65306	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.762447119 CET	49281	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.762865067 CET	60123	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.763040066 CET	63888	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.763535976 CET	57669	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.763686895 CET	52932	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.764137983 CET	59685	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.764322042 CET	58976	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.764770031 CET	52228	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.764934063 CET	62735	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.843451977 CET	53	55034	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.843470097 CET	53	50153	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.844348907 CET	53	53043	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.844516993 CET	53	54281	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.845565081 CET	53	60123	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.845804930 CET	53	63888	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.846476078 CET	53	57669	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.846966028 CET	53	59685	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.846982002 CET	53	58976	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.847448111 CET	53	52228	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.847644091 CET	53	62735	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.848480940 CET	53	52932	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.853288889 CET	53	65306	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.857810020 CET	62949	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.857933044 CET	59387	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.860356092 CET	53422	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.860486984 CET	62579	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.861196041 CET	55011	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.861416101 CET	59857	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.861843109 CET	64066	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.861965895 CET	61699	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:53.864603043 CET	53	49281	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.940696955 CET	53	62949	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.940741062 CET	53	59387	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.944555044 CET	53	64066	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.944571018 CET	53	61699	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.945543051 CET	53	55011	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:53.945940018 CET	53	59857	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.033632040 CET	53	53422	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.099246979 CET	53	62579	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.111094952 CET	64960	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.111300945 CET	49930	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.123061895 CET	55498	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.123193979 CET	63790	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.193871975 CET	53	64960	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.193960905 CET	53	49930	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.205873013 CET	53	55498	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.205954075 CET	53	63790	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.287112951 CET	60736	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.287575006 CET	61406	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.369853973 CET	53	60736	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.371659994 CET	53	61406	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.408267021 CET	51779	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.408483028 CET	56516	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.410495043 CET	63791	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.410676003 CET	61004	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.491187096 CET	53	51779	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.491198063 CET	53	56516	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.493196011 CET	53	63791	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.493336916 CET	53	61004	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.496268988 CET	63448	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.496392965 CET	64022	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.504452944 CET	53620	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.504574060 CET	54783	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.524188042 CET	49645	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.524456978 CET	59147	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.544300079 CET	52350	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.544568062 CET	51731	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.574034929 CET	62673	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.574218035 CET	53510	53	192.168.2.4	1.1.1.1
Mar 27, 2025 04:30:54.579046011 CET	53	63448	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.579061031 CET	53	64022	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.587204933 CET	53	53620	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.587440968 CET	53	54783	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.618087053 CET	53	49645	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.619163036 CET	53	59147	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.627070904 CET	53	52350	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.627362013 CET	53	51731	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.659351110 CET	53	62673	1.1.1.1	192.168.2.4
Mar 27, 2025 04:30:54.659378052 CET	53	53510	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:37 UTC	663	OUT	GET / HTTP/1.1 Host: 14qingchu.top Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:37 UTC	548	IN	HTTP/1.1 403 Forbidden Date: Thu, 27 Mar 2025 03:30:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IRrGJNkKou0pD7wiv6U3s7Q%2F0yK0vNVwhphldUGP%2FowrYvdByaDvqAvMdG4XNHsKYSe1GzbPK8jdzyPhVJpJS%2Fwlo4Oafj7IeRmAZLgELUPwLG1Ek99zxIwoAB7fkI6W"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcf6b29a942a5-EWR
2025-03-27 03:30:37 UTC	821	IN	Data Raw: 31 31 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11c2<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-03-27 03:30:37 UTC	1369	IN	Data Raw: 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d Data Ascii: errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-
2025-03-27 03:30:37 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 Data Ascii: <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-c
2025-03-27 03:30:37 UTC	995	IN	Data Raw: 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 34 35 2e 39 32 2e 32 32 39 2e 31 33 38 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b Data Ascii: ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">45.92.229.138</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance &
2025-03-27 03:30:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:38 UTC	560	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: 14qingchu.top Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://14qingchu.top/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:38 UTC	177	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:38 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Server: cloudflare CF-RAY: 926bcf6e18da18b8-EWR
2025-03-27 03:30:38 UTC	1192	IN	Data Raw: 35 64 66 33 0d 0a 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 Data Ascii: 5df3#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 65 74 61 69 6c 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 66 69 67 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 66 69 67 75 72 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 66 6f 6f 74 65 72 Data Ascii: er ul{margin:0;padding:0;border:0;font:inherit;font-size:100%;text-decoration:none;vertical-align:baseline}#cf-wrapper a img{border:none}#cf-wrapper article,#cf-wrapper aside,#cf-wrapper details,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 30 25 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 20 69 6d 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 20 6f Data Ascii: n-bottom:2em;margin-top:2em}#cf-wrapper .cf-wrapper{margin-left:auto;margin-right:auto;width:90%}#cf-wrapper .cf-columns{display:block;list-style:none;padding:0;width:100%}#cf-wrapper .cf-columns img,#cf-wrapper .cf-columns input,#cf-wrapper .cf-columns o
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6c 65 66 74 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 33 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 2c 23 Data Ascii: s.cols-2>.cf-column:nth-child(odd),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(odd),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd),#cf-wrapper .cf-columns.two>.cf-column:nth-child(odd){clear:left}#cf-wrapper .cf-columns.cols-3>.cf-column,#
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 7b 63 6c 65 61 72 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 33 2e 37 35 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 32 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 32 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 31 2e 32 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 Data Ascii: ild,#cf-wrapper .cf-columns.four>.cf-column:nth-child(4n+1){clear:left;padding-left:0;padding-right:33.75px}#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+2),#cf-wrapper .cf-columns.four>.cf-column:nth-child(4n+2){padding-left:11.25px;padding-righ
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c Data Ascii: ;line-height:1.3}#cf-wrapper h3{font-size:25px;line-height:1.3}#cf-wrapper h4{font-size:20px;line-height:1.3}#cf-wrapper h5{font-size:15px}#cf-wrapper h6{font-size:13px}#cf-wrapper ol,#cf-wrapper ul{list-style:none;margin-left:3em}#cf-wrapper ul{list-styl
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 2e 36 65 6d 20 31 2e 33 33 33 33 33 65 6d 20 2e 35 33 33 33 33 65 6d 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: t;border:1px solid #999;color:#404040;font-size:14px;font-weight:400;line-height:1.2;margin:0;padding:.6em 1.33333em .53333em;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;display:-moz-inline-stack;display:inline-blo
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 65 35 30 35 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2e 61 63 74 69 76 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 61 63 74 69 76 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 66 6f 63 75 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2e 61 63 74 69 76 65 2c 23 63 Data Ascii: apper .cf-btn-error:hover,#cf-wrapper .cf-btn-important:hover{background-color:#de5052;border-color:#bd2426;color:#fff}#cf-wrapper .cf-btn-danger.active,#cf-wrapper .cf-btn-danger:active,#cf-wrapper .cf-btn-danger:focus,#cf-wrapper .cf-btn-error.active,#c
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 75 74 6c 69 6e 65 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 2e 34 35 65 6d 20 2e 37 35 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ant;max-width:100%!important;outline:0!important;padding:.45em .75em!important;vertical-align:middle!important;display:-moz-inline-stack;display:inline-block;zoom:1;box-sizing:border-box;-webkit-transition:all .2s ease;transition:all .2s ease;border-radiu
2025-03-27 03:30:38 UTC	1369	IN	Data Raw: 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 72 69 67 68 74 3a 2d 31 38 2e 37 35 70 78 3b 74 6f 70 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 2d 65 72 72 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 65 35 Data Ascii: 8.75px;line-height:1;padding:0;position:relative;right:-18.75px;top:0}#cf-wrapper .cf-alert .cf-close:hover{background-color:transparent;border-color:currentColor;color:inherit}#cf-wrapper .cf-alert-danger,#cf-wrapper .cf-alert-error{background-color:#de5

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:38 UTC	534	OUT	OPTIONS /report/v4?s=IRrGJNkKou0pD7wiv6U3s7Q%2F0yK0vNVwhphldUGP%2FowrYvdByaDvqAvMdG4XNHsKYSe1GzbPK8jdzyPhVJpJS%2Fwlo4Oafj7IeRmAZLgELUPwLG1Ek99zxIwoAB7fkI6W HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://14qingchu.top Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:38 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 27 Mar 2025 03:30:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:38 UTC	652	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: 14qingchu.top Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://14qingchu.top/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:38 UTC	409	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:38 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Fri, 14 Mar 2025 21:23:45 GMT ETag: "67d49e61-1c4" Server: cloudflare CF-RAY: 926bcf710b289867-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 27 Mar 2025 05:30:38 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2025-03-27 03:30:38 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:38 UTC	509	OUT	POST /report/v4?s=IRrGJNkKou0pD7wiv6U3s7Q%2F0yK0vNVwhphldUGP%2FowrYvdByaDvqAvMdG4XNHsKYSe1GzbPK8jdzyPhVJpJS%2Fwlo4Oafj7IeRmAZLgELUPwLG1Ek99zxIwoAB7fkI6W HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 384 Content-Type: application/reports+json Origin: https://14qingchu.top User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:38 UTC	384	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 33 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 38 2e 31 32 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 31 34 71 69 6e 67 63 68 75 2e 74 6f 70 2f 22 Data Ascii: [{"age":31,"body":{"elapsed_time":733,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.18.120","status_code":403,"type":"http.error"},"type":"network-error","url":"https://14qingchu.top/"
2025-03-27 03:30:39 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 27 Mar 2025 03:30:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:39 UTC	589	OUT	GET /favicon.ico HTTP/1.1 Host: 14qingchu.top Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://14qingchu.top/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:39 UTC	544	IN	HTTP/1.1 403 Forbidden Date: Thu, 27 Mar 2025 03:30:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8gjSTUj%2BjYCkiitZVnxseWWqRQuPWY2EUxQLzgRXlNscRqgGDBvClHGVGY68Qg20KuS4O6GpDIPCWcWCgVzaI9tgYB0AEVwqEigbtCCbbFHKlMXdtucm97rftIplte1F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcf738d3506a1-EWR
2025-03-27 03:30:39 UTC	825	IN	Data Raw: 31 31 63 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11cd<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-03-27 03:30:39 UTC	1369	IN	Data Raw: 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 Data Ascii: rs.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-aler
2025-03-27 03:30:39 UTC	1369	IN	Data Raw: 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 Data Ascii: <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/p
2025-03-27 03:30:39 UTC	1002	IN	Data Raw: 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 34 35 2e 39 32 2e 32 32 39 2e 31 33 38 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 Data Ascii: footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">45.92.229.138</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performanc
2025-03-27 03:30:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:48 UTC	750	OUT	GET /learning/access-management/phishing-attack/ HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://14qingchu.top/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:48 UTC	1356	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate Set-Cookie: _cfms_willow=enable; Max-Age=1209600; Domain=.www.cloudflare.com; Path=/; Secure; SameSite=Strict Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US x-RM: GW X-XSS-Protection: 1; mode=block Set-Cookie: __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV; path=/; expires=Thu, 27-Mar-25 04:00:48 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Fp%2Bh7tGtUN6%2BsQf5K3SPyA8UVH7cSlPewuo2%2FBEpN5xLe4%2F%2FUdWqUBhqJ3a65UNtYoSbEo2eqIHRMP7PDEhR8cyvTye1NdH0enoFqYGbScaVXHzFyNFqpew1Lrt0WyOaxS8MA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcfaf8a938c72-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 72 65 64 77 6f 6f 64 3d 7b 22 63 6f 6e 73 65 6e 74 47 72 6f 75 70 73 22 3a 7b 22 43 30 30 30 31 22 3a 74 72 75 65 2c 22 43 30 30 30 32 22 3a 74 72 75 65 2c 22 43 30 30 30 33 22 3a 74 72 75 65 2c 22 43 30 30 30 34 22 3a 74 72 75 65 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 6c 6f 22 3a 22 45 57 52 22 2c 22 75 73 65 72 22 3a 6e 75 6c 6c 2c 22 72 76 31 22 3a 22 75 6f 69 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 7d 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a Data Ascii: 7ff2<!DOCTYPE html><html lang="en-us"><head><script>window.redwood={"consentGroups":{"C0001":true,"C0002":true,"C0003":true,"C0004":true},"country":"US","colo":"EWR","user":null,"rv1":"uoi","locale":"en-US"}</script> <script type="text/javascript">
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 3d 3d 20 27 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2d 63 6e 2e 63 6f 6d 27 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 20 27 65 6e 2d 75 73 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 20 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 Data Ascii: == 'www.cloudflare-cn.com') { if (localStorage.getItem('langPreference')) { if (localStorage.getItem('langPreference').toLowerCase() != 'en-us') { const langPreference = localStorage.getItem('langPreference').toLowerCase();
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 68 61 6e 73 2d 63 6e 2c 20 73 77 69 74 63 68 20 74 6f 20 7a 68 2d 63 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 64 69 72 65 63 74 50 61 74 68 20 3d 20 67 65 74 50 61 74 68 46 72 6f 6d 4c 6f 63 61 6c 65 28 6d 61 79 62 65 4c 6f 63 61 6c 65 2c 20 72 65 71 75 65 73 74 65 64 4c 61 6e 67 43 6f 64 65 2c 20 73 70 6c 69 74 50 61 74 68 53 74 72 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 64 69 72 65 63 74 50 61 74 68 20 26 26 20 21 69 67 6e 6f 72 65 4c 69 73 74 2e 69 6e 63 6c 75 64 65 73 28 6d 61 79 62 65 4c 6f 63 61 6c 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f Data Ascii: hans-cn, switch to zh-cn const redirectPath = getPathFromLocale(maybeLocale, requestedLangCode, splitPathString); if (redirectPath && !ignoreList.includes(maybeLocale)) { window.location.replace('https://' + window.lo
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 43 66 75 4e 42 74 79 77 69 73 69 32 78 66 42 50 56 70 2f 64 35 34 61 38 34 39 34 39 30 39 31 61 65 64 32 31 35 36 30 30 62 34 32 62 62 34 37 65 64 33 65 2f 73 65 63 75 72 69 74 79 2d 6c 63 2e 70 6e 67 22 20 64 61 74 61 2d 67 61 74 73 62 79 2d 68 65 61 64 3d 22 74 72 75 65 22 2f 3e 3c 6d 65 74 61 20 69 64 3d 22 74 77 69 74 74 65 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 68 69 73 68 69 6e 67 20 61 74 74 61 63 6b 73 20 69 6e 76 6f 6c 76 65 64 20 74 72 69 63 6b 69 6e 67 20 61 20 76 69 63 74 69 6d 20 69 6e 74 6f 20 74 61 6b 69 6e 67 20 73 6f 6d 65 20 61 63 74 69 6f 6e 20 74 68 61 74 20 62 65 6e 65 66 69 74 73 20 74 68 65 20 61 74 74 61 63 6b 65 72 Data Ascii: CfuNBtywisi2xfBPVp/d54a84949091aed215600b42bb47ed3e/security-lc.png" data-gatsby-head="true"/><meta id="twitter-description" name="twitter:description" content="Phishing attacks involved tricking a victim into taking some action that benefits the attacker
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 20 74 61 62 6c 65 20 74 68 20 73 70 61 6e 2e 66 77 37 7b 63 6f 6c 6f 72 3a 23 66 36 33 7d 2e 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 20 74 61 62 6c 65 20 74 64 20 70 2e 62 6c 61 63 6b 2e 66 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 32 65 6d 20 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 73 74 69 63 6b 79 2d 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 7b 6d 61 78 2d 68 65 69 67 68 74 3a 37 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 3b 70 6f 73 69 74 69 6f Data Ascii: p:last-child{margin-bottom:0}.rich-text-renderer table th span.fw7{color:#f63}.rich-text-renderer table td p.black.f3{margin-bottom:0;padding:2em 0}@media screen and (min-width:1000px){.sticky-rich-text-renderer{max-height:700px;overflow-y:scroll;positio
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 65 78 74 7b 70 61 64 64 69 6e 67 3a 32 35 70 78 7d 2e 66 65 61 74 75 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 5f 5f 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 66 65 61 74 75 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 5f 5f 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 34 72 65 6d 7d 7d 2e 65 6c 65 6d 65 6e 74 2d 72 65 73 6f 75 72 63 65 2d 63 61 72 64 2d 73 68 61 64 6f 77 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 70 78 20 31 30 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 65 6c 65 6d 65 6e 74 2d 72 65 73 6f 75 72 63 65 2d 63 61 72 64 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a Data Ascii: ext{padding:25px}.feature-card .ol-text__sup{font-size:1.2rem;margin-bottom:15px}.feature-card .ol-text__text{font-size:2.5rem;line-height:2.4rem}}.element-resource-card-shadow{box-shadow:0 4px 10px #0000001f}.element-resource-card{height:100%;min-height:
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 3a 31 30 30 31 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 7d 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 7b 6d 61 72 67 69 6e 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 35 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 31 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 Data Ascii: :1001px){.blade-card-carousel-wrapper{background-size:auto}}@media (min-width:1000px){.blade-card-carousel-wrapper{background-size:cover}}.blade-card-carousel-wrapper .slide{margin:24px!important}@media (min-width:750px) and (max-width:1001px){.blade-card
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 6f 72 64 65 72 3a 31 7d 2e 62 6c 61 64 65 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 20 2e 66 65 61 74 75 72 65 73 2d 77 72 61 70 70 65 72 3e 64 69 76 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 38 70 78 7d 2e 62 6c 61 64 65 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 20 2e 66 65 61 74 75 72 65 73 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 3b 6d 61 72 67 69 6e Data Ascii: column;flex-wrap:nowrap;order:1}.blade-full-width-hero-background-image-wrapper .features-wrapper>div{max-width:none;padding-top:48px}.blade-full-width-hero-background-image-wrapper .features-image-wrapper{display:flex;flex-direction:column-reverse;margin
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 67 68 74 3a 36 30 30 7d 2e 74 61 62 2d 61 72 72 6f 77 7b 63 6f 6c 6f 72 3a 23 66 36 33 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 68 65 72 6f 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 68 65 72 6f 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 20 2e 72 6f 77 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 68 65 72 6f 2d 6d 65 64 69 61 7b 68 65 69 67 68 74 3a 33 30 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 68 65 72 6f 2d 6d 65 64 69 61 20 69 6d 67 2c 2e 68 65 72 6f 2d 6d 65 64 69 61 20 76 69 64 65 6f 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 72 Data Ascii: ght:600}.tab-arrow{color:#f63;float:left}.hero-section-top{margin-bottom:60px;min-height:400px}.hero-section-top .row{max-height:400px}.hero-media{height:308px;overflow:hidden;position:relative}.hero-media img,.hero-media video{height:100%;width:100%}.her
2025-03-27 03:30:48 UTC	1369	IN	Data Raw: 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 66 36 33 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 68 65 72 6f 2d 70 72 6f 6d 6f 74 69 6f 6e 61 6c 2d 62 61 6e 6e 65 72 2d 77 72 61 70 70 65 72 20 2e 6c 65 61 72 6e 2d 6d 6f 72 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 7d 7d 2e 68 65 72 6f 2d 70 72 6f 6d 6f 74 69 6f 6e 61 6c 2d 62 61 6e 6e 65 72 2d 77 72 61 70 70 65 72 20 2e 6c 65 61 72 6e 2d 6d 6f 72 65 Data Ascii: ground-color:initial!important;color:#f63!important;font-weight:500!important;margin-right:24px;padding-right:0!important}@media (min-width:1000px){.hero-promotional-banner-wrapper .learn-more{margin-left:24px}}.hero-promotional-banner-wrapper .learn-more

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	934	OUT	GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:49 UTC	956	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:49 GMT Content-Type: image/png Content-Length: 34038 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0, must-revalidate ETag: "f881ce0909c7585c5f12986f7499f9db" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NFWW34%2Biofr3YJp94WVW88PKiXgFgAIcSPV%2F2eTHKiY6NLAHxhEXmGY1ZQ5r%2Bk7C7aimVAdsGslrjSWopJPegigtAdY7U6UBDX06KVhlo3FylTY8ZZ0zTrubNBFUNvrB39ph2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcfb1f8f84268-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 03:30:49 UTC	413	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 73 00 00 04 68 08 03 00 00 00 bb 00 fa da 00 00 01 b6 50 4c 54 45 ff ff ff 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f0 f0 df df e0 c5 c4 c6 be bd bf ab ac ae 99 9c 9e 9f a1 a3 cb ca cb f7 f8 f8 ff Data Ascii: PNGIHDRshPLTEqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: de dc dc ca c7 c7 7e 7c 7c 88 86 86 fd fd fe f5 f4 f4 dc db dc c9 c7 c6 a6 a3 a3 86 84 84 f5 f4 f4 71 71 71 71 71 71 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 54 2b 19 33 00 00 00 92 74 52 4e 53 00 bb ff 44 22 77 88 dd ee 11 66 99 aa cc 55 33 20 40 50 80 60 90 e0 ff 10 a0 30 f0 d0 70 b0 c0 20 70 c0 a0 60 30 80 b0 90 d0 10 f0 e0 40 50 40 30 60 80 c0 ff f0 b0 50 20 e0 a0 10 d0 90 ff ff ff ff ff ff ff ff ff 70 ff ff ff ff ff 40 a0 d0 ff f0 c0 60 ff 10 b0 30 e0 ff 20 80 50 70 90 ff ff ff ff ff ff ff ff ff ff ff ff c4 f3 ff 88 98 f8 fd ff ff 3d b2 ff ff ff ff ff ff fc 2e 88 e6 f3 ff ff ff ff ff dc d8 97 40 ff 30 c0 20 80 10 60 90 e1 90 d0 0d 00 00 82 5d 49 44 41 54 78 01 ec d6 05 01 00 30 0c 00 a0 59 ff cc 8f 71 83 14 04 Data Ascii: ~\|\|qqqqqqT+3tRNSD"wfU3 @P`0p p`0@P@0`P p@`0 Pp=.@0 `]IDATx0Yq
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: c7 01 51 27 68 be 2b bb 72 08 52 ab eb da de d6 39 44 44 44 a4 8c d0 05 67 3e 16 3e cd f7 81 73 9a 57 68 76 ac 6e 9d a3 64 58 ec 43 9f 69 fc d2 39 68 6d 61 40 dc 09 9c 93 af 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 04 ab dd 64 f0 f3 15 e1 30 7f 1b 0c 54 83 0d 60 5f f6 1c 75 0e db ea 36 b3 b2 70 ea 5e ee 1c 63 8d 0a 02 82 4e 30 51 b9 2d 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 0a 53 fc 24 8b 67 60 d9 be 0f 76 07 18 7d 37 db a0 a9 30 03 07 df ec d6 39 6c 00 f6 da 4d 3c 7f ee 3e fd 7a 0f a9 3b 1f 06 b7 2a 0a 08 3a 41 f1 0c fc c3 9e 5d e0 48 12 02 00 14 a5 dd 5d a8 f6 fb 9f 72 dd 97 11 32 30 fa 5e 3c 55 58 8c 9f 30 e8 75 c3 ef 84 48 cd fa 4b ea 6c 9a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 8c e5 6a bd f9 d0 b6 ab 65 00 00 ea 5a Data Ascii: Q'h+rR9DDDg>>sWhvndXCi9hma@Vsd0T`_u6p^cN0Q-VsS$g`v}709lM<>z;*:A]H]r20^<UX0uHKl>jeZ
2025-03-27 03:30:49 UTC	21	IN	Data Raw: de d0 00 dd 57 59 63 1a 29 e0 e8 1c 84 d0 39 e8 1c e4 69 9c 11 Data Ascii: WYc)9i
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: e7 74 88 68 c3 ee e5 1d 71 3e 64 6b f8 6d bf d2 39 52 00 63 c5 62 e7 b8 f9 3a 2d 0d df 6d 71 d1 ea 69 e7 b0 e9 0d 17 dd 68 80 ce 34 2a 01 68 64 24 9d 83 10 3a 07 9d 83 3c c4 1e b3 9c de 8e 3b b1 9c 5f df 31 cf 51 b6 86 de 3e 91 bd 5f fe 3e 87 2f c9 b1 cc 39 2a 00 99 9f 1b 7f de 8a af 8e 3a 87 4d 6f 70 70 97 7f 03 f6 79 2b 76 24 9d 83 10 3a 07 9d 83 3c cc 19 cb f8 78 7b fd 73 96 2b bb f3 f1 d7 7e e9 c1 6d 3e 57 b6 ee e4 93 4c 6b e8 d2 2d eb 06 4f d0 16 0b 9d 23 03 d0 7e 9d be 74 68 fd 53 5d 1b 00 85 c4 ab ad 73 4c a7 37 e4 40 3d 7d cb 24 73 c3 93 6d 33 6d d4 8c a4 73 10 42 e7 a0 73 90 47 d8 e3 d9 1c 65 6b 64 05 46 96 3b 87 62 a4 6e a3 ce e1 69 86 7a 33 b7 c8 24 5e 6d 9d 63 3a bd a1 07 e0 ab 6f 1b a5 e6 a4 1f 49 e7 20 84 ce 41 e7 20 8f b1 c3 d3 d9 cb e6 28 Data Ascii: thq>dkm9Rcb:-mqih4hd$:<;_1Q>_>/9:Moppy+v$:<x{s+~m>WLk-O#~thS]sL7@=}$sm3msBsGekdF;bniz3$^mc:oI A (
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: b1 b3 41 f2 fd 49 67 31 e9 ad 63 93 68 0e 59 60 1a dd e0 b9 ec c6 0e b7 9d 1e 9c 58 3d 9c 9c f3 16 6b db a4 25 a8 df 56 95 7b a8 13 80 b2 e6 08 cb df ac 4c b0 9e 26 a4 6f 57 02 68 0e 49 50 32 46 cb 24 df 5a aa b4 16 c7 b1 25 c8 54 c7 8e 9e d1 01 77 55 0f dc 10 80 b2 e6 88 48 1f 3f 44 13 ac a7 88 f4 6f 8a a1 39 c0 e7 0f 65 85 a2 16 c9 71 75 62 49 b8 fc 85 e8 d0 dc 7d d5 0b 35 02 50 d5 1c 61 f9 31 8b 10 eb 23 2c 9d 09 01 34 07 f8 fc a1 ac 90 f3 7f 72 9c fe b0 24 1d 22 3a f4 f6 f3 3d 09 ee eb ea a2 a6 56 7d f3 48 00 8a 9a 23 22 5b 0c e2 8f f6 10 91 7e 20 13 42 73 80 8c b2 31 72 25 df 27 c7 fe b1 25 ed f2 17 a2 43 67 ef d3 1c 3f 49 9d a7 ea 1f ae 09 40 4d 73 04 a5 83 81 26 58 5f 71 ea 29 ee ec e9 0a 9a 03 32 c6 e8 2d 90 0f 6d ef 70 e1 4f 96 13 c7 57 5c 58 23 Data Ascii: AIg1chY`X=k%V{L&oWhIP2F$Z%TwUH?Do9equbI}5Pa1#,4r$":=V}H#"[~ Bs1r%'%Cg?I@Ms&X_q)2-mpOW\X#
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 3b 04 fa 36 87 f3 e8 b0 d7 72 a0 39 10 1d 2a 9a 43 c1 fb 91 68 70 2a f4 66 4a fc 7e 34 87 4b 60 d6 f0 b3 b2 2f 9e ad 1c 59 12 fe 22 9a 43 62 88 f4 0e fc e9 55 b2 39 1c bd 99 b5 ff a8 5c 73 34 ee c0 e7 fe e3 3f d5 45 87 f2 e6 50 af fb f2 73 34 07 2c 18 be 56 2a f8 61 0b a9 e5 56 73 1c f1 0f 55 f0 a7 3b e9 e6 b0 4b 42 7e 2d 87 64 73 5c 57 41 2b ce a3 03 cd 81 e6 c0 cd 8a 4f cd a1 39 c0 97 cd 61 0f 69 c8 ae e5 40 73 20 3a 34 6d 0e dc ad a8 87 9b 15 dc ae 28 68 0e f1 58 f6 bf aa a0 7d 73 d0 cf 66 74 5c 4b ac e5 78 22 34 07 a2 c3 b7 33 a4 68 0e c0 cd 8a 50 2a e8 df 1c 36 fd 9b 03 cd 61 7f 7a 45 b8 ef bb 96 a3 5a 7b 46 73 a0 39 7c f1 56 56 bd 28 9a 43 02 6e 56 70 bb 82 e6 00 f9 e6 b8 7e a8 da 5e 7a ac e5 10 5e 31 cf 81 e4 18 51 73 44 a8 9f f8 54 2a c2 64 24 63 Data Ascii: ;6r9ChpfJ~4K`/Y"CbU9\s4?EPs4,VaVsU;KB~-ds\WA+O9ai@s :4m(hX}sft\Kx"43hP6azEZ{Fs9\|VV(CnVp~^z^1QsDT*d$c
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 1c 3b 04 99 5b a8 4d 98 09 53 68 0e 24 87 c4 20 85 50 58 98 2b 19 de c9 cc 88 e2 19 68 ac 24 eb c1 14 e9 2f b7 8e 39 16 49 43 68 8e 57 72 db 13 9a 03 94 37 87 dd 00 21 97 97 73 74 6e 99 08 13 02 68 8e 31 53 28 0d 32 4d 91 27 5b 3a 97 9d f7 a2 37 cc 32 09 83 4e 94 98 a4 cc 76 45 fe e9 8a cc a3 95 55 d2 0f 9a a3 a6 a2 0a 1a 0f 68 0e 50 dc 1c 51 26 24 a2 6a 9a 23 d8 39 14 a6 09 cd 31 66 e6 8c 81 94 66 d2 d4 a2 b0 60 66 8a 86 2a f3 d9 99 3c b5 5a c8 0e f8 cb ca a4 cc 0a ff 70 7a 62 0d e1 88 e3 98 43 43 f6 07 e8 55 a8 bf a2 39 40 6d 73 50 8c 09 21 0f 9a 23 c5 84 30 9a 63 cc 94 87 28 01 71 da 21 a4 17 cc d9 79 c3 55 c5 cc dc 4c 99 da 14 06 09 0e 21 43 ca 6c 6f ba 30 46 7a bc 87 63 0e 1d 89 a5 1c aa 3c d7 d0 1c a0 b4 39 e2 ad 07 1d aa 9b c3 ee 84 08 a1 39 c6 cc Data Ascii: ;[MSh$ PX+h$/9IChWr7!stnh1S(2M'[:72NvEUhPQ&$j#91ff`f*<ZpzbCCU9@msP!#0c(q!yUL!Clo0Fzc<99
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: ca 41 73 c0 df d5 22 8b 65 c2 01 80 e6 18 cb 6c 9d 8c e3 b0 91 cb d0 1c 48 b3 63 63 be be ba ea 9c 00 00 cd 31 9a cd 2a 19 c1 7e 29 43 d0 1c 28 bf 76 77 b4 79 91 0a 00 d0 1c 23 db 1d 92 6b 6d 37 42 73 20 a6 3b da 2f 39 df a0 37 00 d0 1c b7 b2 5c 27 d7 38 cc 24 12 cd 81 b4 ab ac f9 32 da a3 7a 01 00 9a e3 86 36 8b 7d 12 6b 3d 93 eb d0 1c 28 0b b5 8d f9 b7 ea a3 7a 27 03 00 00 cd 11 5b 1d 71 b3 8e c3 5c 46 41 73 c0 79 cd ff 49 79 b4 56 0b 2f 11 00 80 e6 88 b4 7c 4e 86 da ce 24 0e cd 01 0d 1f 0b 71 be 50 6b cd a7 68 6c ae 5d 19 9c bb e4 ad 17 00 a0 39 6e 67 b7 dd 27 97 5b bf 3c 49 2c 9a 03 6a 4e ea 3c 2b 25 c4 f9 4e 2b 6b 6f d5 1a 47 cd fc b9 2f fe b6 cc e3 05 00 68 8e 9b 9a 5f 98 1d eb d5 4e ae 45 73 d0 1c ef 6c 55 94 72 4e e9 3b d5 dc 8e b0 e8 52 5b 5b 69 Data Ascii: As"elHcc1*~)C(vwy#km7Bs ;/97\'8$2z6}k=(z'[q\FAsyIyV/\|N$qPkhl]9ng'[<I,jN<+%N+koG/h_NEslUrN;R[[i
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: ae f1 4d 27 73 fc 3d 00 a6 b8 19 1b 8b 6b 17 be c4 aa bc 22 bf eb 75 30 c6 77 b3 cc f1 d7 00 a8 b1 ea cb 46 1f ab 2a 73 fc 1e f4 71 37 fe 35 99 03 80 25 56 73 2b 87 fc 9e d9 0a d4 b8 eb fa c6 85 b9 da 5e fa f3 32 07 80 e1 ca 18 37 87 e7 ef 06 cd 4d 3f bf 0b 5e 76 88 7f 5c 1b 19 b9 ee 97 fe 88 cc 01 40 8d 9b ae 35 5a 79 e0 d3 9a 3e 24 a7 b8 19 bb 46 16 38 7f ac b5 f3 1f 9b 39 00 0c 57 ae b1 ea cb 43 b9 e9 c3 67 e6 e0 79 6c d4 61 f7 b1 d6 ba 3f 2b 73 00 18 ae 9c 1b a3 95 87 72 d3 87 cf 2c c9 be c6 87 c2 9a 5b 4b 32 c7 9f 0a 30 5c e9 bb 97 9a f8 cf 37 7d 48 96 b8 99 4a ff fd df 7f 5d 63 ab bd b4 3a d6 21 56 b5 96 9d 63 3d c4 cd 54 af cd cc 31 ec 36 cc cc f5 12 ff d7 d5 79 9f 53 d6 85 eb ed 6c 43 01 e0 19 a7 58 2d 39 42 44 9f fb 71 bb 65 b7 9b 7e 7e d7 70 4f Data Ascii: M's=k"u0wF*sq75%Vs+^27M?^v\@5Zy>$F89WCgyla?+sr,[K20\7}HJ]c:!Vc=T16ySlCX-9BDqe~~pO

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	883	OUT	GET /img/privacyoptions.svg HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:49 UTC	1201	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:49 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close ETag: W/"5a8d3dae7c1ddd64826cea94a93139d4" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T69TaZzIxZDt5BOMBcpgHmSzxeX4kcLAl0eAueafPcpaEjhn2DkT%2B5EzCw3HM8f49eBWeFJKdBqoAGFIPH2vBgoCwW9aZj6IhUjPr8HaMxwckSXdYwUKRXUTU%2Bpu7aZmDp%2Bpiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=nidjugo9YiK95w1mojOT7dB14I2FRL0J06xzpR87u58-1743046249-1.0.1.1-RwEtesvxGzGceA1M7mKZwRFyBLepEQsg21RVt3ipUMcNJX3ZE217C2BDzISjyXU_rxoIB9Gk8iAMYNnx7ZGmRNgLtGwPuTeqFYB9FUp2hYxrYPfY9TB0_R.QgNAbfB4eF.ACLVodUBqX5d3_3MhqwZYAB18h7K2MrA.4QZM9Jxg"}],"group":"cf-csp-endpoint","max_age":86400}
2025-03-27 03:30:49 UTC	481	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2d 72 65 70 6f 72 74 69 6e 67 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 5f 6d 6f 6e 69 74 6f 72 2f 72 65 70 6f 72 74 3f 6d 3d 6e 69 64 6a 75 67 6f 39 59 69 4b 39 35 77 31 6d 6f 6a 4f 54 37 64 42 31 34 49 32 46 52 4c 30 4a 30 36 78 7a 70 52 38 37 75 35 38 2d 31 37 34 33 30 34 36 32 34 39 2d 31 2e 30 2e 31 2e 31 2d 52 77 45 74 65 73 76 78 47 7a 47 63 65 41 31 4d 37 6d 4b 5a 77 52 46 79 42 4c 65 70 45 51 73 67 32 31 52 56 74 33 69 70 55 4d 63 4e 4a 58 33 5a 45 32 31 37 43 32 42 44 Data Ascii: Content-Security-Policy-Report-Only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=nidjugo9YiK95w1mojOT7dB14I2FRL0J06xzpR87u58-1743046249-1.0.1.1-RwEtesvxGzGceA1M7mKZwRFyBLepEQsg21RVt3ipUMcNJX3ZE217C2BD
2025-03-27 03:30:49 UTC	1056	IN	Data Raw: 37 30 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: 701<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px
2025-03-27 03:30:49 UTC	744	IN	Data Raw: 3d 22 4d 32 32 2e 36 2c 30 48 37 2e 34 63 2d 33 2e 39 2c 30 2d 37 2c 33 2e 31 2d 37 2c 37 73 33 2e 31 2c 37 2c 37 2c 37 68 31 35 2e 32 63 33 2e 39 2c 30 2c 37 2d 33 2e 31 2c 37 2d 37 53 32 36 2e 34 2c 30 2c 32 32 2e 36 2c 30 7a 20 4d 31 2e 36 2c 37 63 30 2d 33 2e 32 2c 32 2e 36 2d 35 2e 38 2c 35 2e 38 2d 35 2e 38 0a 09 09 09 09 09 68 39 2e 39 6c 2d 33 2e 31 2c 31 31 2e 36 48 37 2e 34 43 34 2e 32 2c 31 32 2e 38 2c 31 2e 36 2c 31 30 2e 32 2c 31 2e 36 2c 37 7a 22 2f 3e 0a 09 09 09 09 3c 70 61 74 68 20 69 64 3d 22 78 22 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 32 34 2e 36 2c 34 63 30 2e 32 2c 30 2e 32 2c 30 2e 32 2c 30 2e 36 2c 30 2c 30 2e 38 6c 30 2c 30 4c 32 32 2e 35 2c 37 6c 32 2e 32 2c 32 2e 32 63 30 2e 32 2c 30 2e 32 2c 30 2e 32 2c 30 2e 36 2c Data Ascii: ="M22.6,0H7.4c-3.9,0-7,3.1-7,7s3.1,7,7,7h15.2c3.9,0,7-3.1,7-7S26.4,0,22.6,0z M1.6,7c0-3.2,2.6-5.8,5.8-5.8h9.9l-3.1,11.6H7.4C4.2,12.8,1.6,10.2,1.6,7z"/><path id="x" class="st2" d="M24.6,4c0.2,0.2,0.2,0.6,0,0.8l0,0L22.5,7l2.2,2.2c0.2,0.2,0.2,0.6,
2025-03-27 03:30:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://14qingchu.top

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Windows Analysis Report
https://14qingchu.top

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	864	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:49 UTC	766	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:49 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Fri, 14 Mar 2025 21:24:18 GMT ETag: "67d49e82-302c" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xFsbYHdlV6jbCL5%2FDXWQ8Zc8QmHzUN0MBMyD7MTLV9I1PHDcGjGCLbZaBW2lpOR6gVr%2FjbMd%2F9e%2Fbj5vvDQeOJqnLA5kR%2Bw0s%2FfBuGwm7Ny4mJF%2FmM2wfvm01iAgcf2lRXXvnw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcfb43e661526-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 29 Mar 2025 03:30:49 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2025-03-27 03:30:49 UTC	603	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 61 28 74 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 65 28 29 2c 74 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 6f 6e 6c 6f 61 64 3d 73 28 74 2e 6f 6e 6c 6f 61 64 2c 65 29 2c 74 2e 6f 6e 65 72 72 6f 72 3d 73 28 74 2e 6f 6e 65 72 72 6f 72 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 22 73 63 72 69 70 74 22 29 3b 65 2e 61 73 79 6e 63 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 Data Ascii: unction c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("as
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 75 74 65 28 52 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 54 29 3b 72 65 74 75 72 6e 7b 6e 6f 6e 63 65 3a 6e 5b 30 5d 2c 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 3a 2b 6e 5b 31 5d 2c 62 61 69 6c 6f 75 74 3a 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 65 3d 42 2b 74 2e 6e 6f 6e 63 65 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 22 2b 65 2b 22 5d 22 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 2c 41 72 72 61 79 2e Data Ascii: ute(R);if(!e)return null;var n=e.split(T);return{nonce:n[0],handlerPrefixLength:+n[1],bailout:!t.hasAttribute("defer")}}function g(t){var e=B+t.nonce;Array.prototype.forEach.call(document.querySelectorAll("["+e+"]"),function(n){n.removeAttribute(e),Array.
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 72 69 70 74 31 2e 30 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 31 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 32 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 33 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 34 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 35 22 3a 21 30 2c 22 74 65 78 74 2f 6a 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 6c 69 76 65 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 3a 21 30 2c 6d 6f 64 75 6c 65 3a 21 30 7d 2c 6b 3d 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 Data Ascii: ript1.0":!0,"text/javascript1.1":!0,"text/javascript1.2":!0,"text/javascript1.3":!0,"text/javascript1.4":!0,"text/javascript1.5":!0,"text/jscript":!0,"text/livescript":!0,"text/x-ecmascript":!0,"text/x-javascript":!0,module:!0},k=void 0!==document.createE
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 6e 6f 6e 63 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 2e 74 79 70 65 2e 73 75 62 73 74 72 28 74 68 69 73 2e 6e 6f 6e 63 65 2e 6c 65 6e 67 74 68 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 4e 6f 6e 45 78 65 63 75 74 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 74 2e 74 79 70 65 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 Data Ascii: },t.prototype.hasNonce=function(t){return 0===(t.getAttribute("type")\|\|"").indexOf(this.nonce)},t.prototype.removeNonce=function(t){t.type=t.type.substr(this.nonce.length)},t.prototype.makeNonExecutable=function(t){t.type=this.nonce+t.type},t.prototype.is
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 74 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 3d 74 2c 74 68 69 73 2e 62 75 66 66 65 72 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 31 29 7d 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b Data Ascii: t.prototype.enable=function(t){var e=this;this.insertionPointMarker=t,this.buffer="",document.write=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return e.write(t,!1)},document.writeln=function(){for(var t=[],n=0;n<arguments.length;
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 6e 26 26 69 28 6e 29 26 26 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 3f 28 72 3d 65 3f 5f 3a 4c 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 72 2c 5b 64 6f 63 75 6d 65 6e 74 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3a 74 68 69 73 2e 62 75 66 66 65 72 2b 3d 74 2e 6d 61 70 28 53 74 72 69 6e 67 29 2e 6a 6f 69 6e 28 65 3f 22 5c 6e 22 3a 22 22 29 3b 76 61 72 20 72 7d 2c 74 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 3d 22 6c Data Ascii: rototype.write=function(t,e){var n=document.currentScript;n&&i(n)&&n.hasAttribute("async")?(r=e?_:L).call.apply(r,[document].concat(t)):this.buffer+=t.map(String).join(e?"\n":"");var r},t}(),j=function(){function t(){var t=this;this.simulatedReadyState="l
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 73 45 76 65 6e 74 73 49 6e 50 72 6f 78 69 65 73 3d 21 30 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 45 76 65 6e 74 54 61 72 67 65 74 3f 5b 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5d 3a 5b 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 68 6f 64 73 28 65 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 74 63 68 45 76 65 6e Data Ascii: sEventsInProxies=!0},0)},t.prototype.setupEventListenerProxy=function(){var t=this;("undefined"!=typeof EventTarget?[EventTarget.prototype]:[Node.prototype,Window.prototype]).forEach(function(e){return t.patchEventTargetMethods(e)})},t.prototype.patchEven
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 65 73 73 53 69 6d 75 6c 61 74 6f 72 22 2c 7b 76 61 6c 75 65 3a 6e 65 77 20 6a 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 4c 6f 61 64 50 72 6f 67 72 65 73 73 53 69 6d 75 6c 61 74 6f 72 7d 28 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 3d 74 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 65 2c 74 68 69 73 2e 70 72 65 6c 6f 61 64 48 69 6e 74 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 50 72 65 6c 6f 61 64 48 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 Data Ascii: essSimulator",{value:new j}),t.__rocketLoaderLoadProgressSimulator}(),W=function(){function t(t,e){this.scriptStack=t,this.settings=e,this.preloadHints=[]}return t.prototype.insertPreloadHints=function(){var t=this;this.scriptStack.forEach(function(e){if(
2025-03-27 03:30:49 UTC	777	IN	Data Raw: 2e 61 63 74 69 76 61 74 65 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 63 72 69 70 74 2c 72 3d 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6f 3d 74 2e 65 78 74 65 72 6e 61 6c 2c 69 3d 74 2e 61 73 79 6e 63 2c 61 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 72 29 29 72 65 74 75 72 6e 20 65 28 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 66 6f 72 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 20 77 61 73 20 64 65 74 61 63 68 65 64 20 66 72 6f 6d 20 64 6f 63 75 6d 65 6e 74 2e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 3b 76 61 72 20 63 3d 74 68 69 73 2e 73 65 74 Data Ascii: .activateScript=function(t){var n=t.script,r=t.placeholder,o=t.external,i=t.async,a=r.parentNode;if(!document.contains(r))return e("Placeholder for script \n"+n.outerHTML+"\n was detached from document.","Script will not be executed."),null;var c=this.set

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	907	OUT	GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:49 UTC	854	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:49 GMT Content-Type: image/webp Content-Length: 2784 Connection: close CF-Ray: 926bcfb479724205-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 38388 Cache-Control: max-age=604800 Content-Disposition: inline; filename="card-new.webp" ETag: "f4eb2a2f745f8799e3e6f6478ab2305d" Last-Modified: Wed, 21 Aug 2024 18:12:19 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3908 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ey9Zkuzv1CKxE47Tksqj6PgbQMsHJnCvFptZRx3%2B29ZaqwcdvPcHRmmr8z4itLyd3Vif6E3Sa3a4YZscDSMxCblKn574QEqvRIw1nOy9oIbagKC4hoXIrcevwtM8p9xj%2ByiN4Y%2B0qHAxNEw%2BaDk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-27 03:30:49 UTC	515	IN	Data Raw: 52 49 46 46 d8 0a 00 00 57 45 42 50 56 50 38 4c cc 0a 00 00 2f 36 41 2b 10 19 45 6d db 40 ca 3b e5 cf 78 27 82 88 fe a7 7c aa 82 85 6c 14 b4 6d c3 18 44 f9 b3 ed 0e 03 c2 6c a3 22 ec 79 fe 64 87 22 16 4c f1 ce 70 ea bf c2 b6 6d 90 c2 78 8f a0 19 e1 43 91 fa 33 06 70 5d b2 c4 db 6d db 7a db d6 b6 36 41 8a ce ff ff 15 f9 b8 7e 5e 5e 31 59 8a 8c 97 89 f1 32 99 8f 1d ea 22 3b 0d 2d aa 38 6c db 46 92 e8 fb af ff 76 07 23 c8 91 24 29 92 3c 97 05 da 83 e7 e9 2f 0f 63 38 a8 ad 2d 68 ae 0d 8c 40 83 11 61 24 d8 9a e8 12 08 0d a4 89 26 70 11 fe 08 44 20 02 2d da 76 eb b6 91 d4 76 3c 12 20 5f 00 97 97 20 f3 fc 2e 2c 00 7e ef fe 1e ec 73 ed ff 7b b5 84 2d e7 15 30 38 8b 81 e5 29 58 9f 32 c2 35 00 98 bf 01 57 80 14 31 0d 91 16 d0 06 a2 b4 b8 3e 4f ad 30 26 00 fe d7 cb Data Ascii: RIFFWEBPVP8L/6A+Em@;x'\|lmDl"yd"LpmxC3p]mz6A~^^1Y2";-8lFv#$)</c8-h@a$&pD -vv< _ .,~s{-08)X25W1>O0&
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: b1 d5 84 d9 ec f5 9c 41 af 57 ae 52 21 e0 de 8e 8a 39 f8 ce f4 93 98 03 b1 27 be e9 17 05 01 a9 49 f7 14 ed db 98 2d 4d ff 30 bb 7e a5 8e da de 49 92 02 08 58 cc 89 33 22 e1 5d 62 29 d1 a2 06 92 a0 26 89 a5 bd 80 de 28 84 7b 53 45 e6 b6 61 65 ad a9 f8 9d dc 3b 00 a7 b6 6d 4d b3 14 64 36 ed a4 fa da c2 6b b4 e5 d4 d6 96 da 4c a5 94 3d 50 83 bd 15 d5 bf 10 4d a7 97 2e ea 1f 03 f5 81 fb 36 c4 ec ca 6c ca 7e d0 64 df 0e b1 62 f3 e4 90 4b 3e 33 ab 4e bb 7a d2 2e 34 ad 64 ca 75 38 c6 2d 7e 64 9e ec a6 a8 99 4a 14 7b a6 3a fb 66 d8 0d d8 d5 8c 2c a2 d2 66 0e 85 db b0 ec 3e a9 b8 29 84 b5 85 cd 16 5f 85 09 90 21 c8 15 11 61 94 da ef 2e c3 9a 39 15 9f fe c8 e9 9e 46 35 89 01 bd 19 e1 47 f7 de b0 98 21 a9 0d 80 89 34 2c 64 d3 e0 35 9a 65 37 43 1b 3a 75 46 14 03 70 Data Ascii: AWR!9'I-M0~IX3"]b)&({SEae;mMd6kL=PM.6l~dbK>3Nz.4du8-~dJ{:f,f>)_!a.9F5G!4,d5e7C:uFp
2025-03-27 03:30:49 UTC	900	IN	Data Raw: 45 8e cd 08 f7 ad 21 48 ba 99 f2 39 3f 8f ef 0b 1e 2d c1 58 af 79 a5 ee 8c e6 e8 dc e1 e3 fb 07 68 f5 51 e8 4d 29 50 c5 8d 14 83 f9 f1 fa be 80 76 d4 e6 06 20 aa e8 dd 06 53 30 d8 7c 97 51 32 c2 77 f3 56 c5 0d 93 cf 16 24 af fb c1 18 1f ba 96 74 cb e4 73 ed 38 2e 71 bc c2 7c b0 5f ea bc 18 58 82 79 dc 8f 23 cc 0f 4d a1 2a cc 78 18 3d ab 09 14 fd 82 2f 30 d0 0f 9a 11 e4 23 06 dd d5 12 7e bf 35 67 19 cc 30 22 fd 68 1e 29 34 39 bb b1 4b f8 38 c7 a5 39 4b b0 9f 65 24 28 b2 d4 f5 02 0c 3f ce cd 17 67 39 8b 72 0a ea bf 7c 6e 46 73 9c e2 d2 9c 04 18 30 bb 17 e7 e8 91 18 c4 aa f3 e3 e3 1c 0f 80 1b ec fd 16 be b7 45 0c d6 71 3c be 3e d6 7d 83 d8 54 dc 2e 5b 80 c7 f9 f2 26 f7 a8 bf 9e 61 9a 71 9f 71 79 fd f8 fa 3a 0b 11 f5 55 b2 65 14 91 08 f6 71 2a af 27 c0 56 8c Data Ascii: E!H9?-XyhQM)Pv S0\|Q2wV$ts8.q\|_Xy#Mx=/0#~5g0"h)49K89Ke$(?g9r\|nFs0Eq<>}T.[&aqqy:Ueq'V

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	909	OUT	GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:49 UTC	1187	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:49 GMT Content-Type: image/webp Content-Length: 2238 Connection: close CF-Ray: 926bcfb47c4c4693-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 36365 Cache-Control: max-age=604800 Content-Disposition: inline; filename="banner-new.webp" ETag: "a9df8b6f62f4aeb1b4699a2ae4b291bb" Last-Modified: Thu, 22 Aug 2024 13:46:01 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3127 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EEvtXvSff5Ju4r0zL4xOfVFwL4mjCdjZAlS8UNy6sA7PoRINm63zsJ108m9nVV6KGUx4JQbnqd%2BIFtT2xVVYm51QUqldcShmwsOdKI1gGxjdsxUsTvp5x8rRD9GMc4QkGk6yVtjqUKXTidsvi0s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=DhOLtPAmH5F9gX020pVPvyKya_MUjCNRMloM.OK0rK0-1743046249-1.0.1.1-WLw4RbY90MducmQXI9X255emkAvNgfFW5hH_Wo3il6W1xwm_bOJOT31aBirN1m6gizFNR_7ZUhkqt9hd_QPHt4kJ4q0KPDVf493mDz.56mTpAtR1RgBgL.Z0nmIdJ7B0l0J9Ce0RYi1Tozdq2JDoUMQd78YTlfEt_jf_MZelDqg"}],"group":"cf-csp-endpoint","max_age":86400}
2025-03-27 03:30:49 UTC	451	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2d 72 65 70 6f 72 74 69 6e 67 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 5f 6d 6f 6e 69 74 6f 72 2f 72 65 70 6f 72 74 3f 6d 3d 44 68 4f 4c 74 50 41 6d 48 35 46 39 67 58 30 32 30 70 56 50 76 79 4b 79 61 5f 4d 55 6a 43 4e 52 4d 6c 6f 4d 2e 4f 4b 30 72 4b 30 2d 31 37 34 33 30 34 36 32 34 39 2d 31 2e 30 2e 31 2e 31 2d 57 4c 77 34 52 62 59 39 30 4d 64 75 63 6d 51 58 49 39 58 32 35 35 65 6d 6b 41 76 4e 67 66 46 57 35 68 48 5f 57 6f 33 69 6c 36 57 31 78 77 6d 5f 62 4f 4a 4f 54 33 31 61 Data Ascii: Content-Security-Policy-Report-Only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=DhOLtPAmH5F9gX020pVPvyKya_MUjCNRMloM.OK0rK0-1743046249-1.0.1.1-WLw4RbY90MducmQXI9X255emkAvNgfFW5hH_Wo3il6W1xwm_bOJOT31a
2025-03-27 03:30:49 UTC	1100	IN	Data Raw: 52 49 46 46 b6 08 00 00 57 45 42 50 56 50 38 4c aa 08 00 00 2f 99 82 15 10 19 45 6d db 40 ca 3b e3 8f f8 1e 82 88 fe 4f 80 3c 36 b1 09 c4 86 4c da 26 fe 6d af d7 14 08 04 92 11 f2 a7 1b 65 10 fa 2f 24 48 b0 39 45 8e 59 a1 1f 18 05 25 49 92 e3 48 92 1b 7a 99 ff bf 62 8e f3 bc 7d 18 22 45 00 64 82 11 0e f6 8d 61 db b6 61 e8 b5 ff 5f 5c 4c 90 23 49 52 24 79 2e 0b b4 07 cf d3 5f 1e c6 70 50 5b 5b d0 5c 1b 18 81 06 fb 23 cc 04 5b 13 5c 02 a4 81 34 c1 04 2e 02 11 88 60 04 48 90 e4 c6 6d 24 e7 8e 52 0b 70 b1 5c 40 b9 de 62 11 04 e1 f7 ee 6f ec 13 fd 7f c3 92 90 e0 0c 08 3e cf 40 1e f8 c9 4f 70 3f 30 d0 5f b7 02 77 8a b3 66 70 30 d4 46 7c c7 2a 66 07 e0 8f 5e d6 3f bd 16 65 df 14 ed cd 51 1e d4 66 b1 c3 c8 d8 ce df fc 54 f1 7c 3d fd d9 db 2d 85 6d d6 07 8c 15 31 Data Ascii: RIFFWEBPVP8L/Em@;O<6L&me/$H9EY%IHzb}"Edaa_\L#IR$y._pP[[\#[\4.`Hm$Rp\@bo>@Op?0_wfp0F\|*f^?eQfT\|=-m1
2025-03-27 03:30:49 UTC	1138	IN	Data Raw: 40 56 ee 1b 96 5f 50 bb e7 00 fe fb 20 f0 b4 31 10 02 ab 6a 00 6c 55 7e 5d 84 1f b0 dd 07 3d 82 31 30 b8 d3 7e 8e 1e b0 27 bf e5 f4 a8 e2 2a d4 7e 56 24 68 b0 e6 ee 4e 6f 55 8b 72 ff 05 c8 ef 73 d1 07 72 ef ea 45 93 3c 73 a9 01 21 f0 4e fa 20 3b f1 3f 00 d7 ec 95 bd 31 38 d0 01 c8 2f be af 80 fa 55 22 02 82 e0 fa 23 67 09 8c 55 f0 aa 3c a8 d1 f0 81 df ab 03 63 27 1f b8 13 be 65 ee 5b f2 a0 36 56 21 20 00 83 1f 0f 04 86 f7 0b 81 c7 97 44 62 d4 fd ed 6f 17 28 f3 2c 1d ca eb 1f 81 0e fc da c9 ef 83 10 03 36 4a fd 6a d6 29 08 01 bb f2 eb b3 02 05 e0 13 23 28 e6 17 c0 a7 36 41 08 18 fc 0e 89 5d 85 6f 2a 55 a5 33 77 d6 41 a7 cb bf 28 06 00 08 76 b9 9f 20 98 b1 85 0a 6c cb 00 bc 38 f9 05 e3 d1 70 3e 27 8a 2c 89 64 5e 08 29 b8 ff e6 fa 20 5b a9 6a 10 84 06 40 00 Data Ascii: @V_P 1jlU~]=10~'~V$hNoUrsrE<s!N ;?18/U"#gU<c'e[6V! Dbo(,6Jj)#(6A]oU3wA(v l8p>',d^) [j@

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	631	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive Origin: https://www.cloudflare.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:49 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:49 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 926bcfb4b9077cac-EWR
2025-03-27 03:30:49 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-03-27 03:30:49 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	840	OUT	GET /webpack-runtime-2b819ec111a737f80dd2.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:50 UTC	962	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"ed47507ef5eec27f82522bc2d04fd967" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bPg8FvETCfCSjGaWT2UEB6FbiEZ%2BByFbZjd1Ngp2%2Bebq%2BulFqzeb1JnMt9nZm8hJUdWVliJh11z2U%2BuC07diE0AJJq0%2FWH9Z%2BZ92UlPRieTPi3G9%2BAKnfCUWaR1v1pPhN0dQww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcfb70ed832e4-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 03:30:50 UTC	407	IN	Data Raw: 31 38 65 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 63 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 61 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 65 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 73 29 2c 6e 2e 6c 6f 61 64 65 64 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 73 2e 6d 3d 63 2c 65 3d 5b 5d 2c 73 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 6e 29 7b 76 Data Ascii: 18e3!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){v
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 73 2e 4f 5b 65 5d 28 6e 5b 66 5d 29 7d 29 29 3f 6e 2e 73 70 6c 69 63 65 28 66 2d 2d 2c 31 29 3a 28 61 3d 21 31 2c 6f 3c 63 26 26 28 63 3d 6f 29 29 3b 69 66 28 61 29 7b 65 2e 73 70 6c 69 63 65 28 69 2d 2d 2c 31 29 3b 76 61 72 20 64 3d 72 28 29 3b 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 74 3d 64 29 7d 7d 72 65 74 75 72 6e 20 74 7d 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 69 3d 65 2e 6c 65 6e 67 74 68 3b 69 3e 30 26 26 65 5b 69 2d 31 5d 5b 32 5d 3e 6f 3b 69 2d 2d 29 65 5b 69 5d 3d 65 5b 69 2d 31 5d 3b 65 5b 69 5d 3d 5b 6e 2c 72 2c 6f 5d 7d 2c 73 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 Data Ascii: s.O[e](n[f])}))?n.splice(f--,1):(a=!1,o<c&&(c=o));if(a){e.splice(i--,1);var d=r();void 0!==d&&(t=d)}}return t}o=o\|\|0;for(var i=e.length;i>0&&e[i-1][2]>o;i--)e[i]=e[i-1];e[i]=[n,r,o]},s.n=function(e){var t=e&&e.__esModule?function(){return e.default}:funct
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 64 65 72 73 2d 70 61 67 65 2d 74 73 78 22 2c 32 35 33 3a 22 61 30 36 63 66 66 39 33 34 65 39 35 37 39 35 33 36 63 65 31 63 31 30 62 61 64 32 31 63 31 64 36 64 37 66 36 33 61 65 30 22 2c 32 38 35 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 64 65 6d 6f 2d 70 61 67 65 73 2d 61 72 69 61 2d 6c 61 62 65 6c 73 2d 61 72 69 61 2d 6c 61 62 65 6c 73 2d 74 73 78 22 2c 32 39 37 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 67 65 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 33 30 39 3a 22 38 64 32 36 37 37 38 34 38 61 64 63 31 38 36 61 37 66 61 34 66 38 33 38 65 61 66 38 61 34 36 30 31 33 35 61 32 32 66 34 22 2c 33 32 38 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 Data Ascii: ders-page-tsx",253:"a06cff934e9579536ce1c10bad21c1d6d7f63ae0",285:"component---src-components-demo-pages-aria-labels-aria-labels-tsx",297:"component---src-components-page-page-template-tsx",309:"8d2677848adc186a7fa4f838eaf8a460135a22f4",328:"component---s
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 36 3a 22 36 34 33 64 30 31 66 62 38 35 35 31 65 36 66 64 62 30 31 32 22 2c 39 32 3a 22 61 62 61 32 31 39 39 36 36 31 39 64 66 31 64 34 32 61 64 64 22 2c 39 38 3a 22 63 35 36 38 64 66 66 64 64 63 65 34 36 64 30 64 64 37 66 33 22 2c 31 32 34 3a 22 33 31 36 33 37 64 38 61 62 38 62 31 35 34 38 37 65 34 63 31 22 2c 31 36 36 3a 22 36 64 35 32 39 31 64 33 34 37 33 35 32 65 32 62 65 65 62 38 22 2c 31 37 34 3a 22 32 34 32 37 37 32 65 66 31 30 64 38 64 31 36 31 61 65 32 34 22 2c 32 32 33 3a 22 31 65 62 32 30 30 36 35 34 37 34 36 65 31 33 66 30 32 34 33 22 2c 32 35 33 3a 22 39 30 34 38 34 64 62 34 36 30 32 64 34 30 31 64 39 34 63 61 22 2c 32 37 38 3a 22 63 64 39 64 34 34 30 39 39 31 31 35 65 30 32 30 37 35 34 62 22 2c 32 38 35 3a 22 39 35 66 61 34 32 64 39 36 36 32 Data Ascii: 6:"643d01fb8551e6fdb012",92:"aba21996619df1d42add",98:"c568dffddce46d0dd7f3",124:"31637d8ab8b15487e4c1",166:"6d5291d347352e2beeb8",174:"242772ef10d8d161ae24",223:"1eb200654746e13f0243",253:"90484db4602d401d94ca",278:"cd9d44099115e020754b",285:"95fa42d9662
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 66 6f 72 28 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 69 3d 30 3b 69 3c 64 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 75 3d 64 5b 69 5d 3b 69 66 28 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 6f 2b 6e 29 7b 61 3d 75 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 66 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 Data Ascii: if(void 0!==n)for(var d=document.getElementsByTagName("script"),i=0;i<d.length;i++){var u=d[i];if(u.getAttribute("src")==e\|\|u.getAttribute("data-webpack")==o+n){a=u;break}}a\|\|(f=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a
2025-03-27 03:30:50 UTC	496	IN	Data Raw: 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 61 2e 74 79 70 65 3d 6f 2c 61 2e 72 65 71 75 65 73 74 3d 63 2c 72 5b 31 5d 28 61 29 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 74 2c 74 29 7d 7d 2c 73 2e 4f 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 5b 74 5d 7d 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 63 3d 6e 5b 30 5d 2c 61 3d 6e 5b 31 5d 2c 66 3d 6e 5b 32 5d 2c 64 3d 30 3b 69 66 28 63 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 65 5b 74 5d 7d 29 29 29 7b 66 6f 72 28 72 20 69 6e 20 61 29 73 2e 6f 28 61 2c 72 29 26 26 28 73 2e 6d 5b 72 5d 3d 61 5b 72 5d 29 3b 69 66 28 66 29 76 61 72 20 69 3d 66 28 73 29 7d 66 6f 72 28 Data Ascii: ame="ChunkLoadError",a.type=o,a.request=c,r[1](a)}}),"chunk-"+t,t)}},s.O.j=function(t){return 0===e[t]};var t=function(t,n){var r,o,c=n[0],a=n[1],f=n[2],d=0;if(c.some((function(t){return 0!==e[t]}))){for(r in a)s.o(a,r)&&(s.m[r]=a[r]);if(f)var i=f(s)}for(
2025-03-27 03:30:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	828	OUT	GET /app-d64c099fb8fcdf76ac5e.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:50 UTC	960	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"29d725150c44c7043fefa8c41a21c1b9" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rVv8JfEfhZInWX%2FuSCtzRsrQRnJh4q7VIXQF3mSzPNKnsApNFfIuLifch%2B8fUnf5rnU6gt2I23NF%2BIM2T5833kzy%2FHx998jen%2BivxauiSGhb%2BZuZp7nAKFIcCaH1XhNSdEf1sQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcfb6fab142eb-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2d 64 36 34 63 30 39 39 66 62 38 66 63 64 66 37 36 61 63 35 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 34 5d 2c 7b 33 38 31 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: 7ff2/! For license information please see app-d64c099fb8fcdf76ac5e.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){retur
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 61 6d 65 3a 6f 2c 73 74 79 6c 65 3a 6e 3f 73 3a 76 6f 69 64 20 30 7d 2c 74 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 72 63 2c 6e 3d 65 2e 63 75 73 74 6f 6d 65 72 43 6f 64 65 2c 6f 3d 65 2e 61 64 55 72 6c 2c 73 3d 65 2e 63 6f 6e 74 72 6f 6c 73 2c 63 3d 76 6f 69 64 20 30 21 3d 3d 73 26 26 73 2c 6d 3d 65 2e 6d 75 74 65 64 2c 70 3d 76 6f 69 64 20 30 21 3d 3d 6d 26 26 6d 2c 66 3d 65 2e 61 75 74 6f 70 6c 61 79 2c 68 3d 76 6f 69 64 20 30 21 3d 3d 66 26 26 66 2c 67 3d 65 2e 6c 6f 6f 70 2c 5f 3d 76 6f 69 64 20 30 21 3d 3d 67 26 26 67 2c 76 3d 65 2e 70 72 65 6c 6f 61 64 2c 79 3d 76 6f 69 64 20 30 3d 3d 3d 76 3f 22 6d 65 74 61 64 61 74 61 22 3a 76 2c 62 3d 65 2e 70 72 69 6d 61 72 79 43 6f 6c 6f 72 2c 45 3d 65 2e 6c 65 74 74 65 72 Data Ascii: ame:o,style:n?s:void 0},t)},m=function(e){var t=e.src,n=e.customerCode,o=e.adUrl,s=e.controls,c=void 0!==s&&s,m=e.muted,p=void 0!==m&&m,f=e.autoplay,h=void 0!==f&&f,g=e.loop,_=void 0!==g&&g,v=e.preload,y=void 0===v?"metadata":v,b=e.primaryColor,E=e.letter
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 6c 65 74 74 65 72 62 6f 78 43 6f 6c 6f 72 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2c 6d 26 26 22 73 74 61 72 74 54 69 6d 65 3d 22 2b 6d 2c 6e 26 26 22 6d 75 74 65 64 3d 74 72 75 65 22 2c 6f 26 26 22 70 72 65 6c 6f 61 64 3d 22 2b 6f 2c 61 26 26 22 6c 6f 6f 70 3d 74 72 75 65 22 2c 69 26 26 22 61 75 74 6f 70 6c 61 79 3d 74 72 75 65 22 2c 21 6c 26 26 22 63 6f 6e 74 72 6f 6c 73 3d 66 61 6c 73 65 22 5d 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 2e 6a 6f 69 6e 28 22 26 22 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 4d 65 6d 6f 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 3f 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 65 72 2d 22 2b 66 2b 22 2e 63 6c 6f 75 64 66 6c 61 72 65 73 74 72 65 61 6d 2e 63 6f Data Ascii: letterboxColor="+encodeURIComponent(u),m&&"startTime="+m,n&&"muted=true",o&&"preload="+o,a&&"loop=true",i&&"autoplay=true",!l&&"controls=false"].filter(Boolean).join("&");return(0,r.useMemo)((function(){return f?"https://customer-"+f+".cloudflarestream.co
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 74 65 22 2c 75 65 2c 72 65 29 2c 6c 28 22 76 6f 6c 75 6d 65 63 68 61 6e 67 65 22 2c 75 65 2c 6f 65 29 2c 6c 28 22 77 61 69 74 69 6e 67 22 2c 75 65 2c 61 65 29 2c 6c 28 22 73 74 72 65 61 6d 2d 61 64 73 74 61 72 74 22 2c 75 65 2c 69 65 29 2c 6c 28 22 73 74 72 65 61 6d 2d 61 64 65 6e 64 22 2c 75 65 2c 6c 65 29 2c 6c 28 22 73 74 72 65 61 6d 2d 61 64 74 69 6d 65 6f 75 74 22 2c 75 65 2c 73 65 29 2c 6c 28 22 72 65 73 69 7a 65 22 2c 75 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 75 65 2e 63 75 72 72 65 6e 74 29 7b 76 61 72 20 74 3d 75 65 2e 63 75 72 72 65 6e 74 2c 6e 3d 74 2e 76 69 64 65 6f 48 65 69 67 68 74 2c 72 3d 74 2e 76 69 64 65 6f 57 69 64 74 68 3b 70 65 28 7b 76 69 64 65 6f 48 65 69 67 68 74 3a 6e 2c 76 69 64 65 6f 57 69 64 74 68 3a 72 7d 29 2c Data Ascii: te",ue,re),l("volumechange",ue,oe),l("waiting",ue,ae),l("stream-adstart",ue,ie),l("stream-adend",ue,le),l("stream-adtimeout",ue,se),l("resize",ue,(function(e){if(ue.current){var t=ue.current,n=t.videoHeight,r=t.videoWidth;pe({videoHeight:n,videoWidth:r}),
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 41 44 49 4e 47 5f 32 3d 22 68 65 61 64 69 6e 67 2d 32 22 2c 65 2e 48 45 41 44 49 4e 47 5f 33 3d 22 68 65 61 64 69 6e 67 2d 33 22 2c 65 2e 48 45 41 44 49 4e 47 5f 34 3d 22 68 65 61 64 69 6e 67 2d 34 22 2c 65 2e 48 45 41 44 49 4e 47 5f 35 3d 22 68 65 61 64 69 6e 67 2d 35 22 2c 65 2e 48 45 41 44 49 4e 47 5f 36 3d 22 68 65 61 64 69 6e 67 2d 36 22 2c 65 2e 4f 4c 5f 4c 49 53 54 3d 22 6f 72 64 65 72 65 64 2d 6c 69 73 74 22 2c 65 2e 55 4c 5f 4c 49 53 54 3d 22 75 6e 6f 72 64 65 72 65 64 2d 6c 69 73 74 22 2c 65 2e 4c 49 53 54 5f 49 54 45 4d 3d 22 6c 69 73 74 2d 69 74 65 6d 22 2c 65 2e 48 52 3d 22 68 72 22 2c 65 2e 51 55 4f 54 45 3d 22 62 6c 6f 63 6b 71 75 6f 74 65 22 2c 65 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 3d 22 65 6d 62 65 64 64 65 64 2d 65 6e 74 72 79 Data Ascii: ADING_2="heading-2",e.HEADING_3="heading-3",e.HEADING_4="heading-4",e.HEADING_5="heading-5",e.HEADING_6="heading-6",e.OL_LIST="ordered-list",e.UL_LIST="unordered-list",e.LIST_ITEM="list-item",e.HR="hr",e.QUOTE="blockquote",e.EMBEDDED_ENTRY="embedded-entry
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 56 31 5f 4d 41 52 4b 53 3d 74 2e 56 31 5f 4e 4f 44 45 5f 54 59 50 45 53 3d 74 2e 54 45 58 54 5f 43 4f 4e 54 41 49 4e 45 52 53 3d 74 2e 48 45 41 44 49 4e 47 53 3d 74 2e 43 4f 4e 54 41 49 4e 45 52 53 3d 74 2e 56 4f 49 44 5f 42 4c 4f 43 4b 53 3d 74 2e 54 41 42 4c 45 5f 42 4c 4f 43 4b 53 3d 74 2e 4c 49 53 54 5f 49 54 45 4d 5f 42 4c 4f 43 4b 53 3d 74 2e 54 4f 50 5f 4c 45 56 45 4c 5f 42 4c 4f 43 4b 53 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 Data Ascii: efault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.V1_MARKS=t.V1_NODE_TYPES=t.TEXT_CONTAINERS=t.HEADINGS=t.CONTAINERS=t.VOID_BLOCKS=t.TABLE_BLOCKS=t.LIST_ITEM_BLOCKS=t.TOP_LEVEL_BLOCKS=void 0;var a
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 5d 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 6e 5b 75 2e 42 4c 4f 43 4b 53 2e 54 41 42 4c 45 5f 48 45 41 44 45 52 5f 43 45 4c 4c 5d 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 6e 29 2c 74 2e 48 45 41 44 49 4e 47 53 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 31 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 32 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 33 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 34 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 35 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 36 5d 2c 74 2e 54 45 58 54 5f 43 4f 4e 54 41 49 4e 45 52 53 3d 72 28 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 74 2e 48 45 41 44 49 4e 47 53 Data Ascii: ]=[u.BLOCKS.PARAGRAPH],n[u.BLOCKS.TABLE_HEADER_CELL]=[u.BLOCKS.PARAGRAPH],n),t.HEADINGS=[u.BLOCKS.HEADING_1,u.BLOCKS.HEADING_2,u.BLOCKS.HEADING_3,u.BLOCKS.HEADING_4,u.BLOCKS.HEADING_5,u.BLOCKS.HEADING_6],t.TEXT_CONTAINERS=r([u.BLOCKS.PARAGRAPH],t.HEADINGS
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 74 3d 3d 3d 65 5b 72 5b 6e 5d 5d 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 69 73 54 65 78 74 3d 74 2e 69 73 42 6c 6f 63 6b 3d 74 2e 69 73 49 6e 6c 69 6e 65 3d 76 6f 69 64 20 30 2c 74 2e 69 73 49 6e 6c 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 64 2e 49 4e 4c 49 4e 45 53 2c 65 2e 6e 6f 64 65 54 79 70 65 29 7d 2c 74 2e 69 73 42 6c 6f 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 75 2e 42 4c 4f 43 4b 53 2c 65 2e 6e 6f 64 65 54 79 70 65 29 7d 2c 74 2e 69 73 54 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 74 65 78 Data Ascii: t===e[r[n]])return!0}return!1}Object.defineProperty(t,"__esModule",{value:!0}),t.isText=t.isBlock=t.isInline=void 0,t.isInline=function(e){return n(d.INLINES,e.nodeType)},t.isBlock=function(e){return n(u.BLOCKS,e.nodeType)},t.isText=function(e){return"tex
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 74 2c 22 49 4e 4c 49 4e 45 53 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 49 4e 4c 49 4e 45 53 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 4d 41 52 4b 53 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 6d 29 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 6f 28 70 2c 74 29 2c 6f 28 66 2c 74 29 2c 6f 28 68 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 45 4d 50 54 59 5f 44 4f 43 55 4d 45 4e 54 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 67 29 2e 64 65 66 61 Data Ascii: t,"INLINES",{enumerable:!0,get:function(){return d.INLINES}}),Object.defineProperty(t,"MARKS",{enumerable:!0,get:function(){return i(m).default}}),o(p,t),o(f,t),o(h,t),Object.defineProperty(t,"EMPTY_DOCUMENT",{enumerable:!0,get:function(){return i(g).defa
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 65 6e 74 28 22 68 34 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 48 45 41 44 49 4e 47 5f 35 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 68 35 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 48 45 41 44 49 4e 47 5f 36 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 68 36 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 45 4d 42 45 44 44 45 44 5f 52 45 53 4f 55 52 43 45 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ent("h4",null,t)},y[M.HEADING_5]=function(e,t){return a.createElement("h5",null,t)},y[M.HEADING_6]=function(e,t){return a.createElement("h6",null,t)},y[M.EMBEDDED_ENTRY]=function(e,t){return a.createElement("div",null,t)},y[M.EMBEDDED_RESOURCE]=function(e

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:49 UTC	834	OUT	GET /framework-957a522640f43541ca6a.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:50 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close ETag: W/"d711fa5a10b8d800843871fd03aeef22" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QOO7YCxsf1RWpTdXk%2BSn7NJi8WvuX6SVMKEuRgltM%2Bjkh8iQa6C4Lrh5mgQ5yI5ljBqb%2FlkKlKNULX%2B3eMimbNPIQz9h9UzhmWZqM598EoW%2Bz2FdK%2Bnpwd8%2FgAUbFs2NYB%2F7Jw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcfb6f9cd43cd-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 72 61 6d 65 77 6f 72 6b 2d 39 35 37 61 35 32 32 36 34 30 66 34 33 35 34 31 63 61 36 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 33 5d 2c 7b 32 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 36 39 32 35 29 3b 66 75 6e 63 74 69 Data Ascii: 7ff2/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);functi
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 6e 67 73 2e 22 7d 76 61 72 20 6f 3d 6e 65 77 20 53 65 74 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 6e 29 7b 73 28 65 2c 6e 29 2c 73 28 65 2b 22 43 61 70 74 75 72 65 22 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 66 6f 72 28 75 5b 65 5d 3d 6e 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 6f 2e 61 64 64 28 6e 5b 65 5d 29 7d 76 61 72 20 63 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: ngs."}var o=new Set,u={};function i(e,n){s(e,n),s(e+"Capture",n)}function s(e,n){for(u[e]=n,e=0;e<n.length;e++)o.add(n[e])}var c=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),f=Object.prototype.hasOwnPrope
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 6f 75 72 63 65 73 52 65 71 75 69 72 65 64 22 2c 22 66 6f 63 75 73 61 62 6c 65 22 2c 22 70 72 65 73 65 72 76 65 41 6c 70 68 61 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 32 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 22 61 6c 6c 6f 77 46 75 6c 6c 53 63 72 65 65 6e 20 61 73 79 6e 63 20 61 75 74 6f 46 6f 63 75 73 20 61 75 74 6f 50 6c 61 79 20 63 6f 6e 74 72 6f 6c 73 20 64 65 66 61 75 6c 74 20 64 65 66 65 72 20 64 69 73 61 62 6c 65 64 20 64 69 73 61 62 6c 65 50 69 63 74 75 72 65 49 6e 50 69 63 74 75 72 65 20 64 69 73 61 62 6c 65 52 65 6d 6f 74 65 50 6c 61 79 62 61 63 6b 20 66 6f 72 6d 4e 6f 56 61 6c 69 64 61 74 65 20 68 69 64 64 65 6e 20 6c 6f 6f 70 20 6e 6f 4d 6f 64 75 6c Data Ascii: ourcesRequired","focusable","preserveAlpha"].forEach((function(e){v[e]=new h(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModul
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 7c 7c 31 3e 6e 7d 72 65 74 75 72 6e 21 31 7d 28 6e 2c 74 2c 6c 2c 72 29 26 26 28 74 3d 6e 75 6c 6c 29 2c 72 7c 7c 6e 75 6c 6c 3d 3d 3d 6c 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 66 2e 63 61 6c 6c 28 6d 2c 65 29 7c 7c 21 66 2e 63 61 6c 6c 28 70 2c 65 29 26 26 28 64 2e 74 65 73 74 28 65 29 3f 6d 5b 65 5d 3d 21 30 3a 28 70 5b 65 5d 3d 21 30 2c 21 31 29 29 7d 28 6e 29 26 26 28 6e 75 6c 6c 3d 3d 3d 74 3f 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 22 22 2b 74 29 29 3a 6c 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3f 65 5b 6c 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 3d 6e 75 6c 6c 3d 3d 3d 74 3f 33 21 3d 3d 6c 2e 74 79 70 65 Data Ascii: turn isNaN(n)\|\|1>n}return!1}(n,t,l,r)&&(t=null),r\|\|null===l?function(e){return!!f.call(m,e)\|\|!f.call(p,e)&&(d.test(e)?m[e]=!0:(p[e]=!0,!1))}(n)&&(null===t?e.removeAttribute(n):e.setAttribute(n,""+t)):l.mustUseProperty?e[l.propertyName]=null===t?3!==l.type
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 61 6e 67 69 6e 67 20 76 2d 69 64 65 6f 67 72 61 70 68 69 63 20 76 2d 6d 61 74 68 65 6d 61 74 69 63 61 6c 20 76 65 63 74 6f 72 2d 65 66 66 65 63 74 20 76 65 72 74 2d 61 64 76 2d 79 20 76 65 72 74 2d 6f 72 69 67 69 6e 2d 78 20 76 65 72 74 2d 6f 72 69 67 69 6e 2d 79 20 77 6f 72 64 2d 73 70 61 63 69 6e 67 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 20 78 2d 68 65 69 67 68 74 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 67 2c 79 29 3b 76 5b 6e 5d 3d 6e 65 77 20 68 28 6e 2c 31 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 22 78 6c 69 6e 6b 3a 61 63 74 75 61 74 65 20 78 6c 69 6e 6b 3a 61 72 63 72 6f 6c 65 20 78 Data Ascii: anging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var n=e.replace(g,y);v[n]=new h(n,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole x
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 66 66 73 63 72 65 65 6e 22 29 3b 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 65 67 61 63 79 5f 68 69 64 64 65 6e 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 61 63 68 65 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 74 72 61 63 69 6e 67 5f 6d 61 72 6b 65 72 22 29 3b 76 61 72 20 4d 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 3f 6e 75 6c 6c 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 65 3d 4d 26 26 65 5b 4d 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 3f 65 3a 6e 75 6c 6c 7d 76 61 72 20 44 2c 49 3d 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: ffscreen");Symbol.for("react.legacy_hidden"),Symbol.for("react.cache"),Symbol.for("react.tracing_marker");var M=Symbol.iterator;function F(e){return null===e\|\|"object"!=typeof e?null:"function"==typeof(e=M&&e[M]\|\|e["@@iterator"])?e:null}var D,I=Object.ass
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 20 55 28 22 4c 61 7a 79 22 29 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 20 55 28 22 53 75 73 70 65 6e 73 65 22 29 3b 63 61 73 65 20 31 39 3a 72 65 74 75 72 6e 20 55 28 22 53 75 73 70 65 6e 73 65 4c 69 73 74 22 29 3b 63 61 73 65 20 30 3a 63 61 73 65 20 32 3a 63 61 73 65 20 31 35 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2c 21 31 29 3b 63 61 73 65 20 31 31 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2e 72 65 6e 64 65 72 2c 21 31 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2c 21 30 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 Data Ascii: U("Lazy");case 13:return U("Suspense");case 19:return U("SuspenseList");case 0:case 2:case 15:return e=A(e.type,!1);case 11:return e=A(e.type.render,!1);case 1:return e=A(e.type,!0);default:return""}}function j(e){if(null==e)return null;if("function"==ty
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 74 4d 6f 64 65 22 3a 22 4d 6f 64 65 22 3b 63 61 73 65 20 32 32 3a 72 65 74 75 72 6e 22 4f 66 66 73 63 72 65 65 6e 22 3b 63 61 73 65 20 31 32 3a 72 65 74 75 72 6e 22 50 72 6f 66 69 6c 65 72 22 3b 63 61 73 65 20 32 31 3a 72 65 74 75 72 6e 22 53 63 6f 70 65 22 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 22 3b 63 61 73 65 20 31 39 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 4c 69 73 74 22 3b 63 61 73 65 20 32 35 3a 72 65 74 75 72 6e 22 54 72 61 63 69 6e 67 4d 61 72 6b 65 72 22 3b 63 61 73 65 20 31 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 37 3a 63 61 73 65 20 32 3a 63 61 73 65 20 31 34 3a 63 61 73 65 20 31 35 3a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 6e 2e 64 69 73 70 6c 61 Data Ascii: tMode":"Mode";case 22:return"Offscreen";case 12:return"Profiler";case 21:return"Scope";case 13:return"Suspense";case 19:return"SuspenseList";case 25:return"TracingMarker";case 1:case 0:case 17:case 2:case 14:case 15:if("function"==typeof n)return n.displa
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 6f 69 64 20 30 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7c 7c 65 2e 62 6f 64 79 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 7d 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 65 63 6b 65 64 3b 72 65 74 75 72 6e 20 49 28 7b 7d 2c 6e 2c 7b 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 65 63 6b 65 64 3a 6e 75 6c 6c 21 3d 74 3f 74 3a 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 2c 6e 29 7b 76 61 72 20 74 3d 6e Data Ascii: oid 0)))return null;try{return e.activeElement\|\|e.body}catch(n){return e.body}}function Y(e,n){var t=n.checked;return I({},n,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=t?t:e._wrapperState.initialChecked})}function X(e,n){var t=n
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 74 3f 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 22 22 2b 74 26 26 28 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 74 29 29 7d 76 61 72 20 6e 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 74 65 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 65 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6e 29 7b 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 74 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 6e 5b 22 24 22 2b 74 5b 6c 5d 5d 3d 21 30 3b 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6c 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 24 22 2b 65 5b Data Ascii: ull==t?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+t&&(e.defaultValue=""+t))}var ne=Array.isArray;function te(e,n,t,r){if(e=e.options,n){n={};for(var l=0;l<t.length;l++)n["$"+t[l]]=!0;for(t=0;t<e.length;t++)l=n.hasOwnProperty("$"+e[

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:50 UTC	810	OUT	GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:50 UTC	727	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:50 GMT Content-Type: application/javascript Content-Length: 21230 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "c26259f649def56fbb3b494c9ae5b5a1" X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=McQ%2BtRetxoO06q4UVuUYRFKZku6xv7PYCkoHKG4rgZAojUyqnmHcmGwaIiffHtT%2FXnEhk7oCu7oilRLT%2BdBEO37RTLSm%2FlFSBFZx80xQaHLt0LFOKRV%2BhM%2FclPkbqKGma8wnIwVREw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcfb7cf902142-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 03:30:50 UTC	642	IN	Data Raw: 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 Data Ascii: var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookie
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 69 73 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 22 22 2c 73 74 61 74 65 3a 22 22 7d 7d 3b 28 6d 3d 67 3d 67 7c 7c 7b 7d 29 5b 6d 2e 44 61 79 73 3d 31 5d 3d 22 44 61 79 73 22 2c 6d 5b 6d 2e 57 65 65 6b 73 3d 37 5d 3d 22 57 65 65 6b 73 22 2c 6d 5b 6d 2e 4d Data Ascii: this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.M
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 65 7c 7c 74 68 69 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 73 74 79 6c 65 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 29 7b 74 68 69 73 2e 72 65 6d 6f 76 Data Ascii: =function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style"!==t.toLowerCase()\|\|e\|\|this.removeAttribute("style"),"style"===t.toLowerCase()&&e){this.remov
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f 76 6f 69 64 20 30 3a 69 2e 5f 5f 67 70 70 3b 69 66 28 69 2e 71 75 65 75 65 3d 69 2e 71 75 65 75 65 7c 7c 5b 5d 2c 69 2e 65 76 65 6e 74 73 3d 69 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 21 74 2e 6c 65 6e 67 74 68 7c 7c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 22 71 75 65 75 65 22 3d 3d Data Ascii: OR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?void 0:i.__gpp;if(i.queue=i.queue\|\|[],i.events=i.events\|\|[],!t.length\|\|1===t.length&&"queue"==
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 7b 69 64 3a 6e 2e 6c 61 73 74 49 64 2c 63 61 6c 6c 62 61 63 6b 3a 74 2c 70 61 72 61 6d 65 74 65 72 3a 65 7d 29 2c 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 6c 69 73 74 65 6e 65 72 52 65 67 69 73 74 65 72 65 64 22 2c 6c 69 73 74 65 6e 65 72 49 64 3a 6e 2e 6c 61 73 74 49 64 2c Data Ascii: dFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.push({id:n.lastId,callback:t,parameter:e}),{eventName:"listenerRegistered",listenerId:n.lastId,
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 3d 22 74 72 75 65 22 3d 3d 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 70 2e 62 61 6e 6e 65 72 Data Ascii: \|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.previewMode="true"===p.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(p.banner
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 Data Ascii: ookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},h.prototype.handleBulkDomainMgmt=function(t,e){window.sessionSt
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 Data Ascii: {void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o=JSON.parse(o)
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 6c 5b 72 5d 26 26 30 3c 3d 6c 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 62 72 65 61 6b 7d 30 3c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 43 6f 75 6e 74 72 69 65 73 2e 69 6e Data Ascii: .length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.RuleSet[u].States;if(l[r]&&0<=l[r].indexOf(s)){i=t.RuleSet[u];break}0<=t.RuleSet[u].Countries.in
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 30 3c 3d 70 2e 45 55 43 4f 55 4e 54 52 49 45 53 2e 69 6e 64 65 78 4f 66 28 74 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 42 6f 6f 6c 65 61 Data Ascii: n(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.oneTrustIABgdprAppliesGlobally=0<=p.EUCOUNTRIES.indexOf(t):p.isStubReady=!1},h.prototype.isBoolea

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:50 UTC	568	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 03:30:50 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 27 Mar 2025 03:30:50 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 926bcfb7ce63566e-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-27 03:30:50 UTC	872	OUT	GET /favicon.ico HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=hcD1LPVsDgA3GxS7966DfyVYXMVy6mKeyQgcNQN3z40-1743046248-1.0.1.1-HVbtFBe.zGGGoF4aC6HWbMrvGb.M3s3OczUZnZyEuTXathYM6nmq4c1tePpdFo5lDMZIhqP1T7085dfKOslhlix9ogxIpCTytbm7IR8DoKZswSPtvDkmKMY.YVVPVIkV
2025-03-27 03:30:50 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 03:30:50 GMT Content-Type: image/vnd.microsoft.icon Transfer-Encoding: chunked Connection: close ETag: W/"ffb25f3edc5c56acfdf7e7cdffcb217c" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3om202svMrzUikTemge8%2F9%2FbUXKiv2a%2BLPP%2F1QCaMOQVx9wlD%2B2kPnPbtvd5XZiSfNkdNzisv3GQW1t1mFFP7opDCYMZhnORw8%2BzuLseiKo30l5EH8GbrFFOkQ%2FzvtdNNnEmdQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926bcfb86fe0c326-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 03:30:50 UTC	456	IN	Data Raw: 39 62 35 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 09 67 49 44 41 54 78 5e ed 9c 0d b0 54 55 1d c0 cf b9 5f fb fd 7c 5f fb f0 21 8f 8f 92 04 b3 52 9f cc 18 90 28 53 d6 a4 98 cd 40 84 f6 01 8a 41 08 53 69 8d 59 7e 94 d9 c8 a7 90 23 98 33 45 c1 34 a0 39 45 4a d9 d0 68 81 02 35 bd 1a 13 1a 34 23 44 94 07 cb 7b 6f df be dd bd bb 7b bf ce bf ff b9 8f 47 4f e2 c1 dd bd bb fb f6 c9 d9 99 c3 79 bb f7 ff f9 fb 9f 7b f7 9e b3 e7 42 88 78 09 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 ef 25 Data Ascii: 9b5PNGIHDR``w8pHYs+gIDATx^TU_\|_!R(S@ASiY~#3E49EJh54#D{o{GOy{Bx %
2025-03-27 03:30:50 UTC	1369	IN	Data Raw: 4b b3 e0 4f ab e6 0a 90 5a 37 ad 45 01 d6 41 fa 3a c7 fa 4b ad 08 6d 59 23 e1 89 ed 0f 4a 9f 7f ea a1 22 b4 ca 22 5a 53 05 48 ad 9d 76 b1 62 1b 07 88 de a5 96 25 bb 22 8d 84 2e 9b b1 55 9e bd f9 96 22 d5 7c 89 4b be b4 cb a8 8c f0 27 a8 76 e1 df c3 05 9f a7 92 ff e7 ae 79 ec d7 f3 1f 2b 63 5a e7 34 55 13 05 48 ac bc ba 4e 61 c6 ab a0 77 9f 33 e0 4a 0b e4 f6 ef 5c 06 bf fd ca fc 4a fb 19 b0 5f 13 05 88 06 95 3f 92 4c 57 ac 5a 49 9f d5 0f 00 d1 f7 ed fe 19 6c 5b 38 a9 1a f1 0c 7b 01 72 1b ae 5d 0c c9 b7 db ab 91 ac 67 1f a6 4e 0a 9d 6f be ec 59 de 87 e0 b0 16 a0 73 e5 d4 20 64 d3 4f f8 88 bf 62 aa 4e d7 c1 66 78 fa 73 df ad 98 83 93 86 87 b5 00 b1 00 dd 00 b9 61 9f 8c 0e c9 38 f7 f6 a1 87 cd 8d b3 82 95 2c 82 52 09 e3 89 55 d7 5c 1c 0d ca 53 35 4d 99 44 a8 Data Ascii: KOZ7EA:KmY#J""ZSHvb%".U"\|K'vy+cZ4UHNaw3J\J_?LWZIl[8{r]gNoYs dObNfxsa8,RU\S5MD
2025-03-27 03:30:50 UTC	667	IN	Data Raw: ab 83 c7 70 a4 0f 8c 78 de f3 b3 83 30 13 cf 22 13 9d f7 d9 44 7a ed a2 fb 3b 4a 4a 18 fe 7e 6f 0b 91 c9 14 b4 3f 0e 0b d0 82 0f 86 c4 f1 2c 6b 61 96 5d 8f 0f 8a 34 82 a5 6b 2c 9f 6a a5 66 f6 ac bb ba b5 b1 1f de e8 16 a0 6f cd 15 db e5 4c f2 c6 8a d1 af 45 c3 78 0d 53 e3 6d 7b b1 52 37 45 ef dc 7d ce ad 19 f0 97 65 71 42 d9 0a 2b d9 77 0b 64 8f 06 ca 91 92 dc 3c f9 1d 9a 58 3d b5 35 a2 1f eb ac e4 e8 2f 47 b0 15 b3 11 ac 23 52 43 c3 47 c2 8b 5e da 37 94 0f d8 f9 85 2d 66 f7 b1 79 e5 66 44 63 e3 88 72 41 88 cd b1 b3 25 9d 89 15 63 52 55 c3 38 c1 64 7a 68 2f fa 8c 9e ee d7 f9 fd ec 7a 60 d6 ab 66 d7 d1 8a 6c 95 87 42 37 de 83 84 9a 96 54 35 e1 5a 74 96 4e 44 f4 1f 4f bf 74 70 68 6c fb 4d 4d 4e 21 73 d0 c9 a5 2b 02 df f5 65 e9 44 32 0a d6 25 b5 c8 a4 da 31 Data Ascii: px0"Dz;JJ~o?,ka]4k,jfoLExSm{R7E}eqB+wd<X=5/G#RCG^7-fyfDcrA%cRU8dzh/z`flB7T5ZtNDOtphlMMN!s+eD2%1
2025-03-27 03:30:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0