Edit tour

Windows Analysis Report
https://pdflink.to/29c49848/

Overview

General Information

Sample URL:	https://pdflink.to/29c49848/
Analysis ID:	1675922
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish54

AI detected suspicious Javascript

HTML page contains obfuscated javascript

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'sign-in options' or 'sign-up' link found

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6168 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1864 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pdflink.to/29c49848/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
4.35..script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://zh.peoplelove.tech/js/jquery.min.js	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/itsgonnafail	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/index.php	Avira URL Cloud: Label: malware
Source: https://device.zh.peoplelove.tech/index.php	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/_login_live/Me.htm?v=3	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/cdn-cgi/challenge-platform/h/g/flow/ov1/1759223964:1745814221:dFB-oJf9EAvPLIE0kVm3LskAEjxgwHXZYFYUa-vWL20/9373d624ccd6f434/3hv.hhJx9YcGJSgdm8S1.aXMO3uvqGsgZx2lZNjBAqM-1745814754-1.2.1.1-.eVcAd7S9xuT2hJiTP7nuwWnlClNkOF2vZvZ6.dtbimtcqOeW4cWRf2OJlGwF1ql	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9373d624ccd6f434	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/common/GetCredentialType?mkt=en-US	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/favicon.ico	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/?utm_campaign)	Avira URL Cloud: Label: malware
Source: https://zh.peoplelove.tech/_login_microsoft	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://zh.peoplelove.tech/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'zh.peoplelove.tech' does not match the legitimate domain for Microsoft., The URL contains an unusual domain extension '.tech' which is not typically associated with Microsoft., The URL does not contain any recognizable elements of the Microsoft brand., The presence of input fields for 'Email, phone, or Skype' is typical for Microsoft services, but the domain mismatch is a strong indicator of phishing. DOM: 4.10.pages.csv
Source: https://zh.peoplelove.tech/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'zh.peoplelove.tech' does not match the legitimate domain for Microsoft., The domain 'peoplelove.tech' is unrelated to Microsoft and uses a generic TLD '.tech', which is unusual for a well-known brand like Microsoft., The presence of input fields such as 'Email, phone, or Skype' is typical for Microsoft services, but the domain mismatch raises suspicion., The use of a subdomain 'zh' and the unrelated main domain 'peoplelove.tech' suggests a potential phishing attempt. DOM: 4.11.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 4.35..script.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 4.10.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 2.7..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: blob:https://zh.peoplelove.tech/628e351b-8f35-4183... This script demonstrates high-risk behavior by using the `eval()` function to execute dynamic code received from an untrusted source. The lack of origin verification and the use of `eval()` pose a significant security risk, as it allows the execution of arbitrary code that could be malicious.

HTML page contains obfuscated javascript

Source: https://zh.peoplelove.tech/	HTTP Parser: /* @license cookie-interceptor v1.0.0 \| (c) Qingrong Ke <keqingrong1992@gmail.com> (https://keqingro
Source: https://zh.peoplelove.tech/sso/adfs/ls/?client-request-id=c86c80cc-24cc-4ff7-9367-21e3a7a54aa8&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATONOScOKPy3X9yuuLj5Uu9VqxiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8x4xCyblJznANYGUX2AReMXCY8BsxcHBJcAgwaDA8IOFcREr0HaBjzdfOP6b4zT_QeW1jD8ODKdY9UtctYOy_NwSC_3yg01MCrTNk3It3Eq13VwjwwqDUyqz3d0iUx0rzTL0nbNtTawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4OpesfX374MN3Hq_4dSqiAou8XEoM8tyispKrTD0dIyuqLKOcsrzS8koMwgxKvByDU909TTMsii1sNwgwPAAiQQYA0&cbcxt=&username=bob%40microsoft.com&mkt=&lc=	HTTP Parser: /* @license cookie-interceptor v1.0.0 \| (c) Qingrong Ke <keqingrong1992@gmail.com> (https://keqingro

Source: https://zh.peoplelove.tech/

HTTP Parser: Number of links: 0

Source: https://zh.peoplelove.tech/?utm_campaign

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://zh.peoplelove.tech/

HTTP Parser: Title: Sign in - Microsoft OneDrive does not match URL

Source: https://zh.peoplelove.tech/

HTTP Parser: Invalid link: Create one!

Source: https://zh.peoplelove.tech/	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://zh.peoplelove.tech/	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx

Source: https://zh.peoplelove.tech/

HTTP Parser: <input type="password" .../> found

Source: https://zh.peoplelove.tech/?utm_campaign	HTTP Parser: No favicon
Source: https://zh.peoplelove.tech/?utm_campaign	HTTP Parser: No favicon
Source: https://zh.peoplelove.tech/?utm_campaign	HTTP Parser: No favicon
Source: https://zh.peoplelove.tech/	HTTP Parser: No favicon
Source: https://zh.peoplelove.tech/	HTTP Parser: No favicon
Source: https://zh.peoplelove.tech/	HTTP Parser: No favicon

Source: https://zh.peoplelove.tech/	HTTP Parser: No <meta name="author".. found
Source: https://zh.peoplelove.tech/	HTTP Parser: No <meta name="author".. found

Source: https://zh.peoplelove.tech/	HTTP Parser: No <meta name="copyright".. found
Source: https://zh.peoplelove.tech/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 172.67.190.84:443 -> 192.168.2.16:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.84:443 -> 192.168.2.16:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.84:443 -> 192.168.2.16:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.134.82:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.73.152:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.178.49.196:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.35:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.35:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.31.181:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.156:443 -> 192.168.2.16:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.16:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.16:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.62.226.171:443 -> 192.168.2.16:49811 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 153MB

Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /29c49848/ HTTP/1.1Host: pdflink.toConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/js/main.d504ddb9.js HTTP/1.1Host: pdflink.toConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pdflink.to/29c49848/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/css/main.24240c21.css HTTP/1.1Host: pdfdeck.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/website/images/icons/favicon-32x32.png HTTP/1.1Host: pdflink.toConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pdflink.to/29c49848/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/website/js/pdfworker.js HTTP/1.1Host: pdfdeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/website/images/icons/favicon-32x32.png HTTP/1.1Host: pdflink.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/pdf/09f23ad7-aeb2-4357-b18b-186934691db0/ HTTP/1.1Host: pdflink.toConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pdflink.to/29c49848/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/pdf/09f23ad7-aeb2-4357-b18b-186934691db0/ HTTP/1.1Host: pdflink.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?utm_campaign HTTP/1.1Host: zh.peoplelove.techConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?utm_campaign HTTP/1.1Host: zh.peoplelove.techConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9373d624ccd6f434 HTTP/1.1Host: zh.peoplelove.techConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zh.peoplelove.tech/?utm_campaign&__cf_chl_rt_tk=tGLKPY8k999CWvMlJ7DSeSZR8iFa2UBG8su_zsNBXn0-1745814754-1.0.1.1-ykqK5tE8SmMvNjxKcw9bBZ79ghCZA.O7vqkp_xDQyCEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveOrigin: https://zh.peoplelove.techsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zh.peoplelove.techConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zh.peoplelove.tech/?utm_campaignAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1759223964:1745814221:dFB-oJf9EAvPLIE0kVm3LskAEjxgwHXZYFYUa-vWL20/9373d624ccd6f434/3hv.hhJx9YcGJSgdm8S1.aXMO3uvqGsgZx2lZNjBAqM-1745814754-1.2.1.1-.eVcAd7S9xuT2hJiTP7nuwWnlClNkOF2vZvZ6.dtbimtcqOeW4cWRf2OJlGwF1ql HTTP/1.1Host: zh.peoplelove.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9373d634a9d952e3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zh.peoplelove.techConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zh.peoplelove.tech/?utm_campaignAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118379386:1745810834:tmCKlt3f4Ft3Yn-zclhYGbLyB9WZjjKtmFRjIEafYKw/9373d634a9d952e3/IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/9373d634a9d952e3/1745814758193/16f6f4f7f3c8fcb8f3d02e88d75b9f24aecd3687c9b3e9c6468de4452c76fe32/AqcPKFv-t2th86y HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9373d634a9d952e3/1745814758196/PmK7HSTVyV_8r3j HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9373d634a9d952e3/1745814758196/PmK7HSTVyV_8r3j HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118379386:1745810834:tmCKlt3f4Ft3Yn-zclhYGbLyB9WZjjKtmFRjIEafYKw/9373d634a9d952e3/IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118379386:1745810834:tmCKlt3f4Ft3Yn-zclhYGbLyB9WZjjKtmFRjIEafYKw/9373d634a9d952e3/IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zh.peoplelove.techConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zh.peoplelove.tech/?utm_campaign&__cf_chl_tk=tGLKPY8k999CWvMlJ7DSeSZR8iFa2UBG8su_zsNBXn0-1745814754-1.0.1.1-ykqK5tE8SmMvNjxKcw9bBZ79ghCZA.O7vqkp_xDQyCEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=qQEn7rgqHwtvkGrxtprPDEOcuBsj0mIAgCIKaRsWrsM-1745814765-1.2.1.1-N6V4f0Di6swXPwXrSoKD8aQsYNwbmjFJlGW7MegOKbJtFLIYfVI.zPFK20nWwJtzsFZH_K3_tXahO8eHveJJUPzPfowJ1mhlzOSJh4.emLBDv6vLRfavhKrMEZkNX1XtKK9JdhybbJclvHvMoNkfFMa87tsYxEmPaVB0n8K.1_HDoNcEM2qNFTGG2pPRmjRq4EPV0CDHx8Hd36vIjMP9iTAVCNuDuBPKLHQJ6NbYnJkoHLTAS3IcdnRyoxjwbMbooipa2SnngK_SipyHI1SA3SwNRLeu5MKD4rQGsqhxPYhvROLFj9X00TnKiwFYgGoxIKycYm9XBWNH8EGlf99lJr5OGaXkcowtobSTPXYCBpgaP1Exo_qf_2AMZqSq0Sz3
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1759223964:1745814221:dFB-oJf9EAvPLIE0kVm3LskAEjxgwHXZYFYUa-vWL20/9373d624ccd6f434/3hv.hhJx9YcGJSgdm8S1.aXMO3uvqGsgZx2lZNjBAqM-1745814754-1.2.1.1-.eVcAd7S9xuT2hJiTP7nuwWnlClNkOF2vZvZ6.dtbimtcqOeW4cWRf2OJlGwF1ql HTTP/1.1Host: zh.peoplelove.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: zh.peoplelove.techConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Referer: https://zh.peoplelove.tech/?utm_campaign&__cf_chl_tk=tGLKPY8k999CWvMlJ7DSeSZR8iFa2UBG8su_zsNBXn0-1745814754-1.0.1.1-ykqK5tE8SmMvNjxKcw9bBZ79ghCZA.O7vqkp_xDQyCEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=qQEn7rgqHwtvkGrxtprPDEOcuBsj0mIAgCIKaRsWrsM-1745814765-1.2.1.1-N6V4f0Di6swXPwXrSoKD8aQsYNwbmjFJlGW7MegOKbJtFLIYfVI.zPFK20nWwJtzsFZH_K3_tXahO8eHveJJUPzPfowJ1mhlzOSJh4.emLBDv6vLRfavhKrMEZkNX1XtKK9JdhybbJclvHvMoNkfFMa87tsYxEmPaVB0n8K.1_HDoNcEM2qNFTGG2pPRmjRq4EPV0CDHx8Hd36vIjMP9iTAVCNuDuBPKLHQJ6NbYnJkoHLTAS3IcdnRyoxjwbMbooipa2SnngK_SipyHI1SA3SwNRLeu5MKD4rQGsqhxPYhvROLFj9X00TnKiwFYgGoxIKycYm9XBWNH8EGlf99lJr5OGaXkcowtobSTPXYCBpgaP1Exo_qf_2AMZqSq0Sz3; __wp_key=4671aed863a82238fd3d7f80d41b1de365b088a18dff62b6bc830ebf6342f761
Source: global traffic	HTTP traffic detected: GET /js/jquery.min.js HTTP/1.1Host: zh.peoplelove.techConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zh.peoplelove.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=qQEn7rgqHwtvkGrxtprPDEOcuBsj0mIAgCIKaRsWrsM-1745814765-1.2.1.1-N6V4f0Di6swXPwXrSoKD8aQsYNwbmjFJlGW7MegOKbJtFLIYfVI.zPFK20nWwJtzsFZH_K3_tXahO8eHveJJUPzPfowJ1mhlzOSJh4.emLBDv6vLRfavhKrMEZkNX1XtKK9JdhybbJclvHvMoNkfFMa87tsYxEmPaVB0n8K.1_HDoNcEM2qNFTGG2pPRmjRq4EPV0CDHx8Hd36vIjMP9iTAVCNuDuBPKLHQJ6NbYnJkoHLTAS3IcdnRyoxjwbMbooipa2SnngK_SipyHI1SA3SwNRLeu5MKD4rQGsqhxPYhvROLFj9X00TnKiwFYgGoxIKycYm9XBWNH8EGlf99lJr5OGaXkcowtobSTPXYCBpgaP1Exo_qf_2AMZqSq0Sz3; __wp_key=4671aed863a82238fd3d7f80d41b1de365b088a18dff62b6bc830ebf6342f761
Source: global traffic	HTTP traffic detected: GET /itsgonnafail HTTP/1.1Host: zh.peoplelove.techConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://zh.peoplelove.techSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=qQEn7rgqHwtvkGrxtprPDEOcuBsj0mIAgCIKaRsWrsM-1745814765-1.2.1.1-N6V4f0Di6swXPwXrSoKD8aQsYNwbmjFJlGW7MegOKbJtFLIYfVI.zPFK20nWwJtzsFZH_K3_tXahO8eHveJJUPzPfowJ1mhlzOSJh4.emLBDv6vLRfavhKrMEZkNX1XtKK9JdhybbJclvHvMoNkfFMa87tsYxEmPaVB0n8K.1_HDoNcEM2qNFTGG2pPRmjRq4EPV0CDHx8Hd36vIjMP9iTAVCNuDuBPKLHQJ6NbYnJkoHLTAS3IcdnRyoxjwbMbooipa2SnngK_SipyHI1SA3SwNRLeu5MKD4rQGsqhxPYhvROLFj9X00TnKiwFYgGoxIKycYm9XBWNH8EGlf99lJr5OGaXkcowtobSTPXYCBpgaP1Exo_qf_2AMZqSq0Sz3; __wp_key=4671aed863a82238fd3d7f80d41b1de365b088a18dff62b6bc830ebf6342f761Sec-WebSocket-Key: KDangTFYRWRhheyPH3dN/g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zh.peoplelove.techSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zh.peoplelove.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: zh.peoplelove.techConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://zh.peoplelove.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=qQEn7rgqHwtvkGrxtprPDEOcuBsj0mIAgCIKaRsWrsM-1745814765-1.2.1.1-N6V4f0Di6swXPwXrSoKD8aQsYNwbmjFJlGW7MegOKbJtFLIYfVI.zPFK20nWwJtzsFZH_K3_tXahO8eHveJJUPzPfowJ1mhlzOSJh4.emLBDv6vLRfavhKrMEZkNX1XtKK9JdhybbJclvHvMoNkfFMa87tsYxEmPaVB0n8K.1_HDoNcEM2qNFTGG2pPRmjRq4EPV0CDHx8Hd36vIjMP9iTAVCNuDuBPKLHQJ6NbYnJkoHLTAS3IcdnRyoxjwbMbooipa2SnngK_SipyHI1SA3SwNRLeu5MKD4rQGsqhxPYhvROLFj9X00TnKiwFYgGoxIKycYm9XBWNH8EGlf99lJr5OGaXkcowtobSTPXYCBpgaP1Exo_qf_2AMZqSq0Sz3; __wp_key=4671aed863a82238fd3d7f80d41b1de365b088a18dff62b6bc830ebf6342f761; __wp_cf_defender=c9d890423bdd8f672926a6e46bf361c37afc8a1de8b01d7be910915e691d85c9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: zh.peoplelove.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __wp_key=4671aed863a82238fd3d7f80d41b1de365b088a18dff62b6bc830ebf6342f761; __wp_cf_defender=c9d890423bdd8f672926a6e46bf361c37afc8a1de8b01d7be910915e691d85c9
Source: global traffic	HTTP traffic detected: GET /_login_live/Me.htm?v=3 HTTP/1.1Host: zh.peoplelove.techConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://zh.peoplelove.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=qQEn7rgqHwtvkGrxtprPDEOcuBsj0mIAgCIKaRsWrsM-1745814765-1.2.1.1-N6V4f0Di6swXPwXrSoKD8aQsYNwbmjFJlGW7MegOKbJtFLIYfVI.zPFK20nWwJtzsFZH_K3_tXahO8eHveJJUPzPfowJ1mhlzOSJh4.emLBDv6vLRfavhKrMEZkNX1XtKK9JdhybbJclvHvMoNkfFMa87tsYxEmPaVB0n8K.1_HDoNcEM2qNFTGG2pPRmjRq4EPV0CDHx8Hd36vIjMP9iTAVCNuDuBPKLHQJ6NbYnJkoHLTAS3IcdnRyoxjwbMbooipa2SnngK_SipyHI1SA3SwNRLeu5MKD4rQGsqhxPYhvROLFj9X00TnKiwFYgGoxIKycYm9XBWNH8EGlf99lJr5OGaXkcowtobSTPXYCBpgaP1Exo_qf_2AMZqSq0Sz3; __wp_key=4671aed863a82238fd3d7f80d41b1de365b088a18dff62b6bc830ebf6342f761; __wp_cf_defender=c9d890423bdd8f672926a6e46bf361c37afc8a1de8b01d7be910915e691d85c9; http@main\|moc.enilnotfosorcim.nigol@buid=1.AXUAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAB1AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE37XZ8kEHni5EO7H91T2yLbpEd5stL16lVF-8nvPWm7COHw2diqLWqjTQHTub2nh3ssU-xE8a3vzSSXdvs3O5CtVsd8QJpnf-99Cmf_do-UcgAA; http@main\|moc.enilnotfosorcim.nigol.@esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEP-zL7UYqaoKvFAcwB8j4cM88GNwKUSDv-aeHxqxD2tzSJurKkd3-BaovMDSoUDZtvOBRvNvUrWqBJUHx7Xl5CrP34tb304rmgFoSxoHtTgxXGeIhbvNmg1JsilVonsu641jANg-uNXCRWBQ0PmBC1VDy2lXvtmVglg1oMQAPCckgAA; http@main\|moc.enilnotfosorcim.nigol.@esctx-SZ7Iybagto=AQABCQEAAABVrSpeuWamRam2jAF1XRQEbOMwewhBAyx40oH4GoT2ka0P1WmO5d6blE4EIzZGMVzPzewEMFX_A3if-M9WH4q-5-HxnkCzcqK0QxJTQLxrz00lwLCmChPmJIZehAtYkSwk9Sqdl95WI0E9ybMXaBHSDOmnuvTlbUbMiA2cSMDcHiAA; http@main\|moc.enilnotfosorcim.nigol@fpc=AqDq8ufAkhlFmEaAU5DkWcq4vjNwAQAAAPT7oN8OAAAA; http@main\|moc.enilnotfosorcim.nigol@x-ms-gateway-slice=estsfd; http@main\|moc.enilnotfosorcim.nigol@stsservicecookie=estsfd; __wp_location=main\|moc.enilnotfosorcim.nigol; __wp_session=
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: portal.microsoftonline.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://zh.peoplelove.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: onedrive.live.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zh.peoplelove.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: zh.peoplelove.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __wp_key=4671aed863a82238fd3d7f80d41b1de365b088a18dff62b6bc830ebf6342f761; __wp_cf_defender=c9d890423bdd8f672926a6e46bf361c37afc8a1de8b01d7be910915e691d85c9; http@main\|moc.enilnotfosorcim.nigol@buid=1.AXUAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAB1AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE37XZ8kEHni5EO7H91T2yLbpEd5stL16lVF-8nvPWm7COHw2diqLWqjTQHTub2nh3ssU-xE8a3vzSSXdvs3O5CtVsd8QJpnf-99Cmf_do-UcgAA; http@main\|moc.enilnotfosorcim.nigol.@esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEP-zL7UYqaoKvFAcwB8j4cM88GNwKUSDv-aeHxqxD2tzSJurKkd3-BaovMDSoUDZtvOBRvNvUrWqBJUHx7Xl5CrP34tb304rmgFoSxoHtTgxXGeIhbvNmg1JsilVonsu641jANg-uNXCRWBQ0PmBC1VDy2lXvtmVglg1oMQAPCckgAA; http@main\|moc.enilnotfosorcim.nigol.@esctx-SZ7Iybagto=AQABCQEAAABVrSpeuWamRam2jAF1XRQEbOMwewhBAyx40oH4GoT2ka0P1WmO5d6blE4EIzZGMVzPzewEMFX_A3if-M9WH4q-5-HxnkCzcqK0QxJTQLxrz00lwLCmChPmJIZehAtYkSwk9Sqdl95WI0E9ybMXaBHSDOmnuvTlbUbMiA2cSMDcHiAA; http@main\|moc.enilnotfosorcim.nigol@fpc=AqDq8ufAkhlFmEaAU5DkWcq4vjNwAQAAAPT7oN8OAAAA; http@main\|moc.enilnotfosorcim.nigol@x-ms-gateway-slice=estsfd; http@main\|moc.enilnotfosorcim.nigol@stsservicecookie=estsfd; __wp_location=main\|moc.enilnotfosorcim.nigol; http@_login_live\|moc.evil.nigol@uaid=61652168762a4a99a76bac519fbef362; http@_login_live\|moc.evil.nigol@MSPRequ=id%3DN%26lt%3D1745814798%26co%3D1; js@main\|moc.enilnotfosorcim.nigol@MicrosoftApplicationsTelemetryDeviceId=9755f694-c9a5-4fe5-9446-fca4471aa367; js@main\|moc.enilnotfosorcim.nigol@brcap=0; __wp_session=w5nCpsKBR8OeYxgiLCJ5wr7Ck8O2NsKtH8K8IwJ5bmMrwoc_acKRwqLCmyvCpRjDnsKyw7tfwppGw6zDnBotPwd-MsK5w4bDksKpw6tBwqImwqhoD8KbV8OhJV3CgsKJw5UvwrDDu8Ozw4jCmTgoQRB0wqsDY34gwq1SwqDChBkpwqV9w5deUyQCNg
Source: global traffic	HTTP traffic detected: GET /sso/adfs/ls/?client-request-id=c86c80cc-24cc-4ff7-9367-21e3a7a54aa8&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATONOScOKPy3X9yuuLj5Uu9VqxiVCZshP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8x4xCyblJznANYGUX2AReMXCY8BsxcHBJcAgwaDA8IOFcREr0HaBjzdfOP6b4zT_QeW1jD8ODKdY9UtctYOy_NwSC_3yg01MCrTNk3It3Eq13VwjwwqDUyqz3d0iUx0rzTL0nbNtTawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4OpesfX374MN3Hq_4dSqiAou8XEoM8tyispKrTD0dIyuqLKOcsrzS8koMwgxKvByDU909TTMsii1sNwgwPAAiQQYA0&cbcxt=&username=bob%40microsoft.com&mkt=&lc= HTTP/1.1Host: zh.peoplelove.techConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://zh.peoplelove.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=qQEn7rgqHwtvkGrxtprPDEOcuBsj0mIAgCIKaRsWrsM-1745814765-1.2.1.1-N6V4f0Di6swXPwXrSoKD8aQsYNwbmjFJlGW7MegOKbJtFLIYfVI.zPFK20nWwJtzsFZH_K3_tXahO8eHveJJUPzPfowJ1mhlzOSJh4.emLBDv6vLRfavhKrMEZkNX1XtKK9JdhybbJclvHvMoNkfFMa87tsYxEmPaVB0n8K.1_HDoNcEM2qNFTGG2pPRmjRq4EPV0CDHx8Hd36vIjMP9iTAVCNuDuBPKLHQJ6NbYnJkoHLTAS3IcdnRyoxjwbMbooipa2SnngK_SipyHI1SA3SwNRLeu5MKD4rQGsqhxPYhvROLFj9X00TnKiwFYgGoxIKycYm9XBWNH8EGlf99lJr5OGaXkcowtobSTPXYCBpgaP1Exo_qf_2AMZqSq0Sz3; __wp_key=4671aed863a82238fd3d7f80d41b1de365b088a18dff62b6bc830ebf6342f761; __wp_cf_defender=c9d890423bdd8f672926a6e46bf361c37afc8a1de8b01d7be910915e691d85c9; http@main\|moc.enilnotfosorcim.nigol@buid=1.AXUAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAB1AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE37XZ8kEHni5EO7H91T2yLbpEd5stL16lVF-8nvPWm7COHw2diqLWqjTQHTub2nh3ssU-xE8a3vzSSXdvs3O5CtVsd8QJpnf-99Cmf_do-UcgAA; http@main\|moc.enilnotfosorcim.nigol.@esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEP-zL7UYqaoKvFAcwB8j4cM88GNwKUSDv-aeHxqxD2tzSJurKkd3-BaovMDSoUDZtvOBRvNvUrWqBJUHx7Xl5CrP34tb304rmgFoSxoHtTgxXGeIhbvNmg1JsilVonsu641jANg-uNXCRWBQ0PmBC1VDy2lXvtmVglg1oMQAPCckgAA; http@main\|moc.enilnotfosorcim.nigol.@esctx-SZ7Iybagto=AQABCQEAAABVrSpeuWamRam2jAF1XRQEbOMwewhBAyx40oH4GoT2ka0P1WmO5d6blE4EIzZGMVzPzewEMFX_A3if-M9WH4q-5-HxnkCzcqK0QxJTQLxrz00lwLCmChPmJIZehAtYkSwk9Sqdl95WI0E9ybMXaBHSDOmnuvTlbUbMiA2cSMDcHiAA; http@main\|moc.enilnotfoso
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: pdflink.to
Source: global traffic	DNS traffic detected: DNS query: pdfdeck.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: zh.peoplelove.tech
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: portal.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: onedrive.live.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=cbTJPtDdbptiij0opjZ%2BSV7xU3CTwLdm4%2FV9eceizAr7vcJ587X1wPUSxPXtMkNTou9rG6Nq%2FOtbfoqdLBeXCwaVqCCtVZIwBuZCkKm7gpkb09qp0iqjmWyEAJgXRmjN9bLlcao%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 401Content-Type: application/reports+jsonOrigin: https://zh.peoplelove.techUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 28 Apr 2025 04:32:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9373d6237d2f2b8e-LAXServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9373d6237d2f2b8e"X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 28 Apr 2025 04:32:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9373d624ccd6f434-LAXServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9373d624ccd6f434"X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 28 Apr 2025 04:32:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9373d62fadcd2f21-LAXServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9373d62fadcd2f21"X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 28 Apr 2025 04:32:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9373d63e0f71a1a2-LAXServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9373d63e0f71a1a2"X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 28 Apr 2025 04:32:46 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareNel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Cf-Ray: 9373d67238bc585e-LAXReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gZAGv%2BLurTEYjFW%2FQnh1SG6R2SzYbtyso5ze5okOtz1PyL8%2BayvRPEISJKHN%2FribAVRPz6xmFehxBV34YKq5BFRQpEvz8fy9zKshlLWuET427%2FENmxH1%2BfSdeC0%2BkVDKvh8i%2BkU%3D"}],"group":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=149056&min_rtt=149037&rtt_var=31471&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2836&recv_bytes=2065&delivery_rate=27079&cwnd=252&unsent_bytes=0&cid=6831083e6ca82ac4&ts=329&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 28 Apr 2025 04:32:49 GMTContent-Length: 0Connection: closeServer: cloudflareNel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Cf-Ray: 9373d682897224e5-LAXReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uoaqQUZAhEPHg0GEiqSG0aITToOT9az%2BHRYD9yBLrQdt4%2BSex64odRGFt1zh2nfoAGCIDSewuKx9kFOw5HRFZeH%2FheZi5lDC4vrxlQxVRg2IGZM4EKXHuAlCx6b7SdchTneopII%3D"}],"group":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=149214&min_rtt=149173&rtt_var=31501&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1640&delivery_rate=27065&cwnd=252&unsent_bytes=0&cid=4c0c56131fc6a0d0&ts=371&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 28 Apr 2025 04:32:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9373d696296c295e-LAXServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9373d696296c295e"X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-store, no-cacheContent-Length: 1245Content-Type: text/htmlSet-Cookie: s.SessID=de87b8fa-5826-4efb-a322-aa3faedb30b9; path=/; secure; HttpOnly; SameSite=NoneSet-Cookie: s.SessID=de87b8fa-5826-4efb-a322-aa3faedb30b9; path=/; secure; HttpOnly; SameSite=NoneSet-Cookie: x-portal-routekey=wus; path=/; secure; HttpOnlyx-ms-correlation-id: 31bfbf07-dd0f-47da-b926-4fd3d1c16cf3X-Content-Type-Options: nosniffX-UA-Compatible: IE=EdgeX-Cache: CONFIG_NOCACHEX-MSEdge-Ref: Ref A: CA0F521DC7B245CDAECC779E6EF1919F Ref B: LAX311000112019 Ref C: 2025-04-28T04:33:28ZDate: Mon, 28 Apr 2025 04:33:28 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 28 Apr 2025 04:34:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9373d8de492f2f7a-LAXServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9373d8de492f2f7a"X-Content-Type-Options: nosniff

Source: chromecache_70.1.dr, chromecache_77.1.dr	String found in binary or memory: http://dhrt.com)
Source: chromecache_70.1.dr, chromecache_77.1.dr	String found in binary or memory: http://goal.com)
Source: chromecache_70.1.dr, chromecache_77.1.dr	String found in binary or memory: http://joe.com)
Source: chromecache_70.1.dr, chromecache_77.1.dr	String found in binary or memory: http://livescore.com)
Source: chromecache_101.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_95.1.dr	String found in binary or memory: https://device.zh.peoplelove.tech/index.php
Source: chromecache_83.1.dr	String found in binary or memory: https://imagemagick.org
Source: chromecache_92.1.dr, chromecache_76.1.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_95.1.dr	String found in binary or memory: https://login-us.microsoftonline.com
Source: chromecache_95.1.dr	String found in binary or memory: https://login.chinacloudapi.cn
Source: chromecache_95.1.dr	String found in binary or memory: https://login.microsoftonline.de
Source: chromecache_95.1.dr	String found in binary or memory: https://login.microsoftonline.us
Source: chromecache_95.1.dr	String found in binary or memory: https://login.partner.microsoftonline.cn
Source: chromecache_95.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_95.1.dr	String found in binary or memory: https://login.windows.net
Source: chromecache_95.1.dr	String found in binary or memory: https://logincert.microsoftonline.com
Source: chromecache_94.1.dr	String found in binary or memory: https://pdfdeck.com/static/frontend/css/main.24240c21.css
Source: chromecache_94.1.dr	String found in binary or memory: https://pdfdeck.com?ref=29c49848
Source: chromecache_94.1.dr	String found in binary or memory: https://pdflink.to/static/frontend/js/main.d504ddb9.js
Source: chromecache_70.1.dr, chromecache_77.1.dr	String found in binary or memory: https://zh.peoplelove.tech/?utm_campaign)
Source: chromecache_95.1.dr	String found in binary or memory: https://zh.peoplelove.tech/_login_microsoft
Source: chromecache_95.1.dr	String found in binary or memory: https://zh.peoplelove.tech/index.php

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 172.67.190.84:443 -> 192.168.2.16:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.84:443 -> 192.168.2.16:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.84:443 -> 192.168.2.16:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.134.82:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.73.152:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.178.49.196:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.35:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.35:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.31.181:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.156:443 -> 192.168.2.16:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.16:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.139.11:443 -> 192.168.2.16:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.62.226.171:443 -> 192.168.2.16:49811 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@34/64@36/14

Source: chromecache_77.1.dr	Initial sample: http://livescore.com
Source: chromecache_77.1.dr	Initial sample: http://goal.com
Source: chromecache_77.1.dr	Initial sample: https://zh.peoplelove.tech/?utm_campaign
Source: chromecache_77.1.dr	Initial sample: http://joe.com
Source: chromecache_77.1.dr	Initial sample: http://dhrt.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1864 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pdflink.to/29c49848/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1864 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,3051917738745916944,11689713014700151047,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	1 Drive-by Compromise	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://pdflink.to/29c49848/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://dhrt.com)	0%	Avira URL Cloud	safe
https://pdfdeck.com/static/website/js/pdfworker.js	0%	Avira URL Cloud	safe
http://livescore.com)	0%	Avira URL Cloud	safe
https://zh.peoplelove.tech/js/jquery.min.js	100%	Avira URL Cloud	malware
https://zh.peoplelove.tech/itsgonnafail	100%	Avira URL Cloud	malware
https://zh.peoplelove.tech/index.php	100%	Avira URL Cloud	malware
https://device.zh.peoplelove.tech/index.php	100%	Avira URL Cloud	malware
https://pdfdeck.com/static/frontend/css/main.24240c21.css	0%	Avira URL Cloud	safe
http://goal.com)	0%	Avira URL Cloud	safe
https://pdflink.to/static/website/images/icons/favicon-32x32.png	0%	Avira URL Cloud	safe
https://zh.peoplelove.tech/_login_live/Me.htm?v=3	100%	Avira URL Cloud	malware
https://zh.peoplelove.tech/cdn-cgi/challenge-platform/h/g/flow/ov1/1759223964:1745814221:dFB-oJf9EAvPLIE0kVm3LskAEjxgwHXZYFYUa-vWL20/9373d624ccd6f434/3hv.hhJx9YcGJSgdm8S1.aXMO3uvqGsgZx2lZNjBAqM-1745814754-1.2.1.1-.eVcAd7S9xuT2hJiTP7nuwWnlClNkOF2vZvZ6.dtbimtcqOeW4cWRf2OJlGwF1ql	100%	Avira URL Cloud	malware
https://pdflink.to/static/frontend/js/main.d504ddb9.js	0%	Avira URL Cloud	safe
https://zh.peoplelove.tech/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9373d624ccd6f434	100%	Avira URL Cloud	malware
https://zh.peoplelove.tech/common/GetCredentialType?mkt=en-US	100%	Avira URL Cloud	malware
https://pdflink.to/_/pdf/09f23ad7-aeb2-4357-b18b-186934691db0/	0%	Avira URL Cloud	safe
https://zh.peoplelove.tech/favicon.ico	100%	Avira URL Cloud	malware
https://pdfdeck.com?ref=29c49848	0%	Avira URL Cloud	safe
https://zh.peoplelove.tech/?utm_campaign)	100%	Avira URL Cloud	malware
https://zh.peoplelove.tech/_login_microsoft	100%	Avira URL Cloud	phishing
http://joe.com)	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
zh.peoplelove.tech	172.67.179.35	true	false	high
dual-spov-0006.spov-msedge.net	13.107.139.11	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	23.62.226.176	true	false	high
ipinfo.io	34.117.59.81	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
b-0004.b-msedge.net	13.107.6.156	true	false	high
pdfdeck.com	172.67.134.82	true	false	high
www.google.com	192.178.49.196	true	false	high
s-part-0043.t-0009.t-msedge.net	13.107.246.71	true	false	high
pdflink.to	172.67.190.84	true	false	high
onedrive.live.com	unknown	unknown	false	high
portal.microsoftonline.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pdfdeck.com/static/website/js/pdfworker.js	false	Avira URL Cloud: safe	unknown
https://zh.peoplelove.tech/	true		unknown
https://pdfdeck.com/static/frontend/css/main.24240c21.css	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=vzZYVXkP5LUqjsrhnagNYkQQ0BvpXcBk%2FWd0SI6Kqjd5LpMv6Nurk%2FJE%2FbOPupruppsNnRtiGtdVO6o77cqjhLVCyLYR3cS4bYcOtUXajzRrfH1GH0Gy0T2iqIXnWgzEP0tNbfo%3D	false		high
https://pdflink.to/29c49848/	false		unknown
https://onedrive.live.com/favicon.ico	false		high
https://zh.peoplelove.tech/js/jquery.min.js	true	Avira URL Cloud: malware	unknown
https://zh.peoplelove.tech/itsgonnafail	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9373d634a9d952e3/1745814758193/16f6f4f7f3c8fcb8f3d02e88d75b9f24aecd3687c9b3e9c6468de4452c76fe32/AqcPKFv-t2th86y	false		high
https://a.nel.cloudflare.com/report/v4?s=eStG6gDB8LcWv6NBYftnZdN%2Fs4xk5K0Y3LDMGiKJ8G3i99dMQsprcgBFtZSoCBppG6eDzS2HtSNIJUOytsA1Eev9xDGkTQQ8YD8fLIkVU3b2jUhrO3xFuzpt3q7sKaXH6Hgdcm8%3D	false		high
http://c.pki.goog/r/r4.crl	false		high
https://pdflink.to/static/website/images/icons/favicon-32x32.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9373d634a9d952e3&lang=auto	false		high
https://zh.peoplelove.tech/cdn-cgi/challenge-platform/h/g/flow/ov1/1759223964:1745814221:dFB-oJf9EAvPLIE0kVm3LskAEjxgwHXZYFYUa-vWL20/9373d624ccd6f434/3hv.hhJx9YcGJSgdm8S1.aXMO3uvqGsgZx2lZNjBAqM-1745814754-1.2.1.1-.eVcAd7S9xuT2hJiTP7nuwWnlClNkOF2vZvZ6.dtbimtcqOeW4cWRf2OJlGwF1ql	true	Avira URL Cloud: malware	unknown
https://zh.peoplelove.tech/_login_live/Me.htm?v=3	true	Avira URL Cloud: malware	unknown
https://pdflink.to/static/frontend/js/main.d504ddb9.js	false	Avira URL Cloud: safe	unknown
https://portal.microsoftonline.com/Prefetch/Prefetch.aspx	false		high
https://zh.peoplelove.tech/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9373d624ccd6f434	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/	false		high
https://pdflink.to/_/pdf/09f23ad7-aeb2-4357-b18b-186934691db0/	false	Avira URL Cloud: safe	unknown
https://zh.peoplelove.tech/?utm_campaign	true		unknown
https://ipinfo.io/json	false		high
https://zh.peoplelove.tech/common/GetCredentialType?mkt=en-US	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://zh.peoplelove.tech/favicon.ico	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2118379386:1745810834:tmCKlt3f4Ft3Yn-zclhYGbLyB9WZjjKtmFRjIEafYKw/9373d634a9d952e3/IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9373d634a9d952e3/1745814758196/PmK7HSTVyV_8r3j	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://device.zh.peoplelove.tech/index.php	chromecache_95.1.dr	false	Avira URL Cloud: malware	unknown
https://ipinfo.io/missingauth	chromecache_92.1.dr, chromecache_76.1.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_101.1.dr	false		high
https://login.windows.net	chromecache_95.1.dr	false		high
http://dhrt.com)	chromecache_70.1.dr, chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
http://livescore.com)	chromecache_70.1.dr, chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
https://zh.peoplelove.tech/index.php	chromecache_95.1.dr	true	Avira URL Cloud: malware	unknown
http://goal.com)	chromecache_70.1.dr, chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
https://login.chinacloudapi.cn	chromecache_95.1.dr	false		high
https://login-us.microsoftonline.com	chromecache_95.1.dr	false		high
https://imagemagick.org	chromecache_83.1.dr	false		high
https://login.windows-ppe.net	chromecache_95.1.dr	false		high
https://zh.peoplelove.tech/?utm_campaign)	chromecache_70.1.dr, chromecache_77.1.dr	true	Avira URL Cloud: malware	unknown
https://login.microsoftonline.us	chromecache_95.1.dr	false		high
https://pdfdeck.com?ref=29c49848	chromecache_94.1.dr	false	Avira URL Cloud: safe	unknown
https://zh.peoplelove.tech/_login_microsoft	chromecache_95.1.dr	true	Avira URL Cloud: phishing	unknown
https://login.microsoftonline.de	chromecache_95.1.dr	false		high
https://login.partner.microsoftonline.cn	chromecache_95.1.dr	false		high
https://logincert.microsoftonline.com	chromecache_95.1.dr	false		high
http://joe.com)	chromecache_70.1.dr, chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.6.156	b-0004.b-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.67.179.35	zh.peoplelove.tech	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.73.152	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.134.82	pdfdeck.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.31.181	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.139.11	dual-spov-0006.spov-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
192.178.49.196	www.google.com	United States	15169	GOOGLEUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.67.190.84	pdflink.to	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.5
192.168.2.15

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1675922
Start date and time:	2025-04-28 06:31:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://pdflink.to/29c49848/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@34/64@36/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.68.227, 192.178.49.174, 142.250.141.84, 192.178.49.206, 192.178.49.202, 142.250.69.10, 192.178.49.170, 142.250.68.234, 199.232.210.172, 142.250.69.3, 192.178.49.163, 142.250.68.238, 20.72.203.87, 51.104.15.253, 4.245.163.56, 184.29.183.29, 13.107.246.71
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, fpt.dfp.microsoft.com, clients2.google.com, pme-dfp-greenid-prod.trafficmanager.net, redirector.gvt1.com, update.googleapis.com, csp.microsoft.com, c.pki.goog, dfp-greenid-prod-pme.westus2.cloudapp.azure.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, onedscolprduks04.uksouth.cloudapp.azure.com, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://pdflink.to/29c49848/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 459233
Category:	downloaded
Size (bytes):	124082
Entropy (8bit):	7.9975238263371935
Encrypted:	true
SSDEEP:	3072:6WGkF9qkuami5zUIL2+MdueBQzQR14h4STyAKTey8Pd/Y8L1B0:fFfX5LMdpQzqSh4STyAKTedPd/Y8A
MD5:	36ACAEABB66EB3389B8BBA56FF4F9BAF
SHA1:	9E85A77464893DBC5B5791BDB0219C01A9136AC9
SHA-256:	E4F3CC8D144B38F1B49FE19F8B15A75E988C3693D1AD59B25E7943F8FA70C571
SHA-512:	F79ABAB6F7E40DA2AD6131276DE6DC86EDA6229730BC427D261DD2B168BCB9EA80045605D54296985A1436FE8B94CBDC87A207AF2398E9AF289A95C4AE867070
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_EA9_0LNszQ27kSRR18wFAw2.js
Preview:	...........kw.8.(....G37mw...Wl....'..t^.'.O.%K...#yKr..x.....D.r...Y....<...@..@......U...........W........a.....rv~5..}.=.(....+....w....A%.~...<....G.7.Ye.....U.Q.'s..2......,\|.T...\8Q.Z.^..P?.....@i7...........xT..>..U.......WN}7..p.T".2.......oB.8...,.L.(....WF.)j....bL...'..'4P..........e.`.ZW:.V.........p!z........cL.`zV.t.[.I=7.EO.....xT!d....{..@<{.L#'@...`.i..#.........?.#42...$.......cV.dP....A..g\.6...k.w....d.[.>L..~1...../\LgN.]w.`p.....v..y...+.r..C............./$....................ak..\.X...w%....F.'....zh.7.....V.mCw......>c.4..wvj.......WM.f?...9..;..s.(.3 ...s_ut.........n}.......t.a....H.....HO...In....Q.......weOkn=..'I.V......Jw.e.e.....!...T.....d....].:....Si...o....2u.i-W.}Q.a!.c"....k.1...,mu,z..z....[5..Q..1.E}C.[.b..&..-......Zr..w..s..R.....m....k.I..&.+...Re...T\.8`g<cZ......h..u..f.P......~.......D...,b.z@.Sw...k5....Db.../...I..}..ZL.j.taJV.HJ...g..H.C.z...^.R?........[.9e..xZ.....9...!.V....<%J.D...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 28, 2025 06:32:23.534781933 CEST	53	55075	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:23.664179087 CEST	53	65241	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:24.401932955 CEST	59198	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:24.402096033 CEST	60841	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:24.556063890 CEST	53	59198	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:24.572187901 CEST	53	60841	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:24.696697950 CEST	53	65241	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:24.838486910 CEST	53	51848	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:25.569586039 CEST	55549	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:25.570091009 CEST	57389	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:25.757925987 CEST	53	55549	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:25.758397102 CEST	53	57389	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:27.697736979 CEST	49339	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:27.697891951 CEST	51173	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:27.775641918 CEST	63360	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:27.775965929 CEST	52051	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:27.840689898 CEST	53	49339	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:27.850537062 CEST	53	51173	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:27.918694019 CEST	53	63360	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:27.918788910 CEST	53	52051	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:30.134366989 CEST	53	59308	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:33.088376999 CEST	61289	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:33.088764906 CEST	61957	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:33.262933016 CEST	53	61957	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:33.262959957 CEST	53	61289	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:33.965071917 CEST	59854	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:33.965348005 CEST	56247	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:34.105604887 CEST	53	59854	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:34.105705976 CEST	53	56247	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:35.050493956 CEST	52740	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:35.050874949 CEST	50408	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:35.190920115 CEST	53	52740	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:35.191076994 CEST	53	50408	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:35.794498920 CEST	59596	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:35.794838905 CEST	49682	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:35.874763012 CEST	56430	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:35.875127077 CEST	50023	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:35.939095020 CEST	53	49682	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:35.975667953 CEST	53	59596	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:36.015176058 CEST	53	56430	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:36.015229940 CEST	53	50023	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:37.344722033 CEST	64446	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:37.344866991 CEST	49563	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:37.485199928 CEST	53	49563	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:37.485220909 CEST	53	64446	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:41.806111097 CEST	53	55344	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:48.821738005 CEST	56597	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:48.821991920 CEST	65211	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:48.962107897 CEST	53	56597	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:48.962125063 CEST	53	65211	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:49.615247011 CEST	61820	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:49.615417004 CEST	62171	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:32:49.755984068 CEST	53	62171	1.1.1.1	192.168.2.16
Apr 28, 2025 06:32:49.756005049 CEST	53	61820	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:00.633553982 CEST	53	53192	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:05.998228073 CEST	62958	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:05.998573065 CEST	55502	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:06.138778925 CEST	53	62958	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:06.145102978 CEST	53	55502	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:26.646832943 CEST	53	52877	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:26.738606930 CEST	53	54041	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:27.681540012 CEST	60851	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:27.682816029 CEST	59846	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:27.868099928 CEST	53	60851	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:27.899979115 CEST	53	59846	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:29.103703976 CEST	53	54430	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:29.919294119 CEST	56575	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:29.919559956 CEST	62783	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:30.059555054 CEST	53	56575	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:30.059715033 CEST	53	62783	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:30.902658939 CEST	52035	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:30.902807951 CEST	49659	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:31.042895079 CEST	53	52035	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:31.047900915 CEST	53	49659	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:32.886332035 CEST	53	49166	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:33.973181963 CEST	54589	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:33.973341942 CEST	61696	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:33:34.113563061 CEST	53	54589	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:34.113773108 CEST	53	61696	1.1.1.1	192.168.2.16
Apr 28, 2025 06:33:42.126152992 CEST	138	138	192.168.2.16	192.168.2.255
Apr 28, 2025 06:34:03.529068947 CEST	53	54596	1.1.1.1	192.168.2.16
Apr 28, 2025 06:34:28.907125950 CEST	62201	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:34:28.907265902 CEST	63668	53	192.168.2.16	1.1.1.1
Apr 28, 2025 06:34:29.047619104 CEST	53	62201	1.1.1.1	192.168.2.16
Apr 28, 2025 06:34:29.047652960 CEST	53	63668	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 28, 2025 06:32:24.696783066 CEST	192.168.2.16	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Apr 28, 2025 06:34:25.320899010 CEST	192.168.2.16	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Apr 28, 2025 06:32:31.747066975 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 28, 2025 06:32:31.897497892 CEST	1243	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 28 Apr 2025 04:10:42 GMT Expires: Mon, 28 Apr 2025 05:00:42 GMT Cache-Control: public, max-age=3000 Age: 1309 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:24 UTC	669	OUT	GET /29c49848/ HTTP/1.1 Host: pdflink.to Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:25 UTC	413	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Cross-Origin-Opener-Policy: same-origin Referrer-Policy: same-origin Server: cloudflare Vary: origin Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: DENY Cf-Cache-Status: DYNAMIC CF-RAY: 9373d5edccb4585e-LAX
2025-04-28 04:32:25 UTC	956	IN	Data Raw: 39 32 34 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: 924<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" /> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <tit
2025-04-28 04:32:25 UTC	1369	IN	Data Raw: 35 72 65 6d 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 Data Ascii: 5rem 1rem; background: white; color: #333; font-size: 12px; font-weight: 600; color: #555; border-top: 1px solid #aaa; border-left: 1px solid #aaa; border-right: 1px solid #aaa; borde
2025-04-28 04:32:25 UTC	22	IN	Data Raw: 74 3e 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: t> </body></html>
2025-04-28 04:32:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:25 UTC	556	OUT	GET /static/frontend/js/main.d504ddb9.js HTTP/1.1 Host: pdflink.to Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pdflink.to/29c49848/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:26 UTC	383	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:26 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Cf-Cache-Status: HIT Last-Modified: Thu, 27 Jun 2024 07:55:16 GMT Server: cloudflare Vary: Accept-Encoding Age: 1880 Cache-Control: max-age=14400 Etag: W/"sfqbc4hrn8" CF-RAY: 9373d5f36d688626-LAX
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 36 30 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 64 35 30 34 64 64 62 39 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 35 31 34 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 38 35 33 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 65 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d Data Ascii: 6000/! For license information please see main.d504ddb9.js.LICENSE.txt /(()=>{var __webpack_modules__={5148:(e,t,n)=>{"use strict";var r=n(9853);var a=function(e){var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 65 79 29 7b 63 61 73 65 22 41 72 72 6f 77 44 6f 77 6e 22 3a 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 74 29 2b 31 7d 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 41 72 72 6f 77 55 70 22 3a 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 74 29 2d 31 7d 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 45 6e 64 22 3a 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 2d 31 7d 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 48 6f 6d 65 22 3a 65 2e 70 Data Ascii: ey){case"ArrowDown":e.preventDefault(),c((function(e,t){return e.indexOf(t)+1}));break;case"ArrowUp":e.preventDefault(),c((function(e,t){return e.indexOf(t)-1}));break;case"End":e.preventDefault(),c((function(e,t){return e.length-1}));break;case"Home":e.p
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 61 74 74 61 63 68 6d 65 6e 74 5f 5f 65 6d 70 74 79 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 72 2e 63 6c 61 73 73 4e 61 6d 65 73 28 7b 22 72 70 76 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 65 6d 70 74 79 22 3a 21 30 2c 22 72 70 76 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 65 6d 70 74 79 2d 2d 72 74 6c 22 3a 6f 7d 29 7d 2c 73 29 3a 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2c 7b 66 69 6c 65 73 3a 63 2e 66 69 6c 65 73 7d 29 3a 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 53 70 69 6e 6e 65 72 2c 6e 75 6c 6c 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 6f 72 65 2c 6e 3d 61 2e 75 73 65 53 74 61 74 65 28 74 2e 67 65 74 28 22 64 6f 63 22 29 29 2c 69 3d 6e 5b 30 5d 2c 73 3d 6e Data Ascii: "data-testid":"attachment__empty",className:r.classNames({"rpv-attachment__empty":!0,"rpv-attachment__empty--rtl":o})},s):a.createElement(i,{files:c.files}):a.createElement(r.Spinner,null)},s=function(e){var t=e.store,n=a.useState(t.get("doc")),i=n[0],s=n
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 38 2e 32 34 35 41 2e 35 2e 35 2c 30 2c 30 2c 31 2c 36 2e 38 36 32 2c 37 2e 35 48 31 37 2e 31 33 38 61 2e 35 2e 35 2c 30 2c 30 2c 31 2c 2e 34 33 35 2e 37 34 39 6c 2d 35 2e 31 33 39 2c 39 61 2e 35 2e 35 2c 30 2c 30 2c 31 2d 2e 38 36 38 2c 30 5a 22 7d 29 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 49 63 6f 6e 2c 7b 73 69 7a 65 3a 31 36 7d 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 39 2e 32 34 38 2c 31 37 2e 35 37 32 61 2e 35 2e 35 2c 30 2c 30 2c 31 2d 2e 37 34 38 2d 2e 34 33 34 56 36 2e 38 36 32 61 2e 35 2e 35 2c 30 2c 30 2c 31 2c 2e 37 34 38 2d 2e 34 33 34 6c 38 2e 39 39 32 2c 35 2e 31 33 38 61 2e 35 2e 35 2c 30 2c 30 2c 31 2c 30 2c 2e Data Ascii: 8.245A.5.5,0,0,1,6.862,7.5H17.138a.5.5,0,0,1,.435.749l-5.139,9a.5.5,0,0,1-.868,0Z"}))},l=function(){return i.createElement(r.Icon,{size:16},i.createElement("path",{d:"M9.248,17.572a.5.5,0,0,1-.748-.434V6.862a.5.5,0,0,1,.748-.434l8.992,5.138a.5.5,0,0,1,0,.
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 73 4e 61 6d 65 3a 22 72 70 76 2d 62 6f 6f 6b 6d 61 72 6b 5f 5f 74 6f 67 67 6c 65 22 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 62 6f 6f 6b 6d 61 72 6b 5f 5f 74 6f 67 67 6c 65 2d 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 63 29 2c 6f 6e 43 6c 69 63 6b 3a 45 7d 2c 53 3f 65 3a 74 29 3a 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 72 70 76 2d 62 6f 6f 6b 6d 61 72 6b 5f 5f 74 6f 67 67 6c 65 22 7d 29 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 75 72 6c 3f 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 72 70 76 2d 62 6f 6f 6b 6d 61 72 6b 5f 5f 74 69 74 6c 65 22 2c 68 72 65 66 3a 74 2e 75 72 6c Data Ascii: sName:"rpv-bookmark__toggle","data-testid":"bookmark__toggle-".concat(n,"-").concat(c),onClick:E},S?e:t):i.createElement("span",{className:"rpv-bookmark__toggle"})},F=function(e){return t.url?i.createElement("a",{className:"rpv-bookmark__title",href:t.url
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 62 6c 69 6e 67 73 3a 74 2e 6c 65 6e 67 74 68 2c 70 61 74 68 46 72 6f 6d 52 6f 6f 74 3a 6c 2c 72 65 6e 64 65 72 42 6f 6f 6b 6d 61 72 6b 49 74 65 6d 3a 75 2c 73 74 6f 72 65 3a 64 7d 29 7d 29 29 29 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 43 6f 6c 6c 61 70 73 65 3d 30 5d 3d 22 43 6f 6c 6c 61 70 73 65 22 2c 65 5b 65 2e 45 78 70 61 6e 64 3d 31 5d 3d 22 45 78 70 61 6e 64 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 62 6f 6f 6b 6d 61 72 6b 73 2c 6e 3d 65 2e 64 6f 63 2c 72 3d 65 2e 69 73 42 6f 6f 6b 6d 61 72 6b 45 78 70 61 6e 64 65 64 2c 6f 3d 65 2e 72 65 6e 64 65 72 42 6f 6f 6b 6d 61 72 6b 49 74 65 6d 2c 73 3d 65 2e 73 74 6f 72 65 2c 6c 3d 69 2e 75 73 65 52 65 66 28 29 2c Data Ascii: blings:t.length,pathFromRoot:l,renderBookmarkItem:u,store:d})})))};!function(e){e[e.Collapse=0]="Collapse",e[e.Expand=1]="Expand"}(a\|\|(a={}));var d=function(e){var t=e.bookmarks,n=e.doc,r=e.isBookmarkExpanded,o=e.renderBookmarkItem,s=e.store,l=i.useRef(),
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 5f 69 74 65 6d 22 29 2c 72 3d 65 3d 3d 3d 61 2e 43 6f 6c 6c 61 70 73 65 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3b 69 66 28 6e 26 26 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 3d 3d 3d 72 29 7b 76 61 72 20 69 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 72 70 76 2d 62 6f 6f 6b 6d 61 72 6b 5f 5f 74 6f 67 67 6c 65 22 29 3b 69 26 26 69 2e 63 6c 69 63 6b 28 29 7d 7d 7d 3b 72 65 74 75 72 6e 20 69 2e 75 73 65 45 66 66 65 63 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 63 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e Data Ascii: _item"),r=e===a.Collapse?"true":"false";if(n&&n.parentElement.getAttribute("aria-expanded")===r){var i=n.querySelector(".rpv-bookmark__toggle");i&&i.click()}}};return i.useEffect((function(){return document.addEventListener("keydown",c),function(){documen
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 6e 65 72 2d 2d 72 74 6c 22 3a 6c 7d 29 7d 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2c 7b 62 6f 6f 6b 6d 61 72 6b 73 3a 75 2e 69 74 65 6d 73 2c 64 6f 63 3a 74 2c 69 73 42 6f 6f 6b 6d 61 72 6b 45 78 70 61 6e 64 65 64 3a 6e 2c 72 65 6e 64 65 72 42 6f 6f 6b 6d 61 72 6b 49 74 65 6d 3a 61 2c 73 74 6f 72 65 3a 6f 7d 29 29 3a 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 72 70 76 2d 62 6f 6f 6b 6d 61 72 6b 5f 5f 6c 6f 61 64 65 72 22 7d 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 53 70 69 6e 6e 65 72 2c 6e 75 6c 6c 29 29 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 69 73 42 6f 6f 6b 6d 61 72 6b 45 78 70 61 6e 64 65 64 2c 6e 3d 65 2e 72 65 6e 64 65 72 42 6f Data Ascii: ner--rtl":l})},i.createElement(d,{bookmarks:u.items,doc:t,isBookmarkExpanded:n,renderBookmarkItem:a,store:o})):i.createElement("div",{className:"rpv-bookmark__loader"},i.createElement(r.Spinner,null))},p=function(e){var t=e.isBookmarkExpanded,n=e.renderBo
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 5b 6e 5d 7d 7d 29 7d 7d 29 29 2c 74 2e 64 65 66 61 75 6c 74 3d 65 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 74 29 7d 76 61 72 20 6f 2c 73 3d 69 28 72 29 2c 6c 3d 69 28 61 29 3b 74 2e 41 6e 6e 6f 74 61 74 69 6f 6e 54 79 70 65 3d 76 6f 69 64 20 30 2c 28 6f 3d 74 2e 41 6e 6e 6f 74 61 74 69 6f 6e 54 79 70 65 7c 7c 28 74 2e 41 6e 6e 6f 74 61 74 69 6f 6e 54 79 70 65 3d 7b 7d 29 29 5b 6f 2e 54 65 78 74 3d 31 5d 3d 22 54 65 78 74 22 2c 6f 5b 6f 2e 4c 69 6e 6b 3d 32 5d 3d 22 4c 69 6e 6b 22 2c 6f 5b 6f 2e 46 72 65 65 54 65 78 74 3d 33 5d 3d 22 46 72 65 65 54 65 78 74 22 2c 6f 5b 6f 2e 4c 69 6e 65 3d 34 5d 3d 22 4c 69 6e 65 22 2c 6f 5b 6f 2e 53 71 75 61 72 65 3d 35 5d 3d 22 53 71 75 61 72 65 22 2c 6f 5b 6f 2e 43 69 72 63 6c 65 3d 36 5d 3d 22 Data Ascii: eturn e[n]}})}})),t.default=e,Object.freeze(t)}var o,s=i(r),l=i(a);t.AnnotationType=void 0,(o=t.AnnotationType\|\|(t.AnnotationType={}))[o.Text=1]="Text",o[o.Link=2]="Link",o[o.FreeText=3]="FreeText",o[o.Line=4]="Line",o[o.Square=5]="Square",o[o.Circle=6]="
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 22 2c 64 69 72 65 63 74 69 6f 6e 3a 74 2e 54 65 78 74 44 69 72 65 63 74 69 6f 6e 2e 4c 65 66 74 54 6f 52 69 67 68 74 2c 73 65 74 43 75 72 72 65 6e 74 54 68 65 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 26 26 65 5b 6e 5d 26 26 74 2e 70 75 73 68 28 6e 29 7d 29 29 2c 74 2e 6a 6f 69 6e 28 22 20 22 29 7d 2c 67 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 73 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3a 73 2e 75 73 65 45 66 66 65 63 74 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 73 2e 75 73 Data Ascii: ",direction:t.TextDirection.LeftToRight,setCurrentTheme:function(){}}),m=function(e){var t=[];return Object.keys(e).forEach((function(n){n&&e[n]&&t.push(n)})),t.join(" ")},g="undefined"!=typeof window?s.useLayoutEffect:s.useEffect,v=function(e){var t=s.us

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:26 UTC	567	OUT	GET /static/frontend/css/main.24240c21.css HTTP/1.1 Host: pdfdeck.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:26 UTC	375	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:26 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Age: 3025 Alt-Svc: h3=":443"; ma=86400 Etag: W/"s8197vtxa" Last-Modified: Mon, 29 Jan 2024 17:14:19 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 Cf-Cache-Status: HIT CF-RAY: 9373d5f49a912aa3-LAX
2025-04-28 04:32:26 UTC	994	IN	Data Raw: 31 61 31 34 0d 0a 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 4f 78 79 67 65 6e 2c 55 62 75 6e 74 75 2c 43 61 6e 74 61 72 65 6c 6c 2c 46 69 72 61 20 53 61 6e 73 2c 44 72 6f 69 64 20 53 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 7d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 2d 63 6f 64 65 2d 70 72 6f 2c 4d Data Ascii: 1a14body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen,Ubuntu,Cantarell,Fira Sans,Droid Sans,Helvetica Neue,sans-serif;margin:0}code{font-family:source-code-pro,M
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 76 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 69 74 65 6d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 72 70 76 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 69 74 65 6d 3a 66 6f 63 75 73 2c 2e 72 70 76 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 69 74 65 6d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 31 61 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 70 76 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 69 74 65 6d 2d 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 7d 2e 72 70 76 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 6c 6f 61 64 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b Data Ascii: v-attachment__item:focus{outline:0}.rpv-attachment__item:focus,.rpv-attachment__item:hover{background-color:#0000001a;background-color:var(--rpv-attachment__item--hover-background-color)}.rpv-attachment__loader{align-items:center;display:flex;height:100%;
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 75 74 6f 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 70 76 2d 62 6f 6f 6b 6d 61 72 6b 5f 5f 63 6f 6e 74 61 69 6e 65 72 2d 2d 72 74 6c 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 7d 3a 72 6f 6f 74 7b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 61 6e 6e 6f 74 61 74 69 6f 6e 2d 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 30 33 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 61 6e 6e 6f 74 61 74 69 6f 6e 2d 70 6f 70 75 70 2d 77 72 61 70 70 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 61 66 30 38 39 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 61 6e 6e 6f 74 61 74 69 6f 6e 2d 70 6f 70 75 70 2d 77 72 61 70 70 65 72 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 30 70 78 Data Ascii: uto;padding:.5rem 0;width:100%}.rpv-bookmark__container--rtl{direction:rtl}:root{--rpv-core__annotation--link-hover-background-color:#ff03;--rpv-core__annotation-popup-wrapper-background-color:#faf089;--rpv-core__annotation-popup-wrapper-box-shadow:0 10px
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 72 70 76 2d 63 6f 72 65 5f 5f 6d 6f 64 61 6c 2d 62 6f 64 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 34 64 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 6d 6f 64 61 6c 2d 6f 76 65 72 6c 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 38 30 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 70 61 67 65 2d 6c 61 79 65 72 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 32 70 78 20 38 70 78 20 30 20 23 30 30 30 33 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 70 6f 70 6f 76 65 72 2d 62 6f 64 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 70 6f 70 6f 76 65 72 2d 62 6f 64 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 34 64 3b 2d 2d 72 70 76 2d 63 6f 72 Data Ascii: rpv-core__modal-body-border-color:#0000004d;--rpv-core__modal-overlay-background-color:#00000080;--rpv-core__page-layer-box-shadow:2px 2px 8px 0 #0003;--rpv-core__popover-body-background-color:#fff;--rpv-core__popover-body-border-color:#0000004d;--rpv-cor
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 64 6f 63 2d 65 72 72 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 39 31 39 31 39 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 64 6f 63 2d 65 72 72 6f 72 2d 74 65 78 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 30 32 33 32 33 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 64 6f 63 2d 65 72 72 6f 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 64 6f 63 2d 6c 6f 61 64 69 6e 67 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 39 31 39 31 39 3b 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 66 75 6c 6c 2d 73 63 72 65 65 6e 2d 74 61 72 67 65 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 61 31 61 31 61 3b 2d 2d Data Ascii: color:#fff;--rpv-core__doc-error-background-color:#191919;--rpv-core__doc-error-text-background-color:#c02323;--rpv-core__doc-error-text-color:#fff;--rpv-core__doc-loading-background-color:#191919;--rpv-core__full-screen-target-background-color:#1a1a1a;--
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 74 61 74 69 6f 6e 2d 6c 61 79 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 61 72 72 6f 77 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 34 64 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 61 72 72 6f 77 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 34 64 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 61 72 72 6f 77 2d 62 6f 72 64 65 72 2d 63 6f 6c 0d 0a 37 64 36 61 0d 0a 6f 72 29 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 34 Data Ascii: tation-layer{z-index:1}.rpv-core__arrow{border-bottom:1px solid #0000004d;border-bottom:1px solid var(--rpv-core__arrow-border-color);border-left-color:#0000004d;border-left-color:var(--rpv-core__arrow-border-col7d6aor);border-right:1px solid #0000004
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 7b 62 6f 74 74 6f 6d 3a 30 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 61 73 6b 69 6e 67 2d 70 61 73 73 77 6f 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 61 73 6b 69 6e 67 2d 70 61 73 73 77 6f 72 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 61 73 6b 69 6e 67 2d 70 61 73 73 77 6f 72 64 2d 63 6f 6c 6f 72 29 3b 70 61 64 64 69 6e 67 3a 32 72 65 6d 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 61 73 6b 69 6e 67 2d 70 61 73 73 77 6f 72 64 2d 2d 72 74 6c 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 61 73 6b 69 Data Ascii: {bottom:0}.rpv-core__asking-password{background-color:var(--rpv-core__asking-password-background-color);border-radius:.25rem;color:#000;color:var(--rpv-core__asking-password-color);padding:2rem}.rpv-core__asking-password--rtl{direction:rtl}.rpv-core__aski
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 65 5f 5f 64 6f 63 2d 65 72 72 6f 72 2d 2d 72 74 6c 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 64 6f 63 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 30 32 34 32 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 64 6f 63 2d 65 72 72 6f 72 2d 74 65 78 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 64 6f 63 2d 65 72 72 6f 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 3b Data Ascii: e__doc-error--rtl{direction:rtl}.rpv-core__doc-error-text{background-color:#c02424;background-color:var(--rpv-core__doc-error-text-background-color);border-radius:.25rem;color:#fff;color:var(--rpv-core__doc-error-text-color);line-height:1.5;max-width:50%;
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 70 76 2d 63 6f 72 65 5f 5f 69 6e 6e 65 72 2d 70 61 67 65 2d 2d 64 75 61 6c 2d 63 6f 76 65 72 2d 6f 64 64 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 69 6e 6e 65 72 2d 70 61 67 65 2d 2d 64 75 61 6c 2d 63 6f 76 65 72 2d 65 76 65 6e 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 61 6e 6e 6f 74 61 74 69 6f 6e 2d 2d 6c 69 6e 6b 20 61 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 Data Ascii: pv-core__inner-page--dual-cover-odd{align-items:center;display:flex;justify-content:flex-end}.rpv-core__inner-page--dual-cover-even{align-items:center;display:flex;justify-content:flex-start}.rpv-core__annotation--link a{height:100%;left:0;position:absolu
2025-04-28 04:32:26 UTC	1369	IN	Data Raw: 72 70 76 2d 63 6f 72 65 5f 5f 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 2d 2d 72 74 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 72 65 6d 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 6d 65 6e 75 2d 69 74 65 6d 2d 63 68 65 63 6b 2d 2d 6c 74 72 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 6d 65 6e 75 2d 69 74 65 6d 2d 63 68 65 63 6b 2d 2d 72 74 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 7d 2e 72 70 76 2d 63 6f 72 65 5f 5f 6d 65 6e 75 2d 69 74 65 6d 2d 2d 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 34 64 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 70 76 2d 63 6f 72 65 5f 5f 6d 65 6e 75 2d 69 74 65 6d 2d 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 29 7d 2e 72 70 76 2d 63 6f 72 65 Data Ascii: rpv-core__menu-item-label--rtl{padding-left:2rem}.rpv-core__menu-item-check--ltr{padding-right:1rem}.rpv-core__menu-item-check--rtl{padding-left:1rem}.rpv-core__menu-item--disabled{color:#0000004d;color:var(--rpv-core__menu-item--disabled-color)}.rpv-core

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:27 UTC	626	OUT	GET /static/website/images/icons/favicon-32x32.png HTTP/1.1 Host: pdflink.to Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pdflink.to/29c49848/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:27 UTC	352	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:27 GMT Content-Type: image/png Content-Length: 2105 Connection: close Accept-Ranges: bytes Alt-Svc: h3=":443"; ma=86400 Etag: "s526s01mh" Last-Modified: Sat, 02 Dec 2023 21:38:24 GMT Server: cloudflare Age: 1106 Cache-Control: max-age=14400 Cf-Cache-Status: HIT CF-RAY: 9373d5fc590a2f20-LAX
2025-04-28 04:32:27 UTC	1017	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 fa 50 4c 54 45 00 00 00 38 bd f8 38 be f9 24 6c 92 3a c3 fd ff df cb ff ff ff 0f 19 2b d8 e7 eb de ed f1 cb e8 f1 db ec f1 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 Data Ascii: PNGIHDR DgAMAa cHRMz&u0`:pQ<PLTE88$l:+8888888888888888888888888888888888888888
2025-04-28 04:32:27 UTC	1088	IN	Data Raw: 66 b8 7d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e7 0c 02 0b 0e 1f b7 b2 6b 8a 00 00 02 3f 49 44 41 54 38 cb 63 60 80 02 46 1e 5e 3e 7e 01 41 21 21 61 11 51 31 71 1e 46 06 54 c0 c8 23 21 29 25 dd 00 05 42 32 b2 72 f2 28 4a 18 15 14 95 1a 50 80 b2 8a 2a 23 5c 09 23 a3 9a 7a 03 06 d0 d0 84 a9 60 64 d4 d4 6a c0 02 b4 75 a0 2a 18 d5 74 1b b0 02 6d 3d b0 0a 46 05 7d 10 af 11 19 34 41 54 18 18 02 15 30 1a 19 83 a4 9b 5b 90 41 6b 1b 44 85 09 d0 bb 8c 12 a6 40 f9 f6 8e ce 2e 04 e8 ee e9 ed 6b 04 29 30 33 07 2a 50 01 32 fa 27 4c 9c 34 19 01 a6 4c 9d 36 7d 06 58 85 a8 05 83 a5 55 43 c3 cc 59 b3 e7 cc 9d 87 00 f3 17 2c 5c b4 18 ac c2 5a 9c c1 c6 b6 a1 61 c9 d2 65 cb 51 15 ac 58 b9 68 7a 1f 28 4c ed 18 ec 81 d4 92 55 Data Ascii: f}pHYstIMEk?IDAT8c`F^>~A!!aQ1qFT#!)%B2r(JP#\#z`djutm=F}4AT0[AkD@.k)03*P2'L4L6}XUCY,\ZaeQXhz(LU

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:27 UTC	415	OUT	GET /static/website/js/pdfworker.js HTTP/1.1 Host: pdfdeck.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:27 UTC	383	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:27 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Age: 3919 Alt-Svc: h3=":443"; ma=86400 Etag: W/"s8197vnawc" Last-Modified: Mon, 29 Jan 2024 17:14:19 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 Cf-Cache-Status: HIT CF-RAY: 9373d5fc5ab714f2-LAX
2025-04-28 04:32:27 UTC	986	IN	Data Raw: 31 61 30 64 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 73 74 61 72 74 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 73 20 74 68 65 20 65 6e 74 69 72 65 20 6c 69 63 65 6e 73 65 20 6e 6f 74 69 63 65 20 66 6f 72 20 74 68 65 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 63 6f 64 65 20 69 6e 20 74 68 69 73 20 70 61 67 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 4d 6f 7a 69 6c 6c 61 20 46 6f 75 6e 64 61 74 69 6f 6e 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 Data Ascii: 1a0d/** * @licstart The following is the entire license notice for the * JavaScript code in this page * * Copyright 2023 Mozilla Foundation * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 73 74 2f 62 75 69 6c 64 2f 70 64 66 2e 77 6f 72 6b 65 72 22 2c 5b 5d 2c 28 28 29 3d 3e 65 2e 70 64 66 6a 73 57 6f 72 6b 65 72 3d 74 28 29 29 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 70 64 66 6a 73 2d 64 69 73 74 2f 62 75 69 6c 64 2f 70 64 66 2e 77 6f 72 6b 65 72 22 5d 3d 65 2e 70 64 66 6a 73 57 6f 72 6b 65 72 3d 74 28 29 3a 65 5b 22 70 64 66 6a 73 2d 64 69 73 74 2f 62 75 69 6c 64 2f 70 64 66 2e 77 6f 72 6b 65 72 22 5d 3d 65 2e 70 64 66 6a 73 57 6f 72 6b 65 72 3d 74 28 29 7d 28 67 6c 6f 62 61 6c 54 68 69 73 2c 28 28 29 3d 3e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 5b 2c 28 65 2c 74 2c 61 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: st/build/pdf.worker",[],(()=>e.pdfjsWorker=t())):"object"==typeof exports?exports["pdfjs-dist/build/pdf.worker"]=e.pdfjsWorker=t():e["pdfjs-dist/build/pdf.worker"]=e.pdfjsWorker=t()}(globalThis,(()=>(()=>{"use strict";var e=[,(e,t,a)=>{Object.defineProper
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 65 64 20 65 6e 75 6d 65 72 61 62 6c 65 20 70 72 6f 70 65 72 74 69 65 73 3a 20 22 2b 53 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 3b 20 74 68 75 73 20 62 72 65 61 6b 69 6e 67 20 65 2e 67 2e 20 60 66 6f 72 2e 2e 2e 69 6e 60 20 69 74 65 72 61 74 69 6f 6e 20 6f 66 20 60 41 72 72 61 79 60 73 2e 22 29 3b 63 6f 6e 73 74 20 78 3d 62 2b 22 5f 77 6f 72 6b 65 72 22 3b 6c 65 74 20 43 3d 6e 65 77 20 68 2e 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 78 2c 62 2c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 65 6e 73 75 72 65 4e 6f 74 54 65 72 6d 69 6e 61 74 65 64 28 29 7b 69 66 28 66 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 57 6f 72 6b 65 72 20 77 61 73 20 74 65 72 6d 69 6e 61 74 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 57 6f 72 6b 65 72 54 61 73 6b 28 Data Ascii: ed enumerable properties: "+S.join(", ")+"; thus breaking e.g. `for...in` iteration of `Array`s.");const x=b+"_worker";let C=new h.MessageHandler(x,b,t);function ensureNotTerminated(){if(f)throw new Error("Worker was terminated")}function startWorkerTask(
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 28 65 29 3b 72 65 74 75 72 6e 20 66 2e 70 72 6f 6d 69 73 65 7d 63 6f 6e 73 74 20 77 3d 6d 2e 67 65 74 46 75 6c 6c 52 65 61 64 65 72 28 29 3b 77 2e 68 65 61 64 65 72 73 52 65 61 64 79 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 2e 69 73 52 61 6e 67 65 53 75 70 70 6f 72 74 65 64 29 7b 64 2e 73 6f 75 72 63 65 3d 6d 3b 64 2e 6c 65 6e 67 74 68 3d 77 2e 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 3b 64 2e 64 69 73 61 62 6c 65 41 75 74 6f 46 65 74 63 68 7c 7c 3d 77 2e 69 73 53 74 72 65 61 6d 69 6e 67 53 75 70 70 6f 72 74 65 64 3b 70 3d 6e 65 77 20 73 2e 4e 65 74 77 6f 72 6b 50 64 66 4d 61 6e 61 67 65 72 28 64 29 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 79 29 70 2e 73 65 6e 64 50 72 6f 67 72 65 73 73 69 76 65 44 61 74 61 28 65 29 3b 79 3d Data Ascii: (e);return f.promise}const w=m.getFullReader();w.headersReady.then((function(){if(w.isRangeSupported){d.source=m;d.length=w.contentLength;d.disableAutoFetch\|\|=w.isStreamingSupported;p=new s.NetworkPdfManager(d);for(const e of y)p.sendProgressiveData(e);y=
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 65 6e 73 75 72 65 43 61 74 61 6c 6f 67 28 22 64 65 73 74 69 6e 61 74 69 6f 6e 73 22 29 7d 29 29 3b 43 2e 6f 6e 28 22 47 65 74 44 65 73 74 69 6e 61 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 65 6e 73 75 72 65 43 61 74 61 6c 6f 67 28 22 67 65 74 44 65 73 74 69 6e 61 74 69 6f 6e 22 2c 5b 65 2e 69 64 5d 29 7d 29 29 3b 43 2e 6f 6e 28 22 47 65 74 50 61 67 65 4c 61 62 65 6c 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 65 6e 73 75 72 65 43 61 74 61 6c 6f 67 28 22 70 61 67 65 4c 61 62 65 6c 73 22 29 7d 29 29 3b 43 2e 6f 6e 28 22 47 65 74 50 61 67 65 4c 61 79 6f 75 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 65 6e 73 Data Ascii: ion(e){return a.ensureCatalog("destinations")}));C.on("GetDestination",(function(e){return a.ensureCatalog("getDestination",[e.id])}));C.on("GetPageLabels",(function(e){return a.ensureCatalog("pageLabels")}));C.on("GetPageLayout",(function(e){return a.ens
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 74 3a 74 7d 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 50 61 67 65 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 72 3d 6e 65 77 20 57 6f 72 6b 65 72 54 61 73 6b 28 60 47 65 74 41 6e 6e 6f 74 61 74 69 6f 6e 73 3a 20 70 61 67 65 20 24 7b 65 7d 60 29 3b 73 74 61 72 74 57 6f 72 6b 65 72 54 61 73 6b 28 72 29 3b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 6e 6e 6f 74 61 74 69 6f 6e 73 44 61 74 61 28 43 2c 72 2c 74 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 66 69 6e 69 73 68 57 6f 72 6b 65 72 54 61 73 6b 28 72 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 28 65 3d 3e 7b 66 69 6e 69 73 68 57 6f 72 6b 65 72 54 61 73 6b 28 0d 0a 37 66 65 61 0d 0a 72 29 3b 74 68 72 6f 77 20 65 7d 29 29 7d 29 29 7d 29 29 3b 43 2e 6f 6e 28 22 47 65 74 46 69 65 6c 64 Data Ascii: t:t}){return a.getPage(e).then((function(a){const r=new WorkerTask(`GetAnnotations: page ${e}`);startWorkerTask(r);return a.getAnnotationsData(C,r,t).then((e=>{finishWorkerTask(r);return e}),(e=>{finishWorkerTask(7fear);throw e}))}))}));C.on("GetField
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 61 73 6b 28 61 29 7d 29 29 7d 29 29 29 3b 6e 75 6c 6c 3d 3d 3d 6b 3f 75 2e 70 75 73 68 28 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 29 2e 74 68 65 6e 28 28 61 73 79 6e 63 20 65 3d 3e 7b 61 77 61 69 74 20 64 2e 53 74 72 75 63 74 54 72 65 65 52 6f 6f 74 2e 63 72 65 61 74 65 53 74 72 75 63 74 75 72 65 54 72 65 65 28 7b 6e 65 77 41 6e 6e 6f 74 61 74 69 6f 6e 73 42 79 50 61 67 65 3a 66 2c 78 72 65 66 3a 79 2c 63 61 74 61 6c 6f 67 52 65 66 3a 78 2c 70 64 66 4d 61 6e 61 67 65 72 3a 61 2c 6e 65 77 52 65 66 73 3a 65 7d 29 3b 72 65 74 75 72 6e 20 65 7d 29 29 29 3a 6b 26 26 75 2e 70 75 73 68 28 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 29 2e 74 68 65 6e 28 28 61 73 79 6e 63 20 65 3d 3e 7b 61 77 61 69 74 20 6b 2e 75 70 64 61 74 65 53 74 72 75 63 74 75 72 65 54 72 65 65 28 Data Ascii: ask(a)}))})));null===k?u.push(Promise.all(t).then((async e=>{await d.StructTreeRoot.createStructureTree({newAnnotationsByPage:f,xref:y,catalogRef:x,pdfManager:a,newRefs:e});return e}))):k&&u.push(Promise.all(t).then((async e=>{await k.updateStructureTree(
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 72 65 6d 65 6e 74 61 6c 55 70 64 61 74 65 29 28 7b 6f 72 69 67 69 6e 61 6c 44 61 74 61 3a 67 2e 62 79 74 65 73 2c 78 72 65 66 49 6e 66 6f 3a 4e 2c 6e 65 77 52 65 66 73 3a 46 2c 78 72 65 66 3a 79 2c 68 61 73 58 66 61 3a 21 21 4d 2c 78 66 61 44 61 74 61 73 65 74 73 52 65 66 3a 44 2c 68 61 73 58 66 61 44 61 74 61 73 65 74 73 45 6e 74 72 79 3a 45 2c 6e 65 65 64 41 70 70 65 61 72 61 6e 63 65 73 3a 54 2c 61 63 72 6f 46 6f 72 6d 52 65 66 3a 6d 2c 61 63 72 6f 46 6f 72 6d 3a 70 2c 78 66 61 44 61 74 61 3a 4f 7d 29 2e 66 69 6e 61 6c 6c 79 28 28 28 29 3d 3e 7b 79 2e 72 65 73 65 74 4e 65 77 54 65 6d 70 6f 72 61 72 79 52 65 66 28 29 7d 29 29 7d 29 29 3b 43 2e 6f 6e 28 22 47 65 74 4f 70 65 72 61 74 6f 72 4c 69 73 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 Data Ascii: rementalUpdate)({originalData:g.bytes,xrefInfo:N,newRefs:F,xref:y,hasXfa:!!M,xfaDatasetsRef:D,hasXfaDatasetsEntry:E,needAppearances:T,acroFormRef:m,acroForm:p,xfaData:O}).finally((()=>{y.resetNewTemporaryRef()}))}));C.on("GetOperatorList",(function(e,t){c
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 6e 20 61 2e 65 6e 73 75 72 65 28 65 2c 22 67 65 74 53 74 72 75 63 74 54 72 65 65 22 29 7d 29 29 7d 29 29 3b 43 2e 6f 6e 28 22 46 6f 6e 74 46 61 6c 6c 62 61 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 66 6f 6e 74 46 61 6c 6c 62 61 63 6b 28 65 2e 69 64 2c 43 29 7d 29 29 3b 43 2e 6f 6e 28 22 43 6c 65 61 6e 75 70 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 65 61 6e 75 70 28 21 30 29 7d 29 29 3b 43 2e 6f 6e 28 22 54 65 72 6d 69 6e 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 3d 21 30 3b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 69 66 28 61 29 7b 61 2e 74 65 72 6d 69 6e 61 74 65 28 6e 65 77 20 72 2e 41 62 6f 72 74 45 78 63 65 70 74 69 6f 6e 28 22 57 6f 72 6b 65 72 20 77 61 73 20 74 65 72 6d Data Ascii: n a.ensure(e,"getStructTree")}))}));C.on("FontFallback",(function(e){return a.fontFallback(e.id,C)}));C.on("Cleanup",(function(e){return a.cleanup(!0)}));C.on("Terminate",(function(e){f=!0;const t=[];if(a){a.terminate(new r.AbortException("Worker was term
2025-04-28 04:32:27 UTC	1369	IN	Data Raw: 2e 58 52 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 3f 61 2e 72 65 71 75 65 73 74 4c 6f 61 64 65 64 53 74 72 65 61 6d 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 75 72 65 4e 6f 74 54 65 72 6d 69 6e 61 74 65 64 28 29 3b 6c 6f 61 64 44 6f 63 75 6d 65 6e 74 28 21 30 29 2e 74 68 65 6e 28 6f 6e 53 75 63 63 65 73 73 2c 6f 6e 46 61 69 6c 75 72 65 29 7d 29 29 3a 6f 6e 46 61 69 6c 75 72 65 28 65 29 7d 29 29 7d 65 6e 73 75 72 65 4e 6f 74 54 65 72 6d 69 6e 61 74 65 64 28 29 3b 67 65 74 50 64 66 4d 61 6e 61 67 65 72 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 66 29 7b 65 2e 74 65 72 6d 69 6e 61 74 65 28 6e 65 77 20 72 2e 41 62 6f 72 74 45 78 63 65 70 74 69 6f 6e 28 22 57 6f 72 6b 65 72 20 77 61 73 20 74 65 Data Ascii: .XRefParseException?a.requestLoadedStream().then((function(){ensureNotTerminated();loadDocument(!0).then(onSuccess,onFailure)})):onFailure(e)}))}ensureNotTerminated();getPdfManager(e).then((function(e){if(f){e.terminate(new r.AbortException("Worker was te

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:28 UTC	419	OUT	GET /static/website/images/icons/favicon-32x32.png HTTP/1.1 Host: pdflink.to Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:28 UTC	352	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:28 GMT Content-Type: image/png Content-Length: 2105 Connection: close Accept-Ranges: bytes Alt-Svc: h3=":443"; ma=86400 Etag: "s526s01mh" Last-Modified: Sat, 02 Dec 2023 21:38:24 GMT Server: cloudflare Age: 1106 Cache-Control: max-age=14400 Cf-Cache-Status: HIT CF-RAY: 9373d601bdcb2f03-LAX
2025-04-28 04:32:28 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 fa 50 4c 54 45 00 00 00 38 bd f8 38 be f9 24 6c 92 3a c3 fd ff df cb ff ff ff 0f 19 2b d8 e7 eb de ed f1 cb e8 f1 db ec f1 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 bd f8 38 Data Ascii: PNGIHDR DgAMAa cHRMz&u0`:pQ<PLTE88$l:+8888888888888888888888888888888888888888
2025-04-28 04:32:28 UTC	736	IN	Data Raw: 59 81 2b 5c c1 b1 b3 e7 cf 5f 00 81 8b 97 36 c2 15 38 33 b8 21 1c 79 f9 0a 14 5c bd 76 1d a6 c0 9d c1 03 61 c5 8d 9b 30 70 eb f6 46 a8 02 07 06 4f 69 b8 09 77 2e c3 c1 5c a8 09 2e 5e 0c de 52 08 13 ee c2 c0 3d 98 09 32 3e 0c 46 be 98 6e b8 ff e0 21 d4 04 3f 1e 06 46 4d 7f 98 09 8f 1e 43 c0 93 a7 1b 9f 41 14 28 07 00 a3 db 28 10 a6 60 f3 f3 e7 cf 57 9c 7d f1 e2 e5 2b 58 38 04 81 f2 07 63 70 08 54 c1 eb 37 6f 1e bf 3d 3a 1f 1e 92 ad a1 61 e0 34 c9 18 1e f1 0e ac e0 fd 9a 35 1f 20 71 01 56 f0 31 32 0a 92 ac 19 99 a2 63 c0 0a 3e 7d fe f2 f5 db 1d 98 82 ef b1 71 cc d0 8c c1 c2 1a 9f 90 b8 77 de b1 75 3f 7e fe fa fd 07 a6 20 29 99 8d 1d 96 b5 38 38 52 52 d3 80 91 0c 8b 48 20 48 cf c8 e4 e4 42 ca 9c 9c 59 d9 39 b9 79 30 cd f9 05 85 45 c5 dc 68 f9 9b b3 a4 b4 ac Data Ascii: Y+\_683!y\va0pFOiw.\.^R=2>Fn!?FMCA((`W}+X8cpT7o=:a45 qV12c>}qwu?~ )88RRH HBY9y0Eh

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:28 UTC	560	OUT	GET /_/pdf/09f23ad7-aeb2-4357-b18b-186934691db0/ HTTP/1.1 Host: pdflink.to Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pdflink.to/29c49848/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:29 UTC	465	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:29 GMT Content-Type: application/pdf Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Content-Disposition: inline; filename="documents/Untitled_document_54_U5pEexy.pdf" Cross-Origin-Opener-Policy: same-origin Referrer-Policy: same-origin Server: cloudflare Vary: origin X-Content-Type-Options: nosniff X-Frame-Options: DENY Cf-Cache-Status: DYNAMIC CF-RAY: 9373d606dff152c5-LAX
2025-04-28 04:32:29 UTC	1369	IN	Data Raw: 31 66 66 61 0d 0a 25 50 44 46 2d 31 2e 34 0a 25 d3 eb e9 e1 0a 31 20 30 20 6f 62 6a 0a 3c 3c 2f 54 69 74 6c 65 20 28 55 6e 74 69 74 6c 65 64 20 64 6f 63 75 6d 65 6e 74 29 0a 2f 50 72 6f 64 75 63 65 72 20 28 53 6b 69 61 2f 50 44 46 20 6d 31 33 37 20 47 6f 6f 67 6c 65 20 44 6f 63 73 20 52 65 6e 64 65 72 65 72 29 3e 3e 0a 65 6e 64 6f 62 6a 0a 33 20 30 20 6f 62 6a 0a 3c 3c 2f 63 61 20 31 0a 2f 42 4d 20 2f 4e 6f 72 6d 61 6c 3e 3e 0a 65 6e 64 6f 62 6a 0a 38 20 30 20 6f 62 6a 0a 3c 3c 2f 43 41 20 31 0a 2f 63 61 20 31 0a 2f 4c 43 20 30 0a 2f 4c 4a 20 30 0a 2f 4c 57 20 31 2e 33 33 33 33 33 33 33 37 0a 2f 4d 4c 20 31 30 0a 2f 53 41 20 74 72 75 65 0a 2f 42 4d 20 2f 4e 6f 72 6d 61 6c 3e 3e 0a 65 6e 64 6f 62 6a 0a 31 30 20 30 20 6f 62 6a 0a 3c 3c 2f 4e 20 33 0a 2f 46 Data Ascii: 1ffa%PDF-1.4%1 0 obj<</Title (Untitled document)/Producer (Skia/PDF m137 Google Docs Renderer)>>endobj3 0 obj<</ca 1/BM /Normal>>endobj8 0 obj<</CA 1/ca 1/LC 0/LJ 0/LW 1.33333337/ML 10/SA true/BM /Normal>>endobj10 0 obj<</N 3/F
2025-04-28 04:32:29 UTC	1369	IN	Data Raw: 79 05 43 0e f8 af 72 33 a7 f8 e8 f7 2d 2c 3f a4 00 85 d7 6f 60 bf df 7f fe fc 39 da ac e5 1e 02 34 76 7b c1 70 1f f4 87 88 53 4b a5 fa eb fd fb cf db db 97 3b 3b fe a3 17 09 66 03 17 89 cf 1f 3c 71 bd 6a a1 fa 59 f2 41 32 3d 9f c9 64 22 8f 42 4d d3 8f 4a 92 6d 38 68 da 7a 0e 61 62 08 82 4c 00 a1 70 bf da 47 2f 5f bc 78 31 c5 b5 64 79 a5 36 1c 68 38 1a ec 14 d9 5a 16 a9 6d 6c 6c 28 39 e0 fd e2 53 42 01 8c e7 0d 8f 2a 92 0b 31 d4 fa f6 9f e7 cf 6f a5 ff f6 98 48 a3 7c fa f4 49 7f ac 78 41 58 f2 d1 6b d4 c2 c2 42 94 1e af 7b b4 44 63 d5 92 e0 bd a9 18 39 46 95 c0 2b 18 96 43 32 01 2e c7 a5 b1 ab 04 4c 8e 29 2f 46 25 6a 56 21 59 65 d6 59 5a 5a c2 d3 57 9e a9 6e 9c 38 73 0b 4f 61 38 1c 56 3a 2f b2 0d cf f2 c7 4f 3f 19 17 75 ca 68 33 30 45 94 f2 93 1a 41 6d d1 Data Ascii: yCr3-,?o`94v{pSK;;f<qjYA2=d"BMJm8hzabLpG/_x1dy6h8Zmll(9SB*1oH\|IxAXkB{Dc9F+C2.L)/F%jV!YeYZZWn8sOa8V:/O?uh30EAm
2025-04-28 04:32:29 UTC	1369	IN	Data Raw: 2a 61 89 35 67 99 9e c8 ce 27 ea a6 48 44 b6 e5 7a b7 70 aa 04 51 d0 7d 78 dc 3e 14 4a 82 68 01 a9 dd ad a2 2e ba a0 12 16 07 4b fb b5 eb 99 28 ab 6c 24 e8 94 e9 b9 f9 19 13 aa 04 51 d0 2b 12 3a da 8a cb 65 b2 f2 e8 c6 89 dd 6f d0 48 eb 2a 61 1c 8a b1 47 bf cf 0e 6e e8 eb bc 42 b2 6b be bc d7 3a 55 82 e8 54 0d 79 ea 49 8e a4 e9 43 9d 95 0c 66 0b ed aa 84 d1 3f 44 8f 4c 1b 91 6d da 76 2f f7 ac 1b a7 d7 2e aa 04 d1 31 1a cc 92 64 e5 cf fa 7e 1b 5f 85 b0 cf 75 17 6e 97 ac 45 95 c8 da f3 0e fb a6 18 c6 2b 32 76 3a 2c 63 44 3e 31 55 82 e8 18 7d 05 23 a2 68 30 21 fa 81 c6 25 8d 83 c1 c0 52 e5 da 52 09 e3 4d b3 ec 85 21 c9 6e 4c 60 31 27 b2 9e 1b 61 26 54 09 92 65 8a 28 ac ca 22 c1 e4 e6 38 95 2a 4c 76 19 b2 1f 35 6d 45 25 60 e7 58 02 c6 ba ed d2 2c ab db 3c 6e Data Ascii: a5g'HDzpQ}x>Jh.K(l$Q+:eoHaGnBk:UTyICf?DLmv/.1d~_unE+2v:,cD>1U}#h0!%RRM!nL`1'a&Te("8*Lv5mE%`X,<n
2025-04-28 04:32:29 UTC	1369	IN	Data Raw: a6 69 ca 98 27 4c 08 7f 1f b2 6a 43 48 ed 24 55 22 99 32 19 b4 b3 98 59 25 b2 b1 40 3d e8 11 84 96 7f 25 95 90 7e 50 65 2a 01 3b ca 58 9e 88 7e bf 5f 54 d9 12 17 a7 0b 4b 95 dd 9a d9 83 cb e4 04 07 99 27 76 95 28 53 83 d9 67 42 2d 6e 09 1e 6f 57 34 a4 12 46 57 87 24 ee 45 5f 69 b3 cb 70 b4 24 bb fb 6d 48 d5 8d e6 09 99 1a bb 4a 24 5f 76 45 4d 5e 55 ef 8e 8e ec 61 8d 9d 45 d1 41 95 f0 af 78 18 48 f6 6d 62 c2 fe dd 78 3c 96 73 19 d9 d3 11 d2 28 65 1e da 32 65 72 9b f2 a2 26 95 70 a0 e5 a2 f7 fd ec c9 13 c5 f3 b3 f7 6d 9c b0 21 95 90 2f 74 7c e3 f6 99 d5 3f 07 07 07 d1 7d 3b 3b 3b c3 f7 c8 56 6f f8 d2 f3 01 65 43 6e 5b 5b 5b ba 72 fa 49 19 42 1a 25 a9 12 c9 68 fc f2 25 eb d6 47 18 55 42 a6 d1 97 70 a2 60 68 2c c9 c1 c0 8d 8d 8d a2 31 95 90 62 58 8b 6d ef c2 Data Ascii: i'LjCH$U"2Y%@=%~Pe*;X~_TK'v(SgB-noW4FW$E_ip$mHJ$_vEM^UaEAxHmbx<s(e2er&pm!/t\|?};;;VoeCn[[[rIB%h%GUBp`h,1bXm
2025-04-28 04:32:29 UTC	1369	IN	Data Raw: 20 36 39 36 2e 32 37 31 36 31 5d 0a 2f 41 20 3c 3c 2f 54 79 70 65 20 2f 41 63 74 69 6f 6e 0a 2f 53 20 2f 55 52 49 0a 2f 55 52 49 20 28 68 74 74 70 3a 2f 2f 64 68 72 74 2e 63 6f 6d 29 3e 3e 0a 2f 53 74 72 75 63 74 50 61 72 65 6e 74 20 31 30 30 30 30 32 3e 3e 0a 65 6e 64 6f 62 6a 0a 31 34 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 41 6e 6e 6f 74 0a 2f 53 75 62 74 79 70 65 20 2f 4c 69 6e 6b 0a 2f 46 20 34 0a 2f 42 6f 72 64 65 72 20 5b 30 20 30 20 30 5d 0a 2f 52 65 63 74 20 5b 34 32 36 2e 35 37 33 31 38 20 36 38 33 2e 36 32 32 36 38 20 34 36 33 2e 32 35 33 31 37 20 36 39 36 2e 32 37 31 36 31 5d 0a 2f 41 20 3c 3c 2f 54 79 70 65 20 2f 41 63 74 69 6f 6e 0a 2f 53 20 2f 55 52 49 0a 2f 55 52 49 20 28 68 74 74 70 3a 2f 2f 6a 6f 65 2e 63 6f 6d 29 3e 3e 0a 2f 53 Data Ascii: 696.27161]/A <</Type /Action/S /URI/URI (http://dhrt.com)>>/StructParent 100002>>endobj14 0 obj<</Type /Annot/Subtype /Link/F 4/Border [0 0 0]/Rect [426.57318 683.62268 463.25317 696.27161]/A <</Type /Action/S /URI/URI (http://joe.com)>>/S
2025-04-28 04:32:29 UTC	1349	IN	Data Raw: 12 6f 17 46 6d bf 32 55 71 cc 8e 44 13 1c 13 4c f4 c3 98 bc 4b 80 ac 6e 8d 96 2f 64 4b 20 e6 40 d6 67 3a 8b 4e af af 77 ee bd 14 8a 63 09 1c 34 d1 86 30 34 23 c4 1a 83 c7 06 7e 37 cf 98 5c 4a f2 b3 1b bb 8a 23 10 05 0a a5 0b ba c2 24 e8 1a 4f a6 96 5c 7c 80 41 17 56 db 1d 6e cb af d9 a7 89 8c 15 d9 13 55 4f ae 59 61 dc c6 d7 1b fb df d5 13 26 16 d8 41 bb 95 75 39 80 19 89 35 92 c9 e8 22 b1 2f f3 a0 00 67 87 90 55 2c 45 c6 d2 4d 5a 9f 9c be 01 43 af 67 32 a3 6f 93 cf e6 13 65 73 b1 bd ea 04 a2 a2 55 9f 1a 10 7f f3 94 a2 a2 00 3e 64 cd d7 5a 5a 62 2a a2 c9 ea 6e 0d dd 9b 6a 04 5b 0a 02 9a c8 b9 7c 4c 51 aa 11 ac 89 15 2c a2 70 88 28 f0 ec 64 87 52 f3 03 83 a0 54 90 62 28 a4 2a c3 34 fb 22 73 26 cb f3 8d 99 0b 90 80 54 df 00 5a 9a e7 2b ce 67 5f 54 78 98 56 Data Ascii: oFm2UqDLKn/dK @g:Nwc404#~7\J#$O\\|AVnUOYa&Au95"/gU,EMZCg2oesU>dZZbnj[\|LQ,p(dRTb(4"s&TZ+g_TxV
2025-04-28 04:32:29 UTC	11	IN	Data Raw: 36 0d 0a 64 0a 5d f8 3c 7f 0d 0a Data Ascii: 6d]<
2025-04-28 04:32:29 UTC	1369	IN	Data Raw: 34 30 30 30 0d 0a 8e d4 41 8c 32 2d 62 ea cb 6a 34 7d b8 a0 25 0f 68 d6 ba ca 88 80 44 d5 30 16 0a 13 cf a1 8a 81 05 2a fa 89 96 cf d4 55 10 c9 65 64 50 1d cd 68 2b 9d 2b 21 83 1a 24 da 90 f2 d6 a0 d6 4a 87 f4 83 53 3b ed d1 0f 99 b7 9d 52 77 0f 44 a8 be be 4c 2c 6b 85 20 81 7a 16 58 a6 b6 76 74 83 ee b1 b8 37 88 26 44 f0 a0 7e 38 61 90 ae 0a 60 0b 80 5a ca df 3b cc 6c 85 2f ed 7d e3 7b d5 80 ee ce 7e 74 25 62 99 78 92 3f 17 e7 3d ab 00 7f f6 77 36 6a 53 45 54 b3 16 a3 e7 d4 05 de 07 af 1e c6 b3 2d b1 5b 54 83 27 20 62 76 29 4c d4 64 81 bc 2e e5 5a b8 eb cf fa 9c 14 d6 97 b4 ab c9 36 22 ee ee 1f 6e 80 95 4d d8 c3 c2 18 83 ed f0 41 94 c6 63 4b dd ac 39 23 21 d8 3a b1 0a 6c bb 0b c4 16 b1 26 37 a7 6e 2c 91 c5 5b 32 e6 79 5a 1b b9 1e 65 67 b5 b5 ce 3a 99 62 Data Ascii: 4000A2-bj4}%hD0*UedPh++!$JS;RwDL,k zXvt7&D~8a`Z;l/}{~t%bx?=w6jSET-[T' bv)Ld.Z6"nMAcK9#!:l&7n,[2yZeg:b
2025-04-28 04:32:29 UTC	1369	IN	Data Raw: 2f 4b 20 32 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 35 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 4c 69 6e 6b 0a 2f 50 20 32 33 20 30 20 52 0a 2f 4b 20 5b 32 36 20 30 20 52 20 3c 3c 2f 54 79 70 65 20 2f 4f 42 4a 52 0a 2f 4f 62 6a 20 31 31 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 3e 3e 5d 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 37 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 53 70 61 6e 0a 2f 50 20 32 33 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 0a 2f 4b 20 33 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 39 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 53 70 61 6e 0a 2f 50 20 32 38 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 0a 2f 4b 20 34 Data Ascii: /K 2>>endobj25 0 obj<</Type /StructElem/S /Link/P 23 0 R/K [26 0 R <</Type /OBJR/Obj 11 0 R/Pg 2 0 R>>]>>endobj27 0 obj<</Type /StructElem/S /Span/P 23 0 R/Pg 2 0 R/K 3>>endobj29 0 obj<</Type /StructElem/S /Span/P 28 0 R/Pg 2 0 R/K 4
2025-04-28 04:32:29 UTC	1369	IN	Data Raw: 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 53 70 61 6e 0a 2f 50 20 34 32 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 0a 2f 4b 20 31 34 3e 3e 0a 65 6e 64 6f 62 6a 0a 34 32 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 4c 69 6e 6b 0a 2f 50 20 34 31 20 30 20 52 0a 2f 4b 20 5b 34 33 20 30 20 52 20 3c 3c 2f 54 79 70 65 20 2f 4f 42 4a 52 0a 2f 4f 62 6a 20 31 35 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 3e 3e 5d 3e 3e 0a 65 6e 64 6f 62 6a 0a 34 34 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 53 70 61 6e 0a 2f 50 20 34 31 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 0a 2f 4b 20 31 35 3e 3e 0a 65 6e 64 6f 62 6a 0a 34 31 20 30 20 6f 62 6a 0a 3c Data Ascii: <</Type /StructElem/S /Span/P 42 0 R/Pg 2 0 R/K 14>>endobj42 0 obj<</Type /StructElem/S /Link/P 41 0 R/K [43 0 R <</Type /OBJR/Obj 15 0 R/Pg 2 0 R>>]>>endobj44 0 obj<</Type /StructElem/S /Span/P 41 0 R/Pg 2 0 R/K 15>>endobj41 0 obj<

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:30 UTC	417	OUT	GET /_/pdf/09f23ad7-aeb2-4357-b18b-186934691db0/ HTTP/1.1 Host: pdflink.to Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:30 UTC	465	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:30 GMT Content-Type: application/pdf Transfer-Encoding: chunked Connection: close Alt-Svc: h3=":443"; ma=86400 Content-Disposition: inline; filename="documents/Untitled_document_54_U5pEexy.pdf" Cross-Origin-Opener-Policy: same-origin Referrer-Policy: same-origin Server: cloudflare Vary: origin X-Content-Type-Options: nosniff X-Frame-Options: DENY Cf-Cache-Status: DYNAMIC CF-RAY: 9373d60e48b9b860-LAX
2025-04-28 04:32:30 UTC	904	IN	Data Raw: 32 30 30 30 0d 0a 25 50 44 46 2d 31 2e 34 0a 25 d3 eb e9 e1 0a 31 20 30 20 6f 62 6a 0a 3c 3c 2f 54 69 74 6c 65 20 28 55 6e 74 69 74 6c 65 64 20 64 6f 63 75 6d 65 6e 74 29 0a 2f 50 72 6f 64 75 63 65 72 20 28 53 6b 69 61 2f 50 44 46 20 6d 31 33 37 20 47 6f 6f 67 6c 65 20 44 6f 63 73 20 52 65 6e 64 65 72 65 72 29 3e 3e 0a 65 6e 64 6f 62 6a 0a 33 20 30 20 6f 62 6a 0a 3c 3c 2f 63 61 20 31 0a 2f 42 4d 20 2f 4e 6f 72 6d 61 6c 3e 3e 0a 65 6e 64 6f 62 6a 0a 38 20 30 20 6f 62 6a 0a 3c 3c 2f 43 41 20 31 0a 2f 63 61 20 31 0a 2f 4c 43 20 30 0a 2f 4c 4a 20 30 0a 2f 4c 57 20 31 2e 33 33 33 33 33 33 33 37 0a 2f 4d 4c 20 31 30 0a 2f 53 41 20 74 72 75 65 0a 2f 42 4d 20 2f 4e 6f 72 6d 61 6c 3e 3e 0a 65 6e 64 6f 62 6a 0a 31 30 20 30 20 6f 62 6a 0a 3c 3c 2f 4e 20 33 0a 2f 46 Data Ascii: 2000%PDF-1.4%1 0 obj<</Title (Untitled document)/Producer (Skia/PDF m137 Google Docs Renderer)>>endobj3 0 obj<</ca 1/BM /Normal>>endobj8 0 obj<</CA 1/ca 1/LC 0/LJ 0/LW 1.33333337/ML 10/SA true/BM /Normal>>endobj10 0 obj<</N 3/F
2025-04-28 04:32:30 UTC	1369	IN	Data Raw: 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 b4 c9 f5 d5 55 f4 69 bb 44 84 90 0e 71 fd f1 e3 bf 7b bd f0 83 6f da 2e 14 21 a4 43 7c 7e fa 34 94 88 df d6 d7 db 2e 11 21 a4 43 5c 9f 9f 47 86 c4 9f 1f 3e b4 5d 28 42 48 87 f8 bc bd 1d 4a c4 c5 ca 4a db 25 22 84 74 88 bf bf 7c 89 0c 89 af 6f df b6 5d 28 72 bf 38 3e 3e ee a9 bc 79 fd ba ed 32 de 6b 2e 77 76 6e a9 c4 83 07 6d 97 88 dc 3b 26 93 89 ae 12 ef 8e 8e da 2e e3 fd 85 86 04 e9 02 54 89 2e 73 f9 f3 cf 91 4a b4 5d 22 72 1f a1 4a 74 99 d8 90 18 8d da 2e 11 b9 8f 50 25 3a cb d7 c3 c3 d8 93 8a fe 96 a4 0d a8 12 9d 25 92 08 f4 3e da 2e 11 b9 a7 50 25 ba c9 d7 b7 6f 23 95 f8 fb cb 97 b6 0b 45 ee 29 54 89 6e 72 f1 c3 0f a1 44 7c de de 6e Data Ascii: B!B!B!B!B!B!B!B!UiDq{o.!C\|~4.!C\G>](BHJJ%"t\|o](r8>>y2k.wvnm;&.T.sJ]"rJt.P%:%>.P%o#E)TnrD\|n
2025-04-28 04:32:30 UTC	1369	IN	Data Raw: 6f 41 7a 7d 33 3a 81 17 aa 1f 54 2f 30 5f 8d 2a 61 39 6f ed 2a 91 b5 d9 1c 51 df 21 3b aa 90 f5 69 f1 64 9d 1c fc 48 75 56 25 22 4b 60 8a bb 27 d7 d4 44 96 43 f4 61 b4 99 d6 c9 0e a1 47 63 e0 d9 17 93 4f af 27 43 5d 3a 37 80 d3 e9 06 b3 b7 96 2d 2a e1 ed 1c 9d 7a 55 c2 e8 74 2a 7b 40 59 1f 09 e3 a2 bc c2 e0 02 37 fa 16 89 3a ab 12 4a 4f cd 91 ad 21 52 25 a4 39 71 6b 44 62 2e 2b 5b 89 8e fe 4c a3 16 a1 bf 16 d1 a2 5d b2 d9 67 1c 8c f8 86 6f 39 a3 a5 17 5f d4 aa 12 46 8f b2 64 c1 f4 43 96 97 97 8d 65 28 0c c3 05 7e a8 21 ab 12 d9 73 65 3d 64 a4 4a 14 62 46 e3 ff 86 04 17 89 77 03 7d e0 dd 37 7c 87 3e 6d e1 9b 4f bd 2e d9 3a ee 8c 16 95 30 de 90 ba 54 c2 32 94 57 96 db ec ce b1 11 7a 6e 5e 6c 75 95 90 2b f8 24 d3 a9 84 f4 8e f8 c7 90 f8 f8 b1 d2 65 92 86 c8 Data Ascii: oAz}3:T/0_a9oQ!;idHuV%"K`'DCaGcO'C]:7-zUt{@Y7:JO!R%9qkDb.+[L]go9_FdCe(~!se=dJbFw}7\|>mO.:0T2Wzn^lu+$e
2025-04-28 04:32:30 UTC	1369	IN	Data Raw: 52 16 38 05 37 2d bb a0 80 90 da 49 aa 04 de 62 ca a6 27 a8 fc 61 0e a7 a9 40 df f2 44 52 01 42 c1 b1 04 14 82 46 85 2f 71 65 f4 52 2e 45 29 d4 5d 48 a2 2b f2 58 f6 53 4b fa f9 67 a3 aa 3a 64 64 51 4b 34 51 3c 1a bb 15 44 c8 ec 24 55 22 bb 62 2e 5c 91 37 bb 4a 58 b6 48 f6 78 c3 5b 51 09 19 96 33 bb 7a 4e 2e d9 cb 2e 4f f3 44 8d bd d2 7a de d3 9b 1d ab 1d 95 62 af 7d 17 63 47 e4 6e 60 0f 0d 14 e1 db f8 8c 2a 91 5c f2 8f ce 0e 9a 6d 32 3c 8e 5f a2 5e 49 25 2c 84 5d 80 32 55 29 33 b1 7c 9b 45 ff 4b fe 0a 0b 61 6f 6f 0f c5 93 87 c3 ec 71 07 26 d7 0b e3 62 71 60 52 76 9e 3d 79 d2 4c 8d 20 24 46 51 09 98 cd a8 ba e3 f1 b8 ac c9 b8 1c 66 54 09 f9 02 0d 87 e9 d0 72 65 cb 72 cd 79 0a 95 80 79 80 8b 2a bb 1c af 7b b2 c1 2e 2d 2d f9 9e 05 ce 2e 3b 14 be cf 22 7f 0a Data Ascii: R87-Ib'a@DRBF/qeR.E)]H+XSKg:ddQK4Q<D$U"b.\7JXHx[Q3zN..ODzb}cGn`\m2<_^I%,]2U)3\|EKaooq&bq`Rv=yL $FQfTreryy{.--.;"
2025-04-28 04:32:30 UTC	1369	IN	Data Raw: 20 2f 41 6e 6e 6f 74 0a 2f 53 75 62 74 79 70 65 20 2f 4c 69 6e 6b 0a 2f 46 20 34 0a 2f 42 6f 72 64 65 72 20 5b 30 20 30 20 30 5d 0a 2f 52 65 63 74 20 5b 31 30 32 2e 35 36 36 36 35 20 36 38 33 2e 36 32 32 36 38 20 31 32 30 2e 39 30 36 36 34 37 20 36 39 36 2e 32 37 31 36 31 5d 0a 2f 41 20 3c 3c 2f 54 79 70 65 20 2f 41 63 74 69 6f 6e 0a 2f 53 20 2f 55 52 49 0a 2f 55 52 49 20 28 68 74 74 70 3a 2f 2f 67 6f 61 6c 2e 63 6f 6d 29 3e 3e 0a 2f 53 74 72 75 63 74 50 61 72 65 6e 74 20 31 30 30 30 30 30 3e 3e 0a 65 6e 64 6f 62 6a 0a 31 32 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 41 6e 6e 6f 74 0a 2f 53 75 62 74 79 70 65 20 2f 4c 69 6e 6b 0a 2f 46 20 34 0a 2f 42 6f 72 64 65 72 20 5b 30 20 30 20 30 5d 0a 2f 52 65 63 74 20 5b 32 36 37 2e 36 32 36 35 39 20 36 38 33 Data Ascii: /Annot/Subtype /Link/F 4/Border [0 0 0]/Rect [102.56665 683.62268 120.906647 696.27161]/A <</Type /Action/S /URI/URI (http://goal.com)>>/StructParent 100000>>endobj12 0 obj<</Type /Annot/Subtype /Link/F 4/Border [0 0 0]/Rect [267.62659 683
2025-04-28 04:32:30 UTC	1369	IN	Data Raw: 50 b5 61 11 e5 26 11 25 70 89 11 be 88 03 f9 64 2e a7 b4 a8 01 41 70 9c fc a7 8c 5c be 34 af 06 e8 7f 0e 90 3a 43 ea 00 20 b7 23 53 de 8f a9 7f f7 1c 50 37 05 fc 0d 11 f5 f6 da 30 bb 0c be 40 ec 5a db ac 68 1f ca 83 a4 0a 01 43 a0 27 49 91 25 42 a2 26 11 5e bc 5b 04 5a 32 46 a1 79 8b 3f c7 19 b9 71 46 76 02 ee 22 05 65 46 62 4b ff b2 35 60 3d 41 d9 62 d0 89 0f 82 d6 7c 64 c8 cf 03 78 77 1c 40 e7 53 28 89 d2 f3 13 e9 61 20 67 cf 48 ab 77 dc 8d 30 20 8b 52 73 61 8a d3 58 9a d9 45 0c 0c 45 63 a9 49 ae c9 52 b4 58 6a f2 1a 2c 5e 07 6b 80 47 94 31 20 c8 e6 8f 25 aa 9e e4 dd d8 94 ec 58 c4 e1 d3 be 34 5a a7 24 ef 58 c2 ce ac 09 f8 49 97 2e 95 0c 6f 2d 71 9c 94 4c 26 22 0e 42 fb 4b 79 98 a2 23 cf 80 f3 e8 4d 12 92 a5 0c 9a 50 b0 58 e4 5a 54 e1 3b 6b 20 0f 2d ae Data Ascii: Pa&%pd.Ap\4:C #SP70@ZhC'I%B&^[Z2Fy?qFv"eFbK5`=Ab\|dxw@S(a gHw0 RsaXEEcIRXj,^kG1 %X4Z$XI.o-qL&"BKy#MPXZT;k -
2025-04-28 04:32:30 UTC	451	IN	Data Raw: e4 30 84 94 35 89 c6 b0 8b 02 af 5a a7 6e 46 16 71 ec f3 cc a9 05 b3 34 ce 58 bc 43 f0 49 c5 2c f0 b8 49 13 15 f9 e5 69 ed 3b d7 65 05 8a 36 52 8b 36 56 f8 e2 4b ca 80 2f 6c ce 3e 95 10 a8 f4 f5 8d f3 e7 e8 1b 17 c7 2f 8c 03 e8 4b 58 34 1d 42 69 a9 bd 3f 64 1f 64 1b e0 0c 25 bf b4 bd 12 82 13 df 8b 7e 62 01 83 04 97 87 a8 b6 28 da 68 d9 2c ca 77 57 eb bb 6b ef 76 27 ab b9 da 9d aa 6a 6f de 01 1d 48 28 3f b1 a3 b7 64 17 bd 9a ee 19 4d ce cc 3a 8e 10 80 9d fc 92 f3 3c 85 0b d1 8b 12 14 fd 78 8a bd fc 9d 92 70 cf de 67 46 25 2d 55 89 33 fd 19 2d 60 f7 74 9d 9b 53 dd 0c 99 7b ed 8a ca ac 56 8a 06 1d 88 84 a4 99 f2 6e 13 da 46 94 d1 fa 26 14 0c 2d f0 60 9e e1 01 26 87 be c6 b2 03 e5 c3 de 77 d5 ac 15 d2 c4 e2 09 24 c1 93 21 e9 c7 50 0c 30 30 50 1a 36 ca 57 13 Data Ascii: 05ZnFq4XCI,Ii;e6R6VK/l>/KX4Bi?dd%~b(h,wWkv'joH(?dM:<xpgF%-U3-`tS{VnF&-`&w$!P00P6W
2025-04-28 04:32:30 UTC	1369	IN	Data Raw: 34 30 30 30 0d 0a 8e d4 41 8c 32 2d 62 ea cb 6a 34 7d b8 a0 25 0f 68 d6 ba ca 88 80 44 d5 30 16 0a 13 cf a1 8a 81 05 2a fa 89 96 cf d4 55 10 c9 65 64 50 1d cd 68 2b 9d 2b 21 83 1a 24 da 90 f2 d6 a0 d6 4a 87 f4 83 53 3b ed d1 0f 99 b7 9d 52 77 0f 44 a8 be be 4c 2c 6b 85 20 81 7a 16 58 a6 b6 76 74 83 ee b1 b8 37 88 26 44 f0 a0 7e 38 61 90 ae 0a 60 0b 80 5a ca df 3b cc 6c 85 2f ed 7d e3 7b d5 80 ee ce 7e 74 25 62 99 78 92 3f 17 e7 3d ab 00 7f f6 77 36 6a 53 45 54 b3 16 a3 e7 d4 05 de 07 af 1e c6 b3 2d b1 5b 54 83 27 20 62 76 29 4c d4 64 81 bc 2e e5 5a b8 eb cf fa 9c 14 d6 97 b4 ab c9 36 22 ee ee 1f 6e 80 95 4d d8 c3 c2 18 83 ed f0 41 94 c6 63 4b dd ac 39 23 21 d8 3a b1 0a 6c bb 0b c4 16 b1 26 37 a7 6e 2c 91 c5 5b 32 e6 79 5a 1b b9 1e 65 67 b5 b5 ce 3a 99 62 Data Ascii: 4000A2-bj4}%hD0*UedPh++!$JS;RwDL,k zXvt7&D~8a`Z;l/}{~t%bx?=w6jSET-[T' bv)Ld.Z6"nMAcK9#!:l&7n,[2yZeg:b
2025-04-28 04:32:30 UTC	1369	IN	Data Raw: 2f 4b 20 32 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 35 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 4c 69 6e 6b 0a 2f 50 20 32 33 20 30 20 52 0a 2f 4b 20 5b 32 36 20 30 20 52 20 3c 3c 2f 54 79 70 65 20 2f 4f 42 4a 52 0a 2f 4f 62 6a 20 31 31 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 3e 3e 5d 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 37 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 53 70 61 6e 0a 2f 50 20 32 33 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 0a 2f 4b 20 33 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 39 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 53 70 61 6e 0a 2f 50 20 32 38 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 0a 2f 4b 20 34 Data Ascii: /K 2>>endobj25 0 obj<</Type /StructElem/S /Link/P 23 0 R/K [26 0 R <</Type /OBJR/Obj 11 0 R/Pg 2 0 R>>]>>endobj27 0 obj<</Type /StructElem/S /Span/P 23 0 R/Pg 2 0 R/K 3>>endobj29 0 obj<</Type /StructElem/S /Span/P 28 0 R/Pg 2 0 R/K 4
2025-04-28 04:32:30 UTC	1369	IN	Data Raw: 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 53 70 61 6e 0a 2f 50 20 34 32 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 0a 2f 4b 20 31 34 3e 3e 0a 65 6e 64 6f 62 6a 0a 34 32 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 4c 69 6e 6b 0a 2f 50 20 34 31 20 30 20 52 0a 2f 4b 20 5b 34 33 20 30 20 52 20 3c 3c 2f 54 79 70 65 20 2f 4f 42 4a 52 0a 2f 4f 62 6a 20 31 35 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 3e 3e 5d 3e 3e 0a 65 6e 64 6f 62 6a 0a 34 34 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 20 2f 53 74 72 75 63 74 45 6c 65 6d 0a 2f 53 20 2f 53 70 61 6e 0a 2f 50 20 34 31 20 30 20 52 0a 2f 50 67 20 32 20 30 20 52 0a 2f 4b 20 31 35 3e 3e 0a 65 6e 64 6f 62 6a 0a 34 31 20 30 20 6f 62 6a 0a 3c Data Ascii: <</Type /StructElem/S /Span/P 42 0 R/Pg 2 0 R/K 14>>endobj42 0 obj<</Type /StructElem/S /Link/P 41 0 R/K [43 0 R <</Type /OBJR/Obj 15 0 R/Pg 2 0 R>>]>>endobj44 0 obj<</Type /StructElem/S /Span/P 41 0 R/Pg 2 0 R/K 15>>endobj41 0 obj<

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:33 UTC	687	OUT	GET /?utm_campaign HTTP/1.1 Host: zh.peoplelove.tech Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:33 UTC	1358	IN	HTTP/1.1 403 Forbidden Date: Mon, 28 Apr 2025 04:32:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 9373d6237d2f2b8e-LAX Server: cloudflare Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cf-Mitigated: challenge Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin Server-Timing: chlray;desc="9373d6237d2f2b8e" X-Content-Type-Options: nosniff
2025-04-28 04:32:33 UTC	747	IN	Data Raw: 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 63 62 54 4a 50 74 44 64 62 Data Ascii: X-Frame-Options: SAMEORIGINCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cbTJPtDdb
2025-04-28 04:32:33 UTC	633	IN	Data Raw: 31 64 63 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 1dca<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-04-28 04:32:33 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 68 32 7b 66 6f 6e 74 2d Data Ascii: ction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{font-size:1.5rem;font-weight:500;line-height:2.25rem}@media (width <= 720px){.h2{font-
2025-04-28 04:32:33 UTC	1369	IN	Data Raw: 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 7a 68 2e 70 65 6f 70 6c 65 6c 6f 76 65 2e 74 65 63 68 22 2c 63 54 79 70 65 3a 20 27 6d 61 6e 61 67 65 64 27 2c 63 52 61 79 3a 20 27 39 33 37 33 64 36 32 33 37 64 32 66 32 62 38 65 27 2c 63 48 3a 20 27 61 51 4f 59 4d 6c 55 55 32 7a 78 66 67 68 7a 56 4e 4a 58 39 65 48 67 5a 4c 34 58 59 62 59 38 69 6f 55 4c 32 70 76 4c 56 6f 5a 6f 2d 31 37 34 35 38 31 34 37 35 33 2d 31 2e 32 2e 31 2e 31 2d 71 7a 44 45 6c 50 43 6b 31 76 78 61 30 41 36 69 49 47 63 33 56 75 75 74 37 74 7a 34 42 6b 4b 76 4c 71 54 6b 73 5f 5a 65 5a 73 36 54 6c 62 6a 2e 76 5f 78 6a 76 46 75 63 4a 49 68 71 72 6a 6e 68 27 2c 63 55 50 4d 44 54 6b 3a 20 22 5c 2f 3f 75 74 6d 5f 63 61 6d 70 61 69 67 6e 26 5f 5f 63 66 5f 63 68 6c 5f 74 6b 3d 56 50 31 75 55 Data Ascii: Id: '3',cZone: "zh.peoplelove.tech",cType: 'managed',cRay: '9373d6237d2f2b8e',cH: 'aQOYMlUU2zxfghzVNJX9eHgZL4XYbY8ioUL2pvLVoZo-1745814753-1.2.1.1-qzDElPCk1vxa0A6iIGc3Vuut7tz4BkKvLqTks_ZeZs6Tlbj.v_xjvFucJIhqrjnh',cUPMDTk: "\/?utm_campaign&__cf_chl_tk=VP1uU
2025-04-28 04:32:33 UTC	1369	IN	Data Raw: 6e 35 55 35 31 31 70 34 65 6a 4b 4a 76 6d 58 31 37 49 51 4a 36 63 31 58 4f 6e 65 53 56 2e 5f 57 67 57 4a 69 64 57 49 39 78 49 75 43 6d 5f 2e 47 6b 4a 79 52 70 48 72 4e 44 6b 53 30 44 77 69 64 62 70 42 71 6a 37 57 6f 6b 51 4f 4a 6c 79 4c 4e 6f 2e 31 69 71 4b 6e 51 54 62 69 77 75 45 42 78 72 30 47 4b 57 67 5a 56 64 43 46 6e 65 56 43 32 58 6c 6c 6d 6a 31 41 74 67 37 36 37 54 6c 58 39 30 77 31 2e 6a 5f 6b 45 78 66 2e 5f 74 58 4b 65 45 30 64 41 4b 67 32 70 46 65 67 32 6d 5f 70 32 6b 53 6c 61 2e 4f 32 65 31 46 44 63 73 7a 44 55 74 4a 57 30 30 4a 63 66 6d 61 37 45 68 78 49 58 72 50 48 79 6e 37 77 54 31 4b 6d 66 66 68 47 72 50 62 6e 38 4f 6e 6b 45 72 64 39 61 47 74 35 4b 6a 36 6b 62 41 63 42 54 54 76 43 5a 30 64 35 67 5a 56 66 52 4b 62 75 73 77 55 6f 43 66 66 33 Data Ascii: n5U511p4ejKJvmX17IQJ6c1XOneSV._WgWJidWI9xIuCm_.GkJyRpHrNDkS0DwidbpBqj7WokQOJlyLNo.1iqKnQTbiwuEBxr0GKWgZVdCFneVC2Xllmj1Atg767TlX90w1.j_kExf._tXKeE0dAKg2pFeg2m_p2kSla.O2e1FDcszDUtJW00Jcfma7EhxIXrPHyn7wT1KmffhGrPbn8OnkErd9aGt5Kj6kbAcBTTvCZ0d5gZVfRKbuswUoCff3
2025-04-28 04:32:33 UTC	1369	IN	Data Raw: 41 30 77 4c 72 70 69 59 43 69 49 72 65 76 6b 6c 70 4d 59 44 41 7a 67 6f 50 67 69 46 48 6c 63 4e 68 66 33 66 65 70 4c 36 65 69 57 47 52 6c 75 78 64 5a 65 4b 31 58 41 6b 4f 6e 36 46 37 31 79 41 66 66 70 2e 30 6d 6c 59 45 4e 64 65 6c 4f 6a 77 37 68 6a 46 50 77 76 35 71 4c 39 33 66 43 45 35 69 2e 6c 4a 4f 6f 72 53 78 6b 63 78 6c 48 30 6f 4d 31 36 59 45 65 4f 53 58 41 73 46 4c 5a 70 62 30 37 6c 69 4f 4d 54 31 73 36 69 6c 59 50 7a 4a 42 31 4d 61 7a 6b 4a 75 48 4b 6f 6f 4a 64 6f 6e 48 58 4d 52 57 68 4d 62 34 66 38 74 66 36 56 6f 66 5a 42 45 57 78 6f 54 32 50 75 6a 46 70 4d 51 56 52 5a 41 43 66 35 4f 5a 4f 6b 59 37 31 70 72 69 48 6d 58 69 78 77 6e 77 46 38 4b 32 36 75 6d 54 38 2e 61 4b 33 4f 58 75 4e 77 46 38 59 6b 42 74 38 48 4e 50 48 71 62 5f 2e 46 4d 46 34 39 Data Ascii: A0wLrpiYCiIrevklpMYDAzgoPgiFHlcNhf3fepL6eiWGRluxdZeK1XAkOn6F71yAffp.0mlYENdelOjw7hjFPwv5qL93fCE5i.lJOorSxkcxlH0oM16YEeOSXAsFLZpb07liOMT1s6ilYPzJB1MazkJuHKooJdonHXMRWhMb4f8tf6VofZBEWxoT2PujFpMQVRZACf5OZOkY71priHmXixwnwF8K26umT8.aK3OXuNwF8YkBt8HNPHqb_.FMF49
2025-04-28 04:32:33 UTC	1369	IN	Data Raw: 53 73 53 79 41 49 41 6c 76 65 46 4b 2e 6d 66 58 58 5f 31 68 37 5a 78 76 53 6e 69 37 74 51 6c 51 6c 35 52 52 63 68 57 6b 52 69 37 72 37 2e 5f 41 58 64 52 31 6c 4e 4c 6b 4d 52 5a 77 48 37 42 58 63 54 46 4f 6f 31 45 53 56 68 4c 68 6a 38 43 4a 7a 7a 4f 44 67 4a 36 4f 65 71 6c 38 47 77 4a 64 78 58 41 35 34 73 5f 5a 51 37 30 4f 4c 57 57 44 4c 4c 30 58 5f 39 6c 78 73 78 51 32 74 54 61 68 47 78 38 64 6a 77 5f 47 6a 77 7a 4e 70 32 67 58 62 73 4b 77 6e 37 31 35 41 37 6b 39 4b 78 43 74 6e 4f 56 37 73 50 39 68 44 4b 62 72 51 4d 39 56 30 34 30 50 69 51 6e 35 6c 43 77 38 32 68 75 67 79 6f 65 56 72 79 52 79 59 62 62 4d 63 4a 62 79 6a 30 4d 68 68 32 6b 50 4b 78 51 42 41 32 61 47 70 43 68 55 58 6d 73 31 53 48 76 64 4f 57 6f 6f 47 48 38 34 72 4c 6f 6f 34 56 5a 34 55 47 57 Data Ascii: SsSyAIAlveFK.mfXX_1h7ZxvSni7tQlQl5RRchWkRi7r7._AXdR1lNLkMRZwH7BXcTFOo1ESVhLhj8CJzzODgJ6Oeql8GwJdxXA54s_ZQ70OLWWDLL0X_9lxsxQ2tTahGx8djw_GjwzNp2gXbsKwn715A7k9KxCtnOV7sP9hDKbrQM9V040PiQn5lCw82hugyoeVryRyYbbMcJbyj0Mhh2kPKxQBA2aGpChUXms1SHvdOWooGH84rLoo4VZ4UGW
2025-04-28 04:32:33 UTC	156	IN	Data Raw: 68 29 3b 63 70 6f 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 6f 67 55 29 3b 7d 7d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 70 6f 29 3b 7d 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: h);cpo.onload = function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName('head')[0].appendChild(cpo);}());</script></body></html>
2025-04-28 04:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:33 UTC	957	OUT	GET /?utm_campaign HTTP/1.1 Host: zh.peoplelove.tech Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "134.0.6998.36" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:34 UTC	1358	IN	HTTP/1.1 403 Forbidden Date: Mon, 28 Apr 2025 04:32:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 9373d624ccd6f434-LAX Server: cloudflare Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cf-Mitigated: challenge Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin Server-Timing: chlray;desc="9373d624ccd6f434" X-Content-Type-Options: nosniff
2025-04-28 04:32:34 UTC	753	IN	Data Raw: 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6e 37 43 45 48 6d 48 6c 62 Data Ascii: X-Frame-Options: SAMEORIGINCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n7CEHmHlb
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 31 65 35 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 1e5f<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 78 7a 6d 7a 65 34 39 48 70 46 4e 4b 77 78 34 33 36 33 33 33 36 35 46 47 59 49 41 50 70 4e 62 6c 59 7a 6e 41 64 39 46 6f 62 37 73 68 5a 68 6d 69 64 45 66 31 33 77 4a 7a 37 63 62 76 79 71 4d 67 7a 39 6d 58 6a 69 6c 5f 44 6e 75 4b 78 71 64 71 33 79 46 61 2e 72 68 44 4c 53 44 79 71 54 4d 52 47 62 33 78 4c 61 38 54 45 53 4a 49 54 78 6f 6d 71 4f 41 2e 71 75 66 42 59 72 63 36 51 63 6d 64 39 74 46 6c 67 4d 45 2e 67 48 72 67 5f 33 62 6d 5a 64 4e 32 77 79 47 45 35 76 62 31 52 76 33 4c 4c 35 50 67 75 6a 36 4f 73 6a 37 66 75 69 6c 78 6b 76 78 53 5f 4d 2e 42 32 68 6f 42 5f 6b 53 75 68 38 46 68 44 5a 78 71 36 54 71 36 69 5a 42 72 38 46 47 62 53 47 68 37 33 64 41 5f 41 50 36 42 61 6f 62 65 4b 38 30 47 4e 5f 51 30 5a 57 69 38 73 4a 41 47 6f 39 37 57 2e 64 6a 54 59 52 4c Data Ascii: xzmze49HpFNKwx43633365FGYIAPpNblYznAd9Fob7shZhmidEf13wJz7cbvyqMgz9mXjil_DnuKxqdq3yFa.rhDLSDyqTMRGb3xLa8TESJITxomqOA.qufBYrc6Qcmd9tFlgME.gHrg_3bmZdN2wyGE5vb1Rv3LL5Pguj6Osj7fuilxkvxS_M.B2hoB_kSuh8FhDZxq6Tq6iZBr8FGbSGh73dA_AP6BaobeK80GN_Q0ZWi8sJAGo97W.djTYRL
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 37 7a 67 59 6e 45 4f 47 44 32 48 4b 2e 69 56 68 68 37 5f 4e 38 55 59 64 42 64 46 62 51 73 36 48 56 73 39 4e 62 67 50 74 70 79 6a 33 65 70 49 4e 70 46 64 6f 62 43 43 71 4a 71 38 5a 57 30 32 52 52 35 7a 75 41 6c 45 71 65 2e 68 4f 66 71 4e 30 7a 34 48 50 70 58 39 6f 50 31 4c 44 61 34 43 74 45 62 74 78 30 7a 38 63 43 72 53 6f 48 48 39 33 4b 6b 74 61 63 6f 4a 54 6d 55 76 38 39 69 69 6e 57 62 2e 69 4f 32 73 45 46 36 55 61 30 45 38 62 6a 4a 55 55 53 69 36 54 4c 77 7a 4f 6d 67 37 38 32 55 58 34 36 48 50 44 4c 6a 75 67 59 53 4c 32 71 73 47 37 56 4a 43 6d 4a 69 54 71 34 49 5a 66 6a 77 35 65 68 44 50 65 6c 33 2e 51 79 4a 33 4e 4f 49 78 75 33 77 63 6b 32 70 37 50 2e 56 75 38 75 70 61 42 6d 6b 46 68 72 57 77 67 4a 47 75 70 34 6f 47 71 48 68 75 42 57 78 76 39 59 42 45 Data Ascii: 7zgYnEOGD2HK.iVhh7_N8UYdBdFbQs6HVs9NbgPtpyj3epINpFdobCCqJq8ZW02RR5zuAlEqe.hOfqN0z4HPpX9oP1LDa4CtEbtx0z8cCrSoHH93KktacoJTmUv89iinWb.iO2sEF6Ua0E8bjJUUSi6TLwzOmg782UX46HPDLjugYSL2qsG7VJCmJiTq4IZfjw5ehDPel3.QyJ3NOIxu3wck2p7P.Vu8upaBmkFhrWwgJGup4oGqHhuBWxv9YBE
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 6a 32 6e 34 39 4e 63 76 56 56 7a 59 50 67 52 58 66 41 37 6d 75 44 42 78 75 77 54 30 59 69 78 62 45 65 4d 47 65 6d 79 38 33 67 7a 7a 32 55 48 77 53 79 38 42 39 6d 68 5a 49 63 72 5f 68 4f 52 69 4b 54 68 46 57 63 53 6c 7a 7a 5f 39 33 71 76 62 4e 33 31 7a 67 4f 4f 64 69 67 46 37 5a 45 7a 54 73 31 7a 53 32 4f 6f 33 6b 77 33 5f 4d 71 78 6a 50 48 5f 76 2e 65 54 33 69 32 55 74 62 6a 55 42 6b 69 6f 42 58 5a 63 67 36 67 76 4a 4f 67 48 4b 51 43 63 67 63 37 6f 67 4e 69 74 31 41 64 75 6f 72 77 78 74 6d 47 4a 70 36 5f 63 56 6c 66 78 53 73 67 64 2e 76 45 49 5f 46 46 75 32 2e 35 36 4e 44 73 2e 6b 51 6d 72 57 75 34 6e 52 32 48 37 52 6e 38 62 31 6c 55 78 7a 36 33 69 4a 68 44 45 32 7a 30 70 43 38 4d 54 2e 58 31 56 62 37 54 6b 50 56 56 4f 47 76 67 66 61 4a 68 46 62 77 6e 33 Data Ascii: j2n49NcvVVzYPgRXfA7muDBxuwT0YixbEeMGemy83gzz2UHwSy8B9mhZIcr_hORiKThFWcSlzz_93qvbN31zgOOdigF7ZEzTs1zS2Oo3kw3_MqxjPH_v.eT3i2UtbjUBkioBXZcg6gvJOgHKQCcgc7ogNit1AduorwxtmGJp6_cVlfxSsgd.vEI_FFu2.56NDs.kQmrWu4nR2H7Rn8b1lUxz63iJhDE2z0pC8MT.X1Vb7TkPVVOGvgfaJhFbwn3
2025-04-28 04:32:34 UTC	938	IN	Data Raw: 77 6d 6a 44 62 44 39 51 5f 6a 79 63 22 7d 3b 76 61 72 20 63 70 6f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 67 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 39 33 37 33 64 36 32 34 63 63 64 36 66 34 33 34 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 Data Ascii: wmjDbD9Q_jyc"};var cpo = document.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9373d624ccd6f434';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.has
2025-04-28 04:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:34 UTC	549	OUT	OPTIONS /report/v4?s=cbTJPtDdbptiij0opjZ%2BSV7xU3CTwLdm4%2FV9eceizAr7vcJ587X1wPUSxPXtMkNTou9rG6Nq%2FOtbfoqdLBeXCwaVqCCtVZIwBuZCkKm7gpkb09qp0iqjmWyEAJgXRmjN9bLlcao%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://zh.peoplelove.tech Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:34 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 28 Apr 2025 04:32:34 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:34 UTC	1008	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9373d624ccd6f434 HTTP/1.1 Host: zh.peoplelove.tech Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zh.peoplelove.tech/?utm_campaign&__cf_chl_rt_tk=tGLKPY8k999CWvMlJ7DSeSZR8iFa2UBG8su_zsNBXn0-1745814754-1.0.1.1-ykqK5tE8SmMvNjxKcw9bBZ79ghCZA.O7vqkp_xDQyCE Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:34 UTC	888	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 100991 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9373d6295bae14fe-LAX Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hLQJ2%2B2gtn12i9zKLt4IPSVkp8%2B1D54zxhRLHaUEBCM0KelPYE8%2B57ZoHw%2FfN5aMYqqTApuYK%2FNL4v73bqVcUzwxMZ0v%2F3nCQBdHnBulr3D8CpQaRKlPXRCZS0qx%2F3hX%2FuYQMu4%3D"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=149154&min_rtt=149076&rtt_var=31574&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1602&delivery_rate=27027&cwnd=252&unsent_bytes=0&cid=a077e19e82271d12&ts=385&x=0"
2025-04-28 04:32:34 UTC	481	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 57 57 4c 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 Data Ascii: window._cf_chl_opt.uaSR=true;window._cf_chl_opt.vWWL8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"},"translations":{"turnstile_ti
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 73 65 74 74 69 6e 67 25 32 30 79 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 6f 72 25 32 30 69 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 25 32 38 65 2e 67 2e 25 32 30 72 6f 75 74 65 72 25 32 39 2e 25 32 30 46 6f 72 25 32 30 61 64 64 69 74 69 6f 6e 61 6c 25 32 30 61 73 73 69 73 74 61 6e 63 65 25 32 43 25 32 30 63 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 73 69 74 65 25 32 30 6f 77 6e 65 72 73 2e 22 2c 22 63 68 65 63 6b 5f 74 68 69 72 64 70 61 72 74 79 22 3a 22 50 6c 65 61 73 65 25 32 30 75 6e 62 6c 6f 63 6b 25 32 30 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 30 74 6f 25 32 30 70 72 6f 63 65 65 64 2e 22 2c 22 66 61 76 69 63 6f 6e 5f 61 6c 74 22 3a 22 49 63 6f 6e 25 32 30 66 6f 72 25 32 30 Data Ascii: setting%20your%20device%20or%20internet%20connection%20%28e.g.%20router%29.%20For%20additional%20assistance%2C%20contact%20the%20site%20owners.","check_thirdparty":"Please%20unblock%20challenges.cloudflare.com%20to%20proceed.","favicon_alt":"Icon%20for%20
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 75 70 70 6f 72 74 65 64 25 32 30 61 6e 64 25 32 30 63 61 6e 6e 6f 74 25 32 30 63 6f 6d 70 6c 65 74 65 25 32 30 76 65 72 69 66 69 63 61 74 69 6f 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 22 49 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 25 32 43 25 32 30 70 6c 65 61 73 65 25 32 30 63 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 77 65 62 73 69 74 65 25 32 30 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 6f 72 25 32 30 73 75 62 6d 69 74 25 32 30 61 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 22 2c Data Ascii: upported%20and%20cannot%20complete%20verification","turnstile_feedback_description":"Send%20Feedback","feedback_report_aux_subtitle":"If%20the%20issue%20persists%2C%20please%20contact%20the%20website%20administrator%20or%20submit%20a%20feedback%20report",
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 68 65 6c 70 65 72 5f 65 78 70 6c 61 69 6e 65 72 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 75 73 65 73 25 32 30 61 25 32 30 73 65 63 75 72 69 74 79 25 32 30 73 65 72 76 69 63 65 25 32 30 74 6f 25 32 30 70 72 6f 74 65 63 74 25 32 30 61 Data Ascii: %20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","interstitial_helper_explainer":"%25%7Bplaceholder.com%7D%20uses%20a%20security%20service%20to%20protect%20a
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 72 65 76 69 65 77 5f 63 6f 6e 6e 65 63 74 69 6f 6e 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 6e 65 65 64 73 25 32 30 74 6f 25 32 30 72 65 76 69 65 77 25 32 30 74 68 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 6f 66 25 32 30 79 6f 75 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f Data Ascii: tally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","review_connection":"%25%7Bplaceholder.com%7D%20needs%20to%20review%20the%20security%20of%20your%20connection%20before%20proceeding."},"polyfills":{"turnstile_overrun_descriptio
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 69 7c 68 7d 2c 27 4a 68 76 6e 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 69 74 77 73 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 78 61 45 6b 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 62 6c 56 6b 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 50 78 6b 61 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 63 56 62 70 65 27 3a 67 47 28 38 35 32 29 2c 27 4d 42 4b 44 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 66 69 4e 43 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e Data Ascii: i\|h},'JhvnZ':function(h,i){return h-i},'itwsU':function(h,i){return h<<i},'xaEkV':function(h,i){return i==h},'blVkM':function(h,i){return h\|i},'PxkaR':function(h,i){return h&i},'cVbpe':gG(852),'MBKDp':function(h,i){return h<i},'fiNCh':function(h,i){return
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 3d 31 29 69 66 28 4c 3d 69 5b 67 4a 28 34 35 39 29 5d 28 4b 29 2c 4f 62 6a 65 63 74 5b 67 4a 28 34 37 34 29 5d 5b 67 4a 28 38 32 30 29 5d 5b 67 4a 28 31 33 32 38 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d 21 30 29 2c 4d 3d 44 2b 4c 2c 4f 62 6a 65 63 74 5b 67 4a 28 34 37 34 29 5d 5b 67 4a 28 38 32 30 29 5d 5b 67 4a 28 31 33 32 38 29 5d 28 42 2c 4d 29 29 44 3d 4d 3b 65 6c 73 65 20 69 66 28 64 5b 67 4a 28 31 31 37 36 29 5d 28 67 4a 28 38 33 39 29 2c 67 4a 28 37 37 39 29 29 29 7b 69 66 28 48 28 29 29 72 65 74 75 72 6e 3b 6a 28 64 5b 67 4a 28 38 34 33 29 5d 29 5b 67 4a 28 31 33 30 39 29 5d 3d 64 5b 67 4a 28 31 32 35 32 29 5d 28 44 2c 64 5b 67 4a 28 39 33 36 29 5d 29 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 64 5b 67 4a 28 31 30 37 34 29 Data Ascii: =1)if(L=i[gJ(459)](K),Object[gJ(474)][gJ(820)][gJ(1328)](B,L)\|\|(B[L]=F++,C[L]=!0),M=D+L,Object[gJ(474)][gJ(820)][gJ(1328)](B,M))D=M;else if(d[gJ(1176)](gJ(839),gJ(779))){if(H())return;j(d[gJ(843)])[gJ(1309)]=d[gJ(1252)](D,d[gJ(936)])}else for(N=d[gJ(1074)
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 29 2c 64 5b 67 4a 28 37 38 30 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 67 4a 28 36 39 33 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 20 69 66 28 67 4a 28 39 38 33 29 3d 3d 3d 67 4a 28 39 38 33 29 29 7b 66 6f 72 28 50 3d 31 2c 78 3d 30 3b 64 5b 67 4a 28 31 32 34 37 29 5d 28 78 2c 47 29 3b 49 3d 49 3c 3c 31 2e 33 35 7c 50 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 67 4a 28 36 39 33 29 5d 28 64 5b 67 4a 28 31 32 35 32 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 50 3d 44 5b 67 4a 28 37 32 32 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 49 3c 3c 31 2e 31 34 7c 64 5b 67 4a 28 34 37 36 29 5d 28 50 2c 31 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d Data Ascii: ),d[gJ(780)](J,j-1)?(J=0,H[gJ(693)](o(I)),I=0):J++,P>>=1,x++);}else if(gJ(983)===gJ(983)){for(P=1,x=0;d[gJ(1247)](x,G);I=I<<1.35\|P,j-1==J?(J=0,H[gJ(693)](d[gJ(1252)](o,I)),I=0):J++,P=0,x++);for(P=D[gJ(722)](0),x=0;16>x;I=I<<1.14\|d[gJ(476)](P,1),J==j-1?(J=
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 4a 7c 3d 46 2a 28 30 3c 4e 3f 31 3a 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 4d 28 38 35 31 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4e 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 4f 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 4d 28 38 35 31 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 67 4d 28 33 39 30 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 4d Data Ascii: ontinue;case'4':J\|=F(0<N?1:0);continue}break}switch(J){case 0:for(J=0,K=Math[gM(851)](2,8),F=1;K!=F;N=G&H,H>>=1,H==0&&(H=j,G=o(I++)),J\|=F(0<N?1:0),F<<=1);O=e(J);break;case 1:for(J=0,K=Math[gM(851)](2,16),F=1;F!=K;N=G&H,H>>=1,d[gM(390)](0,H)&&(H=j,G=d[gM
2025-04-28 04:32:34 UTC	1369	IN	Data Raw: 28 6e 2c 73 2c 67 4f 29 7b 67 4f 3d 67 4e 2c 6a 5e 3d 6c 5b 67 4f 28 37 32 32 29 5d 28 73 29 7d 29 2c 66 3d 65 4d 5b 67 4e 28 31 33 31 35 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 67 4e 28 37 32 32 29 5d 28 2b 2b 69 29 29 3b 6b 5b 67 4e 28 36 39 33 29 5d 28 53 74 72 69 6e 67 5b 67 4e 28 37 33 38 29 5d 28 28 68 5b 67 4e 28 36 34 38 29 5d 28 68 5b 67 4e 28 34 34 37 29 5d 28 6d 2c 32 35 35 29 2d 6a 2c 69 25 36 35 35 33 35 29 2b 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 67 4e 28 38 37 37 29 5d 28 27 27 29 7d 2c 65 51 3d 5b 5d 2c 65 52 3d 30 3b 32 35 36 3e 65 52 3b 65 51 5b 65 52 5d 3d 53 74 72 69 6e 67 5b 67 46 28 37 33 38 29 5d 28 65 52 29 2c 65 52 2b 2b 29 3b 65 53 3d 28 30 2c 65 76 61 6c 29 Data Ascii: (n,s,gO){gO=gN,j^=l[gO(722)](s)}),f=eM[gN(1315)](f),k=[],i=-1;!isNaN(m=f[gN(722)](++i));k[gN(693)](String[gN(738)]((h[gN(648)](h[gN(447)](m,255)-j,i%65535)+65535)%255)));return k[gN(877)]('')},eQ=[],eR=0;256>eR;eQ[eR]=String[gF(738)](eR),eR++);eS=(0,eval)

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:35 UTC	524	OUT	POST /report/v4?s=cbTJPtDdbptiij0opjZ%2BSV7xU3CTwLdm4%2FV9eceizAr7vcJ587X1wPUSxPXtMkNTou9rG6Nq%2FOtbfoqdLBeXCwaVqCCtVZIwBuZCkKm7gpkb09qp0iqjmWyEAJgXRmjN9bLlcao%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 401 Content-Type: application/reports+json Origin: https://zh.peoplelove.tech User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:35 UTC	401	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 35 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 39 2e 33 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 7a 68 2e 70 65 6f 70 6c 65 6c 6f 76 65 2e 74 65 Data Ascii: [{"age":2,"body":{"elapsed_time":751,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.179.35","status_code":403,"type":"http.error"},"type":"network-error","url":"https://zh.peoplelove.te
2025-04-28 04:32:35 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 28 Apr 2025 04:32:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:35 UTC	1307	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1759223964:1745814221:dFB-oJf9EAvPLIE0kVm3LskAEjxgwHXZYFYUa-vWL20/9373d624ccd6f434/3hv.hhJx9YcGJSgdm8S1.aXMO3uvqGsgZx2lZNjBAqM-1745814754-1.2.1.1-.eVcAd7S9xuT2hJiTP7nuwWnlClNkOF2vZvZ6.dtbimtcqOeW4cWRf2OJlGwF1ql HTTP/1.1 Host: zh.peoplelove.tech Connection: keep-alive Content-Length: 2147 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" cf-chl-ra: 0 sec-ch-ua-mobile: ?0 sec-ch-ua-model: "" sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 cf-chl: 3hv.hhJx9YcGJSgdm8S1.aXMO3uvqGsgZx2lZNjBAqM-1745814754-1.2.1.1-.eVcAd7S9xuT2hJiTP7nuwWnlClNkOF2vZvZ6.dtbimtcqOeW4cWRf2OJlGwF1ql sec-ch-ua-platform-version: "10.0.0" Accept: / Origin: https://zh.peoplelove.tech Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zh.peoplelove.tech/?utm_campaign Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:35 UTC	2147	OUT	Data Raw: 44 74 43 78 4a 78 62 78 67 78 4f 78 52 30 42 45 30 42 5a 78 38 59 37 58 75 41 50 33 61 42 4f 43 42 44 30 42 2d 75 42 24 42 66 78 61 75 46 6a 55 43 42 76 61 55 42 49 43 30 72 42 44 78 71 74 68 6a 55 42 68 48 43 68 6d 42 43 70 30 42 6a 78 61 67 64 42 58 78 67 32 42 55 77 59 46 77 42 46 72 38 68 31 41 42 46 75 68 53 78 50 53 44 2d 42 2b 70 38 42 6a 63 67 66 78 46 4d 42 41 38 4d 4c 7a 2b 50 62 74 33 59 42 57 30 50 37 4f 55 42 55 6d 78 42 58 59 68 48 50 61 32 52 67 78 68 66 44 67 6f 4c 52 64 4e 2d 61 65 44 44 44 36 44 76 31 64 54 76 33 78 68 35 71 2d 74 34 69 4f 36 48 41 42 42 45 52 43 42 2b 49 4e 30 43 42 68 64 4e 52 48 38 42 46 59 68 73 55 4c 70 48 38 4c 24 42 53 59 42 57 42 42 4e 42 70 65 64 42 36 66 75 42 52 6d 54 4f 76 31 59 42 68 45 44 2d 78 46 67 59 44 Data Ascii: DtCxJxbxgxOxR0BE0BZx8Y7XuAP3aBOCBD0B-uB$BfxauFjUCBvaUBIC0rBDxqthjUBhHChmBCp0BjxagdBXxg2BUwYFwBFr8h1ABFuhSxPSD-B+p8BjcgfxFMBA8MLz+Pbt3YBW0P7OUBUmxBXYhHPa2RgxhfDgoLRdN-aeDDD6Dv1dTv3xh5q-t4iO6HABBERCB+IN0CBhdNRH8BFYhsULpH8L$BSYBWBBNBpedB6fuBRmTOv1YBhED-xFgYD
2025-04-28 04:32:35 UTC	850	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:35 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 17068 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9373d62dcf3df0e0-LAX Cf-Chl-Gen: +Zdzcc3UcCpBPtY9VuUjEql6wjx+cd/GD65xqOlGINE=$wABNNJWry73JRYvPpfORDg== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KziIzM7qHEOFb5aJ3YwS8VY02nPV2Kaf9QTvoZmgU9ETDwV5tJvBDZEJWGCiAu6%2FBXvshvMpFg9Exyykp0OMAZHj4tjXgqqZ35sX2iy4yFQCqyeVbfVfM%2BcKlqWh%2BIKuTjFBPmM%3D"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=149191&min_rtt=149177&rtt_var=31491&sent=5&recv=10&lost=0&retrans=0&sent_bytes=2837&recv_bytes=4070&delivery_rate=27056&cwnd=252&unsent_bytes=0&cid=3a073e81c8847342&ts=327&x=0"
2025-04-28 04:32:35 UTC	519	IN	Data Raw: 64 59 4a 36 5a 56 2b 48 61 33 36 48 55 57 4f 41 69 6d 4e 51 56 5a 42 54 56 31 31 59 64 58 68 68 58 48 68 66 64 31 31 38 71 70 31 6d 69 6d 64 6d 6a 6d 79 42 70 49 65 6a 67 61 75 43 74 49 2b 31 65 36 39 76 6d 5a 4b 4c 6b 5a 4f 54 77 4a 76 42 68 35 56 37 70 4a 57 44 6f 70 79 6d 68 36 7a 46 7a 4d 47 69 77 38 6e 47 31 37 71 6e 74 37 48 66 6d 37 4b 62 34 73 4b 67 72 62 2b 79 73 64 66 61 74 64 75 39 77 62 2f 59 71 2b 2f 53 73 62 33 57 77 74 44 72 73 38 7a 55 75 63 66 4b 37 76 66 63 7a 73 37 56 39 64 76 32 42 4f 72 57 31 74 33 68 33 2b 6e 68 43 4e 38 45 34 78 4c 57 35 63 76 30 36 76 66 31 32 4f 33 71 39 42 63 64 45 64 30 55 47 69 6b 59 47 76 6f 62 49 41 6e 72 36 44 4d 77 38 67 49 71 45 53 30 68 39 79 77 49 50 76 55 39 2f 50 37 35 50 67 49 53 39 78 30 56 45 54 77 Data Ascii: dYJ6ZV+Ha36HUWOAimNQVZBTV11YdXhhXHhfd118qp1mimdmjmyBpIejgauCtI+1e69vmZKLkZOTwJvBh5V7pJWDopymh6zFzMGiw8nG17qnt7Hfm7Kb4sKgrb+ysdfatdu9wb/Yq+/Ssb3WwtDrs8zUucfK7vfczs7V9dv2BOrW1t3h3+nhCN8E4xLW5cv06vf12O3q9BcdEd0UGikYGvobIAnr6DMw8gIqES0h9ywIPvU9/P75PgIS9x0VETw
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 72 34 67 50 67 43 38 34 57 31 67 54 78 44 2f 58 63 42 78 55 69 41 43 51 52 38 51 37 30 2b 79 41 45 35 43 4d 6a 35 51 54 76 47 77 6a 73 2f 76 41 53 4a 41 59 77 2b 50 49 32 39 6a 30 5a 45 54 4d 35 47 54 4d 59 4d 6a 73 35 4a 51 51 44 53 67 73 34 4a 6b 4d 71 45 54 74 4a 56 6a 52 59 52 53 56 52 52 7a 42 55 47 69 30 36 57 47 49 64 57 30 51 69 50 7a 73 30 4d 6d 56 47 57 6b 30 36 61 32 38 6b 55 45 4e 30 62 6d 52 4e 59 6b 38 36 55 6e 4d 35 50 48 5a 79 65 57 39 61 64 57 5a 45 64 33 35 36 52 59 4e 73 53 6c 39 6c 58 49 46 66 62 57 47 45 6b 6c 69 44 63 46 56 6e 68 6f 71 61 6a 5a 4e 38 6b 59 4a 76 70 58 4f 48 64 48 4e 6b 70 32 74 37 59 61 56 2b 6f 4b 57 46 67 49 43 53 69 6f 75 44 6d 34 36 4a 75 4c 57 55 6b 73 42 2b 6f 4a 43 30 77 6f 69 78 74 6f 6d 57 69 61 71 36 68 38 Data Ascii: r4gPgC84W1gTxD/XcBxUiACQR8Q70+yAE5CMj5QTvGwjs/vASJAYw+PI29j0ZETM5GTMYMjs5JQQDSgs4JkMqETtJVjRYRSVRRzBUGi06WGIdW0QiPzs0MmVGWk06a28kUEN0bmRNYk86UnM5PHZyeW9adWZEd356RYNsSl9lXIFfbWGEkliDcFVnhoqajZN8kYJvpXOHdHNkp2t7YaV+oKWFgICSiouDm46JuLWUksB+oJC0woixtomWiaq6h8
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 30 77 54 32 32 39 7a 7a 32 74 34 4a 39 2f 63 4e 42 69 45 6d 47 68 76 67 38 77 66 6a 42 68 38 47 2b 68 6f 6b 4c 7a 41 4f 43 65 34 59 45 76 49 31 39 6a 30 56 47 6a 37 2b 47 54 34 6c 4a 68 51 70 53 52 30 6d 43 69 51 6f 43 77 5a 53 54 31 52 45 52 6c 4e 59 52 31 67 31 46 52 4d 62 55 31 35 57 48 42 70 65 57 42 38 30 51 6a 46 70 50 6d 59 39 5a 55 51 72 5a 30 4e 41 4c 57 74 48 52 55 4a 76 53 30 67 36 57 54 78 2f 4f 6b 38 37 55 45 4e 37 58 45 4e 31 57 59 70 58 53 6b 74 2b 53 6f 42 39 53 6b 31 54 61 47 53 43 68 6f 79 48 62 48 68 72 6e 4a 5a 79 62 32 74 78 6b 35 39 62 68 4a 57 45 58 35 4a 6c 6f 34 78 70 61 71 5a 39 6f 6f 42 39 67 4b 53 74 6b 6f 53 45 69 36 75 4e 6a 58 32 49 76 70 71 35 74 70 43 6e 6e 4b 57 48 74 73 65 39 70 36 61 63 75 63 2f 4c 70 70 43 30 79 64 4f Data Ascii: 0wT229zz2t4J9/cNBiEmGhvg8wfjBh8G+hokLzAOCe4YEvI19j0VGj7+GT4lJhQpSR0mCiQoCwZST1RERlNYR1g1FRMbU15WHBpeWB80QjFpPmY9ZUQrZ0NALWtHRUJvS0g6WTx/Ok87UEN7XEN1WYpXSkt+SoB9Sk1TaGSChoyHbHhrnJZyb2txk59bhJWEX5Jlo4xpaqZ9ooB9gKStkoSEi6uNjX2Ivpq5tpCnnKWHtse9p6acuc/LppC0ydO
2025-04-28 04:32:35 UTC	924	IN	Data Raw: 74 37 37 36 65 44 69 4a 51 62 6b 35 74 2f 35 36 4f 6f 75 36 4f 7a 75 4d 69 6a 77 38 76 41 47 39 50 62 7a 39 50 6a 36 39 7a 54 38 2f 76 73 73 48 77 51 46 48 41 4d 48 4d 53 41 67 4e 53 35 4a 54 6b 49 6e 4d 53 49 2f 54 6b 55 4e 4e 54 4e 4f 53 6a 67 30 50 42 56 5a 58 30 41 64 59 45 51 69 51 31 67 36 61 46 34 73 56 69 42 72 62 56 70 65 4c 32 46 6e 5a 47 6c 4f 51 33 6c 4c 64 55 68 4e 4e 33 30 2b 50 7a 39 2f 51 33 6b 35 59 46 64 53 69 56 31 64 66 49 56 6a 59 35 43 53 56 48 35 49 6c 47 53 43 68 6c 65 4a 6a 35 31 76 6c 58 4b 67 6f 5a 6d 53 68 46 32 68 70 36 69 48 72 57 32 67 6d 59 43 62 6d 72 52 30 6c 6f 2b 53 65 4c 4b 6d 73 71 6d 75 72 71 32 61 6b 5a 36 50 6d 6f 2b 31 6c 35 79 5a 75 70 65 36 75 72 69 5a 6a 72 47 4d 6a 71 6e 48 6a 73 44 54 6c 36 79 77 72 61 57 37 Data Ascii: t776eDiJQbk5t/56Oou6OzuMijw8vAG9Pbz9Pj69zT8/vssHwQFHAMHMSAgNS5JTkInMSI/TkUNNTNOSjg0PBVZX0AdYEQiQ1g6aF4sViBrbVpeL2FnZGlOQ3lLdUhNN30+Pz9/Q3k5YFdSiV1dfIVjY5CSVH5IlGSChleJj51vlXKgoZmShF2hp6iHrW2gmYCbmrR0lo+SeLKmsqmurq2akZ6Pmo+1l5yZupe6uriZjrGMjqnHjsDTl6ywraW7
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 70 66 45 6c 5a 6d 37 74 4a 75 64 6e 4b 36 32 79 38 54 66 35 4e 6a 57 36 65 53 6b 35 4e 2f 4b 76 36 58 78 77 2b 58 77 36 75 33 71 35 2b 37 52 7a 2b 50 74 73 37 37 6f 74 73 7a 4f 76 2b 44 6b 30 76 73 44 77 51 50 62 7a 4f 59 47 7a 75 2f 4e 41 63 76 65 45 51 59 53 36 2f 44 69 47 39 58 76 37 65 6f 43 45 51 44 76 39 4f 2f 31 37 2f 7a 66 4a 69 4d 64 42 75 73 5a 43 53 49 6b 45 65 59 72 4e 69 55 57 44 52 63 4f 39 51 30 71 48 68 49 65 44 77 45 43 47 30 56 43 43 42 55 61 48 77 77 41 51 6b 42 50 4a 6c 4d 6a 51 52 59 50 4d 45 55 55 56 46 49 56 4e 6c 49 36 4e 55 70 53 55 30 39 52 4e 54 68 62 49 6d 49 38 4c 55 68 69 53 6b 56 61 5a 48 56 54 61 32 52 45 57 6b 68 36 62 46 35 4d 4f 48 70 66 62 30 4e 73 63 55 42 53 63 58 56 39 65 48 35 58 6a 49 70 6f 67 46 36 4b 5a 49 56 75 Data Ascii: pfElZm7tJudnK62y8Tf5NjW6eSk5N/Kv6Xxw+Xw6u3q5+7Rz+Pts77otszOv+Dk0vsDwQPbzOYGzu/NAcveEQYS6/DiG9Xv7eoCEQDv9O/17/zfJiMdBusZCSIkEeYrNiUWDRcO9Q0qHhIeDwECG0VCCBUaHwwAQkBPJlMjQRYPMEUUVFIVNlI6NUpSU09RNThbImI8LUhiSkVaZHVTa2REWkh6bF5MOHpfb0NscUBScXV9eH5XjIpogF6KZIVu
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 7a 65 31 39 72 53 73 4e 65 34 73 36 2b 79 78 75 72 58 75 63 4f 6c 37 4b 79 76 77 75 32 78 35 36 66 50 77 2b 65 77 37 63 62 73 35 39 6a 4c 33 37 6b 42 77 4f 37 7a 2b 77 53 2b 36 51 62 44 36 4d 6a 37 37 2f 73 46 34 75 6a 6a 45 74 62 71 44 73 2f 77 30 66 4c 76 39 4e 58 32 38 4f 2f 36 45 67 45 6a 46 66 59 62 48 41 72 6c 46 78 6b 52 2f 68 30 4c 44 50 4d 46 42 7a 6b 72 4c 6a 48 35 4a 68 6f 4f 4f 77 37 37 45 45 49 33 47 6a 51 6a 4a 30 63 34 47 41 6b 4c 54 30 77 6b 4d 30 5a 43 4d 6b 73 6e 55 7a 42 56 4f 67 34 62 4c 31 6c 54 50 56 78 51 52 46 42 5a 4d 44 31 49 5a 30 6f 65 4b 30 74 71 59 30 30 77 4b 55 68 74 62 30 64 33 63 47 74 45 61 6c 55 32 65 54 71 41 63 30 4e 75 57 34 4e 52 63 58 56 47 65 48 35 6e 57 6d 56 61 67 47 4a 6e 5a 49 56 6a 56 34 4a 76 6a 32 74 74 57 Data Ascii: ze19rSsNe4s6+yxurXucOl7Kyvwu2x56fPw+ew7cbs59jL37kBwO7z+wS+6QbD6Mj77/sF4ujjEtbqDs/w0fLv9NX28O/6EgEjFfYbHArlFxkR/h0LDPMFBzkrLjH5JhoOOw77EEI3GjQjJ0c4GAkLT0wkM0ZCMksnUzBVOg4bL1lTPVxQRFBZMD1IZ0oeK0tqY00wKUhtb0d3cGtEalU2eTqAc0NuW4NRcXVGeH5nWmVagGJnZIVjV4Jvj2ttW
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 41 75 62 76 61 6f 4e 2b 71 31 4a 37 71 75 74 6a 63 72 64 2f 6c 7a 75 50 4d 78 39 48 4a 30 73 66 72 75 62 37 6f 73 76 37 4e 37 50 41 42 38 2f 6b 4a 31 64 2f 58 2b 67 54 6f 34 4f 7a 69 79 51 6e 30 39 4f 50 77 43 4e 6e 76 42 42 6a 63 2b 52 6e 65 39 2f 67 62 38 67 44 76 42 2b 63 41 4b 74 33 65 48 41 30 41 2b 67 45 7a 46 65 73 53 44 54 58 79 45 54 4c 35 4f 68 6b 36 43 43 6f 4b 43 77 77 6b 50 6b 51 45 4b 51 55 42 44 42 77 62 43 44 38 4c 47 6a 34 53 44 68 49 6e 52 7a 52 44 46 44 63 37 58 30 77 79 4d 6a 52 4f 57 30 55 6a 58 46 70 67 4e 7a 31 67 50 6c 5a 41 59 46 4a 65 55 57 68 47 51 47 56 6c 4f 45 56 48 65 6c 4a 30 56 48 52 4f 63 45 4e 75 57 30 42 53 63 58 57 4a 65 49 52 58 57 6d 56 61 67 47 4a 6e 5a 49 56 6c 61 57 5a 69 65 6d 78 6d 64 6f 68 39 62 6d 70 71 6b 5a Data Ascii: AubvaoN+q1J7qutjcrd/lzuPMx9HJ0sfrub7osv7N7PAB8/kJ1d/X+gTo4OziyQn09OPwCNnvBBjc+Rne9/gb8gDvB+cAKt3eHA0A+gEzFesSDTXyETL5Ohk6CCoKCwwkPkQEKQUBDBwbCD8LGj4SDhInRzRDFDc7X0wyMjROW0UjXFpgNz1gPlZAYFJeUWhGQGVlOEVHelJ0VHROcENuW0BScXWJeIRXWmVagGJnZIVlaWZiemxmdoh9bmpqkZ
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 6e 63 66 63 36 2b 54 4a 79 65 37 62 78 66 62 4d 39 38 58 42 73 39 50 47 75 4d 76 51 2f 76 48 77 39 50 37 66 42 41 6b 49 42 65 48 38 34 63 63 45 38 41 66 62 42 75 33 6f 2f 51 59 58 46 77 6e 55 46 51 73 4e 44 52 62 79 45 53 51 6a 2f 74 77 46 33 79 6b 57 2b 75 73 64 35 77 77 4b 48 76 41 7a 4b 78 37 79 43 53 38 76 4d 67 66 31 4b 66 30 39 47 43 33 37 50 44 55 42 4e 6a 67 33 4f 77 41 73 52 77 6f 4b 4f 6b 68 51 43 43 30 75 4d 69 63 71 4e 53 63 6e 4d 44 30 35 53 31 52 57 53 6c 51 64 4e 32 41 66 59 43 4e 6f 50 69 74 56 49 30 30 34 4c 45 31 64 4b 6d 6c 66 4c 6e 45 79 65 45 77 74 64 58 56 2b 64 33 5a 66 57 6e 35 42 59 6b 56 34 65 31 39 6d 58 6c 35 56 69 49 35 61 6b 45 6c 78 59 45 78 6c 68 6d 64 31 64 70 70 73 56 49 69 61 65 5a 31 2b 6e 48 78 63 65 6e 31 2f 63 36 43 Data Ascii: ncfc6+TJye7bxfbM98XBs9PGuMvQ/vHw9P7fBAkIBeH84ccE8AfbBu3o/QYXFwnUFQsNDRbyESQj/twF3ykW+usd5wwKHvAzKx7yCS8vMgf1Kf09GC37PDUBNjg3OwAsRwoKOkhQCC0uMicqNScnMD05S1RWSlQdN2AfYCNoPitVI004LE1dKmlfLnEyeEwtdXV+d3ZfWn5BYkV4e19mXl5ViI5akElxYExlhmd1dppsVIiaeZ1+nHxcen1/c6C
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 2b 76 53 73 4d 58 56 77 73 54 6e 38 4d 7a 34 7a 63 66 64 36 76 47 35 74 62 7a 79 78 41 50 42 78 4d 72 72 43 65 6a 4c 43 66 77 47 42 4f 2f 47 43 78 59 45 39 63 2f 32 37 68 48 72 48 52 73 62 36 78 77 43 44 39 63 61 47 52 66 39 4b 76 6f 5a 37 65 59 4b 2f 4f 34 47 37 68 58 79 43 76 49 6b 42 41 4d 6b 50 6a 6b 73 51 53 49 71 50 69 55 68 4e 66 30 39 4d 77 4a 43 42 6b 77 6b 43 6b 38 4f 43 30 73 30 53 79 4e 45 56 6c 49 74 47 6a 6f 5a 50 43 77 31 4e 68 73 34 54 47 41 6c 51 57 45 37 53 45 46 70 4b 47 6c 68 55 53 39 76 4c 55 64 77 55 30 6f 75 65 6b 67 32 64 57 56 78 64 33 70 36 4f 7a 35 6b 63 47 4e 53 58 47 69 44 64 30 5a 69 69 32 35 43 54 33 32 50 68 33 46 53 59 6c 68 75 56 4a 69 48 65 59 36 55 6e 46 65 43 6e 6c 79 42 59 5a 53 49 6c 4a 31 37 67 58 79 72 6a 6d 4a 76 Data Ascii: +vSsMXVwsTn8Mz4zcfd6vG5tbzyxAPBxMrrCejLCfwGBO/GCxYE9c/27hHrHRsb6xwCD9caGRf9KvoZ7eYK/O4G7hXyCvIkBAMkPjksQSIqPiUhNf09MwJCBkwkCk8OC0s0SyNEVlItGjoZPCw1Nhs4TGAlQWE7SEFpKGlhUS9vLUdwU0ouekg2dWVxd3p6Oz5kcGNSXGiDd0Zii25CT32Ph3FSYlhuVJiHeY6UnFeCnlyBYZSIlJ17gXyrjmJv

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:35 UTC	593	OUT	GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Origin: https://zh.peoplelove.tech sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:35 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:35 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 15 Apr 2025 10:23:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9373d62f8b2c1d93-LAX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 76 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 76 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 76 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,v,h;try{for(a=a.call(e);!(c=(v=a.next()).done)&&(o.push(v.value),!(t&&o.length===t));c=!0)
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 76 26 26 28 76 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;v&&(v=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 48 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 2c 65 2e 4c 69 67 68 74 3d 22 6c 69 67 68 74 22 2c 65 2e 44 61 72 6b 3d 22 64 61 72 6b 22 7d 29 28 48 65 7c 7c 28 48 65 3d 7b 7d 29 29 3b 76 61 72 20 43 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 65 72 69 66 79 69 6e 67 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 4f 76 65 72 72 75 6e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 61 69 6c 75 72 65 57 6f 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 66 61 69 6c 75 72 65 2d 77 6f Data Ascii: );var He;(function(e){e.Auto="auto",e.Light="light",e.Dark="dark"})(He\|\|(He={}));var Ce;(function(e){e.Verifying="verifying",e.VerifyingHavingTroubles="verifying-having-troubles",e.VerifyingOverrun="verifying-overrun",e.FailureWoHavingTroubles="failure-wo
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 2c 65 2e 52 65 64 69 72 65 63 74 69 6e 67 Data Ascii: ute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_missing_aux",e.Redirecting
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 4c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 Data Ascii: s;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearanceLevel!=="default"&&t.set("clearance_level",e.params._debugSite
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 46 65 65 64 62 61 63 6b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 2c 6c 2c 76 3d 4c 28 4d 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 73 Data Ascii: guage,"/").concat(_)}var St=function(e){var t,a,o=window.innerWidth<400,c=e.state===Ce.FailureFeedback\|\|e.state===Ce.FailureHavingTroubles,l,v=L(Mr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),h,s
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 61 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 4f 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 76 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 76 26 26 65 65 28 70 2c 76 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 4f 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 Data Ascii: eflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Oe(e,t,a){return Be()?Oe=Reflect.construct:Oe=function(c,l,v){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return v&&ee(p,v.prototype),p},Oe.apply(null,argu
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 66 72 28 61 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 71 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 71 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 71 65 29 2e 63 6f 6e 63 61 74 28 65 29 Data Ascii: ;function g(e,t){var a="[Cloudflare Turnstile] ".concat(e,".");throw new fr(a,t)}function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(qe)?e.substring(qe.length):null}function $(e){return"".concat(qe).concat(e)
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 67 68 74 3d 22 31 30 30 76 68 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c Data Ascii: ght="100vh",s.style.top="0",s.style.left="0",s.style.transformOrigin="center center",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.vertical

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:35 UTC	882	OUT	GET /favicon.ico HTTP/1.1 Host: zh.peoplelove.tech Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zh.peoplelove.tech/?utm_campaign Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:35 UTC	1358	IN	HTTP/1.1 403 Forbidden Date: Mon, 28 Apr 2025 04:32:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 9373d62fadcd2f21-LAX Server: cloudflare Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cf-Mitigated: challenge Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin Server-Timing: chlray;desc="9373d62fadcd2f21" X-Content-Type-Options: nosniff
2025-04-28 04:32:35 UTC	747	IN	Data Raw: 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 64 43 41 57 4d 53 38 43 42 Data Ascii: X-Frame-Options: SAMEORIGINCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dCAWMS8CB
2025-04-28 04:32:35 UTC	633	IN	Data Raw: 31 65 32 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 1e2e<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 68 32 7b 66 6f 6e 74 2d Data Ascii: ction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{font-size:1.5rem;font-weight:500;line-height:2.25rem}@media (width <= 720px){.h2{font-
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 7a 68 2e 70 65 6f 70 6c 65 6c 6f 76 65 2e 74 65 63 68 22 2c 63 54 79 70 65 3a 20 27 6d 61 6e 61 67 65 64 27 2c 63 52 61 79 3a 20 27 39 33 37 33 64 36 32 66 61 64 63 64 32 66 32 31 27 2c 63 48 3a 20 27 69 75 4b 64 4f 67 6b 72 45 56 6d 71 39 76 4f 34 2e 5f 62 4e 77 55 5a 71 63 4d 32 77 4e 6e 51 6a 67 6e 7a 55 4b 37 6a 33 42 6b 55 2d 31 37 34 35 38 31 34 37 35 35 2d 31 2e 32 2e 31 2e 31 2d 6e 66 59 6c 55 6f 39 71 77 45 6c 54 57 30 47 59 44 44 33 43 58 55 35 64 35 33 6c 51 2e 6f 31 6e 66 2e 35 61 54 47 70 47 32 32 67 71 42 51 33 38 74 4d 52 76 42 6e 32 62 61 67 38 4e 35 53 5f 6a 27 2c 63 55 50 4d 44 54 6b 3a 20 22 5c 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 5f 5f 63 66 5f 63 68 6c 5f 74 6b 3d 59 35 53 73 45 4a 77 Data Ascii: Id: '3',cZone: "zh.peoplelove.tech",cType: 'managed',cRay: '9373d62fadcd2f21',cH: 'iuKdOgkrEVmq9vO4._bNwUZqcM2wNnQjgnzUK7j3BkU-1745814755-1.2.1.1-nfYlUo9qwElTW0GYDD3CXU5d53lQ.o1nf.5aTGpG22gqBQ38tMRvBn2bag8N5S_j',cUPMDTk: "\/favicon.ico?__cf_chl_tk=Y5SsEJw
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 56 30 4a 71 43 7a 2e 74 6b 39 48 55 6f 33 43 6f 41 67 53 4f 6c 44 52 34 4b 6e 6c 48 64 69 53 4b 34 74 6b 32 51 67 39 32 72 34 44 2e 34 77 71 48 78 4a 37 68 4f 6e 32 58 73 32 4e 76 43 71 4a 6d 65 48 4d 45 4f 71 73 59 69 56 74 43 39 45 73 45 4d 75 62 34 6f 66 38 70 30 59 51 5f 79 5f 45 54 46 4c 76 78 33 45 41 6d 33 61 6f 77 73 57 7a 68 5f 51 38 66 50 47 6a 51 6d 64 51 45 58 35 4f 7a 6e 36 33 75 63 38 57 44 4a 41 56 33 63 74 65 6a 39 64 71 68 33 50 49 5a 32 39 77 63 5f 55 42 57 4e 37 42 5f 70 6c 53 51 53 46 4b 6e 77 42 70 7a 5f 48 70 4b 50 32 48 55 64 34 41 37 4e 6f 6e 34 2e 45 5a 35 75 36 69 4d 37 6a 70 58 79 33 52 4f 44 56 47 77 78 57 4b 34 56 2e 72 52 2e 62 72 57 50 38 76 4d 4b 37 32 49 59 64 75 61 70 78 4f 59 5a 45 68 5f 64 4b 4b 48 42 30 58 77 4f 58 6e Data Ascii: V0JqCz.tk9HUo3CoAgSOlDR4KnlHdiSK4tk2Qg92r4D.4wqHxJ7hOn2Xs2NvCqJmeHMEOqsYiVtC9EsEMub4of8p0YQ_y_ETFLvx3EAm3aowsWzh_Q8fPGjQmdQEX5Ozn63uc8WDJAV3ctej9dqh3PIZ29wc_UBWN7B_plSQSFKnwBpz_HpKP2HUd4A7Non4.EZ5u6iM7jpXy3RODVGwxWK4V.rR.brWP8vMK72IYduapxOYZEh_dKKHB0XwOXn
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 59 4c 35 32 57 34 63 72 59 4b 73 44 66 53 72 77 32 32 30 78 34 5f 4c 44 37 74 78 52 30 5f 4a 33 68 4e 77 50 66 68 44 34 41 6b 2e 5f 7a 37 76 6d 71 43 68 55 54 61 55 61 68 34 31 4f 67 4a 77 70 30 54 53 68 50 42 64 37 67 32 59 48 38 59 53 62 38 41 39 4a 57 66 58 43 36 42 78 71 78 68 65 5f 7a 63 39 69 66 55 31 5a 38 48 45 4b 73 6b 66 39 41 78 4a 41 77 65 65 65 58 4c 5a 41 63 71 72 7a 78 2e 36 65 33 33 48 67 37 42 75 50 35 6c 4b 55 31 55 58 47 51 33 59 53 75 70 36 59 4b 41 6a 71 70 54 70 72 5f 74 71 71 75 6e 74 39 49 4e 41 65 53 54 33 6b 74 50 6e 61 69 68 79 6f 55 41 61 31 30 31 41 70 62 65 62 50 78 71 35 68 55 4e 61 77 2e 56 30 4e 52 77 30 47 65 37 35 76 2e 5f 65 72 50 7a 71 73 5f 53 79 74 35 5f 46 48 79 47 51 59 6e 6e 33 6d 47 6c 43 68 42 76 38 50 63 6a 4c Data Ascii: YL52W4crYKsDfSrw220x4_LD7txR0_J3hNwPfhD4Ak._z7vmqChUTaUah41OgJwp0TShPBd7g2YH8YSb8A9JWfXC6Bxqxhe_zc9ifU1Z8HEKskf9AxJAweeeXLZAcqrzx.6e33Hg7BuP5lKU1UXGQ3YSup6YKAjqpTpr_tqqunt9INAeST3ktPnaihyoUAa101ApbebPxq5hUNaw.V0NRw0Ge75v._erPzqs_Syt5_FHyGQYnn3mGlChBv8PcjL
2025-04-28 04:32:35 UTC	1369	IN	Data Raw: 78 50 58 54 39 6e 70 45 79 49 65 38 53 48 59 35 32 6c 78 5a 70 44 42 74 30 50 41 51 70 2e 49 59 5a 5a 65 68 52 6a 55 5a 6a 62 51 32 6d 67 42 4d 6a 69 4e 72 5a 58 74 74 77 30 77 59 55 4d 36 56 6d 4a 76 73 58 34 67 38 4e 62 41 6c 43 6c 36 50 4a 42 67 75 79 78 68 61 6d 75 75 38 78 4f 7a 41 33 4d 77 39 61 39 45 62 77 34 72 6b 6a 53 30 71 55 59 66 2e 53 61 59 6c 59 77 75 52 36 4b 55 4f 31 43 5f 64 5f 78 6e 72 73 34 7a 34 53 6f 77 45 69 6e 61 50 37 53 6b 43 63 6f 30 53 2e 72 61 38 4f 74 4d 6a 6d 6f 6b 5a 41 5a 71 48 68 5a 32 53 76 6f 75 49 6e 58 73 34 44 50 58 4e 6e 4e 30 50 51 51 32 61 7a 5a 6b 76 57 75 53 2e 56 53 65 65 45 37 56 35 51 55 55 73 64 38 48 6b 6d 69 55 34 41 72 4c 55 37 6a 6a 59 56 59 78 65 78 4b 66 2e 74 69 55 6e 6d 72 33 75 64 54 36 75 71 43 7a Data Ascii: xPXT9npEyIe8SHY52lxZpDBt0PAQp.IYZZehRjUZjbQ2mgBMjiNrZXttw0wYUM6VmJvsX4g8NbAlCl6PJBguyxhamuu8xOzA3Mw9a9Ebw4rkjS0qUYf.SaYlYwuR6KUO1C_d_xnrs4z4SowEinaP7SkCco0S.ra8OtMjmokZAZqHhZ2SvouInXs4DPXNnN0PQQ2azZkvWuS.VSeeE7V5QUUsd8HkmiU4ArLU7jjYVYxexKf.tiUnmr3udT6uqCz
2025-04-28 04:32:35 UTC	256	IN	Data Raw: 2e 57 57 4d 64 39 6f 2d 31 37 34 35 38 31 34 37 35 35 2d 31 2e 30 2e 31 2e 31 2d 39 34 6d 38 73 61 34 6d 4f 35 2e 47 79 63 34 59 65 31 4e 50 31 39 30 45 50 36 6a 63 6d 30 5f 59 33 33 42 75 43 50 4b 4d 48 33 67 22 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 29 3b 63 70 6f 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 6f 67 55 29 3b 7d 7d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 70 6f 29 3b 7d 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d Data Ascii: .WWMd9o-1745814755-1.0.1.1-94m8sa4mO5.Gyc4Ye1NP190EP6jcm0_Y33BuCPKMH3g" + window._cf_chl_opt.cOgUHash);cpo.onload = function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName('head')[0].appendChild(cpo);}());</script></body></html>
2025-04-28 04:32:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:36 UTC	632	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1759223964:1745814221:dFB-oJf9EAvPLIE0kVm3LskAEjxgwHXZYFYUa-vWL20/9373d624ccd6f434/3hv.hhJx9YcGJSgdm8S1.aXMO3uvqGsgZx2lZNjBAqM-1745814754-1.2.1.1-.eVcAd7S9xuT2hJiTP7nuwWnlClNkOF2vZvZ6.dtbimtcqOeW4cWRf2OJlGwF1ql HTTP/1.1 Host: zh.peoplelove.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:36 UTC	995	IN	HTTP/1.1 400 Bad Request Date: Mon, 28 Apr 2025 04:32:36 GMT Content-Type: application/json Content-Length: 14 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9373d6347ea769a4-LAX Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Cf-Chl-Out: PqDDu9Yd9euIv01uLZgJ5ftP0bZkRXOMXF+i+IYZ0K+o9OA07cAKVqBrF+hhS5bhplnc74a8IyIl7G/32maQdg==$OWawqjw0ghfIS9USD+T8rQ== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=snDxKoJ3KIGSyh8Qe%2Bgf0we3QBLG20A9ICf5IoS5s%2BaGXFjdtUllzCxLannq%2FBBkewfNJWpEUyHTZrzLPeoMpvc29wu3hNFquRC7Dvb2ZCTpJ%2BlqmLlQ1TFZxUlvP%2BApTaqX%2FYI%3D"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=149188&min_rtt=149172&rtt_var=31492&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1204&delivery_rate=27058&cwnd=252&unsent_bytes=0&cid=c4e5455f6b9bbb82&ts=378&x=0"
2025-04-28 04:32:36 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://pdflink.to/29c49848/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Windows Analysis Report
https://pdflink.to/29c49848/

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:36 UTC	806	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:36 UTC	1297	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:36 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27874 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-hlBtpEKzh4OxZOHo' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-04-28 04:32:36 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-04-28 04:32:36 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 68 6c 42 74 70 45 4b 7a 68 34 4f 78 5a 4f 48 6f 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-hlBtpEKzh4OxZOHo' 'unsafe-
2025-04-28 04:32:36 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-04-28 04:32:36 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 76 65 72 69 66 79 69 6e 67 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 Data Ascii: align:right}#overrun-i,#verifying-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display
2025-04-28 04:32:36 UTC	1369	IN	Data Raw: 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 Data Ascii: -shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #e
2025-04-28 04:32:36 UTC	1369	IN	Data Raw: 34 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 Data Ascii: 41}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:activ
2025-04-28 04:32:36 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 Data Ascii: .theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link,.theme-dark .er
2025-04-28 04:32:36 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 74 68 3a 36 70 78 7d 2e 63 62 2d 6c 62 20 2e 63 Data Ascii: ackground-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);width:6px}.cb-lb .c
2025-04-28 04:32:36 UTC	1369	IN	Data Raw: 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e Data Ascii: ace-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0}.size-compact .
2025-04-28 04:32:36 UTC	1369	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f Data Ascii: ;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{color:#232323;fo

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:37 UTC	773	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9373d634a9d952e3&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:37 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 108807 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9373d638e8a61937-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:37 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 57 57 4c 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 Data Ascii: window._cf_chl_opt.vWWL8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 22 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 25 32 30 67 75 69 64 65 6c 69 6e 65 73 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 Data Ascii: %20page%3C%2Fa%3E%20if%20the%20issue%20persists.","feedback_report_guideline":"Troubleshooting%20guidelines","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_footer_terms":"Terms","unsupported_browser":"Your%
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4c 2c 65 4d 2c 65 4e 2c 65 51 2c 65 52 2c 66 6e 2c 66 72 2c 66 76 2c 66 77 2c 66 78 2c 66 42 2c 66 43 2c 66 46 2c 66 49 2c 66 4b 2c 66 4c 2c 66 Data Ascii: sists.","turnstile_timeout":"Timed%20out"},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_guideline":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gL,eM,eN,eQ,eR,fn,fr,fv,fw,fx,fB,fC,fF,fI,fK,fL,f
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 68 5b 68 4d 28 38 36 32 29 5d 28 68 5b 68 4d 28 36 37 32 29 5d 28 68 5b 68 4d 28 31 30 32 38 29 5d 28 6d 2c 32 35 35 29 2d 6a 2c 69 25 36 35 35 33 35 29 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 68 4d 28 33 35 36 29 5d 28 27 27 29 7d 2c 65 4d 5b 67 4c 28 31 34 30 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 68 5a 2c 65 29 7b 65 3d 28 68 5a 3d 67 4c 2c 7b 27 43 42 4f 6a 73 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 46 79 4a 65 73 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 68 5a 28 31 32 30 32 29 5d 28 66 75 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 65 5b 68 5a 28 36 38 31 29 Data Ascii: h[hM(862)](h[hM(672)](h[hM(1028)](m,255)-j,i%65535),65535)%255)));return k[hM(356)]('')},eM[gL(1406)]=function(c,hZ,e){e=(hZ=gL,{'CBOjs':function(g,h){return g(h)},'FyJes':function(g,h){return g(h)}});try{return e[hZ(1202)](fu,c)}catch(g){return e[hZ(681)
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 69 6e 67 5b 69 30 28 31 34 30 34 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 31 29 7b 72 65 74 75 72 6e 20 69 31 3d 69 30 2c 64 5b 69 31 28 31 30 36 38 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 32 29 7b 72 65 74 75 72 6e 20 69 32 3d 69 31 2c 69 32 28 36 38 38 29 5b 69 32 28 36 36 32 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 33 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4f 29 7b 69 66 28 69 33 3d 69 30 2c 6e 75 6c 6c 3d 3d 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a Data Ascii: ing[i0(1404)],f={'h':function(h,i1){return i1=i0,d[i1(1068)](null,h)?'':f.g(h,6,function(i,i2){return i2=i1,i2(688)[i2(662)](i)})},'g':function(i,j,o,i3,s,x,B,C,D,E,F,G,H,I,J,K,L,M,O){if(i3=i0,null==i)return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 69 33 28 31 32 37 33 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 64 5b 69 33 28 31 30 36 38 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 33 28 31 32 39 33 29 5d 28 64 5b 69 33 28 36 38 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 33 28 37 37 35 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 69 33 28 31 35 33 33 29 5d 28 48 3c 3c 31 2e 38 34 2c 4d 26 31 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 33 28 31 32 39 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 64 5b 69 33 28 31 32 37 33 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 69 33 28 31 35 33 33 29 5d 28 Data Ascii: )){for(s=0;d[i3(1273)](s,F);H<<=1,d[i3(1068)](I,j-1)?(I=0,G[i3(1293)](d[i3(686)](o,H)),H=0):I++,s++);for(M=C[i3(775)](0),s=0;8>s;H=d[i3(1533)](H<<1.84,M&1),j-1==I?(I=0,G[i3(1293)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;d[i3(1273)](s,F);H=d[i3(1533)](
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 4a 7c 3d 64 5b 69 36 28 38 39 35 29 5d 28 64 5b 69 36 28 31 32 37 33 29 5d 28 30 2c 4e 29 3f 31 3a 30 2c 46 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 36 28 31 31 39 37 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 69 36 28 32 35 36 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 36 28 36 38 36 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 69 36 28 31 30 39 35 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 36 28 31 31 39 Data Ascii: ontinue;case'4':J\|=d[i6(895)](d[i6(1273)](0,N)?1:0,F);continue}break}switch(J){case 0:for(J=0,K=Math[i6(1197)](2,8),F=1;K!=F;N=G&H,H>>=1,d[i6(256)](0,H)&&(H=j,G=d[i6(686)](o,I++)),J\|=(0<N?1:0)*F,F<<=1);O=d[i6(1095)](e,J);break;case 1:for(J=0,K=Math[i6(119
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 61 3d 67 4c 2c 6f 3d 7b 27 78 56 6e 41 53 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 59 48 56 52 67 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 55 54 66 69 54 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 59 56 51 6f 50 27 3a 69 61 28 37 37 33 29 2c 27 7a 6a 69 43 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 6f 5b 69 61 28 38 39 33 29 5d 28 76 6f 69 64 20 30 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 66 41 28 68 29 2c 67 5b 69 61 28 37 34 35 29 5d 5b 69 61 28 31 34 36 39 29 5d 26 26 Data Ascii: C,D,E,F){if(ia=gL,o={'xVnAS':function(G,H){return G<H},'YHVRg':function(G,H){return G+H},'UTfiT':function(G,H){return H===G},'YVQoP':ia(773),'zjiCM':function(G,H,I){return G(H,I)}},h===null\|\|o[ia(893)](void 0,h))return j;for(x=fA(h),g[ia(745)][ia(1469)]&&
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 67 2c 64 2c 65 2c 66 2c 67 29 7b 69 67 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 69 67 28 31 31 30 38 29 5d 3d 69 67 28 33 39 32 29 2c 64 5b 69 67 28 39 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 64 5b 69 67 28 31 30 30 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 69 67 28 39 32 36 29 5d 28 31 65 33 2c 65 4d 5b 69 67 28 33 38 38 29 5d 5b 69 67 28 31 33 38 34 29 5d 28 65 5b 69 67 28 31 30 30 36 29 5d 28 32 2c 66 29 2c 33 32 29 29 2c 65 4d 5b 69 67 28 32 38 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 68 29 7b 69 68 3d 69 67 2c 65 4d 5b 69 68 28 38 30 39 29 5d 5b 69 68 28 31 33 38 30 29 5d 28 29 2c Data Ascii: )]=function(ig,d,e,f,g){ig=gL,d={},d[ig(1108)]=ig(392),d[ig(926)]=function(h,i){return i*h},d[ig(1006)]=function(h,i){return h<<i},e=d,f=1,g=e[ig(926)](1e3,eM[ig(388)][ig(1384)](e[ig(1006)](2,f),32)),eM[ig(285)](function(ih){ih=ig,eM[ih(809)][ih(1380)](),
2025-04-28 04:32:37 UTC	1369	IN	Data Raw: 69 69 28 31 34 31 38 29 5d 28 69 5b 69 69 28 31 34 31 38 29 5d 28 69 5b 69 69 28 37 31 37 29 5d 28 69 5b 69 69 28 31 34 32 30 29 5d 2b 65 4d 5b 69 69 28 31 30 37 31 29 5d 5b 69 69 28 31 31 39 38 29 5d 2c 69 5b 69 69 28 37 38 36 29 5d 29 2c 65 4d 5b 69 69 28 31 30 37 31 29 5d 5b 69 69 28 33 35 30 29 5d 29 2b 27 2f 27 2b 65 4d 5b 69 69 28 31 30 37 31 29 5d 2e 63 48 2c 27 2f 27 29 2c 65 4d 5b 69 69 28 31 30 37 31 29 5d 5b 69 69 28 37 37 31 29 5d 29 2c 6d 3d 7b 7d 2c 6d 5b 69 69 28 39 32 38 29 5d 3d 65 4d 5b 69 69 28 31 30 37 31 29 5d 5b 69 69 28 39 32 38 29 5d 2c 6d 5b 69 69 28 33 34 32 29 5d 3d 65 4d 5b 69 69 28 31 30 37 31 29 5d 5b 69 69 28 33 34 32 29 5d 2c 6d 5b 69 69 28 33 37 35 29 5d 3d 65 4d 5b 69 69 28 31 30 37 31 29 5d 5b 69 69 28 33 37 35 29 5d 2c Data Ascii: ii(1418)](i[ii(1418)](i[ii(717)](i[ii(1420)]+eM[ii(1071)][ii(1198)],i[ii(786)]),eM[ii(1071)][ii(350)])+'/'+eM[ii(1071)].cH,'/'),eM[ii(1071)][ii(771)]),m={},m[ii(928)]=eM[ii(1071)][ii(928)],m[ii(342)]=eM[ii(1071)][ii(342)],m[ii(375)]=eM[ii(1071)][ii(375)],

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:37 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:37 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:37 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9373d638e9a8f00f-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:37 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:37 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:38 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9373d63dac01f00f-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:37 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2118379386:1745810834:tmCKlt3f4Ft3Yn-zclhYGbLyB9WZjjKtmFRjIEafYKw/9373d634a9d952e3/IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4249 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:37 UTC	4249	OUT	Data Raw: 75 30 56 73 45 73 42 73 33 73 2b 73 63 79 4f 38 79 4f 6f 73 79 37 74 52 46 53 79 4b 4f 46 4f 41 66 37 4e 57 47 4f 48 33 4f 75 47 4a 61 4f 77 4f 55 47 46 52 4c 47 4a 2b 32 4c 4f 34 47 4e 33 68 4a 38 4f 4b 6f 56 4f 74 4a 47 74 36 4f 47 63 33 4a 55 52 41 56 6a 4f 2d 4f 56 30 4f 59 45 73 46 32 4f 46 33 59 52 4a 4b 4f 46 41 42 4a 4f 63 59 75 2b 2d 2b 6b 4f 4e 52 4f 58 51 56 4a 70 51 4f 43 52 4f 6e 45 52 72 5a 71 75 77 32 71 30 4e 38 72 65 36 57 78 4f 72 73 4f 55 37 4a 72 79 43 69 69 79 73 4a 31 46 4a 31 39 74 79 57 76 38 61 52 45 78 53 7a 69 4b 66 79 72 79 73 4a 39 78 74 30 38 56 76 47 61 4f 6a 4f 72 4f 33 4c 32 63 4c 7a 6b 4f 33 31 75 4f 4a 4e 36 4e 5a 24 6d 4e 54 57 4f 78 65 65 4b 4f 4b 57 4f 4b 38 53 62 63 73 37 34 2b 46 7a 76 4a 65 72 64 4b 4f 33 4f 4a 65 Data Ascii: u0VsEsBs3s+scyO8yOosy7tRFSyKOFOAf7NWGOH3OuGJaOwOUGFRLGJ+2LO4GN3hJ8OKoVOtJGt6OGc3JURAVjO-OV0OYEsF2OF3YRJKOFABJOcYu+-+kONROXQVJpQOCROnERrZquw2q0N8re6WxOrsOU7JryCiiysJ1FJ19tyWv8aRExSziKfyrysJ9xt08VvGaOjOrO3L2cLzkO31uOJN6NZ$mNTWOxeeKOKWOK8Sbcs74+FzvJerdKO3OJe
2025-04-28 04:32:38 UTC	1091	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:38 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 229624 Connection: close cf-chl-gen: xT8ntW1mwuW5FYwcmxUNMnfYBIvPOv1WWJfkceVy0rKA/inpMP5BaFI0VGXYD1fHi9rp50pCkxiRrfdHpSgbruKtUxqM5GyzLAxpcBHCd7b7Ql3pNo9/JBj1LiP3O9m+nepf7x+EOkrHI1oHy+4cyVj9moh14w9B/xSKk/a4c4ZMasFXsu9bzXTBQJkR4Cm1mQXbth2Fzky/Ti3gZcFeM2qI0e5WaG3cgwCBwfoAWr4Xvg8ObhHW0K4cSoGd1byh5bfuhcyau5JqTZICVqCOv+R82JIRqxvt5AjOjc8oAJ8Ox5QlVWnzQvmudvhuiWNVsMVA/k1hQRoyDnhkmfMQEiNqH5DTejX8dwuM8Voz/aPOauHhQcRxXrhpNWbozl+Eq9llNshQMCiYAOZ96FTtfcLaE1Jbz7wvVcu54LgfFlWFJM1v3KvwPk+/wAEaO82ocDwo1FsVp0Gh/D3rCm2+QO7Gepw0fmN+H1WHt4tfC9BwbHxoFRY4ejrinn+vNQjXI0zlL5T01aQr/UTlMXBzrfq9tmjZNZ5i2Bzzekz4sSfBJOK6KYXo88FIdJHTT6IkJWEafbV3moBdXX29aKA2FgFV8tRsufOithDNmZlvu2WyPrxx/PhRwlKe94wJwdhZW8uuOF+JED41oXKfaO0Rt46lvCR/uEuw5ZKPU8L8Tj4cley7Zpuq05XUc5wM8xohEgONlxQyOiNzHS4ajqMBPVQ3v3WpGXQEFat9hp9nG147lnq4HBGlVHa8xXs0XZEHIC5LgDYx/V40t9I/AshcCIKtC7YNI89I15tRjFPAkaKLzXQLzqElKNlnfoMUHH+5$5hh+gUwd5+Qn8SAvJH0nug== Server: cloudflare CF-RAY: 9373d63dae135a87-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:38 UTC	278	IN	Data Raw: 6f 71 2b 47 73 4b 71 54 6a 70 5a 35 6c 72 61 59 67 4b 58 49 76 71 47 39 75 71 32 70 68 73 61 61 69 63 4f 37 77 4b 6e 4c 69 5a 4c 56 30 37 47 58 75 37 61 34 79 65 43 75 6e 61 37 6d 76 4c 36 6e 76 38 65 6d 33 4f 6a 65 36 2b 7a 72 36 65 65 39 7a 4f 58 32 39 62 66 4a 35 50 62 37 30 39 62 50 32 76 62 4f 41 65 62 46 2f 4e 76 41 33 75 72 6b 44 66 6a 69 34 63 6b 47 37 41 54 56 35 42 45 43 30 42 59 46 38 4e 58 7a 49 66 6b 69 32 65 45 44 2f 69 49 6d 36 41 6f 66 34 78 6e 72 39 69 77 62 2b 65 30 73 4d 54 41 58 4d 44 55 31 2b 44 67 50 4f 6a 62 78 4d 6a 38 62 49 53 45 69 2f 45 49 57 46 67 52 49 47 45 63 38 4a 6b 74 44 4f 30 45 6f 4b 6a 67 50 45 55 6b 56 47 42 4e 50 4c 31 4d 54 58 56 6b 32 4c 6c 70 6c 50 46 49 70 4b 53 6b 34 4b 45 51 71 53 79 39 30 58 6d 4a 4e 51 45 68 Data Ascii: oq+GsKqTjpZ5lraYgKXIvqG9uq2phsaaicO7wKnLiZLV07GXu7a4yeCuna7mvL6nv8em3Oje6+zr6ee9zOX29bfJ5Pb709bP2vbOAebF/NvA3urkDfji4ckG7ATV5BEC0BYF8NXzIfki2eED/iIm6Aof4xnr9iwb+e0sMTAXMDU1+DgPOjbxMj8bISEi/EIWFgRIGEc8JktDO0EoKjgPEUkVGBNPL1MTXVk2LlplPFIpKSk4KEQqSy90XmJNQEh
2025-04-28 04:32:38 UTC	1369	IN	Data Raw: 46 5a 50 6b 53 4f 6a 30 78 61 6b 57 31 6f 69 32 36 4b 63 58 6c 75 67 34 69 4e 6e 5a 74 72 6d 59 31 77 6d 4a 79 41 64 6d 52 36 59 70 32 44 5a 47 6c 68 62 72 46 73 6e 33 4b 4c 64 71 4e 32 63 6e 69 34 71 61 69 72 6c 4a 32 56 65 35 47 7a 74 4b 2b 6c 6b 63 4f 72 6d 59 53 49 7a 63 4b 65 77 59 75 66 6b 36 33 45 73 4b 4b 58 7a 38 50 55 6d 74 50 4f 6b 73 79 37 6e 64 61 66 32 61 53 36 76 36 72 70 33 4d 36 33 32 4e 6a 77 37 64 7a 4b 72 75 7a 6f 35 63 62 4a 2b 73 6e 55 32 62 6a 33 33 39 57 31 76 50 54 46 31 50 50 78 35 65 66 64 33 76 62 4e 37 4f 34 4c 34 65 6e 52 30 76 58 4f 38 78 72 62 38 2b 34 67 47 68 62 77 49 2b 38 68 4a 76 55 52 45 2f 72 31 39 43 72 6a 35 42 38 4e 45 50 73 4f 4d 67 4c 32 39 69 30 72 45 53 51 5a 2f 44 48 36 2f 53 4d 79 4f 66 30 7a 45 7a 45 56 46 Data Ascii: FZPkSOj0xakW1oi26KcXlug4iNnZtrmY1wmJyAdmR6Yp2DZGlhbrFsn3KLdqN2cni4qairlJ2Ve5GztK+lkcOrmYSIzcKewYufk63EsKKXz8PUmtPOksy7ndaf2aS6v6rp3M632Njw7dzKruzo5cbJ+snU2bj339W1vPTF1PPx5efd3vbN7O4L4enR0vXO8xrb8+4gGhbwI+8hJvURE/r19Crj5B8NEPsOMgL29i0rESQZ/DH6/SMyOf0zEzEVF
2025-04-28 04:32:38 UTC	1369	IN	Data Raw: 41 66 59 74 68 64 46 36 48 64 33 57 4a 6b 6d 6d 4d 63 70 78 38 62 33 2b 52 63 36 61 63 6f 59 52 6c 69 36 42 35 58 32 57 6d 6a 61 71 48 72 34 43 4e 6a 72 4f 58 65 5a 4f 32 69 48 71 6f 75 4a 32 59 74 35 48 43 76 4a 57 53 78 61 4f 31 71 73 66 45 78 70 32 37 77 4b 66 55 72 62 4f 69 6f 4e 66 55 6b 35 71 5a 6d 71 32 6e 6e 4a 32 59 34 71 33 52 6f 37 37 58 71 4c 37 56 75 4f 4f 71 35 62 7a 48 34 50 4c 79 79 4d 4c 50 74 75 33 55 2b 2b 65 76 32 4c 33 31 41 65 36 31 37 72 66 69 76 73 66 4a 36 4f 67 45 44 63 76 47 44 67 41 4b 43 52 4c 6d 38 51 2f 53 41 38 7a 73 2f 52 45 4f 36 2f 4c 74 37 42 73 46 2b 66 6b 43 43 51 6e 38 34 51 59 46 44 65 55 46 37 44 49 63 4c 2b 38 73 37 66 63 45 38 6a 73 37 47 51 77 76 43 53 49 4f 51 68 55 51 47 68 63 48 41 41 67 49 46 79 56 41 50 30 Data Ascii: AfYthdF6Hd3WJkmmMcpx8b3+Rc6acoYRli6B5X2WmjaqHr4CNjrOXeZO2iHqouJ2Yt5HCvJWSxaO1qsfExp27wKfUrbOioNfUk5qZmq2nnJ2Y4q3Ro77XqL7VuOOq5bzH4PLyyMLPtu3U++ev2L31Ae617rfivsfJ6OgEDcvGDgAKCRLm8Q/SA8zs/REO6/Lt7BsF+fkCCQn84QYFDeUF7DIcL+8s7fcE8js7GQwvCSIOQhUQGhcHAAgIFyVAP0
2025-04-28 04:32:38 UTC	1369	IN	Data Raw: 6c 45 2b 59 6c 33 65 50 61 6c 46 31 61 56 78 2f 6b 6e 47 68 67 49 4a 37 69 71 71 62 6f 47 43 4d 73 49 36 54 74 4a 4b 73 69 35 2b 34 70 4b 75 7a 71 48 53 61 6b 5a 53 71 74 35 79 4f 68 4b 4c 49 73 48 75 2b 6d 72 75 4b 6d 62 65 68 70 5a 47 4e 31 63 76 43 74 71 43 50 78 63 2b 70 6e 63 6a 61 74 65 47 62 71 39 4c 4e 31 71 2b 68 35 75 43 2b 75 75 50 6e 77 63 37 6a 36 37 43 2b 39 4d 76 59 79 4d 6d 36 33 4c 76 58 75 73 66 66 30 4d 2f 6a 39 75 50 2b 78 41 6e 34 42 64 37 57 42 77 6e 5a 2b 77 4c 71 2f 73 62 4c 79 4e 66 6d 42 2b 6e 5a 36 42 59 50 46 2f 59 69 46 64 34 68 42 78 66 36 46 51 63 61 35 79 48 39 42 53 63 42 2f 75 54 37 4c 53 30 48 4d 53 63 61 42 51 55 71 37 77 77 5a 4e 67 38 4e 4d 79 38 6c 45 42 45 30 42 42 73 48 48 51 51 64 50 55 67 64 45 7a 55 6a 4b 43 6b Data Ascii: lE+Yl3ePalF1aVx/knGhgIJ7iqqboGCMsI6TtJKsi5+4pKuzqHSakZSqt5yOhKLIsHu+mruKmbehpZGN1cvCtqCPxc+pncjateGbq9LN1q+h5uC+uuPnwc7j67C+9MvYyMm63LvXusff0M/j9uP+xAn4Bd7WBwnZ+wLq/sbLyNfmB+nZ6BYPF/YiFd4hBxf6FQca5yH9BScB/uT7LS0HMScaBQUq7wwZNg8NMy8lEBE0BBsHHQQdPUgdEzUjKCk
2025-04-28 04:32:38 UTC	1369	IN	Data Raw: 6c 69 58 6b 4a 39 64 6c 6e 4f 56 69 48 46 31 61 61 69 67 72 49 6d 4e 71 5a 79 52 69 48 4f 6a 64 6f 2b 75 65 49 52 79 74 4c 53 6e 6a 4c 65 56 6d 4c 2b 4f 6c 4c 65 32 6c 62 61 56 67 61 4b 72 75 59 6d 59 78 4a 79 76 30 49 79 30 6b 4d 62 53 32 4d 69 7a 73 4e 54 67 34 62 79 63 32 71 50 42 34 4c 2b 31 32 75 66 49 70 73 57 38 70 73 4c 71 35 65 37 65 74 4f 72 52 39 65 61 30 38 4d 76 6f 32 4e 37 72 2b 75 7a 31 2f 4e 50 78 78 2f 58 36 44 50 54 33 32 38 66 72 35 77 4c 52 44 77 72 7a 79 4f 37 72 39 42 6e 73 32 41 6f 54 31 78 77 66 41 2f 7a 33 49 66 4c 39 34 75 50 6d 35 69 37 32 36 43 34 4e 37 78 38 65 43 69 66 74 4c 66 55 44 44 2f 67 73 48 44 67 4d 49 76 67 38 46 6b 41 6a 45 68 68 45 41 78 34 57 53 68 6c 41 47 45 35 45 54 43 5a 51 48 30 5a 4b 46 44 45 71 54 31 45 56 Data Ascii: liXkJ9dlnOViHF1aaigrImNqZyRiHOjdo+ueIRytLSnjLeVmL+OlLe2lbaVgaKruYmYxJyv0Iy0kMbS2MizsNTg4byc2qPB4L+12ufIpsW8psLq5e7etOrR9ea08Mvo2N7r+uz1/NPxx/X6DPT328fr5wLRDwrzyO7r9Bns2AoT1xwfA/z3IfL94uPm5i726C4N7x8eCiftLfUDD/gsHDgMIvg8FkAjEhhEAx4WShlAGE5ETCZQH0ZKFDEqT1EV
2025-04-28 04:32:38 UTC	1369	IN	Data Raw: 4b 42 6e 58 6d 66 6c 71 65 62 72 71 79 70 6d 58 36 7a 63 6e 2b 43 74 33 64 75 68 37 69 32 68 34 32 38 6b 35 2b 59 66 4c 65 31 6e 37 47 79 79 4b 71 32 76 34 65 71 77 59 61 78 77 35 44 48 30 62 2b 4e 71 34 36 6d 6b 74 57 53 71 70 75 30 73 37 69 61 7a 71 2b 31 6d 4c 6a 57 32 39 6d 64 7a 4b 32 6f 7a 4d 50 46 7a 36 76 6f 77 37 36 2f 39 2b 2f 4e 74 4e 65 7a 78 39 53 39 2b 74 66 37 2f 73 33 4f 42 77 4c 4a 31 51 4d 4f 78 76 66 6b 2f 50 72 72 79 2b 6e 70 38 4e 4d 4e 41 2f 50 53 39 65 58 32 32 78 55 4c 45 78 59 51 38 66 37 7a 2f 67 73 66 4c 65 51 41 42 2b 63 68 45 79 66 75 4b 2f 55 52 4b 67 34 61 4c 78 30 35 45 42 6a 33 46 68 59 64 41 44 67 62 2f 6a 30 59 53 78 4e 42 4f 6b 73 69 44 52 31 51 51 67 38 6e 49 55 6f 54 54 54 6f 61 54 30 34 37 4d 54 63 76 55 53 4d 57 48 Data Ascii: KBnXmflqebrqypmX6zcn+Ct3duh7i2h428k5+YfLe1n7GyyKq2v4eqwYaxw5DH0b+Nq46mktWSqpu0s7iazq+1mLjW29mdzK2ozMPFz6vow76/9+/NtNezx9S9+tf7/s3OBwLJ1QMOxvfk/Prry+np8NMNA/PS9eX22xULExYQ8f7z/gsfLeQAB+chEyfuK/URKg4aLx05EBj3FhYdADgb/j0YSxNBOksiDR1QQg8nIUoTTToaT047MTcvUSMWH
2025-04-28 04:32:38 UTC	1369	IN	Data Raw: 38 6f 48 78 38 61 34 6d 79 72 71 32 42 6a 62 69 46 67 36 2b 62 68 61 69 6e 69 6f 36 56 6e 71 75 42 6d 4b 4a 35 71 4c 4f 6a 70 4d 33 41 79 73 36 4f 6e 37 2b 7a 72 63 37 4c 77 4a 69 5a 30 35 76 53 6c 4d 72 4b 7a 74 7a 57 31 4c 7a 56 76 38 66 52 74 4d 47 64 32 74 79 6c 79 72 72 69 78 62 48 6b 7a 4f 79 31 35 4f 72 59 36 4c 58 4b 39 66 33 31 39 72 6b 42 2b 76 54 55 38 50 32 37 43 50 58 6f 79 64 6a 61 45 4f 34 4a 7a 51 54 69 43 63 6e 6e 7a 2b 59 5a 38 77 2f 63 43 75 37 34 38 42 4c 37 2f 4e 33 6d 41 50 7a 6a 34 69 66 33 4b 69 34 4d 2f 41 73 48 43 2f 34 78 4d 44 51 4f 4b 79 55 33 45 78 37 39 4d 7a 51 5a 4c 53 34 6d 50 78 52 49 48 55 4e 46 52 52 63 6e 4d 54 4a 54 53 43 5a 43 55 44 55 6d 4f 6a 41 77 55 7a 49 64 4f 44 68 51 56 57 4d 7a 55 30 52 67 56 69 5a 58 56 44 Data Ascii: 8oHx8a4myrq2BjbiFg6+bhainio6VnquBmKJ5qLOjpM3Ays6On7+zrc7LwJiZ05vSlMrKztzW1LzVv8fRtMGd2tylyrrixbHkzOy15OrY6LXK9f319rkB+vTU8P27CPXoydjaEO4JzQTiCcnnz+YZ8w/cCu748BL7/N3mAPzj4if3Ki4M/AsHC/4xMDQOKyU3Ex79MzQZLS4mPxRIHUNFRRcnMTJTSCZCUDUmOjAwUzIdODhQVWMzU0RgViZXVD
2025-04-28 04:32:38 UTC	1369	IN	Data Raw: 65 36 4b 52 67 49 31 7a 67 36 32 7a 6b 70 56 77 69 37 4b 65 6d 37 61 57 73 37 57 33 6e 62 47 33 74 4a 69 6a 76 4d 32 43 77 38 71 51 70 73 7a 54 71 61 4b 71 6b 5a 53 72 71 4c 71 73 30 35 50 63 31 64 44 54 32 4f 4b 79 78 65 44 69 34 38 75 73 34 61 37 72 34 4c 32 78 7a 63 62 41 78 64 44 58 7a 50 33 36 7a 75 6e 4b 33 2f 66 51 32 4e 50 42 7a 37 34 4b 34 64 50 65 34 64 6e 77 7a 51 30 4b 35 64 34 58 44 75 66 79 45 78 4c 74 48 52 41 58 43 66 51 57 2b 75 4c 67 37 2b 55 6c 46 69 50 63 4b 4f 72 6d 36 2b 55 43 2f 44 45 6b 4a 42 41 48 4d 68 50 35 42 44 6b 73 44 2f 63 4d 51 67 41 43 47 30 5a 43 2b 41 67 4a 42 79 6f 73 50 51 6f 42 47 55 63 2f 49 43 4e 4d 51 78 5a 4c 44 79 35 63 56 31 49 76 59 44 30 71 50 56 39 61 55 6a 68 48 4e 56 78 65 59 45 45 2f 59 55 4d 6e 52 58 41 Data Ascii: e6KRgI1zg62zkpVwi7Kem7aWs7W3nbG3tJijvM2Cw8qQpszTqaKqkZSrqLqs05Pc1dDT2OKyxeDi48us4a7r4L2xzcbAxdDXzP36zunK3/fQ2NPBz74K4dPe4dnwzQ0K5d4XDufyExLtHRAXCfQW+uLg7+UlFiPcKOrm6+UC/DEkJBAHMhP5BDksD/cMQgACG0ZC+AgJByosPQoBGUc/ICNMQxZLDy5cV1IvYD0qPV9aUjhHNVxeYEE/YUMnRXA
2025-04-28 04:32:38 UTC	1369	IN	Data Raw: 61 53 5a 6e 62 79 6d 6a 70 48 42 72 71 47 6c 78 4b 2b 6d 6d 62 32 32 71 59 6a 44 74 38 50 44 6a 37 4f 37 68 73 44 4e 71 64 54 51 30 38 2b 36 32 64 6d 78 72 74 66 63 6f 4b 37 61 34 62 6e 46 71 4f 48 54 75 75 6e 70 77 65 53 75 32 75 66 6a 73 64 2f 56 73 50 54 6d 32 64 32 30 35 73 37 4e 41 2b 79 39 33 63 48 6e 2b 2b 55 41 39 75 6f 45 43 76 6e 64 38 51 6a 2b 38 67 77 53 41 75 62 74 44 67 58 35 31 42 34 41 46 52 51 64 43 77 4d 67 47 52 34 51 46 65 67 4d 46 4f 6e 6b 4a 52 67 68 4d 79 6b 47 49 65 77 75 46 7a 6b 74 4d 53 54 35 39 44 63 70 4f 44 6f 72 45 77 35 45 4d 51 45 4a 53 53 78 42 47 6b 51 37 4c 67 31 4e 50 30 67 56 53 6a 67 32 53 46 68 48 4f 31 52 62 51 46 52 51 48 6b 39 59 49 52 31 52 49 55 70 70 56 45 73 2b 59 6c 6c 50 51 6e 4e 62 51 30 35 33 59 32 78 73 Data Ascii: aSZnbymjpHBrqGlxK+mmb22qYjDt8PDj7O7hsDNqdTQ08+62dmxrtfcoK7a4bnFqOHTuunpweSu2ufjsd/VsPTm2d205s7NA+y93cHn++UA9uoECvnd8Qj+8gwSAubtDgX51B4AFRQdCwMgGR4QFegMFOnkJRghMykGIewuFzktMST59DcpODorEw5EMQEJSSxBGkQ7Lg1NP0gVSjg2SFhHO1RbQFRQHk9YIR1RIUppVEs+YllPQnNbQ053Y2xs

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:39 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118379386:1745810834:tmCKlt3f4Ft3Yn-zclhYGbLyB9WZjjKtmFRjIEafYKw/9373d634a9d952e3/IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:39 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Mon, 28 Apr 2025 04:32:39 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: tUsqtfOkko833cx3b4OBPvuyrxMtvxBau1SZrugRswHg8tPJPN40B7JVqCeGgVnSACby5LWeSvllibEagxleow==$GgVeFKX+fi2ZQHBYrC04xg== Server: cloudflare CF-RAY: 9373d6460951150e-LAX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:39 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:40 UTC	857	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/9373d634a9d952e3/1745814758193/16f6f4f7f3c8fcb8f3d02e88d75b9f24aecd3687c9b3e9c6468de4452c76fe32/AqcPKFv-t2th86y HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:40 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 28 Apr 2025 04:32:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-04-28 04:32:40 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 46 76 62 30 39 5f 50 49 5f 4c 6a 7a 30 43 36 49 31 31 75 66 4a 4b 37 4e 4e 6f 66 4a 73 2d 6e 47 52 6f 33 6b 52 53 78 32 5f 6a 49 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gFvb09_PI_Ljz0C6I11ufJK7NNofJs-nGRo3kRSx2_jIAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-04-28 04:32:40 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:41 UTC	828	OUT	GET /cdn-cgi/challenge-platform/h/g/d/9373d634a9d952e3/1745814758196/PmK7HSTVyV_8r3j HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:41 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:41 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9373d652cbaed984-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 02 08 02 00 00 00 85 47 56 97 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRGGVIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:41 UTC	468	OUT	GET /cdn-cgi/challenge-platform/h/g/d/9373d634a9d952e3/1745814758196/PmK7HSTVyV_8r3j HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:42 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:42 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9373d656ff735529-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 02 08 02 00 00 00 85 47 56 97 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRGGVIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-04-28 04:32:41 UTC	1193	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2118379386:1745810834:tmCKlt3f4Ft3Yn-zclhYGbLyB9WZjjKtmFRjIEafYKw/9373d634a9d952e3/IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 39228 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: IlrFkDeFhiv41vPYmVcyrGVb5cl6VkeRU01TVOJFC04-1745814756-1.1.1.1-6UhaFSE8ZKRfNMtuYAZ185sBH8aWBlwMN5q44lVbZ5doyudHQU38ONyf09EaG8L1 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tb0fi/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 04:32:41 UTC	16384	OUT	Data Raw: 75 30 56 73 6d 79 4a 32 6a 46 52 43 52 33 32 4f 64 4a 63 79 4c 47 4b 68 79 66 4a 39 4f 33 73 51 30 74 57 52 4f 75 73 79 56 74 51 4f 50 73 4f 66 33 4f 57 41 4e 68 72 4f 5a 51 66 4f 74 47 36 33 79 64 70 4f 75 52 4f 58 69 79 4f 79 34 78 78 6d 6f 4f 4a 58 4f 33 52 4a 4a 4f 4e 6a 4f 2b 78 79 4e 4c 4f 77 35 4f 4b 33 30 4f 51 76 35 47 7a 4f 63 59 30 37 4f 48 73 33 61 31 4f 69 63 39 47 4f 2d 58 54 30 4a 2d 4f 33 56 4a 65 74 55 74 64 50 70 73 4f 66 47 6d 52 4f 77 4e 79 73 32 4c 33 4f 74 73 4a 78 44 36 74 70 32 6d 74 51 4b 77 66 34 4f 35 39 4a 4f 4b 56 65 4c 4f 74 48 56 79 73 37 4f 58 63 50 4f 68 64 66 35 41 4f 4f 6b 77 37 4f 24 49 58 48 4f 79 45 34 35 39 79 68 5a 74 4b 55 78 79 77 51 61 4f 4f 32 5a 33 6a 61 74 47 6a 74 4b 75 72 37 4f 4e 6e 66 55 4b 47 4f 72 73 74 Data Ascii: u0VsmyJ2jFRCR32OdJcyLGKhyfJ9O3sQ0tWROusyVtQOPsOf3OWANhrOZQfOtG63ydpOuROXiyOy4xxmoOJXO3RJJONjO+xyNLOw5OK30OQv5GzOcY07OHs3a1Oic9GO-XT0J-O3VJetUtdPpsOfGmROwNys2L3OtsJxD6tp2mtQKwf4O59JOKVeLOtHVys7OXcPOhdf5AOOkw7O$IXHOyE459yhZtKUxywQaOO2Z3jatGjtKur7ONnfUKGOrst
2025-04-28 04:32:41 UTC	16384	OUT	Data Raw: 4d 30 6e 6a 46 37 38 5a 5a 37 6a 47 78 77 73 5a 62 57 34 77 78 37 73 37 67 67 64 77 6d 57 32 2d 42 79 30 56 73 37 50 4f 74 6f 6f 56 73 4e 4e 43 64 63 58 47 47 34 4a 44 42 33 47 68 44 57 6b 77 56 4a 50 61 56 33 66 6d 57 78 72 39 39 52 73 37 68 79 78 67 6e 65 68 30 43 78 72 79 6f 68 47 34 4e 73 33 65 34 51 4f 69 45 4f 24 4f 61 70 59 68 78 72 68 72 6d 4e 35 73 65 68 64 4d 4e 55 6f 4c 37 6f 4f 41 4a 6d 4a 68 55 4f 52 52 37 43 73 42 64 75 4b 74 38 73 75 65 46 49 63 37 53 2b 4f 48 37 33 53 4a 30 64 43 74 65 30 4a 4c 63 43 6d 2d 73 50 50 75 68 37 4e 70 66 70 4f 45 58 47 2d 4c 72 48 24 34 74 31 33 68 4f 4b 61 65 37 6a 4e 65 46 42 77 53 52 6a 58 43 31 4f 6f 4f 50 57 51 6a 4b 33 78 73 79 4f 48 37 4b 52 63 6a 4b 58 35 42 4a 47 61 56 46 41 2b 57 7a 53 79 48 6f 4a 53 Data Ascii: M0njF78ZZ7jGxwsZbW4wx7s7ggdwmW2-By0Vs7POtooVsNNCdcXGG4JDB3GhDWkwVJPaV3fmWxr99Rs7hyxgneh0CxryohG4Ns3e4QOiEO$OapYhxrhrmN5sehdMNUoL7oOAJmJhUORR7CsBduKt8sueFIc7S+OH73SJ0dCte0JLcCm-sPPuh7NpfpOEXG-LrH$4t13hOKae7jNeFBwSRjXC1OoOPWQjK3xsyOH7KRcjKX5BJGaVFA+WzSyHoJS
2025-04-28 04:32:41 UTC	6460	OUT	Data Raw: 37 78 53 48 75 79 47 70 65 41 6a 4a 38 70 2b 4f 46 50 31 62 38 37 65 45 34 55 6f 39 4f 59 4d 48 2b 79 47 50 33 51 55 32 24 4f 73 4d 32 30 4f 64 4f 38 55 50 72 46 30 53 52 47 46 4f 4f 57 6d 50 59 67 73 4a 2b 4f 63 73 70 79 7a 66 2d 49 73 4b 6a 79 62 68 78 73 79 73 79 5a 75 53 33 4e 52 74 49 31 52 77 48 41 32 46 6e 53 71 55 75 69 49 70 55 33 4e 52 74 36 74 2d 7a 44 31 44 6d 4e 4d 64 74 57 53 65 58 31 73 68 47 4f 6a 4f 69 4f 58 75 54 74 37 52 4f 4b 38 34 4b 39 39 66 53 4d 69 66 4f 4d 73 4f 57 4a 2b 4f 37 51 61 66 2b 53 49 54 78 61 4c 31 41 24 71 61 30 4c 43 76 39 70 59 50 4a 33 4a 36 53 4d 48 36 38 45 45 66 37 43 77 4b 4e 54 38 64 76 52 74 4f 63 51 64 43 35 24 49 75 50 65 55 37 49 46 24 24 56 43 78 59 4d 4e 51 4c 2d 33 4a 2b 4f 75 71 76 33 4a 6a 45 43 65 41 Data Ascii: 7xSHuyGpeAjJ8p+OFP1b87eE4Uo9OYMH+yGP3QU2$OsM20OdO8UPrF0SRGFOOWmPYgsJ+Ocspyzf-IsKjybhxsysyZuS3NRtI1RwHA2FnSqUuiIpU3NRt6t-zD1DmNMdtWSeX1shGOjOiOXuTt7ROK84K99fSMifOMsOWJ+O7Qaf+SITxaL1A$qa0LCv9pYPJ3J6SMH68EEf7CwKNT8dvRtOcQdC5$IuPeU7IF$$VCxYMNQL-3J+Ouqv3JjECeA
2025-04-28 04:32:42 UTC	322	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 04:32:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28176 Connection: close cf-chl-gen: ZL+zgdAjSkvpA3zKdC5VHKzQzMl+Yai35BCV+JgpCcvx/aaDzfMCGw1j/xskpPUT$VJQ9qCNS8y+eWI/j5F7I7g== Server: cloudflare CF-RAY: 9373d655fa5af00f-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 04:32:42 UTC	1047	IN	Data Raw: 6f 71 2b 47 73 4b 6d 35 69 70 4c 41 67 48 32 55 66 4a 4c 49 74 37 61 67 6f 4d 53 6f 77 5a 7a 49 72 4d 57 2b 76 62 33 4a 7a 59 36 78 6d 72 75 56 30 73 2b 78 6e 39 54 44 33 36 37 53 6f 64 57 30 78 36 6e 45 31 4b 71 67 77 75 53 6e 79 4d 37 75 73 4f 50 79 35 4d 6e 7a 32 2f 58 73 7a 62 6a 53 39 4f 4b 2b 37 75 36 34 42 38 45 48 39 41 58 58 78 74 72 77 2f 73 38 48 35 67 72 51 7a 4f 62 77 7a 2b 4c 38 2b 50 30 4d 2b 41 7a 67 49 43 55 41 4a 2b 34 62 2f 75 45 64 46 52 55 59 2b 65 73 63 48 4f 73 73 4d 76 50 2b 4e 43 4d 45 44 6a 41 47 4c 41 38 65 43 79 45 42 2b 68 49 6a 46 42 38 48 45 79 51 68 52 6a 77 4d 43 6c 4a 4c 49 77 31 4c 56 6c 67 6d 52 43 38 37 52 77 39 4c 47 6d 41 79 54 31 78 4d 4c 31 52 49 59 6a 51 34 49 55 49 66 58 43 39 78 58 43 6c 76 62 69 39 46 65 48 5a Data Ascii: oq+GsKm5ipLAgH2UfJLIt7agoMSowZzIrMW+vb3JzY6xmruV0s+xn9TD367SodW0x6nE1KqgwuSnyM7usOPy5Mnz2/XszbjS9OK+7u64B8EH9AXXxtrw/s8H5grQzObwz+L8+P0M+AzgICUAJ+4b/uEdFRUY+escHOssMvP+NCMEDjAGLA8eCyEB+hIjFB8HEyQhRjwMClJLIw1LVlgmRC87Rw9LGmAyT1xML1RIYjQ4IUIfXC9xXClvbi9FeHZ
2025-04-28 04:32:42 UTC	1369	IN	Data Raw: 61 72 35 79 6f 6e 72 4f 4e 72 4c 47 66 70 61 2b 52 78 64 44 4d 7a 64 62 49 75 39 2f 65 72 4b 2b 67 73 4d 62 57 70 4d 53 2b 79 61 50 4c 79 64 36 72 73 63 44 6d 77 4d 72 7a 7a 63 50 73 38 63 76 39 38 4f 33 57 33 4e 33 32 34 74 72 69 43 65 4c 63 78 64 77 41 2b 2b 54 47 44 65 54 2b 2f 67 34 50 41 77 4d 48 37 42 50 56 46 67 63 50 44 68 50 32 48 68 45 6d 46 52 30 51 47 78 67 66 2f 43 6b 6c 35 79 63 6c 4b 77 6e 75 4d 41 6b 72 39 44 44 31 50 42 59 6c 45 78 34 6f 4b 78 77 66 41 51 51 55 4d 44 59 30 48 6a 73 4d 54 55 63 4e 48 31 45 6e 52 79 51 6e 50 6c 55 4b 4c 78 67 78 4c 53 6f 2b 53 78 35 42 46 42 74 54 5a 6d 46 47 51 43 45 70 56 45 59 74 4c 55 52 65 63 57 38 70 4b 6d 64 6a 4d 48 68 31 59 31 55 36 64 58 59 38 61 54 4e 66 65 44 31 5a 68 56 5a 35 69 6d 57 49 69 46 Data Ascii: ar5yonrONrLGfpa+RxdDMzdbIu9/erK+gsMbWpMS+yaPLyd6rscDmwMrzzcPs8cv98O3W3N324triCeLcxdwA++TGDeT+/g4PAwMH7BPVFgcPDhP2HhEmFR0QGxgf/Ckl5yclKwnuMAkr9DD1PBYlEx4oKxwfAQQUMDY0HjsMTUcNH1EnRyQnPlUKLxgxLSo+Sx5BFBtTZmFGQCEpVEYtLURecW8pKmdjMHh1Y1U6dXY8aTNfeD1ZhVZ5imWIiF
2025-04-28 04:32:42 UTC	1369	IN	Data Raw: 77 4e 44 58 72 74 53 30 6d 71 36 72 31 63 37 4f 33 37 75 32 31 72 7a 59 76 37 4b 38 30 64 61 6c 77 75 76 62 71 72 7a 73 79 50 44 4a 33 65 69 78 77 4f 6a 73 39 63 72 51 76 76 48 52 30 73 2f 4c 33 65 4c 37 41 64 33 49 39 4f 76 38 35 74 77 43 43 51 6f 50 46 66 7a 39 45 78 49 50 41 2b 51 61 46 2b 72 63 38 2f 6f 44 33 41 7a 65 2b 68 6f 43 35 66 37 36 2f 65 49 62 42 52 7a 70 44 43 4c 77 4a 68 55 54 4e 43 6b 59 43 7a 51 79 47 69 73 4d 2f 42 51 52 49 43 55 42 50 54 4e 44 42 78 63 6b 54 67 30 6f 52 44 45 71 51 41 77 55 4e 30 68 49 46 52 55 77 55 7a 78 63 58 78 4a 69 51 78 6c 50 49 30 59 76 55 44 4d 6c 54 46 64 65 4b 47 4d 76 5a 45 70 7a 55 55 59 2f 55 33 64 44 64 30 39 33 65 47 78 76 57 32 46 69 4f 56 74 43 59 56 5a 51 58 55 4a 42 68 46 74 61 67 57 42 44 65 6e 39 Data Ascii: wNDXrtS0mq6r1c7O37u21rzYv7K80dalwuvbqrzsyPDJ3eixwOjs9crQvvHR0s/L3eL7Ad3I9Ov85twCCQoPFfz9ExIPA+QaF+rc8/oD3Aze+hoC5f76/eIbBRzpDCLwJhUTNCkYCzQyGisM/BQRICUBPTNDBxckTg0oRDEqQAwUN0hIFRUwUzxcXxJiQxlPI0YvUDMlTFdeKGMvZEpzUUY/U3dDd093eGxvW2FiOVtCYVZQXUJBhFtagWBDen9
2025-04-28 04:32:42 UTC	1369	IN	Data Raw: 4b 6a 48 33 63 62 65 74 37 71 7a 77 4e 7a 69 78 74 62 70 70 4c 7a 65 79 37 58 4f 79 4b 4c 61 77 36 76 6c 38 4e 37 41 34 4c 62 45 30 2f 33 70 78 76 54 39 39 66 65 35 7a 2b 37 66 43 65 6e 4a 36 65 55 4a 33 65 44 64 79 38 67 47 32 2b 66 69 30 68 4c 4f 31 39 54 78 45 2f 41 58 47 50 45 58 32 69 45 5a 41 79 58 69 49 76 51 4a 4c 52 6f 6b 36 77 55 4e 4b 67 54 39 37 79 6b 4f 38 54 6b 7a 4e 68 6e 30 50 78 73 37 4c 78 30 4c 46 54 41 69 48 54 45 32 50 79 4d 33 52 42 6f 47 47 78 46 41 44 7a 45 77 4b 43 35 52 55 6b 31 4c 4e 30 67 35 54 53 31 41 4e 53 39 43 59 7a 6f 6b 58 31 46 5a 49 54 39 56 56 6c 70 4e 58 53 35 42 59 69 39 58 4d 53 35 79 64 44 56 53 5a 6a 77 32 55 57 31 59 66 6f 4f 43 4f 45 51 36 69 6e 52 4a 61 30 75 4b 67 32 68 2f 63 59 4e 4d 68 34 46 4a 62 59 4f 5a Data Ascii: KjH3cbet7qzwNzixtbppLzey7XOyKLaw6vl8N7A4LbE0/3pxvT99fe5z+7fCenJ6eUJ3eDdy8gG2+fi0hLO19TxE/AXGPEX2iEZAyXiIvQJLRok6wUNKgT97ykO8TkzNhn0Pxs7Lx0LFTAiHTE2PyM3RBoGGxFADzEwKC5RUk1LN0g5TS1ANS9CYzokX1FZIT9VVlpNXS5BYi9XMS5ydDVSZjw2UW1YfoOCOEQ6inRJa0uKg2h/cYNMh4FJbYOZ
2025-04-28 04:32:42 UTC	1369	IN	Data Raw: 53 30 31 63 43 68 77 64 32 30 32 4d 66 73 32 4d 75 6c 32 64 6e 6d 37 4d 72 64 31 50 44 50 30 75 7a 73 39 50 4c 6d 32 64 44 4d 33 74 72 5a 34 50 50 77 41 41 65 37 36 64 62 63 7a 64 6f 4d 42 78 4c 4c 35 77 54 52 46 2b 59 52 2b 4f 33 32 2f 4e 72 38 38 2b 33 63 47 65 2f 7a 4a 79 45 51 34 69 6a 68 41 79 59 62 35 78 38 6b 41 51 44 79 41 68 34 48 39 78 58 33 2b 68 58 35 46 44 7a 36 2f 51 45 69 2f 53 4c 33 4a 7a 63 68 48 78 2f 39 44 55 68 45 4d 56 41 73 56 44 56 4c 52 44 46 58 4a 6c 64 4c 4b 30 59 30 57 54 49 70 47 31 42 5a 59 6c 4d 7a 47 6c 70 64 4b 31 63 73 53 79 56 59 4b 56 78 73 55 53 63 31 59 6d 73 79 51 31 42 31 50 56 79 41 58 44 73 30 4f 58 55 37 67 6a 31 36 59 6d 46 62 52 6f 79 42 68 47 42 38 53 6f 4a 4e 67 46 4e 67 63 31 65 4d 55 59 6c 77 66 56 71 67 57 Data Ascii: S01cChwd202Mfs2Mul2dnm7Mrd1PDP0uzs9PLm2dDM3trZ4PPwAAe76dbczdoMBxLL5wTRF+YR+O32/Nr88+3cGe/zJyEQ4ijhAyYb5x8kAQDyAh4H9xX3+hX5FDz6/QEi/SL3JzchHx/9DUhEMVAsVDVLRDFXJldLK0Y0WTIpG1BZYlMzGlpdK1csSyVYKVxsUSc1YmsyQ1B1PVyAXDs0OXU7gj16YmFbRoyBhGB8SoJNgFNgc1eMUYlwfVqgW
2025-04-28 04:32:42 UTC	1369	IN	Data Raw: 30 76 73 61 6a 77 4a 2f 46 78 4d 37 62 77 62 7a 70 35 61 6a 51 78 50 62 59 78 38 66 49 2b 72 37 52 30 4c 2f 66 38 73 4c 63 35 2f 33 61 35 50 50 37 33 65 49 4c 79 2f 6e 6f 43 2f 41 4e 7a 38 30 52 41 2f 50 79 35 67 62 30 49 52 41 68 2f 4e 34 58 42 51 45 69 41 68 73 44 49 67 55 5a 35 41 41 44 48 53 2f 38 41 42 62 74 4c 67 38 55 50 50 67 50 50 50 33 34 45 54 34 69 4c 78 58 37 50 52 45 55 45 30 6b 6d 43 45 6f 70 51 78 45 75 54 78 49 65 4e 41 30 53 4f 44 4e 4d 4e 78 74 59 4e 6a 34 73 4b 6c 6b 35 50 42 78 45 4f 32 59 7a 4f 45 55 6e 62 54 6c 66 4b 69 70 4b 52 33 46 66 55 47 4a 58 57 46 68 57 61 44 74 37 62 48 31 75 66 34 4d 37 50 46 42 6c 59 6e 65 46 59 59 68 33 54 31 2b 53 54 6b 79 4b 67 55 32 53 54 34 46 53 6b 35 32 5a 6c 56 6d 64 6f 49 47 66 65 48 57 43 64 71 Data Ascii: 0vsajwJ/FxM7bwbzp5ajQxPbYx8fI+r7R0L/f8sLc5/3a5PP73eILy/noC/ANz80RA/Py5gb0IRAh/N4XBQEiAhsDIgUZ5AADHS/8ABbtLg8UPPgPPP34ET4iLxX7PREUE0kmCEopQxEuTxIeNA0SODNMNxtYNj4sKlk5PBxEO2YzOEUnbTlfKipKR3FfUGJXWFhWaDt7bH1uf4M7PFBlYneFYYh3T1+STkyKgU2ST4FSk52ZlVmdoIGfeHWCdq
2025-04-28 04:32:42 UTC	1369	IN	Data Raw: 71 39 69 72 38 65 44 54 36 72 2f 76 34 37 50 31 36 2b 65 33 32 2b 7a 70 36 75 72 38 41 74 67 44 77 50 37 39 2b 73 67 48 78 74 67 49 44 63 37 6b 42 78 4c 6d 79 41 63 50 44 75 51 59 2f 65 30 4b 44 52 6f 4c 47 78 6b 67 47 68 66 31 45 2b 54 69 35 52 6a 6e 47 75 77 63 45 53 37 73 49 67 55 6d 4e 68 6f 4a 4a 6a 6f 6d 39 76 37 2b 4c 68 45 32 41 7a 49 56 4d 6a 6f 30 4b 54 6f 4c 4e 67 67 73 43 54 77 78 55 68 42 41 44 7a 41 51 51 68 51 38 46 6b 6b 74 54 6c 31 4e 48 46 59 63 52 6a 51 6e 4a 56 51 6a 4b 32 70 5a 54 56 6f 74 58 46 42 4d 4c 6d 45 77 5a 6e 5a 69 4e 47 34 33 5a 6a 63 2f 4f 47 4a 52 5a 45 4e 78 51 47 52 46 64 47 6d 47 53 48 70 64 57 49 4a 38 68 31 78 51 67 57 57 4b 56 59 52 35 66 46 57 49 56 33 68 59 6a 5a 65 45 59 35 43 46 63 47 4b 56 65 58 52 6e 6a 6e 32 Data Ascii: q9ir8eDT6r/v47P16+e32+zp6ur8AtgDwP79+sgHxtgIDc7kBxLmyAcPDuQY/e0KDRoLGxkgGhf1E+Ti5RjnGuwcES7sIgUmNhoJJjom9v7+LhE2AzIVMjo0KToLNggsCTwxUhBADzAQQhQ8FkktTl1NHFYcRjQnJVQjK2pZTVotXFBMLmEwZnZiNG43Zjc/OGJRZENxQGRFdGmGSHpdWIJ8h1xQgWWKVYR5fFWIV3hYjZeEY5CFcGKVeXRnjn2