Edit tour

Windows Analysis Report
https://up.culturaljourney.de/RwBmy/

Overview

General Information

Sample URL:	https://up.culturaljourney.de/RwBmy/
Analysis ID:	1654842
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2316,i,3549712046442099776,1567641566016638484,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2344 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://up.culturaljourney.de/RwBmy/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3654sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dqcf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 53Access-Control-Allow-Origin: Access-Control-Expose-Headers: Timing-Allow-Origin: *Cache-Control: public, max-age=600, s-maxage=600Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/plain; charset=utf-8ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Accept-Ranges: bytesAge: 0Date: Wed, 02 Apr 2025 15:12:55 GMTX-Served-By: cache-fra-etou8220171-FRA, cache-lga21925-LGAX-Cache: MISS, MISSVary: Accept-Encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 02 Apr 2025 15:12:57 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeServer: cloudflareCache-Control: max-age=14400Cf-Cache-Status: EXPIREDCF-RAY: 92a144744fb01705-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 53Access-Control-Allow-Origin: Access-Control-Expose-Headers: Timing-Allow-Origin: *Cache-Control: public, max-age=600, s-maxage=600Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/plain; charset=utf-8ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Accept-Ranges: bytesDate: Wed, 02 Apr 2025 15:13:16 GMTAge: 21X-Served-By: cache-fra-etou8220171-FRA, cache-lga21965-LGAX-Cache: MISS, HITVary: Accept-Encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Source: chromecache_81.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_85.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_80.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_85.3.dr, chromecache_80.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_85.3.dr, chromecache_80.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.18.109:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.18.109:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.128.240.48:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.230.198:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.230.198:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.132.28:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49780 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2888_656974331

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2888_656974331

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@23/33@33/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2316,i,3549712046442099776,1567641566016638484,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2344 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://up.culturaljourney.de/RwBmy/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2316,i,3549712046442099776,1567641566016638484,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2344 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://up.culturaljourney.de/RwBmy/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://6311340922.sbs/google.php	0%	Avira URL Cloud	safe
https://6311340922-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://up.culturaljourney.de/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	23.216.132.28	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
6311340922.sbs	69.49.230.198	true	false	unknown
s-part-0010.t-0009.t-msedge.net	13.107.246.38	true	false	high
cos.ap-tokyo.myqcloud.com	43.128.240.48	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.250.65.164	true	false	high
up.culturaljourney.de	104.21.18.109	true	true	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
6311340922-1317754460.cos.ap-tokyo.myqcloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=92a1446f1e658c73&lang=auto	false		high
https://up.culturaljourney.de/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/92a1446f1e658c73/1743606777534/f05027ec23f351c57707e79444ace3cf3f6c708f7f4a8ce5cafc6e1fe45ed5bb/9G5QeUUIGBFuPcx	false		high
https://6311340922.sbs/google.php	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=BymprMFwChSFxVrjtXhcxR7JLDRsogL4Iquyfly34uI8x5DfFVXbzUVnNPRrtliMiNP9VrArJ5bTp%2F2M70h5Oj4btrhmcryMgsiaDc2o3RcEN5P%2BDZzV0RWLlZQzk0GPXVuTknjR%2FXs%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/92a1446f1e658c73/1743606777532/xFwJotzXhqpn4jv	false		high
https://challenges.cloudflare.com/turnstile/v0/g/64912bd87b0e/api.js	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://6311340922-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png	false		high
https://up.culturaljourney.de/RwBmy/	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_85.3.dr, chromecache_80.3.dr	false	high
https://getbootstrap.com)	chromecache_85.3.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_85.3.dr, chromecache_80.3.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_81.3.dr	false	high
https://getbootstrap.com/)	chromecache_80.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.18.109	up.culturaljourney.de	United States	13335	CLOUDFLARENETUS	true
43.128.240.48	cos.ap-tokyo.myqcloud.com	Japan	4249	LILLY-ASUS	false
23.209.72.9	unknown	United States	20940	AKAMAI-ASN1EU	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
69.49.230.198	6311340922.sbs	United States	46606	UNIFIEDLAYER-AS-1US	false
23.216.132.28	e329293.dscd.akamaiedge.net	United States	7016	CCCH-3US	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.65.164	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1654842
Start date and time:	2025-04-02 17:11:45 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://up.culturaljourney.de/RwBmy/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@23/33@33/14

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.32.110, 142.251.40.195, 172.253.122.84, 142.251.35.174, 142.251.40.142, 142.250.65.206, 23.203.176.221, 199.232.214.172, 142.250.80.110, 142.251.40.238, 142.251.40.138, 142.250.64.74, 142.250.65.234, 142.251.41.10, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.64.106, 142.251.40.170, 142.250.80.106, 142.250.80.74, 142.250.81.234, 142.250.65.170, 142.251.40.202, 142.250.176.202, 142.251.40.234, 142.250.65.202, 142.250.64.110, 199.232.210.172, 142.251.40.99, 142.250.65.174, 142.251.40.227, 142.251.40.110, 184.31.69.3, 131.253.33.254, 20.12.23.50, 13.107.246.38
Excluded domains from analysis (whitelisted): a-ring-fallback.msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, ocsp.digicert.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://up.culturaljourney.de/RwBmy/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Source: https://up.culturaljourney.de/RwBmy/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'up.culturaljourney.de' does not match the legitimate domain 'microsoft.com'., The domain 'culturaljourney.de' does not have any known association with Microsoft., The presence of an unrelated domain name suggests a potential phishing attempt., The input field email 'h5u75p@rctey.com' does not provide any direct association with Microsoft. DOM: 0.5.pages.csv
Source: https://up.culturaljourney.de/RwBmy/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'up.culturaljourney.de' does not match the legitimate domain 'microsoft.com'., The domain 'culturaljourney.de' does not have any known association with Microsoft., The presence of a seemingly unrelated domain name suggests potential phishing., The input field email 'h5u75p@rcley.com' does not provide any direct association with Microsoft. DOM: 0.6.pages.csv

Source: Yara match	File source: 0.5.pages.csv, type: HTML
Source: Yara match	File source: 0.6.pages.csv, type: HTML

Source: https://up.culturaljourney.de/RwBmy/	Joe Sandbox AI: Page contains button: 'Verifying...' Source: '0.0.pages.csv'
Source: https://up.culturaljourney.de/RwBmy/	Joe Sandbox AI: Page contains button: 'Verify you are human' Source: '0.3.pages.csv'

Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: Invalid link: Privacy statement
Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: Invalid link: Privacy statement

Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No favicon
Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No favicon
Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No favicon
Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No favicon
Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No favicon

Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No <meta name="author".. found
Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No <meta name="author".. found

Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No <meta name="copyright".. found
Source: https://up.culturaljourney.de/RwBmy/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.121.28
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.121.28
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.121.28
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.121.28
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.40.151
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /RwBmy/ HTTP/1.1Host: up.culturaljourney.deConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/64912bd87b0e/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=92a1446f1e658c73&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: up.culturaljourney.deConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://up.culturaljourney.de/RwBmy/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3i258lg42jktkmq0dahjammkv7
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/92a1446f1e658c73/1743606777532/xFwJotzXhqpn4jv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/92a1446f1e658c73/1743606777532/xFwJotzXhqpn4jv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/92a1446f1e658c73/1743606777534/f05027ec23f351c57707e79444ace3cf3f6c708f7f4a8ce5cafc6e1fe45ed5bb/9G5QeUUIGBFuPcx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://up.culturaljourney.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://up.culturaljourney.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://up.culturaljourney.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 6311340922-1317754460.cos.ap-tokyo.myqcloud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6311340922.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://up.culturaljourney.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6311340922.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6311340922.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6311340922.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: up.culturaljourney.de
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6311340922-1317754460.cos.ap-tokyo.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 6311340922.sbs
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 17:12:48.125545979 CEST	53	52148	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:48.190330982 CEST	53	65341	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:49.018043995 CEST	53	61175	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:49.076467991 CEST	53	64765	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:52.002873898 CEST	58676	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:52.003173113 CEST	54603	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:52.105370045 CEST	53	54603	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:52.105530977 CEST	53	58676	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:53.591330051 CEST	55968	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:53.591558933 CEST	50716	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:53.817138910 CEST	53	55968	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:53.819132090 CEST	53	50716	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:54.514086962 CEST	55942	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:54.514683962 CEST	54679	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:54.515753984 CEST	62208	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:54.515909910 CEST	61990	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:54.619940996 CEST	53	61990	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:54.620282888 CEST	53	55942	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:54.621272087 CEST	53	54679	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:54.622575045 CEST	53	62208	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:55.664362907 CEST	51394	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:55.664362907 CEST	50266	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:55.769495964 CEST	53	51394	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:55.777316093 CEST	53	50266	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:56.827756882 CEST	58890	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:56.827982903 CEST	50300	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:56.931143045 CEST	53	58890	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:56.952940941 CEST	53	50300	1.1.1.1	192.168.2.4
Apr 2, 2025 17:12:57.262705088 CEST	54797	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:57.263137102 CEST	59611	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:12:57.378447056 CEST	53	54797	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:06.043160915 CEST	53	57284	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.367681980 CEST	49250	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.367906094 CEST	63828	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.368432999 CEST	58348	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.368591070 CEST	50075	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.369043112 CEST	63038	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.369224072 CEST	50286	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.376327038 CEST	59244	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.376543999 CEST	51458	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.377134085 CEST	53771	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.378418922 CEST	62409	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:12.472845078 CEST	53	50075	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.472904921 CEST	53	63038	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.472943068 CEST	53	49250	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.473165989 CEST	53	58348	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.473520041 CEST	53	50286	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.473993063 CEST	53	63828	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.474766970 CEST	53	63167	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.480714083 CEST	53	51458	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.535574913 CEST	53	59244	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:12.712100029 CEST	53	62409	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:13.393291950 CEST	50677	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:13.680135965 CEST	53	53771	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:13.923144102 CEST	53	50677	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:15.839741945 CEST	60250	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:15.840007067 CEST	58209	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:15.991198063 CEST	53	58209	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:16.043236971 CEST	53	60250	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:18.976381063 CEST	49875	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:18.976670980 CEST	54110	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:19.106920958 CEST	53	49875	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:19.247704029 CEST	53	54110	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:22.000853062 CEST	64227	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:22.001385927 CEST	59493	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:22.108226061 CEST	53	64227	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:22.109679937 CEST	53	59493	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:22.219839096 CEST	53	58413	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:22.544889927 CEST	57510	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:22.545120001 CEST	64838	53	192.168.2.4	1.1.1.1
Apr 2, 2025 17:13:22.656575918 CEST	53	57510	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:22.672909021 CEST	53	64838	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:25.064944983 CEST	53	63137	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:47.666412115 CEST	53	57785	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:47.824745893 CEST	53	61099	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:50.435225964 CEST	53	50486	1.1.1.1	192.168.2.4
Apr 2, 2025 17:13:51.885474920 CEST	138	138	192.168.2.4	192.168.2.255

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 2, 2025 17:12:49.018904924 CEST	192.168.2.4	1.1.1.1	c222	(Port unreachable)	Destination Unreachable
Apr 2, 2025 17:13:13.923219919 CEST	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Apr 2, 2025 17:13:19.247812033 CEST	192.168.2.4	1.1.1.1	c222	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:54 UTC	677	OUT	GET /RwBmy/ HTTP/1.1 Host: up.culturaljourney.de Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:54 UTC	994	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:12:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=3i258lg42jktkmq0dahjammkv7; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BymprMFwChSFxVrjtXhcxR7JLDRsogL4Iquyfly34uI8x5DfFVXbzUVnNPRrtliMiNP9VrArJ5bTp%2F2M70h5Oj4btrhmcryMgsiaDc2o3RcEN5P%2BDZzV0RWLlZQzk0GPXVuTknjR%2FXs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a14462eac4c794-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103646&min_rtt=102510&rtt_var=22776&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1249&delivery_rate=36305&cwnd=222&unsent_bytes=0&cid=275fbeeee416c6c7&ts=429&x=0"
2025-04-02 15:12:54 UTC	375	IN	Data Raw: 31 30 62 33 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 70 61 72 61 64 6f 78 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 6e 20 69 6e 6e 6f 76 61 74 69 76 65 20 61 72 63 68 69 74 65 63 74 20 64 65 73 69 67 6e 65 64 20 61 20 73 75 73 74 61 69 6e 61 62 6c 65 20 68 6f 75 73 65 20 75 73 69 6e 67 20 72 65 63 79 63 6c 65 64 20 6d 61 74 65 72 69 61 6c 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f Data Ascii: 10b3 <html lang="en"> <head> <meta charset="UTF-8"> <title>paradox</title> ... <span>An innovative architect designed a sustainable house using recycled materials.</span> --> <meta name="robots" content="no
2025-04-02 15:12:54 UTC	1369	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 54 68 65 20 65 6e 67 69 6e 65 65 72 20 62 75 69 6c 74 20 61 6e 20 61 64 76 61 6e 63 65 64 20 72 6f 62 6f 74 20 74 68 61 74 20 61 73 73 69 73 74 65 64 20 64 69 73 61 62 6c 65 64 20 69 6e 64 69 76 69 64 75 61 6c 73 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 41 20 68 69 73 74 6f 72 69 61 6e 20 74 72 61 6e 73 6c 61 74 65 64 20 61 6e 63 69 65 6e 74 20 74 65 78 74 73 20 74 68 61 74 20 Data Ascii: https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>The engineer built an advanced robot that assisted disabled individuals.</p> --> <style> * /* A historian translated ancient texts that
2025-04-02 15:12:54 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 64 20 61 6e 63 69 65 6e 74 20 74 65 78 74 73 20 74 68 61 74 20 72 65 76 65 61 6c 65 64 20 6c 6f 73 74 20 68 69 73 74 6f 72 69 63 61 6c 20 6b 6e 6f 77 6c 65 64 67 65 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 65 Data Ascii: ranslated ancient texts that revealed lost historical knowledge. */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px; } @media (max-width: 768px) { .e
2025-04-02 15:12:54 UTC	1170	IN	Data Raw: 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 41 20 74 65 61 6d 20 6f 66 20 6d 61 72 69 6e 65 20 62 69 6f 6c 6f 67 69 73 74 73 20 73 74 75 64 69 65 64 20 63 6f 72 61 6c 20 72 65 65 66 73 20 74 6f 20 68 65 6c 70 20 77 69 74 68 20 63 6f 6e 73 65 72 76 61 74 69 6f 6e 20 65 66 66 6f 72 74 73 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 42 41 75 67 50 36 61 73 72 62 63 4b 6e 38 4d 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 6a 6f 75 72 6e 65 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 21 2d 2d 20 54 68 65 20 Data Ascii: --> ... A team of marine biologists studied coral reefs to help with conservation efforts. --> <span class="cf-turnstile" data-sitekey="0x4AAAAAABAugP6asrbcKn8M" data-callback="journey"> </span>... The
2025-04-02 15:12:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:54 UTC	671	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://up.culturaljourney.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:55 UTC	682	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 53 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=600, s-maxage=600 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/plain; charset=utf-8 ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4" Accept-Ranges: bytes Age: 0 Date: Wed, 02 Apr 2025 15:12:55 GMT X-Served-By: cache-fra-etou8220171-FRA, cache-lga21925-LGA X-Cache: MISS, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-04-02 15:12:55 UTC	53	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 66 65 74 63 68 20 76 65 72 73 69 6f 6e 20 69 6e 66 6f 20 66 6f 72 20 70 72 61 6e 61 79 6e 61 6d 6e 61 69 6b 2f 66 69 6c 65 73 2e Data Ascii: Failed to fetch version info for pranaynamnaik/files.

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:54 UTC	590	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://up.culturaljourney.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:55 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 02 Apr 2025 15:12:55 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/64912bd87b0e/api.js Server: cloudflare CF-RAY: 92a14467e97441ad-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:55 UTC	605	OUT	GET /turnstile/v0/g/64912bd87b0e/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://up.culturaljourney.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:55 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:12:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Mon, 31 Mar 2025 18:19:53 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 92a1446b0fe26180-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:12:55 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-04-02 15:12:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:55 UTC	846	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://up.culturaljourney.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:56 UTC	1297	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:12:56 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28101 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-eajRHyuCHMlAV0ag' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-04-02 15:12:56 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-04-02 15:12:56 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 65 61 6a 52 48 79 75 43 48 4d 6c 41 56 30 61 67 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-eajRHyuCHMlAV0ag' 'unsafe-
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 76 65 72 69 66 79 69 6e 67 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 Data Ascii: align:right}#overrun-i,#verifying-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 Data Ascii: -shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #e
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 34 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 Data Ascii: 41}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:activ
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 Data Ascii: .theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link,.theme-dark .er
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 74 68 3a 36 70 78 7d 2e 63 62 2d 6c 62 20 2e 63 Data Ascii: ackground-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);width:6px}.cb-lb .c
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e Data Ascii: ace-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0}.size-compact .
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f Data Ascii: ;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{color:#232323;fo

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:56 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=92a1446f1e658c73&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:56 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:12:56 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113923 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 92a14472987f5f83-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:12:56 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 68 66 50 72 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 Data Ascii: window._cf_chl_opt.hfPr5={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 22 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 25 32 30 67 75 69 64 65 6c 69 6e 65 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 Data Ascii: rnstile_refresh":"Refresh","testing_only":"Testing%20only.","turnstile_feedback_description":"Send%20Feedback","turnstile_success":"Success%21","feedback_report_guideline":"Troubleshooting%20guidelines","turnstile_timeout":"Timed%20out","turnstile_feedbac
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4c 2c 65 4d 2c 65 4e 2c 65 55 2c 65 59 2c 65 5a 2c 66 33 2c 66 34 2c 66 37 2c 66 38 2c 66 79 2c 66 42 2c 66 45 2c 66 47 2c 66 48 2c 66 49 2c 66 Data Ascii: le_overrun_description":"Stuck%20here%3F"},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_guideline":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gL,eM,eN,eU,eY,eZ,f3,f4,f7,f8,fy,fB,fE,fG,fH,fI,f
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 36 34 35 29 5d 5b 68 69 28 31 35 38 31 29 5d 26 26 28 43 3d 43 5b 68 69 28 38 30 39 29 5d 28 68 5b 68 69 28 36 34 35 29 5d 5b 68 69 28 31 35 38 31 29 5d 28 69 29 29 29 2c 43 3d 68 5b 68 69 28 33 36 33 29 5d 5b 68 69 28 38 34 32 29 5d 26 26 68 5b 68 69 28 31 34 31 39 29 5d 3f 68 5b 68 69 28 33 36 33 29 5d 5b 68 69 28 38 34 32 29 5d 28 6e 65 77 20 68 5b 28 68 69 28 31 34 31 39 29 29 5d 28 43 29 29 3a 66 75 6e 63 74 69 6f 6e 28 49 2c 68 6b 2c 4a 29 7b 66 6f 72 28 68 6b 3d 68 69 2c 49 5b 68 6b 28 31 33 30 37 29 5d 28 29 2c 4a 3d 30 3b 4a 3c 49 5b 68 6b 28 31 32 33 37 29 5d 3b 78 5b 68 6b 28 32 36 37 29 5d 28 49 5b 4a 5d 2c 49 5b 4a 2b 31 5d 29 3f 49 5b 68 6b 28 31 36 32 38 29 5d 28 4a 2b 31 2c 31 29 3a 4a 2b 3d 31 29 3b 72 65 74 75 72 6e 20 49 7d 28 43 29 2c Data Ascii: 645)][hi(1581)]&&(C=C[hi(809)](h[hi(645)][hi(1581)](i))),C=h[hi(363)][hi(842)]&&h[hi(1419)]?h[hi(363)][hi(842)](new h[(hi(1419))](C)):function(I,hk,J){for(hk=hi,I[hk(1307)](),J=0;J<I[hk(1237)];x[hk(267)](I[J],I[J+1])?I[hk(1628)](J+1,1):J+=1);return I}(C),
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 25 6d 7d 2c 27 6e 64 49 4b 68 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2b 6d 7d 2c 27 56 41 68 77 49 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 26 6d 7d 7d 2c 6b 2c 68 3d 33 32 2c 6a 3d 66 5b 69 31 28 31 33 32 30 29 5d 28 65 4d 5b 69 31 28 31 34 38 38 29 5d 5b 69 31 28 33 37 38 29 5d 2c 27 5f 27 29 2b 30 2c 6a 3d 6a 5b 69 31 28 32 38 33 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 2c 69 32 2c 78 2c 42 2c 43 2c 44 2c 45 29 7b 69 66 28 69 32 3d 69 31 2c 66 5b 69 32 28 36 35 35 29 5d 28 66 5b 69 32 28 37 32 35 29 5d 2c 66 5b 69 32 28 36 33 38 29 5d 29 29 68 5e 3d 6a 5b 69 32 28 31 33 36 32 29 5d 28 6d 29 3b 65 6c 73 65 20 66 6f 72 28 Data Ascii: ion(l,m){return l%m},'ndIKh':function(l,m){return l+m},'VAhwI':function(l,m){return l&m}},k,h=32,j=f[i1(1320)](eM[i1(1488)][i1(378)],'_')+0,j=j[i1(283)](/./g,function(l,m,i2,x,B,C,D,E){if(i2=i1,f[i2(655)](f[i2(725)],f[i2(638)]))h^=j[i2(1362)](m);else for(
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 53 27 3a 65 4d 5b 69 34 28 31 34 38 38 29 5d 5b 69 34 28 34 39 39 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 69 34 28 39 37 32 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 69 34 28 31 34 38 38 29 5d 5b 69 34 28 38 30 34 29 5d 7d 2c 27 2a 27 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4c 28 31 35 30 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 69 35 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 76 2c 78 2c 42 29 7b 6b 3d 28 69 35 3d 67 4c 2c 6a 3d 7b 7d 2c 6a 5b 69 35 28 37 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 7d 2c 6a 5b 69 35 28 38 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 44 3d 3d 3d 43 7d 2c 6a 5b 69 35 28 31 30 32 33 29 5d 3d 69 35 28 31 34 35 34 29 Data Ascii: S':eM[i4(1488)][i4(499)],'code':e[i4(972)],'rcV':eM[i4(1488)][i4(804)]},'*')},g)},eM[gL(1509)]=function(g,h,i,i5,j,k,l,m,n,o,s,v,x,B){k=(i5=gL,j={},j[i5(779)]=function(C,D){return C instanceof D},j[i5(879)]=function(C,D){return D===C},j[i5(1023)]=i5(1454)
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 72 6f 72 29 29 3f 65 5b 69 36 28 39 31 39 29 5d 28 65 5b 69 36 28 34 34 38 29 5d 2c 69 36 28 38 32 37 29 29 3f 28 66 3d 64 5b 69 36 28 31 32 35 39 29 5d 2c 64 5b 69 36 28 31 34 32 31 29 5d 26 26 74 79 70 65 6f 66 20 64 5b 69 36 28 31 34 32 31 29 5d 3d 3d 3d 65 5b 69 36 28 31 31 30 31 29 5d 29 26 26 28 6a 3d 64 5b 69 36 28 31 34 32 31 29 5d 5b 69 36 28 36 39 34 29 5d 28 27 5c 6e 27 29 2c 6a 5b 69 36 28 31 32 33 37 29 5d 3e 31 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 69 36 28 38 39 33 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 70 61 72 73 65 49 6e 74 28 6c 5b 32 5d 2c 31 30 29 2c 69 3d 65 5b 69 36 28 31 32 32 31 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c Data Ascii: ror))?e[i6(919)](e[i6(448)],i6(827))?(f=d[i6(1259)],d[i6(1421)]&&typeof d[i6(1421)]===e[i6(1101)])&&(j=d[i6(1421)][i6(694)]('\n'),j[i6(1237)]>1)&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][i6(893)](k),l&&(g=l[1],h=parseInt(l[2],10),i=e[i6(1221)](parseInt,l[3],
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 7d 2c 27 48 4b 50 6b 4e 27 3a 69 53 28 31 33 35 34 29 2c 27 77 4e 71 64 78 27 3a 69 53 28 37 32 36 29 7d 2c 65 3d 63 5b 69 53 28 31 36 32 33 29 5d 2c 65 26 26 64 5b 69 53 28 35 35 33 29 5d 28 65 5b 69 53 28 33 39 33 29 5d 2c 69 53 28 31 33 30 33 29 29 26 26 64 5b 69 53 28 35 35 33 29 5d 28 65 5b 69 53 28 31 31 30 36 29 5d 2c 64 5b 69 53 28 31 33 33 36 29 5d 29 3f 67 65 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 54 29 7b 69 54 3d 69 53 2c 69 54 28 31 33 35 39 29 21 3d 3d 69 54 28 39 39 32 29 3f 67 45 28 29 3a 28 64 5b 69 54 28 35 34 38 29 5d 28 65 2c 69 54 28 33 37 39 29 29 5b 69 54 28 37 35 31 29 5d 5b 69 54 28 35 36 36 29 5d 28 69 54 28 31 35 39 31 29 29 2c 66 28 69 54 28 35 31 31 29 29 29 7d 2c 31 65 33 29 3a 65 26 26 64 5b 69 Data Ascii: },'HKPkN':iS(1354),'wNqdx':iS(726)},e=c[iS(1623)],e&&d[iS(553)](e[iS(393)],iS(1303))&&d[iS(553)](e[iS(1106)],d[iS(1336)])?ge=setInterval(function(iT){iT=iS,iT(1359)!==iT(992)?gE():(d[iT(548)](e,iT(379))[iT(751)][iT(566)](iT(1591)),f(iT(511)))},1e3):e&&d[i
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 66 54 48 41 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 58 65 61 4f 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 58 74 4a 44 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 44 5a 71 49 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 5a 45 6d 55 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 54 56 6a 48 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 43 69 4f 6f 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 61 46 4f 53 7a 27 3a 66 75 6e 63 74 69 6f Data Ascii: fTHAD':function(h,i){return i==h},'XeaOm':function(h,i){return h==i},'XtJDh':function(h,i){return h+i},'DZqIs':function(h,i){return h>i},'ZEmUS':function(h,i){return h<i},'TVjHQ':function(h,i){return h-i},'CiOon':function(h,i){return h(i)},'aFOSz':functio
2025-04-02 15:12:56 UTC	1369	IN	Data Raw: 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 6a 76 28 31 32 33 37 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 6a 76 28 31 33 34 33 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 6a 76 28 31 35 32 33 29 5d 5b 6a 76 28 31 35 35 32 29 5d 5b 6a 76 28 38 37 38 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 64 5b 6a 76 28 31 33 37 37 29 5d 28 43 2c 4b 29 2c 4f 62 6a 65 63 74 5b 6a 76 28 31 35 32 33 29 5d 5b 6a 76 28 31 35 35 32 29 5d 5b 6a 76 28 38 37 38 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 76 28 31 35 32 33 29 5d 5b 6a 76 28 31 35 35 32 29 5d 5b 6a 76 28 38 37 38 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 6a 76 28 36 32 32 29 5d 28 32 Data Ascii: ,E=3,F=2,G=[],H=0,I=0,J=0;J<i[jv(1237)];J+=1)if(K=i[jv(1343)](J),Object[jv(1523)][jv(1552)][jv(878)](x,K)\|\|(x[K]=E++,B[K]=!0),L=d[jv(1377)](C,K),Object[jv(1523)][jv(1552)][jv(878)](x,L))C=L;else{if(Object[jv(1523)][jv(1552)][jv(878)](B,C)){if(d[jv(622)](2

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:56 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:56 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:12:56 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 92a14472afc6426d-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:12:56 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:56 UTC	657	OUT	GET /favicon.ico HTTP/1.1 Host: up.culturaljourney.de Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://up.culturaljourney.de/RwBmy/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3i258lg42jktkmq0dahjammkv7
2025-04-02 15:12:57 UTC	291	IN	HTTP/1.1 404 Not Found Date: Wed, 02 Apr 2025 15:12:57 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: max-age=14400 Cf-Cache-Status: EXPIRED CF-RAY: 92a144744fb01705-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:12:57 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-04-02 15:12:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://up.culturaljourney.de/RwBmy/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

Windows Analysis Report
https://up.culturaljourney.de/RwBmy/

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:57 UTC	1190	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3654 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:57 UTC	3654	OUT	Data Raw: 66 49 4a 50 65 50 4a 50 66 50 39 50 42 70 6e 4f 70 6e 53 50 70 74 50 47 33 4a 63 6e 76 70 57 6c 6e 48 64 6e 52 33 50 70 72 6e 4b 50 4a 41 63 6e 39 31 4a 6e 69 71 31 6e 71 4a 52 6c 6e 51 50 44 36 4c 39 31 58 6a 31 4a 6e 38 6e 6e 36 4c 75 6e 4c 53 52 74 39 72 6e 70 76 6e 49 50 54 46 6e 30 54 77 4f 31 6e 4d 68 68 36 68 52 43 50 72 69 24 35 75 6e 72 2b 31 6e 41 50 62 37 7a 31 63 69 36 52 65 6e 24 77 76 58 45 2d 55 76 32 45 68 74 6e 66 42 63 6e 4a 4a 33 6e 4a 53 4a 63 58 31 64 35 6e 6e 78 72 6e 4c 71 52 65 79 79 69 6a 51 39 35 77 52 44 69 50 7a 46 6e 4c 51 4c 6e 62 63 6e 30 51 71 70 74 52 55 6a 6e 4c 4a 57 6e 66 6f 36 48 76 69 39 6e 54 6f 36 65 33 6e 6c 6e 39 41 65 6e 72 6f 50 46 7a 61 62 53 33 4c 34 65 42 54 33 58 43 2b 72 6e 71 51 52 54 44 5a 6e 68 77 4c 79 Data Ascii: fIJPePJPfP9PBpnOpnSPptPG3JcnvpWlnHdnR3PprnKPJAcn91Jniq1nqJRlnQPD6L91Xj1Jn8nn6LunLSRt9rnpvnIPTFn0TwO1nMhh6hRCPri$5unr+1nAPb7z1ci6Ren$wvXE-Uv2EhtnfBcnJJ3nJSJcX1d5nnxrnLqReyyijQ95wRDiPzFnLQLnbcn0QqptRUjnLJWnfo6Hvi9nTo6e3nln9AenroPFzabS3L4eBT3XC+rnqQRTDZnhwLy
2025-04-02 15:12:57 UTC	1051	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:12:57 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 228492 Connection: close cf-chl-gen: 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$1H04Xw+baddfleU6MD/yDQ== Server: cloudflare CF-RAY: 92a14476cfdad218-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:12:57 UTC	318	IN	Data Raw: 6c 72 32 63 74 35 32 36 69 73 61 68 76 72 79 6c 76 61 47 4c 71 4c 48 49 73 4b 6d 77 6b 64 4b 32 31 38 75 37 71 5a 69 33 74 65 4c 64 75 4e 2f 62 32 39 71 6b 31 4d 7a 49 70 37 6e 42 34 37 7a 4f 73 2b 48 45 31 38 6e 5a 79 64 7a 64 33 4e 53 2f 2f 41 47 38 75 77 50 66 2b 64 76 55 34 67 4c 6a 31 2f 7a 4f 37 4e 73 52 33 42 51 53 41 65 50 79 31 65 4c 6a 37 2b 62 58 32 66 34 58 45 42 30 53 34 69 4c 6c 4a 2b 59 42 39 69 54 72 36 76 73 45 37 42 77 47 38 69 77 4a 4e 43 4d 56 4b 41 66 38 39 66 77 34 38 6b 41 73 50 50 5a 45 42 6a 51 47 53 6b 56 4a 4a 41 78 4b 50 68 45 70 52 42 30 2b 4e 51 30 75 52 78 41 34 53 54 4d 34 58 54 67 66 4d 30 41 36 4c 31 6f 34 4e 6b 46 63 4a 31 52 47 56 6b 38 70 52 32 46 4a 58 32 35 49 52 32 46 51 56 33 5a 53 54 46 78 50 61 7a 74 75 56 6c 77 Data Ascii: lr2ct526isahvrylvaGLqLHIsKmwkdK218u7qZi3teLduN/b29qk1MzIp7nB47zOs+HE18nZydzd3NS//AG8uwPf+dvU4gLj1/zO7NsR3BQSAePy1eLj7+bX2f4XEB0S4iLlJ+YB9iTr6vsE7BwG8iwJNCMVKAf89fw48kAsPPZEBjQGSkVJJAxKPhEpRB0+NQ0uRxA4STM4XTgfM0A6L1o4NkFcJ1RGVk8pR2FJX25IR2FQV3ZSTFxPaztuVlw
2025-04-02 15:12:57 UTC	1369	IN	Data Raw: 6d 68 70 6d 36 4e 6a 5a 42 7a 6a 5a 4f 57 6e 4a 44 42 6f 4b 43 56 72 61 4b 36 73 35 4b 2f 7a 4b 57 63 77 73 57 69 6e 4d 57 4f 79 34 66 46 78 73 6a 4d 75 37 6d 37 30 4e 32 75 74 64 2f 4f 6d 74 2b 39 76 39 6d 31 77 73 50 54 6e 75 53 74 77 36 6e 41 71 4e 4c 31 7a 4f 61 7a 35 2b 72 50 36 72 50 31 7a 65 2f 75 37 4e 6a 75 38 4d 37 6b 31 75 62 32 41 75 58 6e 78 2b 49 51 78 38 38 44 7a 68 58 75 43 67 34 4e 34 2f 58 30 38 4e 6e 38 32 68 54 62 45 77 44 67 42 66 30 62 49 50 45 48 34 76 54 66 42 68 6b 51 4a 41 41 65 43 42 4c 75 49 69 49 55 50 50 6f 75 44 66 63 4d 48 7a 41 52 39 51 42 46 4d 41 4d 57 49 79 63 2b 53 43 34 6e 55 56 45 70 43 53 30 56 44 6b 67 50 53 78 51 38 4f 6a 70 59 52 7a 67 33 54 69 4d 35 57 43 52 52 5a 43 42 55 4a 53 5a 68 50 55 77 6f 59 45 39 50 5a Data Ascii: mhpm6NjZBzjZOWnJDBoKCVraK6s5K/zKWcwsWinMWOy4fFxsjMu7m70N2utd/Omt+9v9m1wsPTnuStw6nAqNL1zOaz5+rP6rP1ze/u7Nju8M7k1ub2AuXnx+IQx88DzhXuCg4N4/X08Nn82hTbEwDgBf0bIPEH4vTfBhkQJAAeCBLuIiIUPPouDfcMHzAR9QBFMAMWIyc+SC4nUVEpCS0VDkgPSxQ8OjpYRzg3TiM5WCRRZCBUJSZhPUwoYE9PZ
2025-04-02 15:12:57 UTC	1369	IN	Data Raw: 5a 68 61 32 36 66 35 65 4a 65 71 7a 42 72 5a 4a 39 67 36 6d 64 70 62 36 70 69 71 75 71 30 61 79 4b 78 5a 53 65 79 4a 53 50 32 36 4f 75 71 71 37 49 75 4d 37 52 72 4c 65 64 35 70 37 43 77 4d 44 6a 76 2b 44 72 34 73 75 6e 36 39 76 41 79 38 54 55 39 37 6e 33 7a 62 62 6f 79 64 58 50 75 37 6a 64 30 72 66 41 42 2b 58 57 38 2f 58 4a 2b 4d 7a 6c 79 67 44 4d 36 64 49 4f 30 77 41 54 47 65 54 61 44 75 55 49 43 4e 6b 64 39 51 51 6c 37 75 51 56 48 4f 67 4b 43 65 6b 44 42 76 76 72 48 42 41 42 41 52 2f 73 42 66 62 76 2b 67 59 6c 45 78 46 42 2b 53 49 31 46 50 34 57 4e 51 4a 4a 47 7a 67 48 4f 52 5a 41 4b 41 34 66 56 43 67 4e 4b 30 41 32 46 56 64 59 4e 43 6b 6e 53 79 67 59 4f 69 39 63 59 56 64 68 4d 45 55 39 4e 56 70 42 52 44 6b 35 4b 43 34 38 53 31 4a 53 62 58 56 7a 57 6c Data Ascii: Zha26f5eJeqzBrZJ9g6mdpb6piquq0ayKxZSeyJSP26Ouqq7IuM7RrLed5p7CwMDjv+Dr4sun69vAy8TU97n3zbboydXPu7jd0rfAB+XW8/XJ+MzlygDM6dIO0wATGeTaDuUICNkd9QQl7uQVHOgKCekDBvvrHBABAR/sBfbv+gYlExFB+SI1FP4WNQJJGzgHORZAKA4fVCgNK0A2FVdYNCknSygYOi9cYVdhMEU9NVpBRDk5KC48S1JSbXVzWl
2025-04-02 15:12:57 UTC	1369	IN	Data Raw: 72 6e 78 2b 6f 61 4f 6c 6f 36 4b 53 69 5a 72 4d 70 71 43 72 6f 4a 2b 63 7a 4a 4b 68 74 71 33 4f 78 70 4c 58 71 4b 33 52 74 4a 6d 74 73 35 7a 4e 6d 4e 44 64 75 75 58 56 33 73 4b 36 37 63 6a 53 71 4c 75 2f 74 63 44 41 7a 4d 58 75 38 2b 66 36 35 2f 7a 4b 76 77 48 39 37 67 4c 67 76 2b 54 36 39 65 6e 56 2b 76 59 46 35 52 50 79 34 75 6a 30 7a 64 55 55 42 39 62 35 45 51 6b 4a 32 4f 44 66 41 51 48 78 39 66 67 45 47 41 49 44 48 69 63 59 42 69 49 77 2b 7a 51 41 4b 77 6f 43 43 51 7a 76 45 54 77 6f 50 43 73 4f 4d 50 73 6a 4f 54 6a 39 50 79 59 71 42 44 59 45 54 41 67 74 47 6b 51 74 42 52 42 4b 51 6a 51 34 51 69 6b 6c 4a 6b 68 52 46 7a 4a 50 48 53 46 4f 54 7a 38 68 4a 6a 64 69 59 53 67 6d 57 6d 74 61 53 31 74 48 51 79 39 57 64 47 6b 78 65 33 73 38 58 44 31 31 65 55 39 Data Ascii: rnx+oaOlo6KSiZrMpqCroJ+czJKhtq3OxpLXqK3RtJmts5zNmNDduuXV3sK67cjSqLu/tcDAzMXu8+f65/zKvwH97gLgv+T69enV+vYF5RPy4uj0zdUUB9b5EQkJ2ODfAQHx9fgEGAIDHicYBiIw+zQAKwoCCQzvETwoPCsOMPsjOTj9PyYqBDYETAgtGkQtBRBKQjQ4QiklJkhRFzJPHSFOTz8hJjdiYSgmWmtaS1tHQy9WdGkxe3s8XD11eU9
2025-04-02 15:12:57 UTC	1369	IN	Data Raw: 49 47 31 6e 62 6d 45 69 34 7a 52 75 73 53 4b 6a 61 47 6f 72 64 58 4a 75 35 6a 58 32 72 2b 71 71 72 66 53 79 38 79 79 77 64 62 54 78 71 71 6e 70 72 79 36 36 65 48 6c 73 63 79 79 74 61 2f 4a 72 38 32 30 35 50 58 57 2b 50 65 2b 7a 50 6e 73 32 75 2f 37 39 38 44 44 79 51 7a 31 42 51 50 64 41 38 7a 6e 37 2b 58 66 39 41 6e 57 30 4e 41 53 30 75 7a 63 45 50 77 43 44 52 58 73 37 39 33 38 49 76 45 4a 42 75 73 6c 47 66 76 6f 41 78 54 79 45 51 30 46 4b 50 49 31 2b 42 73 49 4c 52 59 62 2b 66 67 6a 49 55 51 79 46 6b 6b 7a 4e 42 55 6b 44 42 78 47 44 69 4e 45 48 79 77 78 45 51 6b 31 53 55 59 36 46 6a 64 63 4f 45 35 58 4c 55 45 36 56 57 63 79 49 30 6f 6d 52 6d 5a 63 53 56 68 63 57 56 4e 48 52 6d 5a 33 65 45 52 68 4e 6b 4d 33 62 56 6c 52 65 47 70 6a 50 32 35 37 52 6b 46 61 Data Ascii: IG1nbmEi4zRusSKjaGordXJu5jX2r+qqrfSy8yywdbTxqqnpry66eHlscyyta/Jr8205PXW+Pe+zPns2u/798DDyQz1BQPdA8zn7+Xf9AnW0NAS0uzcEPwCDRXs7938IvEJBuslGfvoAxTyEQ0FKPI1+BsILRYb+fgjIUQyFkkzNBUkDBxGDiNEHywxEQk1SUY6FjdcOE5XLUE6VWcyI0omRmZcSVhcWVNHRmZ3eERhNkM3bVlReGpjP257RkFa
2025-04-02 15:12:57 UTC	1369	IN	Data Raw: 7a 4d 6e 38 47 53 76 71 36 51 6c 61 4c 55 30 73 50 55 32 35 32 35 71 4e 69 62 33 72 58 62 33 72 6e 49 33 74 69 64 76 38 62 6b 75 66 48 6f 73 61 2b 38 36 4d 4f 77 39 76 66 43 35 73 66 5a 75 37 32 2f 7a 4e 44 4c 42 75 50 36 78 65 44 42 34 77 71 2b 32 73 6b 43 33 75 73 54 79 2b 4d 50 44 2f 66 6a 32 41 6f 48 39 67 62 32 48 76 44 7a 44 50 66 37 49 75 2f 6e 4a 78 58 34 34 75 54 73 47 75 6e 39 38 42 37 74 42 41 48 73 47 43 63 46 45 78 55 78 4d 77 34 49 4b 76 63 51 4c 43 49 6d 4f 52 30 42 47 54 30 70 44 45 34 67 4b 51 78 44 49 68 34 4d 54 55 45 35 46 46 51 34 46 79 63 75 48 7a 77 67 4d 78 6f 36 48 46 73 32 59 44 35 6e 58 55 63 6a 57 57 68 6b 4a 31 39 4b 4d 47 5a 4c 61 6b 67 7a 63 45 56 70 58 55 2b 41 61 54 74 53 4f 32 35 51 56 49 64 64 58 7a 78 45 5a 58 68 76 54 Data Ascii: zMn8GSvq6QlaLU0sPU2525qNib3rXb3rnI3tidv8bkufHosa+86MOw9vfC5sfZu72/zNDLBuP6xeDB4wq+2skC3usTy+MPD/fj2AoH9gb2HvDzDPf7Iu/nJxX44uTsGun98B7tBAHsGCcFExUxMw4IKvcQLCImOR0BGT0pDE4gKQxDIh4MTUE5FFQ4FycuHzwgMxo6HFs2YD5nXUcjWWhkJ19KMGZLakgzcEVpXU+AaTtSO25QVIddXzxEZXhvT
2025-04-02 15:12:57 UTC	1369	IN	Data Raw: 49 71 61 2b 4c 7a 64 50 4f 70 39 4b 76 74 4a 32 7a 77 75 53 79 70 62 43 32 77 4d 72 47 75 4f 72 42 75 71 7a 44 73 71 79 71 34 4d 32 7a 31 4f 62 48 32 73 6a 35 30 72 6a 68 37 74 37 75 77 39 4c 6b 35 50 7a 33 42 76 54 38 79 76 6a 48 44 4d 7a 64 36 2b 6a 76 44 39 51 42 47 4f 50 30 36 41 67 51 43 43 44 7a 2b 74 76 73 41 69 4d 64 45 67 6b 61 39 66 30 4a 41 53 30 41 41 79 37 6c 42 2f 54 75 4e 79 50 7a 47 69 51 5a 43 41 38 66 47 78 73 50 47 68 4e 45 52 55 41 79 48 30 70 47 4f 41 6b 2b 52 54 6b 2b 49 45 55 4e 52 42 38 58 53 69 77 70 4a 45 35 59 54 42 49 36 4d 7a 64 6c 59 54 35 56 50 56 73 39 4b 52 35 6c 62 44 70 65 59 32 63 38 58 7a 39 56 4c 7a 4a 6a 61 46 51 34 52 6d 74 53 4e 33 74 35 55 30 35 44 51 6c 42 62 65 48 64 70 69 54 39 48 61 33 69 41 62 32 52 53 62 4a Data Ascii: Iqa+LzdPOp9KvtJ2zwuSypbC2wMrGuOrBuqzDsqyq4M2z1ObH2sj50rjh7t7uw9Lk5Pz3BvT8yvjHDMzd6+jvD9QBGOP06AgQCCDz+tvsAiMdEgka9f0JAS0AAy7lB/TuNyPzGiQZCA8fGxsPGhNERUAyH0pGOAk+RTk+IEUNRB8XSiwpJE5YTBI6MzdlYT5VPVs9KR5lbDpeY2c8Xz9VLzJjaFQ4RmtSN3t5U05DQlBbeHdpiT9Ha3iAb2RSbJ
2025-04-02 15:12:57 UTC	1369	IN	Data Raw: 76 4d 71 61 71 72 79 69 76 64 66 43 31 73 62 41 74 2b 72 68 35 4c 6d 32 72 4d 37 4f 75 2f 44 53 35 2b 33 67 36 4c 50 79 7a 75 53 34 39 39 62 37 7a 64 34 44 76 4c 37 63 30 66 66 70 2b 67 58 58 34 77 2f 4b 45 65 62 64 44 4e 45 54 42 41 4c 71 46 64 54 7a 48 67 6e 59 44 43 49 55 46 39 38 6c 47 77 54 78 4a 4f 49 5a 34 77 62 38 43 2b 62 35 2b 79 37 77 41 41 33 73 4a 41 45 51 38 43 59 4a 4f 78 55 71 4e 7a 39 43 46 44 63 6a 46 43 42 48 49 79 63 70 48 43 63 4f 48 30 64 54 49 56 56 47 4b 31 55 59 4b 6c 4d 38 55 53 67 72 46 6a 31 69 4e 30 77 73 57 7a 45 7a 4e 55 51 6e 51 47 4e 61 4f 6c 63 74 54 54 74 6d 52 79 74 6f 59 57 64 58 63 30 78 47 4c 32 5a 48 64 6c 31 75 66 6b 30 33 57 31 4f 46 61 46 70 6b 58 45 78 33 68 59 78 77 65 6f 71 4f 58 6e 4e 78 54 32 4a 6d 59 32 56 Data Ascii: vMqaqryivdfC1sbAt+rh5Lm2rM7Ou/DS5+3g6LPyzuS499b7zd4DvL7c0ffp+gXX4w/KEebdDNETBALqFdTzHgnYDCIUF98lGwTxJOIZ4wb8C+b5+y7wAA3sJAEQ8CYJOxUqNz9CFDcjFCBHIycpHCcOH0dTIVVGK1UYKlM8USgrFj1iN0wsWzEzNUQnQGNaOlctTTtmRytoYWdXc0xGL2ZHdl1ufk03W1OFaFpkXEx3hYxweoqOXnNxT2JmY2V
2025-04-02 15:12:57 UTC	1369	IN	Data Raw: 5a 71 6a 77 39 72 6b 75 4c 4c 62 32 71 62 70 71 62 2b 71 34 2b 36 73 77 75 72 56 31 4c 44 4a 2b 2b 72 73 30 50 44 71 36 75 79 2b 2b 75 50 44 78 41 44 62 42 2f 58 34 2f 4f 4d 50 44 4f 67 41 7a 74 33 56 42 77 2f 32 37 39 4d 61 44 68 38 57 38 75 34 67 48 4f 45 54 46 77 66 5a 45 2b 62 71 36 79 63 46 4c 51 50 71 42 44 45 65 37 78 38 52 41 77 34 70 4a 78 72 34 4d 43 66 34 4f 44 38 75 45 6a 68 43 4d 52 62 2b 4f 30 46 4d 4f 67 73 6b 54 31 41 70 51 53 4e 4e 4d 55 51 35 4e 69 4e 56 4c 31 41 73 4c 6a 6b 64 4e 31 4d 7a 55 55 4a 55 58 53 6c 70 58 32 45 6d 54 6d 41 2f 4d 44 42 4c 58 33 45 78 64 7a 68 6d 57 55 52 6b 58 6e 4d 2f 66 56 67 2b 54 32 52 46 64 56 74 52 51 48 35 66 5a 6d 56 38 59 55 39 4a 68 34 42 75 6b 34 46 77 5a 4a 52 74 64 47 68 64 65 6d 6c 72 57 58 52 39 Data Ascii: Zqjw9rkuLLb2qbpqb+q4+6swurV1LDJ++rs0PDq6uy++uPDxADbB/X4/OMPDOgAzt3VBw/279MaDh8W8u4gHOETFwfZE+bq6ycFLQPqBDEe7x8RAw4pJxr4MCf4OD8uEjhCMRb+O0FMOgskT1ApQSNNMUQ5NiNVL1AsLjkdN1MzUUJUXSlpX2EmTmA/MDBLX3ExdzhmWURkXnM/fVg+T2RFdVtRQH5fZmV8YU9Jh4Buk4FwZJRtdGhdemlrWXR9

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:57 UTC	556	OUT	OPTIONS /report/v4?s=BymprMFwChSFxVrjtXhcxR7JLDRsogL4Iquyfly34uI8x5DfFVXbzUVnNPRrtliMiNP9VrArJ5bTp%2F2M70h5Oj4btrhmcryMgsiaDc2o3RcEN5P%2BDZzV0RWLlZQzk0GPXVuTknjR%2FXs%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://up.culturaljourney.de Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:57 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 02 Apr 2025 15:12:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:58 UTC	531	OUT	POST /report/v4?s=BymprMFwChSFxVrjtXhcxR7JLDRsogL4Iquyfly34uI8x5DfFVXbzUVnNPRrtliMiNP9VrArJ5bTp%2F2M70h5Oj4btrhmcryMgsiaDc2o3RcEN5P%2BDZzV0RWLlZQzk0GPXVuTknjR%2FXs%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 438 Content-Type: application/reports+json Origin: https://up.culturaljourney.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:58 UTC	438	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 39 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 75 70 2e 63 75 6c 74 75 72 61 6c 6a 6f 75 72 6e 65 79 2e 64 65 2f 52 77 42 6d 79 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 38 2e 31 30 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 Data Ascii: [{"age":0,"body":{"elapsed_time":294,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://up.culturaljourney.de/RwBmy/","sampling_fraction":1.0,"server_ip":"104.21.18.109","status_code":404,"type":"http.error"},"type":"network-er
2025-04-02 15:12:58 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 02 Apr 2025 15:12:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:58 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:58 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 02 Apr 2025 15:12:58 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: GyvdzmJe4qSUPc7tKE6Gcgbulpdett4ne5lKHe7RGaSVKwZCuxsY/nDB0gkRd4slDE8et1wyjHdwvC/FKd5ACQ==$0phuMcBVodoGK9PmbeDINQ== Server: cloudflare CF-RAY: 92a1447e4f8c9e05-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:12:58 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:59 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/g/d/92a1446f1e658c73/1743606777532/xFwJotzXhqpn4jv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:12:59 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:12:59 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 92a144843b0e43b0-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:12:59 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 01 08 02 00 00 00 68 97 a8 29 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRh)IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:12:59 UTC	468	OUT	GET /cdn-cgi/challenge-platform/h/g/d/92a1446f1e658c73/1743606777532/xFwJotzXhqpn4jv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:13:00 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:13:00 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 92a14487fffe41f3-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:13:00 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 01 08 02 00 00 00 68 97 a8 29 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRh)IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:13:00 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/92a1446f1e658c73/1743606777534/f05027ec23f351c57707e79444ace3cf3f6c708f7f4a8ce5cafc6e1fe45ed5bb/9G5QeUUIGBFuPcx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:13:00 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 02 Apr 2025 15:13:00 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-04-02 15:13:00 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 38 46 41 6e 37 43 50 7a 55 63 56 33 42 2d 65 55 52 4b 7a 6a 7a 7a 39 73 63 49 39 5f 53 6f 7a 6c 79 76 78 75 48 2d 52 65 31 62 73 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g8FAn7CPzUcV3B-eURKzjzz9scI9_SozlyvxuH-Re1bsAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-04-02 15:13:00 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:13:01 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38979 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:13:01 UTC	16384	OUT	Data Raw: 66 49 4a 50 7a 70 4c 76 36 4c 4a 62 36 4c 65 4c 6c 62 4a 50 44 49 4c 63 4c 44 6e 43 6e 69 50 4a 4a 4c 71 6e 5a 50 6e 49 4c 57 6e 71 78 33 30 63 52 71 6e 2d 50 5a 6e 78 54 70 6d 68 4a 6e 66 70 6e 52 4a 4a 6e 7a 50 68 54 6e 41 62 4c 6e 4c 45 6e 72 42 75 58 4a 6e 71 36 6e 53 76 50 70 54 6e 6f 78 79 6e 72 46 51 44 6b 64 31 63 36 6e 37 50 52 39 47 47 6e 54 73 6e 46 46 5a 4c 74 4b 78 4c 4b 6e 6e 30 6e 66 63 69 64 54 74 6e 6e 63 35 59 72 5a 6e 4e 78 5a 6e 75 78 64 50 52 6e 52 74 6e 6f 38 71 46 50 52 78 33 33 4c 34 4b 50 4c 39 70 65 46 6e 36 77 24 46 73 42 75 33 6e 66 36 50 39 65 46 6e 48 6e 70 78 6e 39 36 72 38 31 6e 6e 6a 77 53 37 70 45 5a 6e 72 4e 73 4b 46 6f 79 6d 70 54 54 6e 68 4e 77 36 78 6e 6e 76 47 62 54 6e 73 78 53 70 45 64 6e 6e 65 50 52 34 6e 62 75 4c Data Ascii: fIJPzpLv6LJb6LeLlbJPDILcLDnCniPJJLqnZPnILWnqx30cRqn-PZnxTpmhJnfpnRJJnzPhTnAbLnLEnrBuXJnq6nSvPpTnoxynrFQDkd1c6n7PR9GGnTsnFFZLtKxLKnn0nfcidTtnnc5YrZnNxZnuxdPRnRtno8qFPRx33L4KPL9peFn6w$FsBu3nf6P9eFnHnpxn96r81nnjwS7pEZnrNsKFoympTTnhNw6xnnvGbTnsxSpEdnnePR4nbuL
2025-04-02 15:13:01 UTC	16384	OUT	Data Raw: 64 30 33 71 4b 36 58 76 55 66 45 37 61 4e 61 37 6b 59 30 4a 4c 36 39 54 6e 6e 68 2d 38 36 56 49 6e 68 61 58 62 61 6e 73 4f 68 59 6d 39 56 33 37 79 4a 5a 24 7a 73 4f 71 49 49 4f 2d 24 6b 33 33 50 51 36 6e 24 4e 4b 4b 4b 31 72 6f 46 4d 53 52 59 45 70 6e 69 56 4d 32 4f 6e 6f 57 79 47 71 71 6f 50 39 66 50 6c 52 63 4e 70 4b 57 65 43 6e 31 34 75 64 59 66 6d 4e 6e 53 59 71 73 50 6f 2d 4b 66 5a 52 33 6e 34 2d 39 4a 4c 50 4a 4e 43 30 63 31 4c 6e 6e 52 5a 6c 30 42 46 48 79 65 6e 6a 50 44 30 50 34 6e 74 39 6e 6b 4c 59 73 4a 33 45 71 33 65 35 52 37 62 54 52 64 6e 35 50 30 64 63 74 6e 50 71 6c 34 4c 44 6e 65 6f 4e 53 49 58 6e 64 6d 52 49 52 4e 48 33 33 30 36 53 66 39 2b 48 73 4c 38 39 64 4b 4a 71 74 4a 49 73 4f 4a 50 37 6d 6b 63 42 63 4c 4c 4b 77 5a 4a 33 54 56 50 24 Data Ascii: d03qK6XvUfE7aNa7kY0JL69Tnnh-86VInhaXbansOhYm9V37yJZ$zsOqIIO-$k33PQ6n$NKKK1roFMSRYEpniVM2OnoWyGqqoP9fPlRcNpKWeCn14udYfmNnSYqsPo-KfZR3n4-9JLPJNC0c1LnnRZl0BFHyenjPD0P4nt9nkLYsJ3Eq3e5R7bTRdn5P0dctnPql4LDneoNSIXndmRIRNH3306Sf9+HsL89dKJqtJIsOJP7mkcBcLLKwZJ3TVP$
2025-04-02 15:13:01 UTC	6211	OUT	Data Raw: 51 73 53 41 68 30 55 4c 38 79 38 6a 36 2d 6e 72 7a 63 63 52 44 79 63 39 64 51 36 68 68 6c 39 6a 52 6b 2d 4c 68 38 75 4f 39 41 78 4a 65 2d 4a 62 35 44 47 6f 6b 65 52 76 61 58 46 75 63 63 31 4d 30 79 5a 74 4a 32 6a 70 74 51 47 6f 70 7a 64 6e 57 63 4c 4f 64 6c 76 54 4c 6f 78 31 32 57 7a 2b 66 2b 4c 39 6e 45 4a 2b 36 6e 56 54 50 34 7a 76 33 71 6e 37 48 7a 50 42 46 64 55 6d 4b 4d 69 53 50 71 66 45 75 45 42 68 66 4d 78 50 31 2b 54 38 31 42 73 64 73 6e 4d 6e 62 6f 24 54 63 6d 54 58 6d 74 52 52 61 49 38 4d 74 63 2d 4e 42 78 75 55 76 46 70 62 72 4f 4c 41 32 55 70 68 4b 49 72 50 4b 46 55 42 31 63 79 35 52 63 57 50 6c 6e 52 35 44 71 6e 47 42 41 54 71 6d 41 79 50 2b 70 52 77 78 24 64 73 49 4d 49 4e 49 36 4e 32 4e 31 64 56 4b 7a 6f 31 2b 7a 77 54 2b 58 50 79 24 78 31 Data Ascii: QsSAh0UL8y8j6-nrzccRDyc9dQ6hhl9jRk-Lh8uO9AxJe-Jb5DGokeRvaXFucc1M0yZtJ2jptQGopzdnWcLOdlvTLox12Wz+f+L9nEJ+6nVTP4zv3qn7HzPBFdUmKMiSPqfEuEBhfMxP1+T81BsdsnMnbo$TcmTXmtRRaI8Mtc-NBxuUvFpbrOLA2UphKIrPKFUB1cy5RcWPlnR5DqnGBATqmAyP+pRwx$dsIMINI6N2N1dVKzo1+zwT+XPy$x1
2025-04-02 15:13:01 UTC	322	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:13:01 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28192 Connection: close cf-chl-gen: kXtqseYPNQ/mX4lZ2bPkEnmMBUtaVTepA8TsRmoNx72BXJpL1g0sbQleGQuaPK5X$lWaJ8tsC/PQbQqmvuiahGQ== Server: cloudflare CF-RAY: 92a1448e9c044385-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:13:01 UTC	1047	IN	Data Raw: 6c 72 32 63 74 35 32 55 68 73 4b 65 70 38 6e 45 70 4d 79 4c 6a 38 4b 7a 77 5a 57 77 7a 4b 65 5a 74 4e 43 30 72 37 66 55 32 72 66 41 70 4c 61 67 73 64 57 31 37 4f 32 75 76 73 44 77 32 36 37 76 36 65 6d 75 74 63 6a 36 38 65 6a 52 79 4f 33 75 30 39 79 35 33 65 49 48 31 41 6a 7a 2f 67 66 48 37 63 59 4f 35 51 33 6c 79 75 72 4c 37 68 48 4f 35 75 6e 70 32 42 7a 33 35 2f 66 63 45 51 33 69 38 66 50 77 4a 4f 45 69 35 53 6a 31 47 77 4d 76 2f 53 50 73 44 67 44 6f 42 6a 63 30 4e 67 63 4e 50 6a 6b 64 51 52 30 77 44 77 56 48 4c 7a 30 57 51 45 4d 71 49 51 78 4b 50 68 45 70 52 42 30 2b 4e 51 30 75 52 78 41 34 53 54 4d 34 58 54 51 66 4d 30 41 36 4c 31 6f 34 4e 6b 46 63 4a 31 52 47 56 6b 38 70 52 32 46 4a 58 32 35 49 52 32 46 51 56 33 5a 53 54 46 78 50 61 7a 74 75 56 6c 77 Data Ascii: lr2ct52UhsKep8nEpMyLj8KzwZWwzKeZtNC0r7fU2rfApLagsdW17O2uvsDw267v6emutcj68ejRyO3u09y53eIH1Ajz/gfH7cYO5Q3lyurL7hHO5unp2Bz35/fcEQ3i8fPwJOEi5Sj1GwMv/SPsDgDoBjc0NgcNPjkdQR0wDwVHLz0WQEMqIQxKPhEpRB0+NQ0uRxA4STM4XTQfM0A6L1o4NkFcJ1RGVk8pR2FJX25IR2FQV3ZSTFxPaztuVlw
2025-04-02 15:13:01 UTC	1369	IN	Data Raw: 53 73 4d 62 5a 73 4e 62 67 32 63 71 38 7a 5a 2f 43 73 65 50 67 76 4b 53 64 71 73 36 73 7a 4f 33 73 36 39 53 74 74 66 43 31 37 4d 66 32 73 76 72 37 76 64 76 4f 32 74 6d 31 75 67 54 33 75 64 45 49 78 2b 66 46 37 67 66 75 33 76 72 77 34 73 73 4e 7a 4e 48 54 37 2f 55 4e 32 67 6e 63 45 64 37 35 4a 42 7a 66 35 65 41 61 35 76 7a 35 46 51 51 6c 48 69 73 78 41 2b 7a 74 41 4f 63 43 4f 66 59 34 42 6a 50 32 4f 6a 67 74 2b 78 6a 37 50 52 64 46 45 68 34 64 49 69 51 64 42 69 41 47 4a 67 73 36 55 30 4a 4e 4e 78 52 51 54 68 63 6a 57 42 6c 65 58 56 74 5a 59 42 70 50 4d 78 30 67 4d 69 52 46 49 6d 74 4e 50 55 52 71 58 46 41 76 58 57 42 31 4e 6b 64 4b 4d 32 59 79 4e 44 74 73 50 54 74 75 62 47 31 42 58 57 5a 33 68 58 65 46 65 32 78 75 62 55 35 48 69 55 56 31 61 56 42 6f 62 46 Data Ascii: SsMbZsNbg2cq8zZ/CsePgvKSdqs6szO3s69SttfC17Mf2svr7vdvO2tm1ugT3udEIx+fF7gfu3vrw4ssNzNHT7/UN2gncEd75JBzf5eAa5vz5FQQlHisxA+ztAOcCOfY4BjP2Ojgt+xj7PRdFEh4dIiQdBiAGJgs6U0JNNxRQThcjWBleXVtZYBpPMx0gMiRFImtNPURqXFAvXWB1NkdKM2YyNDtsPTtubG1BXWZ3hXeFe2xubU5HiUV1aVBobF
2025-04-02 15:13:01 UTC	1369	IN	Data Raw: 75 38 76 52 76 73 36 37 7a 73 69 37 70 74 76 73 37 64 2f 57 71 37 7a 6e 34 73 37 47 30 4e 50 51 31 64 71 77 78 4e 7a 30 79 38 66 63 38 63 76 6a 33 39 37 46 7a 2b 6a 34 34 63 66 67 39 2f 66 65 43 41 58 53 38 42 55 50 39 51 62 4b 42 74 41 63 32 51 2f 70 49 4e 38 50 46 42 66 67 42 42 41 6a 2b 66 4d 4a 48 2f 55 47 47 66 30 47 45 43 59 72 41 51 77 57 4c 76 55 75 45 44 55 6c 46 66 55 62 43 54 55 2b 2f 43 55 56 4a 44 64 4b 48 77 49 4c 53 55 4d 6b 50 6b 67 6b 53 6b 67 65 44 6a 4a 4f 55 31 67 4e 4b 6b 6b 36 48 54 41 39 47 78 31 59 57 55 45 78 58 69 67 70 61 6a 70 70 52 6b 56 41 59 33 4a 70 4c 46 42 44 56 57 56 33 56 7a 68 56 56 55 70 74 67 56 42 63 55 34 55 37 67 46 6c 41 64 47 6c 71 52 33 56 6e 61 32 31 77 58 6f 5a 66 62 70 4b 45 6a 46 56 6e 61 47 31 34 6b 46 39 Data Ascii: u8vRvs67zsi7ptvs7d/Wq7zn4s7G0NPQ1dqwxNz0y8fc8cvj397Fz+j44cfg9/feCAXS8BUP9QbKBtAc2Q/pIN8PFBfgBBAj+fMJH/UGGf0GECYrAQwWLvUuEDUlFfUbCTU+/CUVJDdKHwILSUMkPkgkSkgeDjJOU1gNKkk6HTA9Gx1YWUExXigpajppRkVAY3JpLFBDVWV3VzhVVUptgVBcU4U7gFlAdGlqR3Vna21wXoZfbpKEjFVnaG14kF9
2025-04-02 15:13:01 UTC	1369	IN	Data Raw: 5a 2b 6f 6e 2b 4c 73 36 4f 62 64 78 4d 6e 4f 78 65 79 77 34 72 2f 45 30 38 58 78 78 74 65 39 75 64 62 55 2b 39 77 44 2b 2f 6e 58 38 66 37 63 35 77 54 2b 34 41 77 46 2b 51 62 66 34 63 76 6b 45 51 73 53 43 75 6a 72 36 4f 67 61 45 74 34 65 38 66 59 69 4a 75 45 70 4a 77 76 70 35 77 62 70 47 78 45 6b 4a 67 77 69 36 78 4d 72 38 53 77 56 2b 76 4d 65 38 7a 77 49 46 53 41 4d 4f 68 42 41 52 50 30 6c 41 69 45 34 4c 41 59 4c 4f 69 73 76 49 43 49 52 44 43 5a 4b 4e 54 5a 4b 4d 6a 67 56 4e 68 31 56 48 43 45 66 56 6b 5a 66 47 68 73 31 52 6c 74 41 5a 57 42 6e 50 6a 31 75 64 56 35 51 55 55 70 71 56 33 41 34 63 54 64 57 4e 31 30 39 56 48 56 63 64 6f 4a 2b 65 32 6c 4c 64 58 74 4b 66 6b 64 38 63 57 70 30 63 46 35 78 6b 6e 6c 58 62 47 6d 4e 6b 6d 65 67 64 35 69 65 6a 58 79 5a Data Ascii: Z+on+Ls6ObdxMnOxeyw4r/E08Xxxte9udbU+9wD+/nX8f7c5wT+4AwF+Qbf4cvkEQsSCujr6OgaEt4e8fYiJuEpJwvp5wbpGxEkJgwi6xMr8SwV+vMe8zwIFSAMOhBARP0lAiE4LAYLOisvICIRDCZKNTZKMjgVNh1VHCEfVkZfGhs1RltAZWBnPj1udV5QUUpqV3A4cTdWN109VHVcdoJ+e2lLdXtKfkd8cWp0cF5xknlXbGmNkmegd5iejXyZ
2025-04-02 15:13:01 UTC	1369	IN	Data Raw: 6a 6f 37 63 33 74 35 72 50 53 79 63 33 6c 34 2b 76 74 36 4b 37 50 31 62 48 7a 2b 66 54 4e 2b 4e 58 61 78 50 76 63 34 4f 6b 4d 33 4d 6e 75 30 41 76 74 34 2b 55 45 79 41 33 72 35 4d 7a 7a 43 76 33 77 39 41 38 56 38 64 58 7a 42 51 2f 38 2b 2f 54 6a 41 42 59 4f 36 68 73 61 45 67 49 4e 44 2f 55 45 4e 77 73 75 4a 43 59 32 4e 78 4d 68 4c 76 6a 38 50 66 6f 77 42 50 31 47 48 76 77 4c 46 77 6f 64 53 51 34 2f 55 45 67 68 46 55 41 71 54 6c 4d 79 4d 56 73 5a 4e 79 31 42 58 44 4e 41 57 31 46 6e 4e 6b 49 7a 56 44 68 71 57 57 39 4a 4c 6a 39 6c 4d 44 4e 4b 54 47 4e 70 65 33 70 56 57 48 42 4d 56 6d 35 69 64 33 74 43 68 58 74 37 51 6d 4a 35 57 45 68 6c 67 57 64 62 62 6f 78 6a 58 32 42 34 6c 59 78 52 61 35 6c 38 56 70 36 59 6a 5a 65 62 6b 33 57 48 63 61 56 6d 64 57 57 72 64 Data Ascii: jo7c3t5rPSyc3l4+vt6K7P1bHz+fTN+NXaxPvc4OkM3Mnu0Avt4+UEyA3r5MzzCv3w9A8V8dXzBQ/8+/TjABYO6hsaEgIND/UENwsuJCY2NxMhLvj8PfowBP1GHvwLFwodSQ4/UEghFUAqTlMyMVsZNy1BXDNAW1FnNkIzVDhqWW9JLj9lMDNKTGNpe3pVWHBMVm5id3tChXt7QmJ5WEhlgWdbboxjX2B4lYxRa5l8Vp6YjZebk3WHcaVmdWWrd
2025-04-02 15:13:01 UTC	1369	IN	Data Raw: 4d 7a 2b 48 49 75 50 62 43 36 50 44 37 39 37 2b 38 33 62 37 53 7a 67 54 2b 32 74 76 32 77 75 4c 66 36 2f 33 37 2b 74 37 53 79 51 44 6b 42 68 59 46 44 75 4d 4a 43 4f 6e 31 33 75 6b 53 47 65 2f 6a 38 74 38 41 4b 65 6a 38 4a 53 48 36 4d 4f 6b 63 43 53 55 4c 42 69 38 6c 46 51 45 32 46 50 59 4b 50 66 41 66 47 52 77 44 51 69 4d 41 47 44 56 44 4b 79 78 48 4f 6b 55 37 4a 45 6b 36 4e 45 70 50 4e 42 4e 51 4f 42 4d 74 4c 31 4e 47 53 52 34 61 4e 45 41 69 49 52 39 49 48 6b 56 6f 52 31 39 44 58 6d 6b 77 51 58 41 75 55 79 74 45 64 45 5a 30 4e 58 6b 32 66 6c 42 4e 56 6a 71 42 56 6f 56 36 51 48 61 48 67 6c 36 41 64 49 61 43 5a 48 6c 39 57 6e 32 45 62 30 79 49 61 32 74 6e 65 70 4b 51 56 6e 2b 64 67 70 71 6a 58 4a 6c 32 59 48 65 49 6f 5a 75 62 70 47 75 74 62 6d 6d 71 6e 6e Data Ascii: Mz+HIuPbC6PD797+83b7SzgT+2tv2wuLf6/37+t7SyQDkBhYFDuMJCOn13ukSGe/j8t8AKej8JSH6MOkcCSULBi8lFQE2FPYKPfAfGRwDQiMAGDVDKyxHOkU7JEk6NEpPNBNQOBMtL1NGSR4aNEAiIR9IHkVoR19DXmkwQXAuUytEdEZ0NXk2flBNVjqBVoV6QHaHgl6AdIaCZHl9Wn2Eb0yIa2tnepKQVn+dgpqjXJl2YHeIoZubpGutbmmqnn
2025-04-02 15:13:01 UTC	1369	IN	Data Raw: 32 39 72 55 7a 39 62 62 41 37 72 66 33 50 54 31 32 65 62 6b 78 63 6e 6e 36 66 6e 74 37 67 50 4f 35 2b 41 55 44 66 6a 6d 43 66 48 52 39 66 59 4a 2b 66 66 35 44 51 7a 61 4a 50 34 4a 33 68 6a 31 34 51 51 47 4b 76 6a 73 49 2b 30 49 41 6a 51 58 45 78 49 6d 45 42 62 36 43 79 41 65 48 6a 55 75 49 43 4d 35 48 43 6b 6d 4a 67 4d 56 4b 6b 41 48 4a 69 78 46 52 6a 55 7a 49 30 6f 35 4e 6b 77 6f 4f 44 6f 37 55 6a 59 2b 4c 7a 68 41 51 30 4e 57 52 6b 46 48 52 45 4a 4a 4a 6c 42 4e 54 6b 34 76 58 46 4e 44 55 45 46 55 62 57 5a 61 57 48 41 33 59 46 35 31 62 6d 42 64 59 32 68 77 5a 6d 5a 44 59 6d 74 62 62 47 5a 73 68 57 78 64 63 55 36 4b 67 48 5a 6e 68 6e 68 37 6b 59 36 42 66 48 35 77 66 34 43 44 6c 6f 57 48 64 35 61 49 69 57 61 45 6a 6f 6d 50 6a 4a 4f 52 62 71 71 55 6c 4a 65 Data Ascii: 29rUz9bbA7rf3PT12ebkxcnn6fnt7gPO5+AUDfjmCfHR9fYJ+ff5DQzaJP4J3hj14QQGKvjsI+0IAjQXExImEBb6CyAeHjUuICM5HCkmJgMVKkAHJixFRjUzI0o5NkwoODo7UjY+LzhAQ0NWRkFHREJJJlBNTk4vXFNDUEFUbWZaWHA3YF51bmBdY2hwZmZDYmtbbGZshWxdcU6KgHZnhnh7kY6BfH5wf4CDloWHd5aIiWaEjomPjJORbqqUlJe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:13:01 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:13:02 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 02 Apr 2025 15:13:01 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: Y5KxVCETekXj6dEKoLooYS0Zi+B0yZmq/8/m4ev663ZGTaz4oMI4wIiL4F1KLm8Pci0z3QiUuU5NpuO07pcucg==$UkLKWAGlKJeOjD4ce5HuiQ== Server: cloudflare CF-RAY: 92a144933e52c436-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 15:13:02 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-04-02 15:13:10 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/167874708:1743603303:qy4xz8W9Eyz25W319U0gaw0f2DuVIXZFYeV3mN3Dj5k/92a1446f1e658c73/BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41431 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: BIsHiEso9P9E7ixSefrcQLj8.R_EQ3_8SuzT2RDYYQs-1743606776-1.1.1.1-cKNzEMIEGjWRvNkIutQ9dmrEyvAr0ZJfM6xYL4uOmmHhmjNACCZDmHIqPcYWl0dq cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/rzb35/0x4AAAAAABAugP6asrbcKn8M/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 15:13:10 UTC	16384	OUT	Data Raw: 66 49 4a 50 7a 70 4c 76 36 4c 4a 62 36 4c 65 4c 6c 62 4a 50 44 49 4c 63 4c 44 6e 43 6e 69 50 4a 4a 4c 71 6e 5a 50 6e 49 4c 57 6e 71 78 33 30 63 52 71 6e 2d 50 5a 6e 78 54 70 6d 68 4a 6e 66 70 6e 52 4a 4a 6e 7a 50 68 54 6e 41 62 4c 6e 4c 45 6e 72 42 75 58 4a 6e 71 36 6e 53 76 50 70 54 6e 6f 78 79 6e 72 46 51 44 6b 64 31 63 36 6e 37 50 52 39 47 47 6e 54 73 6e 46 46 5a 4c 74 4b 78 4c 4b 6e 6e 30 6e 66 63 69 64 54 74 6e 6e 63 35 59 72 5a 6e 4e 78 5a 6e 75 78 64 50 52 6e 52 74 6e 6f 38 71 46 50 52 78 33 33 4c 34 4b 50 4c 39 70 65 46 6e 36 77 24 46 73 42 75 33 6e 66 36 50 39 65 46 6e 48 6e 70 78 6e 39 36 72 38 31 6e 6e 6a 77 53 37 70 45 5a 6e 72 4e 73 4b 46 6f 79 6d 70 54 54 6e 68 4e 77 36 78 6e 6e 76 47 62 54 6e 73 78 53 70 45 64 6e 6e 65 50 52 34 6e 62 75 4c Data Ascii: fIJPzpLv6LJb6LeLlbJPDILcLDnCniPJJLqnZPnILWnqx30cRqn-PZnxTpmhJnfpnRJJnzPhTnAbLnLEnrBuXJnq6nSvPpTnoxynrFQDkd1c6n7PR9GGnTsnFFZLtKxLKnn0nfcidTtnnc5YrZnNxZnuxdPRnRtno8qFPRx33L4KPL9peFn6w$FsBu3nf6P9eFnHnpxn96r81nnjwS7pEZnrNsKFoympTTnhNw6xnnvGbTnsxSpEdnnePR4nbuL
2025-04-02 15:13:10 UTC	16384	OUT	Data Raw: 64 30 33 71 4b 36 58 76 55 66 45 37 61 4e 61 37 6b 59 30 4a 4c 36 39 54 6e 6e 68 2d 38 36 56 49 6e 68 61 58 62 61 6e 73 4f 68 59 6d 39 56 33 37 79 4a 5a 24 7a 73 4f 71 49 49 4f 2d 24 6b 33 33 50 51 36 6e 24 4e 4b 4b 4b 31 72 6f 46 4d 53 52 59 45 70 6e 69 56 4d 32 4f 6e 6f 57 79 47 71 71 6f 50 39 66 50 6c 52 63 4e 70 4b 57 65 43 6e 31 34 75 64 59 66 6d 4e 6e 53 59 71 73 50 6f 2d 4b 66 5a 52 33 6e 34 2d 39 4a 4c 50 4a 4e 43 30 63 31 4c 6e 6e 52 5a 6c 30 42 46 48 79 65 6e 6a 50 44 30 50 34 6e 74 39 6e 6b 4c 59 73 4a 33 45 71 33 65 35 52 37 62 54 52 64 6e 35 50 30 64 63 74 6e 50 71 6c 34 4c 44 6e 65 6f 4e 53 49 58 6e 64 6d 52 49 52 4e 48 33 33 30 36 53 66 39 2b 48 73 4c 38 39 64 4b 4a 71 74 4a 49 73 4f 4a 50 37 6d 6b 63 42 63 4c 4c 4b 77 5a 4a 33 54 56 50 24 Data Ascii: d03qK6XvUfE7aNa7kY0JL69Tnnh-86VInhaXbansOhYm9V37yJZ$zsOqIIO-$k33PQ6n$NKKK1roFMSRYEpniVM2OnoWyGqqoP9fPlRcNpKWeCn14udYfmNnSYqsPo-KfZR3n4-9JLPJNC0c1LnnRZl0BFHyenjPD0P4nt9nkLYsJ3Eq3e5R7bTRdn5P0dctnPql4LDneoNSIXndmRIRNH3306Sf9+HsL89dKJqtJIsOJP7mkcBcLLKwZJ3TVP$
2025-04-02 15:13:10 UTC	8663	OUT	Data Raw: 51 73 53 41 68 30 55 4c 38 79 38 6a 36 2d 6e 72 7a 63 63 52 44 79 63 39 64 51 36 68 68 6c 39 6a 52 6b 2d 4c 68 38 75 4f 39 41 78 4a 65 2d 4a 62 35 44 47 6f 6b 65 52 76 61 58 46 75 63 63 31 4d 30 79 5a 74 4a 32 6a 70 74 51 47 6f 70 7a 64 6e 57 63 4c 4f 64 6c 76 54 4c 6f 78 31 32 57 7a 2b 66 2b 4c 39 6e 45 4a 2b 36 6e 56 54 50 34 7a 76 33 71 6e 37 48 7a 50 42 46 64 55 6d 4b 4d 69 53 50 71 66 45 75 45 42 68 66 4d 78 50 31 2b 54 38 31 42 73 64 73 6e 4d 6e 62 6f 24 54 63 6d 54 58 6d 74 52 52 61 49 38 4d 74 63 2d 4e 42 78 75 55 76 46 70 62 72 4f 4c 41 32 55 70 68 4b 49 72 50 4b 46 55 42 31 63 79 35 52 63 57 50 6c 6e 52 35 44 71 6e 47 42 41 54 71 6d 41 79 50 2b 70 52 77 78 24 64 73 49 4d 49 4e 49 36 4e 32 4e 31 64 56 4b 7a 6f 31 2b 7a 77 54 2b 58 50 79 24 78 31 Data Ascii: QsSAh0UL8y8j6-nrzccRDyc9dQ6hhl9jRk-Lh8uO9AxJe-Jb5DGokeRvaXFucc1M0yZtJ2jptQGopzdnWcLOdlvTLox12Wz+f+L9nEJ+6nVTP4zv3qn7HzPBFdUmKMiSPqfEuEBhfMxP1+T81BsdsnMnbo$TcmTXmtRRaI8Mtc-NBxuUvFpbrOLA2UphKIrPKFUB1cy5RcWPlnR5DqnGBATqmAyP+pRwx$dsIMINI6N2N1dVKzo1+zwT+XPy$x1
2025-04-02 15:13:11 UTC	282	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 15:13:11 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4796 Connection: close cf-chl-out: fgtanDHzILBnxJDZPGp1brX1A2v8wLoBs91GZ37Yse7G/tcSKJknsyU3mjI5nfkQADTEQnW9C7dgrbGZ4CIJ/MrC5JY8hIhv9CIMYSbEthw=$qHrHkXgsw617s57uc9zqQw==
2025-04-02 15:13:11 UTC	1235	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 2f 30 30 4d 69 39 72 58 70 58 51 76 4d 38 4d 45 44 72 63 73 72 62 79 4e 6c 57 52 41 4a 78 63 59 62 6a 59 78 6d 44 45 4f 54 7a 4a 43 62 61 71 67 52 75 41 68 77 37 74 6d 74 79 6d 65 62 56 67 48 63 49 30 31 64 4d 6b 44 4e 68 4e 70 7a 35 6d 39 4d 2b 61 6d 49 4f 38 63 70 63 51 76 47 63 4a 31 2b 2f 4c 36 6f 4f 4a 6f 49 34 39 6a 6b 70 37 57 45 6d 39 44 4f 76 76 72 7a 6f 30 2f 45 79 71 78 57 79 43 56 6b 6a 77 42 4b 74 5a 54 71 48 67 79 67 46 44 72 35 63 4d 52 67 73 71 45 4b 48 4b 72 64 64 6f 41 4a 51 6b 61 2b 2f 4e 41 36 69 76 69 6a 63 78 46 6a 51 68 72 4b 36 69 71 6c 77 67 78 65 4d 73 33 52 45 7a 56 49 66 71 75 78 31 4a 78 46 6a 63 38 4b 4d 6d 4e 48 73 79 70 41 4e 79 4d 54 57 61 4f 72 4c 73 70 43 4d 57 33 32 77 7a 50 68 Data Ascii: cf-chl-out-s: /00Mi9rXpXQvM8MEDrcsrbyNlWRAJxcYbjYxmDEOTzJCbaqgRuAhw7tmtymebVgHcI01dMkDNhNpz5m9M+amIO8cpcQvGcJ1+/L6oOJoI49jkp7WEm9DOvvrzo0/EyqxWyCVkjwBKtZTqHgygFDr5cMRgsqEKHKrddoAJQka+/NA6ivijcxFjQhrK6iqlwgxeMs3REzVIfqux1JxFjc8KMmNHsypANyMTWaOrLspCMW32wzPh
2025-04-02 15:13:11 UTC	1221	IN	Data Raw: 6c 72 32 63 74 35 32 55 68 73 4b 65 70 38 6e 45 70 4d 79 4c 6a 38 4b 79 6a 73 2b 79 74 4b 76 50 71 4c 47 75 6d 4b 6e 4e 75 5a 33 6a 33 36 43 68 35 2b 54 59 74 2b 6a 6f 32 4d 66 78 38 71 7a 63 31 4e 48 74 2b 4d 72 44 75 75 7a 4e 79 4c 2f 4d 30 4d 4c 51 34 39 58 6c 30 41 50 34 2f 76 62 4b 36 38 7a 62 35 51 33 6c 79 75 6e 67 46 51 37 6d 34 65 49 50 48 42 6f 4a 36 2f 6a 74 45 51 54 34 38 66 37 36 35 78 4d 57 46 42 6a 66 42 65 30 66 37 7a 48 70 4a 2f 49 4e 41 7a 48 34 45 65 30 57 43 50 41 4f 51 6a 73 41 4c 45 55 2b 42 69 49 7a 52 45 51 65 4f 30 4e 47 54 79 59 52 4b 67 34 70 56 68 56 5a 4c 6c 67 76 55 54 51 6f 47 7a 4a 41 48 46 42 68 57 7a 49 6d 55 46 74 70 51 44 64 44 5a 30 34 71 52 31 35 46 4d 58 52 6c 4d 47 31 44 4f 6e 6c 6d 63 47 74 39 55 56 5a 55 51 56 59 Data Ascii: lr2ct52UhsKep8nEpMyLj8Kyjs+ytKvPqLGumKnNuZ3j36Ch5+TYt+jo2Mfx8qzc1NHt+MrDuuzNyL/M0MLQ49Xl0AP4/vbK68zb5Q3lyungFQ7m4eIPHBoJ6/jtEQT48f765xMWFBjfBe0f7zHpJ/INAzH4Ee0WCPAOQjsALEU+BiIzREQeO0NGTyYRKg4pVhVZLlgvUTQoGzJAHFBhWzImUFtpQDdDZ04qR15FMXRlMG1DOnlmcGt9UVZUQVY
2025-04-02 15:13:11 UTC	1369	IN	Data Raw: 6a 6c 65 50 78 73 77 55 52 38 2f 4e 7a 4e 65 4f 54 31 70 4a 53 63 72 62 32 49 39 51 57 51 2f 5a 79 64 41 57 45 35 55 62 45 74 71 57 33 46 70 66 6c 4a 4c 4f 6a 74 62 59 6c 73 2b 57 56 52 72 53 47 75 41 53 32 35 6f 53 49 42 4e 61 32 39 54 65 48 61 4b 64 48 68 78 6e 32 35 64 63 6d 75 65 66 58 61 58 66 35 56 36 68 59 75 72 68 48 71 64 72 34 43 4e 63 71 69 47 70 62 57 6b 6c 58 4b 78 71 6e 32 4c 6c 72 32 59 72 37 61 68 6f 63 61 59 6d 5a 75 56 6c 4a 32 4c 7a 36 36 36 6b 63 48 55 6a 62 44 58 74 38 79 33 7a 63 36 7a 74 37 6d 7a 6d 72 7a 54 6d 65 48 44 32 4b 2f 57 71 61 48 64 70 4d 62 4b 35 4b 7a 4f 38 73 50 6c 79 36 32 32 36 39 48 37 31 4d 72 4e 78 37 76 4b 31 64 7a 73 42 74 75 39 39 63 62 6a 39 2f 6a 47 35 65 6e 73 38 65 54 4a 30 73 37 79 42 2b 73 46 32 66 62 33 Data Ascii: jlePxswUR8/NzNeOT1pJScrb2I9QWQ/ZydAWE5UbEtqW3FpflJLOjtbYls+WVRrSGuAS25oSIBNa29TeHaKdHhxn25dcmuefXaXf5V6hYurhHqdr4CNcqiGpbWklXKxqn2Llr2Yr7ahocaYmZuVlJ2Lz666kcHUjbDXt8y3zc6zt7mzmrzTmeHD2K/WqaHdpMbK5KzO8sPly62269H71MrNx7vK1dzsBtu99cbj9/jG5ens8eTJ0s7yB+sF2fb3
2025-04-02 15:13:11 UTC	1369	IN	Data Raw: 31 42 5a 57 63 38 4a 42 73 30 51 44 6c 68 4b 30 78 48 4f 79 35 46 62 69 39 7a 64 47 35 46 4f 57 4d 35 64 31 46 4e 4f 6a 6c 34 65 6c 42 56 4f 46 35 35 63 58 31 6f 68 58 68 37 54 6b 35 70 6a 5a 4f 51 6c 56 61 48 69 56 68 61 57 56 5a 59 55 49 31 61 6a 48 6c 33 70 58 6c 6b 6e 58 57 49 65 49 65 44 68 32 32 75 71 59 4b 68 6b 6f 71 50 6b 5a 53 4a 71 62 43 79 65 71 71 31 6d 59 75 77 6f 62 2b 55 75 61 61 68 68 37 6d 2f 66 5a 79 35 69 4d 75 63 76 72 4b 37 6f 4b 50 44 73 4e 66 50 6d 63 57 71 6a 35 6a 54 6d 4a 6a 42 72 39 4f 39 30 72 66 42 36 62 2b 2b 79 36 53 73 75 61 61 71 77 37 48 55 39 62 57 31 7a 50 57 34 37 4d 2b 7a 74 37 33 57 79 74 6b 42 42 66 48 59 31 50 58 49 43 66 6a 72 44 51 72 6d 33 67 37 53 37 78 62 6f 43 42 54 34 42 2b 6f 4d 37 67 2f 2b 46 4f 6f 55 41 Data Ascii: 1BZWc8JBs0QDlhK0xHOy5Fbi9zdG5FOWM5d1FNOjl4elBVOF55cX1ohXh7Tk5pjZOQlVaHiVhaWVZYUI1ajHl3pXlknXWIeIeDh22uqYKhkoqPkZSJqbCyeqq1mYuwob+Uuaahh7m/fZy5iMucvrK7oKPDsNfPmcWqj5jTmJjBr9O90rfB6b++y6Ssuaaqw7HU9bW1zPW47M+zt73WytkBBfHY1PXICfjrDQrm3g7S7xboCBT4B+oM7g/+FOoUA
2025-04-02 15:13:11 UTC	837	IN	Data Raw: 6d 53 55 5a 4e 56 6c 39 6d 57 56 46 42 50 32 78 56 62 6d 78 71 62 30 31 59 63 45 78 56 65 47 78 68 55 44 35 30 5a 56 6c 54 64 34 46 67 66 48 31 64 57 49 43 45 53 32 31 71 6a 45 39 6b 6b 33 70 35 63 58 71 49 57 6e 56 32 6c 5a 69 54 63 35 31 32 66 5a 36 55 6e 71 4f 49 6a 5a 61 46 70 5a 36 45 6f 36 57 57 72 5a 47 4b 70 35 69 72 6a 62 53 4e 6a 59 32 34 6f 37 4f 6b 75 37 79 33 6c 36 6d 45 77 73 65 33 72 71 58 41 73 63 71 2f 73 63 48 4d 6c 39 44 42 75 63 62 56 30 4c 7a 48 31 74 69 78 7a 37 76 52 75 4e 37 69 32 75 4c 54 76 64 6a 57 7a 4f 6e 68 72 61 58 4a 35 64 58 55 73 4f 66 77 39 76 62 65 7a 39 48 64 38 65 44 32 38 2f 54 6a 75 64 37 31 41 74 51 45 2b 77 51 51 37 77 50 4d 30 77 38 41 39 50 45 49 45 66 6f 58 31 67 76 61 2b 66 34 4b 46 39 7a 33 44 78 76 66 35 53 Data Ascii: mSUZNVl9mWVFBP2xVbmxqb01YcExVeGxhUD50ZVlTd4FgfH1dWICES21qjE9kk3p5cXqIWnV2lZiTc512fZ6UnqOIjZaFpZ6Eo6WWrZGKp5irjbSNjY24o7Oku7y3l6mEwse3rqXAscq/scHMl9DBucbV0LzH1tixz7vRuN7i2uLTvdjWzOnhraXJ5dXUsOfw9vbez9Hd8eD28/Tjud71AtQE+wQQ7wPM0w8A9PEIEfoX1gva+f4KF9z3Dxvf5S