Edit tour

Windows Analysis Report
https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzm

Overview

General Information

Sample URL:	https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyy
Analysis ID:	1467701
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Phishing site detected (based on logo match)

Phishing site detected (based on shot match)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1976,i,1844117268247672415,51565432053372003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
4.13.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
4.12.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://decobat.moscow	LLM: Score: 9 brands: Microsoft Reasons: The URL 'https://decobat.moscow' does not match the legitimate domain name 'microsoft.com' associated with the brand Microsoft. The page displays a prominent login form asking for email, phone, or Skype name, which is a common tactic used in phishing attacks to harvest credentials. The domain name 'decobat.moscow' is highly suspicious and unrelated to Microsoft. The use of a legitimate brand's logo and design elements is a social engineering technique to mislead users. There are no captchas present, which is often a sign of a less secure page. Based on these factors, it is highly likely that this is a phishing site. DOM: 4.13.pages.csv
Source: https://decobat.moscow	LLM: Score: 9 brands: Microsoft Reasons: The URL 'https://decobat.moscow' does not match the legitimate domain name 'microsoft.com' associated with the Microsoft brand. The page displays a prominent login form, which is a common tactic used in phishing attacks to harvest user credentials. The domain name 'decobat.moscow' is suspicious and unrelated to Microsoft, indicating potential phishing activity. Additionally, the presence of links such as 'Create one!' and 'Can't access your account?' are typical in phishing sites to mislead users into providing personal information. The combination of these factors strongly suggests that this is a phishing site. DOM: 4.12.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 4.13.pages.csv, type: HTML
Source: Yara match	File source: 4.12.pages.csv, type: HTML

Phishing site detected (based on logo match)

Source: https://decobat.moscow/yVvWs/#	Matcher: Template: microsoft matched
Source: https://decobat.moscow/yVvWs/#	Matcher: Template: microsoft matched

Phishing site detected (based on shot match)

Source: https://decobat.moscow/yVvWs/#	Matcher: Template: captcha matched
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal	Matcher: Template: captcha matched

Source: https://decobat.moscow/yVvWs/#

HTTP Parser: Number of links: 0

Source: https://decobat.moscow/yVvWs/#

HTTP Parser: Total embedded image size: 45708

Source: https://implarededeensino.com.br/wp-content/loop/index.html?utm_campaign=&utm_content=view-report&utm_medium=email&utm_source=activepipe

HTTP Parser: Base64 decoded: https://implarededeensino.com.br:443

Source: https://decobat.moscow/yVvWs/#

HTTP Parser: Title: interest does not match URL

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS	HTTP Parser: No favicon
Source: https://decobat.moscow/yVvWs/#	HTTP Parser: No favicon
Source: https://decobat.moscow/yVvWs/#	HTTP Parser: No favicon
Source: https://decobat.moscow/yVvWs/#	HTTP Parser: No favicon
Source: https://decobat.moscow/yVvWs/#	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal	HTTP Parser: No favicon

Source: https://decobat.moscow/yVvWs/#	HTTP Parser: No <meta name="author".. found
Source: https://decobat.moscow/yVvWs/#	HTTP Parser: No <meta name="author".. found

Source: https://decobat.moscow/yVvWs/#	HTTP Parser: No <meta name="copyright".. found
Source: https://decobat.moscow/yVvWs/#	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: t.apemail.net to https://implarededeensino.com.br/wp-content/loop/index.html?utm_campaign=&utm_content=view-report&utm_medium=email&utm_source=activepipe

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.226
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.226
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk HTTP/1.1Host: t.apemail.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/loop/index.html?utm_campaign=&utm_content=view-report&utm_medium=email&utm_source=activepipe HTTP/1.1Host: implarededeensino.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://implarededeensino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://implarededeensino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://implarededeensino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AOG26Be2DVt_87x1Frc8ANoxgt9-axjk70U6aatIM-OfGzdGGhWWRwlvMidTIH8n56LNWadie8J8tJ4JxsjeGVI
Source: global traffic	HTTP traffic detected: GET /yVvWs/ HTTP/1.1Host: decobat.moscowConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://implarededeensino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AOG26Be2DVt_87x1Frc8ANoxgt9-axjk70U6aatIM-OfGzdGGhWWRwlvMidTIH8n56LNWadie8J8tJ4JxsjeGVI
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://decobat.moscow/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/d2a97f6b6ec9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://decobat.moscow/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://decobat.moscow/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89dfca97d9109dff HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: decobat.moscowConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://decobat.moscow/yVvWs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mfdq5qhpir1dlu8cr6enp60jnn
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/89dfca97d9109dff/1720103199364/fF-kNqT04GFDqAR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/586121416:1720099642:9mmu7psAvAoTWKUGZB2PFc55h4f45AcHGROK6sKgc4Y/89dfca97d9109dff/1ad911b2d8246a4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/89dfca97d9109dff/1720103199364/fF-kNqT04GFDqAR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/89dfca97d9109dff/1720103199366/364b98951f2b5a1f56b7257eff4bfb0438576b6c7c77c39f3323c96c7353d70e/QSD9xNuEbLDVAM5 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/586121416:1720099642:9mmu7psAvAoTWKUGZB2PFc55h4f45AcHGROK6sKgc4Y/89dfca97d9109dff/1ad911b2d8246a4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/586121416:1720099642:9mmu7psAvAoTWKUGZB2PFc55h4f45AcHGROK6sKgc4Y/89dfca97d9109dff/1ad911b2d8246a4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://decobat.moscow/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yVvWs/, HTTP/1.1Host: decobat.moscowConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://decobat.moscow/yVvWs/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mfdq5qhpir1dlu8cr6enp60jnn
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://decobat.moscow/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET // HTTP/1.1Host: scadja.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: t.apemail.net
Source: global traffic	DNS traffic detected: DNS query: implarededeensino.com.br
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: decobat.moscow
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: scadja.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7787sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTSAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 04 Jul 2024 14:26:38 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, max-age=0pragma: no-cachevary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uor4IspR7yE0AuPUSo%2B5HcAvrk%2BMzCMgPUMpcnyTv%2BuFGjm4tg%2FhQBOSxr3nDSZZUsMG991F5Rg2qSV9scNY3pqqRVpVoyahYHam%2Fufh16d2jlVK%2BW73ekxubUZCH%2Fsk0g%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 89dfcaa00c8842c0-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 04 Jul 2024 14:26:40 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: rVPRpfhHKVUTZNhtgW7cag==$ql9FyXK8EvXUIJTM/3e57g==Server: cloudflareCF-RAY: 89dfcaae0c97c459-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 04 Jul 2024 14:26:45 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: X2/DWkeLkgJw01VvtwjZaw==$TikoA7JcJ/e3S+GiaNjeWQ==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 89dfcac9ac1f4386-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 04 Jul 2024 14:26:59 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: vM/FHZNSExEv1vcK6r6UUQ==$TOhJjXuawUQ9w50J6immwQ==Server: cloudflareCF-RAY: 89dfcb24281b425f-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 04 Jul 2024 14:27:06 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, max-age=0pragma: no-cachevary: Accept-EncodingCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SjJsNF%2BAOXKKWE5YsA8yQZBfVNQ28Vl7hk7jMH4V2zAROyukqlb5Rx0soNRWa5qWVlyfxekWi4xnuTeHJYEpCUf70RTgOaMG5U770NsbZyXwFuE7Zo2M4cSRkb8d5QPSvg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 89dfcb4ddc86429d-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_78.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/
Source: chromecache_78.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_78.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.5.1.slim.min.js
Source: chromecache_76.2.dr	String found in binary or memory: https://decobat.moscow/yVvWs/#
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_78.2.dr	String found in binary or memory: https://hips.hearstapps.com/pop.h-cdn.co/assets/cm/15/05/54cae423e713b_-_american-muscle-facts-06-03
Source: chromecache_74.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_74.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#about
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#classic-cars
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#contact
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#electric-vehicles
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#faq
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#learn-more
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#modern-supercars
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#privacy
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#services
Source: chromecache_78.2.dr	String found in binary or memory: https://scadja.ru/#terms
Source: chromecache_78.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://static1.hotcarsimages.com/wordpress/wp-content/uploads/2023/04/new-project-10.jpg
Source: chromecache_74.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.autocar.co.uk/sites/autocar.co.uk/files/images/car-reviews/first-drives/legacy/rolls_roy
Source: chromecache_76.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_73.2.dr, chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_72.2.dr, chromecache_74.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.
Source: chromecache_73.2.dr, chromecache_67.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@21/38@34/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1976,i,1844117268247672415,51565432053372003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1976,i,1844117268247672415,51565432053372003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk	0%	Avira URL Cloud	safe
https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://cdn.jsdelivr.net/npm/bootstrap	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.6.0.min.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://www.apache.org/licenses/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/userverify?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS	0%	Avira URL Cloud	safe
https://scadja.ru/#contact	0%	Avira URL Cloud	safe
https://scadja.ru/#	0%	Avira URL Cloud	safe
https://scadja.ru/#terms	0%	Avira URL Cloud	safe
https://scadja.ru/#electric-vehicles	0%	Avira URL Cloud	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://scadja.ru//	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/	0%	Avira URL Cloud	safe
https://scadja.ru/#modern-supercars	0%	Avira URL Cloud	safe
https://www.autocar.co.uk/sites/autocar.co.uk/files/images/car-reviews/first-drives/legacy/rolls_roy	0%	Avira URL Cloud	safe
https://scadja.ru/#learn-more	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89dfca97d9109dff/1720103199364/fF-kNqT04GFDqAR	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://scadja.ru/#about	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/reload?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS	0%	Avira URL Cloud	safe
https://www.google.com/js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js	0%	Avira URL Cloud	safe
https://scadja.ru/#classic-cars	0%	Avira URL Cloud	safe
https://hips.hearstapps.com/pop.h-cdn.co/assets/cm/15/05/54cae423e713b_-_american-muscle-facts-06-03	0%	Avira URL Cloud	safe
https://scadja.ru/#privacy	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/89dfca97d9109dff/1720103199366/364b98951f2b5a1f56b7257eff4bfb0438576b6c7c77c39f3323c96c7353d70e/QSD9xNuEbLDVAM5	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/	0%	Avira URL Cloud	safe
https://scadja.ru/#faq	0%	Avira URL Cloud	safe
https://decobat.moscow/favicon.ico	0%	Avira URL Cloud	safe
https://decobat.moscow/yVvWs/	0%	Avira URL Cloud	safe
https://code.jquery.com/jquery-3.5.1.slim.min.js	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/api.js	0%	Avira URL Cloud	safe
https://scadja.ru/#services	0%	Avira URL Cloud	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/g/d2a97f6b6ec9/api.js	0%	Avira URL Cloud	safe
https://decobat.moscow/yVvWs/,	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://static1.hotcarsimages.com/wordpress/wp-content/uploads/2023/04/new-project-10.jpg	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89dfca97d9109dff	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/586121416:1720099642:9mmu7psAvAoTWKUGZB2PFc55h4f45AcHGROK6sKgc4Y/89dfca97d9109dff/1ad911b2d8246a4	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=uor4IspR7yE0AuPUSo%2B5HcAvrk%2BMzCMgPUMpcnyTv%2BuFGjm4tg%2FhQBOSxr3nDSZZUsMG991F5Rg2qSV9scNY3pqqRVpVoyahYHam%2Fufh16d2jlVK%2BW73ekxubUZCH%2Fsk0g%3D%3D	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
scadja.ru	172.67.193.67	true	false	unknown
k8s-eksinternetfacing-baa4792011-459661169.us-west-2.elb.amazonaws.com	34.214.48.95	true	false	unknown
implarededeensino.com.br	108.167.151.63	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
decobat.moscow	188.114.97.3	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
challenges.cloudflare.com	104.17.3.184	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
t.apemail.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9	false		unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/userverify?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS	false	Avira URL Cloud: safe	unknown
https://scadja.ru//	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/reload?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89dfca97d9109dff/1720103199364/fF-kNqT04GFDqAR	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/89dfca97d9109dff/1720103199366/364b98951f2b5a1f56b7257eff4bfb0438576b6c7c77c39f3323c96c7353d70e/QSD9xNuEbLDVAM5	false	Avira URL Cloud: safe	unknown
https://decobat.moscow/favicon.ico	true	Avira URL Cloud: safe	unknown
https://decobat.moscow/yVvWs/	true	Avira URL Cloud: safe	unknown
https://implarededeensino.com.br/wp-content/loop/index.html?utm_campaign=&utm_content=view-report&utm_medium=email&utm_source=activepipe	false		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false	Avira URL Cloud: safe	unknown
https://decobat.moscow/yVvWs/,	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/d2a97f6b6ec9/api.js	false	Avira URL Cloud: safe	unknown
https://decobat.moscow/yVvWs/#	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89dfca97d9109dff	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/586121416:1720099642:9mmu7psAvAoTWKUGZB2PFc55h4f45AcHGROK6sKgc4Y/89dfca97d9109dff/1ad911b2d8246a4	false	Avira URL Cloud: safe	unknown
https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk	true		unknown
https://a.nel.cloudflare.com/report/v4?s=uor4IspR7yE0AuPUSo%2B5HcAvrk%2BMzCMgPUMpcnyTv%2BuFGjm4tg%2FhQBOSxr3nDSZZUsMG991F5Rg2qSV9scNY3pqqRVpVoyahYHam%2Fufh16d2jlVK%2BW73ekxubUZCH%2Fsk0g%3D%3D	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.jsdelivr.net/npm/	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://scadja.ru/#modern-supercars	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://scadja.ru/#terms	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_78.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_72.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_72.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://scadja.ru/#electric-vehicles	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://scadja.ru/#contact	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://scadja.ru/#	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_72.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_72.2.dr, chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://www.autocar.co.uk/sites/autocar.co.uk/files/images/car-reviews/first-drives/legacy/rolls_roy	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://scadja.ru/#learn-more	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_72.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://scadja.ru/#about	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	chromecache_72.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://scadja.ru/#classic-cars	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://scadja.ru/#privacy	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_73.2.dr, chromecache_72.2.dr, chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://hips.hearstapps.com/pop.h-cdn.co/assets/cm/15/05/54cae423e713b_-_american-muscle-facts-06-03	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://scadja.ru/#faq	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.5.1.slim.min.js	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://scadja.ru/#services	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_72.2.dr, chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://recaptcha.net	chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_72.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_72.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_72.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://static1.hotcarsimages.com/wordpress/wp-content/uploads/2023/04/new-project-10.jpg	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.193.67	scadja.ru	United States	13335	CLOUDFLARENETUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.20.174	unknown	United States	13335	CLOUDFLARENETUS	false
108.167.151.63	implarededeensino.com.br	United States	46606	UNIFIEDLAYER-AS-1US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
34.214.48.95	k8s-eksinternetfacing-baa4792011-459661169.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	decobat.moscow	European Union	13335	CLOUDFLARENETUS	true
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
104.17.2.184	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467701
Start date and time:	2024-07-04 16:25:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@21/38@34/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 216.58.206.46, 64.233.184.84, 34.104.35.123, 142.250.186.163, 142.250.186.106, 142.250.186.74, 142.250.185.106, 142.250.185.170, 142.250.185.234, 172.217.16.202, 142.250.74.202, 172.217.18.10, 142.250.184.234, 142.250.185.202, 216.58.212.138, 142.250.186.170, 142.250.185.138, 216.58.206.74, 172.217.23.106, 142.250.185.74, 142.250.185.227, 142.250.181.227, 40.68.123.157, 93.184.221.240, 192.229.221.95, 52.165.164.15, 13.95.31.18, 142.250.186.99
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk

Input	Output
URL: https://decobat.moscow/yVvWs/# Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as email addresses and passwords.","There is no sense of urgency created in the text.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: interest OCR: Microsoft Sign in Email, phone, or Skype No account? Create one! Can't access pur account? Next Sign-in options Terms of use Privacy & ckies
URL: https://decobat.moscow/yVvWs/# Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as email addresses and passwords.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage.","The text does not create a sense of urgency or interest.","The title is 'Microsoft Sign in' which further supports the presence of a login form."]}
Title: interest OCR: Microsoft Sign in Enter a valid email address, phone number or Skype name. Email, phone, or Skype No account? Create one! Can't access your account? Next Sign-in options Terms of use Privacy & ckies
URL: https://decobat.moscow Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": false, "legitmate_domain": "microsoft.com", "reasons": "The URL 'https://decobat.moscow' does not match the legitimate domain name 'microsoft.com' associated with the brand Microsoft. The page displays a prominent login form asking for email, phone, or Skype name, which is a common tactic used in phishing attacks to harvest credentials. The domain name 'decobat.moscow' is highly suspicious and unrelated to Microsoft. The use of a legitimate brand's logo and design elements is a social engineering technique to mislead users. There are no captchas present, which is often a sign of a less secure page. Based on these factors, it is highly likely that this is a phishing site."}

URL: https://decobat.moscow Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "microsoft.com", "reasons": "The URL 'https://decobat.moscow' does not match the legitimate domain name 'microsoft.com' associated with the Microsoft brand. The page displays a prominent login form, which is a common tactic used in phishing attacks to harvest user credentials. The domain name 'decobat.moscow' is suspicious and unrelated to Microsoft, indicating potential phishing activity. Additionally, the presence of links such as 'Create one!' and 'Can't access your account?' are typical in phishing sites to mislead users into providing personal information. The combination of these factors strongly suggests that this is a phishing site."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 77, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlNS/qDV6yxl/k4E08up:6v/lhPlDV6y7Tp
MD5:	0C5D96EB35FBFE08EF8F7CD5B610D743
SHA1:	3114C628E7D03A1A38B98E0432D255A29BED1448
SHA-256:	A8F9391577FBC5C15FA501939E772E4BBC9337A67113902F052073B62DD6B428
SHA-512:	4740F832D84ACBADAC636D64D6986956470089B747376CAC3F24D9FE331131E5BBB87CF738EF38065D637C8AEA5BE5568550681F48595C7F904D53D3BE9CA7FA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...b...M......=&.....IDAT.....$.....IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 4, 2024 16:26:12.402049065 CEST	53	56410	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:12.673738956 CEST	53	59774	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:13.694513083 CEST	53	59627	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:14.353790045 CEST	59913	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:14.354013920 CEST	58407	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:14.602226973 CEST	53	59913	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:14.612577915 CEST	53	58407	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:15.801230907 CEST	64452	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:15.801393032 CEST	61144	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:16.156438112 CEST	53	64452	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:16.156451941 CEST	53	61144	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:16.162257910 CEST	50980	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:16.162889004 CEST	52237	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:16.169161081 CEST	53	50980	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:16.169956923 CEST	53	52237	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:17.431726933 CEST	54551	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:17.432207108 CEST	64311	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:17.438991070 CEST	53	64311	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:17.439246893 CEST	53	54551	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:18.399409056 CEST	53	65280	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:20.140177011 CEST	60457	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:20.140382051 CEST	58887	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:20.147135019 CEST	53	60457	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:20.148684025 CEST	53	58887	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:20.200525045 CEST	53	60491	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:21.208188057 CEST	53	54692	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:22.789433956 CEST	53	53986	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:23.719983101 CEST	53	54770	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:30.952320099 CEST	53	61641	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:33.518594980 CEST	61470	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:33.518759966 CEST	50908	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:33.525507927 CEST	53	61470	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:33.526282072 CEST	53	50908	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:34.535370111 CEST	59054	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:34.537399054 CEST	51796	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:34.563100100 CEST	53	59054	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:34.591356039 CEST	53	51796	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:35.190474033 CEST	138	138	192.168.2.4	192.168.2.255
Jul 4, 2024 16:26:35.473706961 CEST	53243	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:35.473753929 CEST	52385	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:35.481363058 CEST	53	52385	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:35.482378006 CEST	53	53243	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:36.837199926 CEST	63706	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:36.837337971 CEST	53617	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:36.844057083 CEST	53	63706	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:36.845043898 CEST	53	53617	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:38.321671963 CEST	51400	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:38.321820974 CEST	59231	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:38.328968048 CEST	53	51400	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:38.330279112 CEST	53	59231	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:38.984467030 CEST	59033	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:38.984467030 CEST	55370	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:26:38.991449118 CEST	53	59033	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:38.991656065 CEST	53	55370	1.1.1.1	192.168.2.4
Jul 4, 2024 16:26:49.934439898 CEST	53	65327	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:00.482713938 CEST	53478	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:00.483191967 CEST	59132	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:00.496929884 CEST	53	59132	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:00.496968985 CEST	53	53478	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:01.441468000 CEST	53239	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:01.444195032 CEST	53301	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:01.793597937 CEST	53	53239	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:01.879678011 CEST	53	53301	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:05.451935053 CEST	50321	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:05.452492952 CEST	57256	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:05.457458019 CEST	52696	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:05.458029032 CEST	62509	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:06.466584921 CEST	52722	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:06.467220068 CEST	64639	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:06.473500013 CEST	50908	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:06.473954916 CEST	51581	53	192.168.2.4	1.1.1.1
Jul 4, 2024 16:27:06.487751961 CEST	53	64639	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:06.488311052 CEST	53	57256	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:06.488413095 CEST	53	50321	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:06.489218950 CEST	53	52722	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:06.492219925 CEST	53	52696	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:06.652368069 CEST	53	51581	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:07.602319956 CEST	53	62509	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:07.602492094 CEST	53	50908	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:11.771588087 CEST	53	60624	1.1.1.1	192.168.2.4
Jul 4, 2024 16:27:13.724977016 CEST	53	60770	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 4, 2024 16:26:34.591516972 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Jul 4, 2024 16:27:01.879759073 CEST	192.168.2.4	1.1.1.1	c228	(Port unreachable)	Destination Unreachable
Jul 4, 2024 16:27:06.488333941 CEST	192.168.2.4	1.1.1.1	c250	(Port unreachable)	Destination Unreachable
Jul 4, 2024 16:27:07.602395058 CEST	192.168.2.4	1.1.1.1	c228	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:15 UTC	1019	OUT	GET /c/nqkr6vk3kzmvyhqvdmdrwaabbycqmbacainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqbaibq4aypdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkyl6ojqbozlsm54gkyyvdmaacdqfaycaeaq3cvpugq2hiqgrqgc6ljdvwvsfkjjveu2skjmuixszlamviwc2dfkukgcai4nfiwczinjfsqyylnmfqryylzmvguspdfpugws3cunugrkckinqaaqcdmkxs5qvdnmuew23dnmuew23dnmuew23dnmuew23dmkqcvagayhveflk HTTP/1.1 Host: t.apemail.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:15 UTC	911	IN	HTTP/1.1 302 Found Date: Thu, 04 Jul 2024 14:26:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://implarededeensino.com.br/wp-content/loop/index.html?utm_campaign=&utm_content=view-report&utm_medium=email&utm_source=activepipe X-Request-Id: 92198409-ef91-43cf-a3f2-01885d03aa11 X-Runtime: 0.004399 Access-Control-Expose-Headers: X-Total,X-Per-Page,X-Page,X-Metadata,X-One-Time-Password-Sent-To Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, HEAD Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,Pragma,Cache,X-ActivePipe-Auth,X-Client-Version,X-One-Time-Password
2024-07-04 14:26:15 UTC	220	IN	Data Raw: 64 36 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 70 6c 61 72 65 64 65 64 65 65 6e 73 69 6e 6f 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 6c 6f 6f 70 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 26 61 6d 70 3b 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 76 69 65 77 2d 72 65 70 6f 72 74 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 61 6d 70 3b 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 69 76 65 70 69 70 65 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d6<html><body>You are being <a href="https://implarededeensino.com.br/wp-content/loop/index.html?utm_campaign=&utm_content=view-report&utm_medium=email&utm_source=activepipe">redirected</a>.</body></html>
2024-07-04 14:26:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:16 UTC	770	OUT	GET /wp-content/loop/index.html?utm_campaign=&utm_content=view-report&utm_medium=email&utm_source=activepipe HTTP/1.1 Host: implarededeensino.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:16 UTC	255	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Jul 2024 18:40:04 GMT Accept-Ranges: bytes Content-Length: 1756 Vary: Accept-Encoding Content-Type: text/html
2024-07-04 14:26:16 UTC	1756	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 72 65 43 41 50 54 43 48 41 3a 20 43 6c 69 63 6b 20 41 6c 6c 6f 77 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 61 20 72 6f 62 6f 74 0a 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"/> <link href="data:image/x-icon;," rel="shortcut icon" type="image/x-icon"/> <title> reCAPTCHA: Click Allow to verify that you are not a robot </title> <script asyn

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 14:26:18 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=59864 Date: Thu, 04 Jul 2024 14:26:18 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:18 UTC	635	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://implarededeensino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:18 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 04 Jul 2024 14:26:18 GMT Date: Thu, 04 Jul 2024 14:26:18 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 14:26:18 UTC	862	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-07-04 14:26:18 UTC	579	IN	Data Raw: 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 2f 72 65 63 61 70 74 Data Ascii: onLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recapt
2024-07-04 14:26:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 14:26:19 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=59884 Date: Thu, 04 Jul 2024 14:26:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-04 14:26:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:20 UTC	964	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://implarededeensino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:21 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 14:26:21 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-8gqDPbk6xAUW2MKkfg4yvA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 14:26:21 UTC	499	IN	Data Raw: 32 61 65 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2aea<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-07-04 14:26:21 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-07-04 14:26:21 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-07-04 14:26:21 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-07-04 14:26:21 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-07-04 14:26:21 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-07-04 14:26:21 UTC	1390	IN	Data Raw: 32 47 61 36 50 76 6a 32 43 30 6d 7a 79 51 51 74 42 62 5f 70 47 58 4c 5f 5f 38 61 58 6e 34 56 79 6e 69 57 47 50 38 71 34 4b 39 67 78 35 76 6b 48 53 76 56 4f 4d 76 49 75 41 74 47 42 42 44 42 61 6e 49 79 69 78 52 55 72 4e 50 4f 51 33 4d 32 57 5f 46 68 4f 7a 4b 73 61 55 35 4a 38 4e 6f 55 5a 43 5a 49 32 4a 75 31 6c 53 64 54 32 55 46 41 35 62 5a 79 70 42 2d 55 4a 36 63 4f 44 7a 51 49 56 6d 62 64 79 48 53 4a 6d 36 6d 43 69 6b 57 68 47 46 51 59 37 4e 50 64 43 77 73 46 71 51 78 31 66 4a 58 6f 36 4b 4b 75 49 4b 34 33 50 7a 57 36 49 56 73 78 6e 78 54 71 34 36 50 4e 52 77 42 59 39 4a 33 63 30 31 78 4d 51 75 58 6d 55 6b 69 46 45 71 34 6e 6f 70 30 75 67 55 4d 46 52 4b 6b 57 53 37 36 4b 57 33 6d 37 56 4f 53 32 4a 57 36 30 70 55 39 51 49 54 50 76 4e 6b 6d 72 64 6d 75 46 Data Ascii: 2Ga6Pvj2C0mzyQQtBb_pGXL__8aXn4VyniWGP8q4K9gx5vkHSvVOMvIuAtGBBDBanIyixRUrNPOQ3M2W_FhOzKsaU5J8NoUZCZI2Ju1lSdT2UFA5bZypB-UJ6cODzQIVmbdyHSJm6mCikWhGFQY7NPdCwsFqQx1fJXo6KKuIK43PzW6IVsxnxTq46PNRwBY9J3c01xMQuXmUkiFEq4nop0ugUMFRKkWS76KW3m7VOS2JW60pU9QITPvNkmrdmuF
2024-07-04 14:26:21 UTC	1390	IN	Data Raw: 54 43 63 51 44 4e 4b 55 66 77 2d 45 42 55 6c 4f 48 2d 57 77 77 79 79 45 56 70 4a 54 37 72 34 52 47 67 46 69 59 6e 66 2d 44 34 49 32 63 64 36 48 37 71 4f 55 53 6b 33 41 53 71 37 69 4c 32 5f 53 77 59 47 49 6f 2d 43 4c 31 71 73 75 35 59 6d 38 5a 6a 54 61 4f 6d 44 35 69 45 32 76 59 31 74 66 57 5a 43 37 4b 66 36 6d 39 34 67 38 4d 4c 34 6c 62 79 30 33 43 77 31 70 51 42 35 62 74 49 7a 38 43 54 73 75 35 76 63 43 47 78 32 33 49 50 32 5f 58 64 65 38 30 51 4b 7a 72 65 75 4b 62 57 68 46 4e 67 38 46 52 4f 58 62 69 5f 69 75 53 70 51 4c 43 4c 5f 57 38 55 4e 55 6d 69 63 68 69 70 70 4f 4b 57 65 2d 61 56 2d 38 6c 45 66 34 35 5f 61 65 30 34 4c 44 70 52 76 52 61 77 6d 47 76 33 2d 54 71 54 79 50 49 6f 79 4c 4c 56 74 53 6e 30 61 5f 4f 56 73 74 59 6d 50 4e 37 61 65 4e 75 38 6d Data Ascii: TCcQDNKUfw-EBUlOH-WwwyyEVpJT7r4RGgFiYnf-D4I2cd6H7qOUSk3ASq7iL2_SwYGIo-CL1qsu5Ym8ZjTaOmD5iE2vY1tfWZC7Kf6m94g8ML4lby03Cw1pQB5btIz8CTsu5vcCGx23IP2_Xde80QKzreuKbWhFNg8FROXbi_iuSpQLCL_W8UNUmichippOKWe-aV-8lEf45_ae04LDpRvRawmGv3-TqTyPIoyLLVtSn0a_OVstYmPN7aeNu8m
2024-07-04 14:26:21 UTC	765	IN	Data Raw: 4f 56 45 70 43 52 56 42 35 54 57 35 58 5a 45 74 70 5a 56 46 32 5a 47 39 34 4c 7a 55 79 62 30 70 43 5a 6d 5a 44 4d 46 52 30 4e 57 74 6f 4b 31 67 7a 61 56 51 76 4c 30 52 77 4f 57 4a 77 62 54 6b 33 5a 6d 52 4c 5a 6e 4a 35 59 6c 5a 35 55 48 4e 50 56 31 5a 54 4b 30 49 78 59 6a 52 45 64 6c 4e 78 4e 46 4a 4c 51 6d 4e 43 4e 6a 56 74 52 30 35 77 57 6d 34 34 54 48 6f 30 5a 45 78 5a 62 55 38 32 57 6d 70 30 4d 58 6c 77 61 57 39 5a 4d 46 51 72 52 32 78 73 56 57 73 76 4e 7a 52 48 4e 58 64 33 57 47 46 35 54 44 4e 78 61 47 52 6f 62 33 55 30 64 6c 68 6d 63 6e 68 72 55 45 52 34 5a 47 4d 72 54 32 5a 59 4c 30 30 34 4e 57 31 4a 54 47 35 36 4f 43 39 61 53 48 49 7a 57 54 64 34 5a 6b 68 4b 54 32 46 48 64 6e 64 6a 55 56 67 32 4d 7a 68 6f 62 46 64 4d 5a 31 52 55 55 46 4a 58 63 6e Data Ascii: OVEpCRVB5TW5XZEtpZVF2ZG94LzUyb0pCZmZDMFR0NWtoK1gzaVQvL0RwOWJwbTk3ZmRLZnJ5YlZ5UHNPV1ZTK0IxYjREdlNxNFJLQmNCNjVtR05wWm44THo0ZExZbU82Wmp0MXlwaW9ZMFQrR2xsVWsvNzRHNXd3WGF5TDNxaGRob3U0dlhmcnhrUER4ZGMrT2ZYL004NW1JTG56OC9aSHIzWTd4ZkhKT2FHdndjUVg2MzhobFdMZ1RUUFJXcn
2024-07-04 14:26:21 UTC	1390	IN	Data Raw: 32 63 36 39 0d 0a 68 70 5a 33 46 54 53 45 5a 71 56 6a 56 5a 53 46 6c 68 4d 48 52 46 5a 45 31 75 62 45 73 72 53 46 52 4c 56 58 6c 6b 53 7a 5a 4e 4e 79 39 71 61 46 4a 6b 54 30 55 77 55 47 35 31 63 79 39 74 57 48 46 31 51 55 6c 73 55 48 42 55 4b 30 78 68 51 53 74 33 55 6e 70 6d 64 47 4e 6e 4e 31 45 78 57 6c 6c 77 57 53 74 54 51 54 4a 46 54 31 56 71 4d 32 6c 72 4c 31 68 70 62 6b 4e 55 62 31 42 71 57 45 30 77 65 47 34 78 56 6b 31 79 52 30 49 34 52 57 70 42 63 31 6c 36 4e 33 4e 6a 64 47 78 47 4e 56 68 75 55 6c 4a 50 59 6b 46 77 5a 33 6c 71 53 48 70 50 64 6a 56 77 4d 6b 34 34 65 6d 35 51 62 6b 5a 56 5a 48 68 68 4e 55 4e 51 52 46 4e 42 53 57 52 56 55 45 59 7a 65 6d 34 31 4d 56 5a 57 61 6c 68 79 63 56 4e 6d 55 32 64 74 61 44 4a 77 56 33 5a 36 54 6b 64 6c 4c 31 55 Data Ascii: 2c69hpZ3FTSEZqVjVZSFlhMHRFZE1ubEsrSFRLVXlkSzZNNy9qaFJkT0UwUG51cy9tWHF1QUlsUHBUK0xhQSt3UnpmdGNnN1ExWllwWStTQTJFT1VqM2lrL1hpbkNUb1BqWE0weG4xVk1yR0I4RWpBc1l6N3NjdGxGNVhuUlJPYkFwZ3lqSHpPdjVwMk44em5QbkZVZHhhNUNQRFNBSWRVUEYzem41MVZWalhycVNmU2dtaDJwV3Z6TkdlL1U

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:23 UTC	856	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:23 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 04 Jul 2024 14:26:23 GMT Date: Thu, 04 Jul 2024 14:26:23 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 14:26:23 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');
2024-07-04 14:26:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:23 UTC	844	OUT	GET /js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS&co=aHR0cHM6Ly9pbXBsYXJlZGVkZWVuc2luby5jb20uYnI6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=tzsltmyfnmw9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:23 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18253 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 03 Jul 2024 04:32:46 GMT Expires: Thu, 03 Jul 2025 04:32:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 25 Jun 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 122017 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 14:26:23 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 29 7b 69 66 28 21 28 76 3d 28 6e 3d 6e 75 6c 6c 2c 58 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 76 29 7c 7c 21 76 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 6e 3d 76 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 55 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 55 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(n,v){if(!(v=(n=null,X.trustedTypes),v)\|\|!v.createPolicy)return n;try{n=v.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U}
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 76 4b 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 2c 66 29 7b 71 28 28 28 58 3d 28 55 3d 28 58 3d 46 28 28 76 26 3d 28 66 3d 76 26 34 2c 33 29 2c 6e 29 29 2c 46 28 6e 29 29 2c 65 28 58 2c 6e 29 29 2c 66 26 26 28 58 3d 6e 59 28 22 22 2b 58 29 29 2c 76 29 26 26 71 28 4f 28 58 2e 6c 65 6e 67 74 68 2c 32 29 2c 55 2c 6e 29 2c 58 29 2c 55 2c 6e 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 29 7b 66 6f 72 28 58 3d 28 76 7c 28 55 3d 5b 5d 2c 30 29 29 2d 31 3b 58 3e 3d 30 3b 58 2d 2d 29 55 5b 28 76 7c 30 29 2d 31 2d 28 58 7c 30 29 5d 3d 6e 3e 3e 58 2a 38 26 32 35 35 3b 72 65 74 75 72 6e 20 55 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 2c 66 2c 79 29 7b 69 66 Data Ascii: ache-2.0','/','var vK=function(n,v,U,X,f){q(((X=(U=(X=F((v&=(f=v&4,3),n)),F(n)),e(X,n)),f&&(X=nY(""+X)),v)&&q(O(X.length,2),U,n),X),U,n)},O=function(n,v,U,X){for(X=(v\|(U=[],0))-1;X>=0;X--)U[(v\|0)-1-(X\|0)]=n>>X8&255;return U},T=function(n,v,U,X,f,y){if
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 50 28 33 39 33 2c 28 50 28 28 4a 28 32 37 38 2c 28 4a 28 32 31 33 2c 66 2c 28 4a 28 35 30 36 2c 28 50 28 31 30 30 2c 28 4a 28 32 31 36 2c 28 50 28 31 32 2c 28 50 28 32 34 35 2c 28 4a 28 34 31 32 2c 66 2c 28 66 2e 6f 62 3d 28 4a 28 32 35 2c 66 2c 28 4a 28 28 4a 28 35 30 30 2c 66 2c 28 4a 28 32 34 30 2c 66 2c 28 28 50 28 33 38 2c 28 28 66 2e 63 6f 3d 28 50 28 32 38 2c 28 50 28 33 35 35 2c 66 2c 28 4a 28 32 34 2c 28 4a 28 31 35 2c 66 2c 28 28 4a 28 33 33 31 2c 28 4a 28 28 4a 28 33 31 32 2c 28 4a 28 33 37 2c 66 2c 28 4a 28 33 33 33 2c 28 28 4a 28 33 35 30 2c 66 2c 28 50 28 36 39 2c 28 50 28 33 38 39 2c 66 2c 5b 31 36 30 2c 28 50 28 31 31 33 2c 28 50 28 31 39 30 2c 28 50 28 32 37 30 2c 28 28 28 55 3d 28 66 2e 59 3d 66 2c 28 66 2e 50 3d 28 66 2e 55 3d 5b 5d 2c Data Ascii: P(393,(P((J(278,(J(213,f,(J(506,(P(100,(J(216,(P(12,(P(245,(J(412,f,(f.ob=(J(25,f,(J((J(500,f,(J(240,f,((P(38,((f.co=(P(28,(P(355,f,(J(24,(J(15,f,((J(331,(J((J(312,(J(37,f,(J(333,((J(350,f,(P(69,(P(389,f,[160,(P(113,(P(190,(P(270,(((U=(f.Y=f,(f.P=(f.U=[],
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 28 3b 4e 3e 3d 44 2e 6c 65 6e 67 74 68 3b 29 44 2e 70 75 73 68 28 46 28 64 29 29 3b 4e 3d 44 5b 4e 5d 7d 45 2e 70 75 73 68 28 4e 29 7d 64 2e 4b 3d 28 64 2e 50 3d 5a 42 28 64 2c 72 2e 73 6c 69 63 65 28 29 29 2c 5a 42 28 64 2c 45 29 29 7d 29 7d 29 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 76 4b 28 7a 2c 33 29 7d 29 2c 32 30 30 29 2c 66 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 29 7b 28 7a 3d 28 48 3d 46 28 7a 29 2c 65 28 48 2c 7a 2e 59 29 29 2c 7a 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 7a 5b 31 5d 2c 7a 5b 32 5d 2c 56 29 7d 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 2c 5a 29 7b 28 5a 3d 28 74 3d 28 77 3d 65 28 28 74 3d 28 48 3d 28 77 3d 46 28 7a 29 2c 46 29 28 7a 29 2c 46 29 28 7a 29 2c 5a 3d 46 Data Ascii: (;N>=D.length;)D.push(F(d));N=D[N]}E.push(N)}d.K=(d.P=ZB(d,r.slice()),ZB(d,E))})})),f),function(z){vK(z,3)}),200),f,function(z,H){(z=(H=F(z),e(H,z.Y)),z)[0].removeEventListener(z[1],z[2],V)}),f),function(z,H,t,w,Z){(Z=(t=(w=e((t=(H=(w=F(z),F)(z),F)(z),Z=F
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 28 7a 29 2c 75 3d 22 22 2c 7a 29 29 2c 48 29 2e 6c 65 6e 67 74 68 2c 30 29 3b 74 2d 2d 3b 29 52 3d 28 28 52 7c 30 29 2b 28 52 72 28 7a 29 7c 30 29 29 25 5a 2c 75 2b 3d 68 5b 48 5b 52 5d 5d 3b 50 28 77 2c 7a 2c 75 29 7d 29 2c 66 29 2c 5b 5d 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 29 7b 50 28 28 74 3d 46 28 28 48 3d 6c 28 28 77 3d 46 28 7a 29 2c 7a 29 29 2c 7a 29 29 2c 74 29 2c 7a 2c 65 28 77 2c 7a 29 3e 3e 3e 48 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 65 48 28 34 2c 7a 29 7d 29 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 29 7b 69 66 28 48 3d 7a 2e 49 2e 70 6f 70 28 29 29 7b 66 6f 72 28 74 3d 6c 28 7a 29 3b 74 3e 30 3b 74 2d 2d 29 77 3d 46 28 7a 29 2c 48 5b 77 5d 3d 7a 2e 4f 5b 77 5d 3b 28 48 5b 33 37 39 5d Data Ascii: (z),u="",z)),H).length,0);t--;)R=((R\|0)+(Rr(z)\|0))%Z,u+=h[H[R]];P(w,z,u)}),f),[]),f),function(z,H,t,w){P((t=F((H=l((w=F(z),z)),z)),t),z,e(w,z)>>>H)}),function(z){eH(4,z)})),f),function(z,H,t,w){if(H=z.I.pop()){for(t=l(z);t>0;t--)w=F(z),H[w]=z.O[w];(H[379]
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 6e 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 6e 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 6e 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 76 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 6e 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 76 7d 2c 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 29 7b 69 66 28 6e 2e 6c 65 6e 67 74 68 3d Data Ascii: nction]"\|\|typeof n.call!="undefined"&&typeof n.propertyIsEnumerable!="undefined"&&!n.propertyIsEnumerable("call"))return"function"}else return"null";else if(v=="function"&&typeof n.call=="undefined")return"object";return v},or=function(n,v,U){if(n.length=
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 76 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 79 2c 68 29 7b 6e 2e 79 68 28 79 2c 74 72 75 65 2c 68 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 79 29 7b 28 61 28 6e 2c 28 79 3d 21 6e 2e 57 2e 6c 65 6e 67 74 68 2c 5b 4a 67 5d 29 29 2c 79 29 26 26 54 28 6e 2c 74 72 75 65 2c 66 61 6c 73 65 29 7d 2c 28 6e 2e 55 3d 5b 5d 2c 66 3d 6e 2e 43 28 29 2c 66 75 6e 63 74 69 6f 6e 28 79 29 7b 72 65 74 75 72 6e 20 6e 2e 65 63 28 79 29 7d 29 29 2c 6e 2e 41 2b 3d 6e 2e 43 28 29 2d 66 7d 65 6c 73 65 7b 69 66 28 55 3d 3d 41 29 72 65 74 75 72 6e 20 66 3d 76 5b 32 5d 2c 50 28 32 37 34 2c 6e 2c 76 5b 36 5d 29 2c 50 28 33 34 38 2c 6e 2c 66 29 2c 6e 2e 42 28 76 29 3b 55 3d 3d 4a 67 3f 28 6e 2e 4f 3d 6e 75 6c 6c 2c 6e 2e 78 6c 3d 5b 5d 2c 6e 2e 52 3d 5b 5d 29 3a 55 3d 3d 58 4e 26 26 51 2e Data Ascii: v[1])(function(y,h){n.yh(y,true,h)},function(y){(a(n,(y=!n.W.length,[Jg])),y)&&T(n,true,false)},(n.U=[],f=n.C(),function(y){return n.ec(y)})),n.A+=n.C()-f}else{if(U==A)return f=v[2],P(274,n,v[6]),P(348,n,f),n.B(v);U==Jg?(n.O=null,n.xl=[],n.R=[]):U==XN&&Q.
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 26 32 35 35 2c 58 26 32 35 35 29 2c 66 21 3d 76 6f 69 64 20 30 26 26 79 2e 70 75 73 68 28 66 26 32 35 35 29 29 2c 76 3d 22 22 2c 55 26 26 28 55 2e 6d 65 73 73 61 67 65 26 26 28 76 2b 3d 55 2e 6d 65 73 73 61 67 65 29 2c 55 2e 73 74 61 63 6b 26 26 28 76 2b 3d 22 3a 22 2b 55 2e 73 74 61 63 6b 29 29 2c 55 3d 65 28 33 37 39 2c 6e 29 2c 55 5b 30 5d 3e 33 29 29 7b 6e 2e 59 3d 28 76 3d 6e 59 28 28 55 5b 30 5d 2d 3d 28 76 3d 76 2e 73 6c 69 63 65 28 30 2c 28 55 5b 30 5d 7c 30 29 2d 33 29 2c 28 76 2e 6c 65 6e 67 74 68 7c 30 29 2b 33 29 2c 76 29 29 2c 55 3d 6e 2e 59 2c 6e 29 3b 74 72 79 7b 71 28 5b 39 35 5d 2c 31 39 30 2c 6e 29 2c 71 28 4f 28 76 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 76 29 2c 31 32 2c 6e 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 6e 2e 59 3d Data Ascii: &255,X&255),f!=void 0&&y.push(f&255)),v="",U&&(U.message&&(v+=U.message),U.stack&&(v+=":"+U.stack)),U=e(379,n),U[0]>3)){n.Y=(v=nY((U[0]-=(v=v.slice(0,(U[0]\|0)-3),(v.length\|0)+3),v)),U=n.Y,n);try{q([95],190,n),q(O(v.length,2).concat(v),12,n,9)}finally{n.Y=
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 63 61 74 63 68 28 79 29 7b 78 28 79 2c 74 68 69 73 29 2c 76 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 66 2e 6c 29 7d 29 7d 7d 2c 56 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 29 7b 69 66 28 6e 3d 3d 36 32 7c 7c 6e 3d 3d 32 37 30 29 76 2e 4f 5b 6e 5d 3f 76 2e 4f 5b 6e 5d 2e 63 6f 6e 63 61 74 28 55 29 3a 76 2e 4f 5b 6e 5d 3d 5a 42 28 76 2c 55 29 3b 65 6c 73 65 7b 69 66 28 76 2e 62 6d 26 26 6e 21 3d 34 33 33 29 72 65 74 75 72 6e 3b 6e 3d 3d 33 38 39 7c 7c 6e 3d 3d 31 32 7c 7c 6e 3d 3d 32 38 7c 7c 6e 3d 3d 33 35 35 7c 7c 6e 3d 3d 31 31 33 7c 7c 6e 3d 3d 31 39 30 7c 7c 6e 3d 3d 33 39 33 7c 7c 6e 3d 3d 36 39 7c 7c 6e 3d 3d 33 37 39 3f 76 2e 4f 5b 6e 5d 7c 7c 28 76 2e Data Ascii: catch(y){x(y,this),v(function(h){h(f.l)})}},V={passive:true,capture:true},P=function(n,v,U){if(n==62\|\|n==270)v.O[n]?v.O[n].concat(U):v.O[n]=ZB(v,U);else{if(v.bm&&n!=433)return;n==389\|\|n==12\|\|n==28\|\|n==355\|\|n==113\|\|n==190\|\|n==393\|\|n==69\|\|n==379?v.O[n]\|\|(v.
2024-07-04 14:26:23 UTC	1390	IN	Data Raw: 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 47 2f 74 68 69 73 2e 6e 29 7d 29 2c 6e 3d 6e 65 77 20 55 2c 55 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 58 29 7b 6e 2e 4f 70 28 58 29 2c 76 2e 4f 70 28 58 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 76 3d 28 58 3d 5b 6e 2e 64 33 28 29 2c 76 2e 64 33 28 29 5d 2c 6e 65 77 20 55 29 2c 58 7d 5d 7d 2c 41 67 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 29 7b 28 76 2e 70 75 73 68 28 6e 5b 30 5d 3c 3c 32 34 7c 6e 5b 31 5d 3c 3c 31 36 7c 6e 5b 32 5d 3c 3c 38 7c 6e 5b 33 5d 29 2c 76 2e 70 75 73 68 28 6e 5b 34 5d 3c 3c 32 34 7c 6e 5b 35 5d 3c 3c 31 36 7c 6e 5b 36 5d 3c 3c 38 7c 6e 5b 37 5d 29 2c 76 29 2e 70 75 73 68 28 6e 5b 38 5d 3c 3c 32 34 7c 6e 5b 39 5d 3c 3c 31 36 7c 6e 5b 31 30 5d 3c 3c 38 7c 6e 5b 31 31 5d Data Ascii: ath.sqrt(this.G/this.n)}),n=new U,U),[function(X){n.Op(X),v.Op(X)},function(X){return v=(X=[n.d3(),v.d3()],new U),X}]},Ag=function(n,v){(v.push(n[0]<<24\|n[1]<<16\|n[2]<<8\|n[3]),v.push(n[4]<<24\|n[5]<<16\|n[6]<<8\|n[7]),v).push(n[8]<<24\|n[9]<<16\|n[10]<<8\|n[11]

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:24 UTC	879	OUT	GET /recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://implarededeensino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:24 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 14:26:24 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-VenygCWhiQvD7iy_tupLqA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 14:26:24 UTC	499	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-07-04 14:26:24 UTC	1390	IN	Data Raw: 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 Data Ascii: -FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-0
2024-07-04 14:26:24 UTC	1390	IN	Data Raw: 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: 1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2')
2024-07-04 14:26:24 UTC	1390	IN	Data Raw: 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 Data Ascii: c4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/rob
2024-07-04 14:26:24 UTC	1390	IN	Data Raw: 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 Data Ascii: ) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlC
2024-07-04 14:26:24 UTC	1390	IN	Data Raw: 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d Data Ascii: CnqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-
2024-07-04 14:26:24 UTC	3	IN	Data Raw: 3e 0d 0a Data Ascii: >
2024-07-04 14:26:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:33 UTC	863	OUT	POST /recaptcha/api2/reload?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7787 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:33 UTC	7787	OUT	Data Raw: 0a 18 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 12 e4 0f 30 33 41 46 63 57 65 41 36 65 39 76 2d 30 6a 51 4d 6e 5f 7a 64 66 54 55 5f 4f 48 6a 45 70 6f 2d 51 74 66 62 67 43 6b 6e 6a 4e 30 34 6f 79 31 39 6c 43 56 66 6d 73 78 67 64 71 54 66 75 61 75 68 34 71 76 42 6f 62 55 72 4e 6f 73 32 54 49 33 52 47 73 78 51 35 68 36 6f 6c 4e 48 41 6c 69 6f 66 6c 44 64 72 75 35 69 42 33 69 5a 77 31 55 4c 34 76 49 49 47 47 47 61 5a 71 72 49 34 52 45 6f 51 6c 6e 36 31 51 7a 65 6e 65 30 6a 65 6f 4c 62 56 68 51 34 4a 37 57 45 37 31 56 32 78 44 4a 69 48 65 42 70 4e 51 4b 5f 4d 4e 66 32 6a 53 44 34 76 52 4f 6a 48 33 43 78 50 4b 79 36 48 35 2d 42 35 46 55 4e 5a 50 70 50 4d 45 59 69 66 5f 32 6d 6d 59 48 65 38 61 68 51 4e 67 4d 39 79 71 31 48 70 56 44 Data Ascii: rKbTvxTxwcw5VqzrtN-ICwWt03AFcWeA6e9v-0jQMn_zdfTU_OHjEpo-QtfbgCknjN04oy19lCVfmsxgdqTfuauh4qvBobUrNos2TI3RGsxQ5h6olNHAlioflDdru5iB3iZw1UL4vIIGGGaZqrI4REoQln61Qzene0jeoLbVhQ4J7WE71V2xDJiHeBpNQK_MNf2jSD4vROjH3CxPKy6H5-B5FUNZPpPMEYif_2mmYHe8ahQNgM9yq1HpVD
2024-07-04 14:26:33 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 04 Jul 2024 14:26:33 GMT Expires: Thu, 04 Jul 2024 14:26:33 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AOG26Be2DVt_87x1Frc8ANoxgt9-axjk70U6aatIM-OfGzdGGhWWRwlvMidTIH8n56LNWadie8J8tJ4JxsjeGVI; Expires=Tue, 31-Dec-2024 14:26:33 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 14:26:33 UTC	688	IN	Data Raw: 39 64 65 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 69 55 5f 6e 6b 42 4b 6d 76 59 54 55 41 35 46 4b 42 70 64 6f 38 6e 44 65 56 72 72 63 67 79 39 34 59 6d 43 64 6f 62 36 48 75 36 52 43 6d 31 48 53 76 59 6d 50 4d 6f 73 78 72 57 37 52 70 4c 32 30 49 66 30 6b 50 6a 45 51 5f 72 6d 64 30 75 71 73 41 54 64 48 57 4b 50 4a 76 49 32 61 74 30 51 47 4e 77 58 45 79 7a 54 44 50 4d 53 4f 62 41 50 62 68 56 78 42 33 4f 30 4f 6a 76 31 48 79 6e 63 31 30 53 67 4d 47 2d 32 69 50 31 4f 55 30 67 32 36 4b 33 75 6e 62 49 47 4d 76 4a 2d 45 36 58 6c 75 4c 6c 61 59 65 6c 6d 34 30 56 74 71 32 41 6d 43 65 6e 59 58 65 6c 78 57 37 52 45 31 68 69 74 42 59 36 52 67 49 72 6b 72 64 65 39 62 78 59 42 53 43 4a 63 45 4d 72 5f 32 31 79 4a 75 72 41 42 76 76 54 Data Ascii: 9de)]}'["rresp","03AFcWeA7iU_nkBKmvYTUA5FKBpdo8nDeVrrcgy94YmCdob6Hu6RCm1HSvYmPMosxrW7RpL20If0kPjEQ_rmd0uqsATdHWKPJvI2at0QGNwXEyzTDPMSObAPbhVxB3O0Ojv1Hync10SgMG-2iP1OU0g26K3unbIGMvJ-E6XluLlaYelm40Vtq2AmCenYXelxW7RE1hitBY6RgIrkrde9bxYBSCJcEMr_21yJurABvvT
2024-07-04 14:26:33 UTC	1390	IN	Data Raw: 68 36 43 39 59 7a 65 6f 75 4d 38 4f 43 2d 4c 6f 59 61 30 36 37 36 5a 42 69 76 69 6b 4e 45 6c 4f 45 69 6c 39 38 47 5f 4a 30 34 58 6e 66 49 31 7a 30 5f 69 4f 4d 45 59 39 63 4f 64 65 77 62 48 64 58 34 67 4d 38 30 66 38 43 6e 71 33 74 32 6d 30 65 5a 59 43 67 5a 38 75 57 50 71 45 48 57 44 77 5f 62 32 64 56 48 68 66 59 42 65 31 56 78 4e 71 4a 55 67 35 72 4a 38 46 4e 52 31 42 33 7a 71 32 71 36 65 52 59 50 69 6e 4b 78 4e 50 6e 53 77 6d 59 42 68 47 5f 4f 67 32 68 37 66 4e 42 79 45 4a 65 76 43 78 39 64 43 7a 74 65 48 70 54 61 51 52 69 63 73 41 77 75 49 69 64 4b 45 64 56 31 42 48 67 37 4b 67 45 36 54 33 61 36 79 39 4c 6a 79 37 4d 54 32 33 73 49 74 6d 34 37 52 32 4e 69 4a 2d 36 34 4e 6d 33 69 32 65 4e 76 50 4b 71 33 32 70 74 7a 6d 6d 37 6d 4b 30 30 74 62 4d 4f 45 69 Data Ascii: h6C9YzeouM8OC-LoYa0676ZBivikNElOEil98G_J04XnfI1z0_iOMEY9cOdewbHdX4gM80f8Cnq3t2m0eZYCgZ8uWPqEHWDw_b2dVHhfYBe1VxNqJUg5rJ8FNR1B3zq2q6eRYPinKxNPnSwmYBhG_Og2h7fNByEJevCx9dCzteHpTaQRicsAwuIidKEdV1BHg7KgE6T3a6y9Ljy7MT23sItm47R2NiJ-64Nm3i2eNvPKq32ptzmm7mK00tbMOEi
2024-07-04 14:26:33 UTC	455	IN	Data Raw: 5a 4c 51 6c 45 62 43 4f 66 6b 2d 48 6e 6e 36 70 6d 54 36 63 42 48 49 6b 42 45 43 30 56 2d 67 65 65 43 5f 71 6e 43 79 58 72 5a 74 48 45 63 41 42 2d 6a 68 47 46 55 44 7a 31 33 59 4f 6a 64 36 64 71 76 6e 76 49 6c 6a 39 4e 6d 5a 4f 36 38 57 47 2d 70 45 72 41 34 65 73 4b 4e 32 70 45 59 6d 34 73 31 39 4e 41 33 46 62 78 61 32 6e 6e 34 7a 5f 49 48 4e 2d 5a 6f 6d 6f 44 30 47 79 33 6f 31 73 6b 4c 49 76 53 64 33 31 30 69 66 30 54 5a 49 47 5f 4a 4d 4f 4f 33 39 43 4a 50 2d 52 74 52 56 30 68 36 4e 35 34 78 2d 76 47 73 44 6d 54 45 78 46 4a 67 6b 6b 31 6a 6d 74 55 39 70 76 71 32 66 77 6a 78 62 47 41 63 39 4e 5f 37 5f 67 59 35 70 76 53 56 43 6a 76 6a 79 70 5f 39 45 30 6b 41 73 56 32 4f 65 4c 48 32 71 39 62 4e 6f 4e 6f 49 63 52 50 57 6c 6c 35 4b 76 6e 59 73 68 42 44 2d 6c Data Ascii: ZLQlEbCOfk-Hnn6pmT6cBHIkBEC0V-geeC_qnCyXrZtHEcAB-jhGFUDz13YOjd6dqvnvIlj9NmZO68WG-pErA4esKN2pEYm4s19NA3Fbxa2nn4z_IHN-ZomoD0Gy3o1skLIvSd310if0TZIG_JMOO39CJP-RtRV0h6N54x-vGsDmTExFJgkk1jmtU9pvq2fwjxbGAc9N_7_gY5pvSVCjvjyp_9E0kAsV2OeLH2q9bNoNoIcRPWll5KvnYshBD-l
2024-07-04 14:26:33 UTC	1390	IN	Data Raw: 31 35 38 61 0d 0a 2d 4e 48 56 42 48 55 64 4a 61 39 76 53 4b 67 6d 43 61 4f 48 67 4f 70 37 34 46 54 6a 52 4a 45 45 75 6b 53 77 70 6d 61 44 65 6e 6a 68 44 52 33 79 42 61 4d 6d 6e 76 6c 39 71 47 51 55 69 53 34 78 61 53 74 4a 35 62 32 41 59 42 68 78 79 49 49 46 61 50 4d 53 56 68 51 63 54 79 4e 65 55 69 5a 4c 4e 44 58 53 68 45 67 63 4a 79 2d 7a 2d 36 6f 78 77 72 4a 31 69 68 5a 6a 4f 2d 30 69 4b 51 6a 34 33 55 57 59 6b 6e 36 67 79 5a 30 70 45 4b 5a 57 75 41 77 4d 35 35 38 5f 34 6c 76 31 57 78 6e 43 36 4c 54 76 58 71 63 54 35 73 31 38 70 6f 6c 4c 4a 46 77 5a 69 4d 44 4c 4c 45 77 72 4f 6c 43 6b 56 48 37 57 4a 77 7a 56 72 71 77 6a 5f 72 64 71 63 4f 39 6c 5f 34 30 68 67 4c 75 4a 7a 6d 46 79 51 2d 6e 5f 52 75 75 50 50 76 6a 2d 46 31 6e 50 52 6d 66 78 70 4f 4f 4f 64 Data Ascii: 158a-NHVBHUdJa9vSKgmCaOHgOp74FTjRJEEukSwpmaDenjhDR3yBaMmnvl9qGQUiS4xaStJ5b2AYBhxyIIFaPMSVhQcTyNeUiZLNDXShEgcJy-z-6oxwrJ1ihZjO-0iKQj43UWYkn6gyZ0pEKZWuAwM558_4lv1WxnC6LTvXqcT5s18polLJFwZiMDLLEwrOlCkVH7WJwzVrqwj_rdqcO9l_40hgLuJzmFyQ-n_RuuPPvj-F1nPRmfxpOOOd
2024-07-04 14:26:33 UTC	1390	IN	Data Raw: 59 75 74 77 73 65 57 4c 35 71 57 79 6a 73 51 30 4f 41 78 53 72 4c 52 30 48 50 49 38 37 76 75 46 47 53 4f 58 52 55 50 43 70 75 33 4a 6d 77 78 76 63 6d 68 49 50 75 55 46 67 32 6a 79 32 71 52 6c 69 71 65 37 72 57 49 35 6d 54 52 66 71 49 52 63 66 64 32 54 63 33 4d 55 39 62 4d 42 6f 30 58 36 39 36 32 50 7a 51 44 48 76 43 63 45 51 6b 6c 71 65 53 68 63 5f 63 52 62 32 53 64 30 78 44 49 74 65 4d 54 2d 6a 4d 5a 33 75 39 36 4e 4c 57 49 49 75 4e 45 32 47 58 70 6d 75 37 4f 52 33 33 35 67 39 48 38 68 38 68 34 38 49 33 4b 6e 67 4d 37 44 4d 6a 43 4a 5a 4e 35 56 68 57 42 50 79 49 4b 6b 48 63 6e 71 35 67 67 64 33 48 38 57 47 71 6a 59 41 4a 4b 69 4e 36 65 59 46 4b 67 43 35 4a 4a 75 39 36 67 41 5a 6b 48 63 71 33 4a 6b 6d 45 70 33 4a 72 78 6b 52 38 37 33 6f 48 5f 75 4b 37 56 Data Ascii: YutwseWL5qWyjsQ0OAxSrLR0HPI87vuFGSOXRUPCpu3JmwxvcmhIPuUFg2jy2qRliqe7rWI5mTRfqIRcfd2Tc3MU9bMBo0X6962PzQDHvCcEQklqeShc_cRb2Sd0xDIteMT-jMZ3u96NLWIIuNE2GXpmu7OR335g9H8h8h48I3KngM7DMjCJZN5VhWBPyIKkHcnq5ggd3H8WGqjYAJKiN6eYFKgC5JJu96gAZkHcq3JkmEp3JrxkR873oH_uK7V
2024-07-04 14:26:33 UTC	1390	IN	Data Raw: 4e 36 63 47 70 32 51 58 42 30 4d 54 4e 51 63 46 4d 77 54 33 68 52 54 46 68 72 52 6d 52 6f 65 56 64 53 61 6b 4e 44 5a 32 68 74 61 47 4a 58 53 47 4d 34 65 6d 56 4f 4c 31 64 4b 61 6b 4e 75 55 6e 67 35 56 44 5a 73 4e 58 4a 61 4e 6b 6f 33 5a 30 64 51 5a 7a 52 33 56 30 74 68 56 46 46 4e 53 55 73 78 55 48 68 6f 4e 57 39 72 56 45 31 72 4b 32 78 59 63 46 45 79 53 6d 34 32 52 58 70 51 53 44 4e 36 59 69 73 35 59 57 6c 61 54 6d 4a 58 54 6a 6c 5a 4e 44 51 72 53 6d 56 76 61 7a 52 49 57 45 68 4d 5a 45 46 56 5a 58 52 72 4e 48 41 30 51 31 4e 74 4d 45 35 43 4e 6c 4e 4e 64 32 78 4a 64 7a 46 69 5a 6b 35 68 65 45 6b 77 54 44 42 51 55 31 70 51 63 44 42 57 51 32 35 44 59 54 4d 72 5a 31 68 51 52 32 73 77 53 6b 70 33 64 43 73 31 55 57 74 45 5a 30 78 78 53 32 5a 55 54 47 5a 69 5a Data Ascii: N6cGp2QXB0MTNQcFMwT3hRTFhrRmRoeVdSakNDZ2htaGJXSGM4emVOL1dKakNuUng5VDZsNXJaNko3Z0dQZzR3V0thVFFNSUsxUHhoNW9rVE1rK2xYcFEySm42RXpQSDN6Yis5YWlaTmJXTjlZNDQrSmVvazRIWEhMZEFVZXRrNHA0Q1NtME5CNlNNd2xJdzFiZk5heEkwTDBQU1pQcDBWQ25DYTMrZ1hQR2swSkp3dCs1UWtEZ0xxS2ZUTGZiZ
2024-07-04 14:26:33 UTC	1352	IN	Data Raw: 4b 32 68 73 54 57 59 35 4d 79 39 78 64 56 4a 47 64 6d 74 77 56 55 30 72 4e 6c 6c 45 64 47 56 47 4d 44 64 47 56 6e 4d 35 54 33 5a 50 65 6d 6b 78 62 30 56 5a 54 47 52 4a 61 6a 42 6d 52 69 38 32 63 33 42 78 59 55 67 76 51 7a 64 6d 5a 47 70 69 65 6e 55 78 53 44 46 6f 64 47 6c 69 64 57 78 6a 57 55 4a 5a 61 31 64 77 62 57 4e 47 54 46 46 42 56 47 68 35 54 54 42 30 4e 33 68 70 65 6c 46 53 61 56 6f 78 51 6c 6c 49 52 6d 6c 52 53 56 56 59 57 6b 39 49 64 45 70 4c 62 32 35 47 4b 31 5a 48 52 45 6c 4d 4d 30 70 47 4e 6e 52 74 4b 31 68 46 4d 56 4e 36 64 54 52 78 5a 6c 6c 71 61 47 39 52 52 79 39 51 63 58 68 59 57 6a 4a 30 56 44 56 33 55 32 78 69 56 47 6c 35 61 32 68 4b 4e 56 5a 6d 4d 6e 52 7a 64 53 74 6f 4b 30 64 57 52 46 45 35 62 45 64 58 4e 44 6c 55 65 6a 56 30 4e 46 52 Data Ascii: K2hsTWY5My9xdVJGdmtwVU0rNllEdGVGMDdGVnM5T3ZPemkxb0VZTGRJajBmRi82c3BxYUgvQzdmZGpienUxSDFodGlidWxjWUJZa1dwbWNGTFFBVGh5TTB0N3hpelFSaVoxQllIRmlRSVVYWk9IdEpLb25GK1ZHRElMM0pGNnRtK1hFMVN6dTRxZllqaG9RRy9QcXhYWjJ0VDV3U2xiVGl5a2hKNVZmMnRzdStoK0dWRFE5bEdXNDlUejV0NFR
2024-07-04 14:26:33 UTC	1390	IN	Data Raw: 32 61 35 39 0d 0a 6b 30 54 55 64 34 56 55 78 6e 62 48 4a 76 51 57 52 6a 59 55 35 58 51 31 45 79 55 6a 42 4c 59 6d 70 36 5a 33 5a 47 63 45 4a 58 5a 30 4a 35 4f 55 39 5a 4e 6c 4a 32 5a 32 70 59 51 30 55 77 4f 57 67 77 4d 54 68 5a 59 56 55 30 5a 46 55 72 56 32 67 79 52 48 55 76 4d 7a 6c 7a 4e 6c 42 34 55 7a 4d 77 4f 44 6c 53 51 53 74 55 5a 57 46 4a 5a 32 35 34 4d 6d 38 34 5a 55 31 79 54 53 39 71 53 79 74 48 61 47 46 35 51 30 4a 58 4d 31 63 31 4d 54 4e 53 62 79 74 50 64 7a 6c 73 52 31 70 51 54 6b 46 4b 55 45 64 72 56 53 73 31 53 32 56 70 4d 32 78 5a 59 57 64 50 65 55 78 4f 56 46 46 74 63 47 68 4b 5a 6c 67 33 56 55 56 55 4d 48 52 30 4e 45 74 4b 56 46 5a 5a 63 33 52 68 51 57 56 7a 57 6d 64 33 57 6a 6b 79 63 48 4a 75 63 32 39 76 54 33 5a 74 63 48 4a 55 63 6c 5a Data Ascii: 2a59k0TUd4VUxnbHJvQWRjYU5XQ1EyUjBLYmp6Z3ZGcEJXZ0J5OU9ZNlJ2Z2pYQ0UwOWgwMThZYVU0ZFUrV2gyRHUvMzlzNlB4UzMwODlSQStUZWFJZ254Mm84ZU1yTS9qSytHaGF5Q0JXM1c1MTNSbytPdzlsR1pQTkFKUEdrVSs1S2VpM2xZYWdPeUxOVFFtcGhKZlg3VUVUMHR0NEtKVFZZc3RhQWVzWmd3WjkycHJuc29vT3ZtcHJUclZ
2024-07-04 14:26:33 UTC	1390	IN	Data Raw: 4a 56 65 44 59 78 55 46 70 79 62 6d 4d 32 57 45 74 6d 56 30 67 32 65 46 52 5a 61 30 5a 31 59 30 35 78 4d 30 4e 36 65 6c 52 30 61 44 6c 49 4d 7a 52 72 4d 58 6b 33 65 46 6c 75 59 57 4e 78 54 30 6c 44 52 45 46 31 63 32 31 78 61 6b 5a 59 57 6a 68 46 61 6b 46 61 5a 30 64 6e 55 45 4e 42 4c 32 39 4a 53 56 56 36 56 32 35 7a 56 57 39 70 61 56 6c 45 56 6d 52 78 65 47 56 6e 54 31 70 6a 5a 33 5a 43 53 33 52 32 52 30 78 4e 55 57 6c 43 4e 55 4e 68 4e 32 46 50 65 54 41 33 51 54 4d 31 55 32 5a 53 62 6d 4d 30 5a 58 41 30 63 79 73 34 52 33 49 76 51 33 6c 34 4e 69 39 70 51 7a 52 4c 64 6d 4e 57 62 6a 52 75 55 46 64 44 57 6a 4a 75 4d 57 31 68 5a 33 6f 72 52 6b 78 43 61 46 42 36 4c 32 5a 55 4c 33 5a 72 54 45 5a 79 5a 6e 68 6a 54 46 5a 49 57 57 64 4c 62 32 74 4f 62 57 4e 6a 54 Data Ascii: JVeDYxUFpybmM2WEtmV0g2eFRZa0Z1Y05xM0N6elR0aDlIMzRrMXk3eFluYWNxT0lDREF1c21xakZYWjhFakFaZ0dnUENBL29JSVV6V25zVW9paVlEVmRxeGVnT1pjZ3ZCS3R2R0xNUWlCNUNhN2FPeTA3QTM1U2ZSbmM0ZXA0cys4R3IvQ3l4Ni9pQzRLdmNWbjRuUFdDWjJuMW1hZ3orRkxCaFB6L2ZUL3ZrTEZyZnhjTFZIWWdLb2tObWNjT

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:34 UTC	610	OUT	GET /recaptcha/api2/reload?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AOG26Be2DVt_87x1Frc8ANoxgt9-axjk70U6aatIM-OfGzdGGhWWRwlvMidTIH8n56LNWadie8J8tJ4JxsjeGVI
2024-07-04 14:26:34 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 14:26:34 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 14:26:34 UTC	917	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-07-04 14:26:34 UTC	744	IN	Data Raw: 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b Data Ascii: ges/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{back
2024-07-04 14:26:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:34 UTC	1000	OUT	POST /recaptcha/api2/userverify?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6094 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AOG26Be2DVt_87x1Frc8ANoxgt9-axjk70U6aatIM-OfGzdGGhWWRwlvMidTIH8n56LNWadie8J8tJ4JxsjeGVI
2024-07-04 14:26:34 UTC	6094	OUT	Data Raw: 76 3d 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 26 63 3d 30 33 41 46 63 57 65 41 37 69 55 5f 6e 6b 42 4b 6d 76 59 54 55 41 35 46 4b 42 70 64 6f 38 6e 44 65 56 72 72 63 67 79 39 34 59 6d 43 64 6f 62 36 48 75 36 52 43 6d 31 48 53 76 59 6d 50 4d 6f 73 78 72 57 37 52 70 4c 32 30 49 66 30 6b 50 6a 45 51 5f 72 6d 64 30 75 71 73 41 54 64 48 57 4b 50 4a 76 49 32 61 74 30 51 47 4e 77 58 45 79 7a 54 44 50 4d 53 4f 62 41 50 62 68 56 78 42 33 4f 30 4f 6a 76 31 48 79 6e 63 31 30 53 67 4d 47 2d 32 69 50 31 4f 55 30 67 32 36 4b 33 75 6e 62 49 47 4d 76 4a 2d 45 36 58 6c 75 4c 6c 61 59 65 6c 6d 34 30 56 74 71 32 41 6d 43 65 6e 59 58 65 6c 78 57 37 52 45 31 68 69 74 42 59 36 52 67 49 72 6b 72 64 65 39 62 78 59 42 53 43 4a 63 45 4d 72 5f 32 31 Data Ascii: v=rKbTvxTxwcw5VqzrtN-ICwWt&c=03AFcWeA7iU_nkBKmvYTUA5FKBpdo8nDeVrrcgy94YmCdob6Hu6RCm1HSvYmPMosxrW7RpL20If0kPjEQ_rmd0uqsATdHWKPJvI2at0QGNwXEyzTDPMSObAPbhVxB3O0Ojv1Hync10SgMG-2iP1OU0g26K3unbIGMvJ-E6XluLlaYelm40Vtq2AmCenYXelxW7RE1hitBY6RgIrkrde9bxYBSCJcEMr_21
2024-07-04 14:26:34 UTC	529	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 14:26:34 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 14:26:34 UTC	861	IN	Data Raw: 39 36 61 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 5a 54 33 34 75 56 78 38 58 78 4b 6f 43 5a 41 2d 47 55 69 55 6e 6d 4a 62 34 6d 43 68 2d 75 46 70 78 43 6e 31 2d 66 78 42 70 44 64 59 34 73 32 54 31 6f 31 45 4f 78 55 34 78 42 73 4b 6a 6a 41 61 35 6a 71 50 77 55 41 72 54 32 42 4a 52 50 68 4e 64 49 41 35 39 45 6a 74 4f 37 39 46 78 44 7a 72 46 6e 5a 54 78 4a 65 78 61 57 32 64 48 58 5f 61 32 47 6b 64 72 69 53 4c 6a 4f 66 63 55 70 55 6b 30 7a 43 51 59 74 44 4f 35 70 47 79 6d 6b 66 43 50 35 31 51 52 5a 54 43 53 76 36 62 6e 52 74 4f 44 74 4d 55 70 56 30 41 77 39 52 37 52 56 62 4c 55 55 47 4b 52 56 4c 77 6e 48 52 41 4e 6d 44 30 64 36 2d 35 4f 41 33 68 6f 64 76 4d 36 56 75 53 31 4f 45 6c 74 75 6d 68 74 53 6e 6a 57 6a 43 57 49 Data Ascii: 96a)]}'["uvresp","03AFcWeA6ZT34uVx8XxKoCZA-GUiUnmJb4mCh-uFpxCn1-fxBpDdY4s2T1o1EOxU4xBsKjjAa5jqPwUArT2BJRPhNdIA59EjtO79FxDzrFnZTxJexaW2dHX_a2GkdriSLjOfcUpUk0zCQYtDO5pGymkfCP51QRZTCSv6bnRtODtMUpV0Aw9R7RVbLUUGKRVLwnHRANmD0d6-5OA3hodvM6VuS1OEltumhtSnjWjCWI
2024-07-04 14:26:34 UTC	1390	IN	Data Raw: 78 71 79 57 69 41 45 5f 4e 4a 43 48 32 44 72 5a 59 5a 30 4e 48 35 45 4f 54 57 51 36 30 49 76 59 66 4f 37 30 2d 68 41 63 35 78 51 38 6e 5a 67 54 32 35 4f 61 54 45 6f 48 5a 79 6a 4b 55 62 79 64 70 41 4f 47 79 4a 47 43 53 59 44 63 58 37 70 69 33 4e 78 54 46 4a 72 47 45 48 5a 54 42 55 78 35 79 78 37 35 69 39 55 48 72 4f 36 6d 6e 67 74 37 73 2d 4b 61 38 39 4f 4d 6c 39 58 4f 41 79 48 5a 72 52 6b 55 6a 4b 52 39 47 34 58 6b 53 6f 64 70 47 77 30 36 32 41 39 39 75 34 59 61 6e 64 45 73 53 6b 41 76 67 6c 74 69 6f 45 31 5a 49 44 65 2d 47 49 76 74 32 59 51 77 4e 39 44 52 52 30 43 53 2d 48 58 75 30 4a 74 4d 54 5f 6c 59 77 5f 30 6c 68 4f 73 62 51 45 44 4a 4a 44 5a 44 4a 79 66 75 6c 5a 6c 53 65 4a 6c 47 64 48 32 77 47 75 5a 31 41 49 6e 31 36 6b 4c 68 51 55 66 67 62 72 41 Data Ascii: xqyWiAE_NJCH2DrZYZ0NH5EOTWQ60IvYfO70-hAc5xQ8nZgT25OaTEoHZyjKUbydpAOGyJGCSYDcX7pi3NxTFJrGEHZTBUx5yx75i9UHrO6mngt7s-Ka89OMl9XOAyHZrRkUjKR9G4XkSodpGw062A99u4YandEsSkAvgltioE1ZIDe-GIvt2YQwN9DRR0CS-HXu0JtMT_lYw_0lhOsbQEDJJDZDJyfulZlSeJlGdH2wGuZ1AIn16kLhQUfgbrA
2024-07-04 14:26:34 UTC	166	IN	Data Raw: 52 56 51 42 4d 4f 6d 4f 67 76 6d 6f 64 55 2d 42 4f 70 54 48 4a 49 5f 54 22 2c 31 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 30 39 41 50 42 71 42 66 33 39 33 55 58 4f 65 5a 38 55 73 2d 79 49 57 55 52 36 30 64 4c 5a 6a 2d 39 74 71 5f 73 6c 71 64 31 6b 4d 54 57 65 48 6b 79 63 54 6e 76 2d 72 33 4c 72 52 4b 6f 6e 67 4d 79 68 45 70 65 70 37 4d 5a 32 70 47 53 74 37 30 52 32 4b 47 45 77 7a 55 6f 61 77 63 73 35 38 7a 76 7a 6a 4f 36 49 51 41 22 5d 0d 0a Data Ascii: RVQBMOmOgvmodU-BOpTHJI_T",1,120,null,null,null,null,null,"09APBqBf393UXOeZ8Us-yIWUR60dLZj-9tq_slqd1kMTWeHkycTnv-r3LrRKongMyhEpep7MZ2pGSt70R2KGEwzUoawcs58zvzjO6IQA"]
2024-07-04 14:26:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:35 UTC	713	OUT	GET /yVvWs/ HTTP/1.1 Host: decobat.moscow Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://implarededeensino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:35 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * set-cookie: PHPSESSID=mfdq5qhpir1dlu8cr6enp60jnn; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y2bKuyhBxv4gqG71u97UFlILgULkFEQm%2Bjz%2FKRAP3N42SqChxHZHtBJs1%2FvzJykmByJHb4vHqhFpEWGzIQAZzx31cpiB8DYF9qXqIxrEqBLLFanz%2F1JU%2BzRSZ8B7TI6ooA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89dfca8998c27d16-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:35 UTC	566	IN	Data Raw: 38 34 39 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 69 6e 64 69 76 69 64 75 61 6c 69 74 79 3c 2f 74 69 74 6c 65 3e 0a 09 3c 21 2d 2d 20 41 20 63 61 72 20 69 73 20 75 73 65 6c 65 73 73 20 69 6e 20 4e 65 77 20 59 6f 72 6b 2c 20 65 73 73 65 6e 74 69 61 6c 20 65 76 65 72 79 77 68 65 72 65 20 65 6c 73 65 2e 20 54 68 65 20 73 61 6d 65 20 77 69 74 68 20 67 6f 6f 64 20 6d 61 6e 6e 65 72 73 2e 20 2d 2d 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: 849<html lang="en"><head><title>individuality</title>... A car is useless in New York, essential everywhere else. The same with good manners. --><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"><meta name="
2024-07-04 14:26:35 UTC	1369	IN	Data Raw: 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 63 65 6e 74 65 72 65 64 2d 63 6f 6e 74 65 6e 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 7d 2e 66 73 2d 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 74 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 7d 2e 6d 74 2d 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 72 65 6d 7d 2e 74 65 78 74 2d 6d 75 74 65 64 7b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 3c 2f 73 74 79 6c 65 3e Data Ascii: amily:Arial,sans-serif}.container{margin-top:50px;display:flex;justify-content:center}.centered-content{text-align:center;max-width:500px}.fs-5{font-size:1.25rem;display:block}.mt-2{margin-top:.5rem}.mt-5{margin-top:3rem}.text-muted{color:#6c757d}</style>
2024-07-04 14:26:35 UTC	193	IN	Data Raw: 99 73 20 61 20 6e 65 76 65 72 2d 65 6e 64 69 6e 67 20 62 61 74 74 6c 65 20 6f 66 20 6d 61 6b 69 6e 67 20 79 6f 75 72 20 63 61 72 73 20 62 65 74 74 65 72 20 61 6e 64 20 61 6c 73 6f 20 74 72 79 69 6e 67 20 74 6f 20 62 65 20 62 65 74 74 65 72 20 79 6f 75 72 73 65 6c 66 2e 3c 2f 70 3e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 21 2d 2d 20 3c 70 3e 4d 61 69 6e 74 61 69 6e 69 6e 67 20 66 69 74 6e 65 73 73 20 69 6d 70 72 6f 76 65 73 20 73 65 6c 66 2d 63 6f 6e 66 69 64 65 6e 63 65 20 61 6e 64 20 62 6f 64 79 20 69 6d 61 67 65 2e 3c 2f 70 3e 20 2d 2d 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: s a never-ending battle of making your cars better and also trying to be better yourself.</p> --></body>... <p>Maintaining fitness improves self-confidence and body image.</p> --></html>
2024-07-04 14:26:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:35 UTC	614	OUT	GET /recaptcha/api2/userverify?k=6LdUwAcqAAAAAPnwlfaJJ-k-e4YlaYcVS5Y4fpTS HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AOG26Be2DVt_87x1Frc8ANoxgt9-axjk70U6aatIM-OfGzdGGhWWRwlvMidTIH8n56LNWadie8J8tJ4JxsjeGVI
2024-07-04 14:26:35 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 14:26:35 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 14:26:35 UTC	917	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-07-04 14:26:35 UTC	744	IN	Data Raw: 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b Data Ascii: ges/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{back
2024-07-04 14:26:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:35 UTC	542	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://decobat.moscow/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:36 UTC	336	IN	HTTP/1.1 302 Found Date: Thu, 04 Jul 2024 14:26:36 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/d2a97f6b6ec9/api.js Server: cloudflare CF-RAY: 89dfca8f5e6d4411-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:36 UTC	557	OUT	GET /turnstile/v0/g/d2a97f6b6ec9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://decobat.moscow/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:36 UTC	408	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42691 Connection: close accept-ranges: bytes last-modified: Thu, 27 Jun 2024 13:08:16 GMT cache-control: max-age=31536000 access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 89dfca932f098cc5-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 2c 61 2c 72 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 75 5d 28 67 29 2c 5f 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 6c 29 7b 72 28 6c 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 61 28 5f 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 5f 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 61 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Et(e,a,r,o,c,u,g){try{var b=e[u](g),_=b.value}catch(l){r(l);return}b.done?a(_):Promise.resolve(_).then(o,c)}function wt(e){return function(){var a=this,r=arguments;return new Promise(function(o,c){var u=e.apply(a,r);funct
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 2c 61 29 7b 76 61 72 20 72 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 72 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 62 3b 74 72 79 7b 66 6f 72 28 72 3d 72 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 72 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 61 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 61 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function It(e,a){var r=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(r!=null){var o=[],c=!0,u=!1,g,b;try{for(r=r.call(e);!(c=(g=r.next()).done)&&(o.push(g.value),!(a&&o.length===a));c=!0)
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 6c 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 6c 5b 30 5d 26 26 28 72 3d 30 29 29 2c 72 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 6c 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 6c 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 6c 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 6c 3d 5b 6c 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function _(l){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,l[0]&&(r=0)),r;)try{if(o=1,c&&(u=l[0]&2?c.return:l[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,l[1])).done)return u;switch(c=0,u&&(l=[l[0]&2,u.val
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 6b 65 7c 7c 28 6b 65 3d 7b 7d 29 29 3b 76 61 72 20 78 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 78 65 7c 7c 28 78 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 5a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 Data Ascii: ,e.LIGHT="light",e.DARK="dark"})(ke\|\|(ke={}));var xe;(function(e){e.NEVER="never",e.AUTO="auto"})(xe\|\|(xe={}));var X;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(X\|\|(X={}));var Z;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="aut
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 3d 3d 22 61 75 74 6f 22 7c 7c 67 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 6b 74 3d 33 30 30 2c 4c 74 3d 31 30 3b 76 61 72 20 6a 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 76 61 72 20 61 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: =="auto"\|\|gr.test(e)}function at(e){return N(["always","execute","interaction-only"],e)}function it(e){return N(["render","execute"],e)}var kt=300,Lt=10;var j="0/0";function ot(e){var a=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._de
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 59 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 59 28 65 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 61 26 26 61 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 Data Ascii: Y=Object.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},Y(e,a)}function Bt(e,a){if(typeof a!="function"&&a!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(a&&a.prototype,{constructor:{value
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 59 28 63 2c 6f 29 7d 2c 50 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 58 74 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 61 26 26 28 43 28 61 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 61 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 61 3a 4c 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 59 74 28 65 29 7b 76 61 72 20 61 3d 4d 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 74 65 28 65 29 2c 63 3b 69 66 28 61 29 7b 76 61 72 20 75 3d 74 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 75 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 Data Ascii: !0,configurable:!0}}),Y(c,o)},Pe(e)}function Xt(e,a){return a&&(C(a)==="object"\|\|typeof a=="function")?a:Le(e)}function Yt(e){var a=Me();return function(){var o=te(e),c;if(a){var u=te(this).constructor;c=Reflect.construct(o,arguments,u)}else c=o.apply(thi
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 24 74 28 65 2c 61 29 7b 76 61 72 20 72 2c 6f 2c 63 2c 75 3d 75 74 28 61 2e 70 61 72 61 6d 73 2c 4b 29 2c 67 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 62 3d 22 22 2e 63 6f 6e 63 61 74 28 75 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 67 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 45 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2c 5f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 5f 7c 7c 70 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 57 69 64 67 65 74 2c 20 45 6c 65 6d 65 6e 74 20 6e 6f 74 20 Data Ascii: $t(e,a){var r,o,c,u=ut(a.params,K),g="h/".concat("g","/"),b="".concat(u,"/cdn-cgi/challenge-platform/").concat(g,"feedback-reports/").concat(Ee(e),"/").concat(a.displayLanguage,"/"),_=document.getElementById(e);_\|\|p("Cannot initialize Widget, Element not
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 76 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 76 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 76 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 76 2e 73 74 79 6c 65 2e Data Ascii: v.setAttribute("allow","cross-origin-isolated; fullscreen"),v.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),v.setAttribute("scrolling","no"),v.style.borderWidth="0px",v.style.width="100%",v.style.height="100%",v.style.
2024-07-04 14:26:36 UTC	1369	IN	Data Raw: 66 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 35 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c 22 31 38 22 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 76 29 2c 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 68 29 2c 28 63 3d 5f 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 63 3d 3d 3d 76 6f 69 64 20 30 7c 7c 63 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 Data Ascii: f"),d.setAttribute("fill","none"),d.setAttribute("x1","6"),d.setAttribute("x2","18"),d.setAttribute("y1","5"),d.setAttribute("y2","18"),n.appendChild(d),h.appendChild(v),h.appendChild(n),l.appendChild(h),(c=_.parentNode)===null\|\|c===void 0\|\|c.appendChild(

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:37 UTC	787	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://decobat.moscow/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:37 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 79527 Connection: close origin-agent-cluster: ?1 content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-opener-policy: same-origin document-policy: js-profiling permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cross-origin-embedder-policy: require-corp critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
2024-07-04 14:26:37 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 39 64 66 63 61 39 37 64 39 31 30 39 64 66 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 89dfca97d9109dff-EWRalt-svc: h3=":443"; ma=86400
2024-07-04 14:26:37 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-07-04 14:26:37 UTC	1369	IN	Data Raw: 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 Data Ascii: 00%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont,
2024-07-04 14:26:37 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c Data Ascii: splay: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterl
2024-07-04 14:26:37 UTC	1369	IN	Data Raw: 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 2c 20 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: ext a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .cb-lb .cb-i { border: 2px solid #dadada; background-color: #222;}.theme-dark .cb-lb input:focus ~ .cb-i, .theme-dar
2024-07-04 14:26:37 UTC	1369	IN	Data Raw: 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 Data Ascii: r: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.the
2024-07-04 14:26:37 UTC	1369	IN	Data Raw: 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 Data Ascii: #challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:v
2024-07-04 14:26:37 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 62 2d 6c 62 2d 74 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 Data Ascii: tion: underline;}.cb-lb input:focus ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:focus ~ span.cb-lb-t { text-decoration: underline;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; bac
2024-07-04 14:26:37 UTC	1369	IN	Data Raw: 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 Data Ascii: top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; margin: 5px 16px 0; padding-right: 0; text-align: right;}.size-compact #terms { te
2024-07-04 14:26:37 UTC	1369	IN	Data Raw: 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 66 2d 73 74 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 Data Ascii: er;}.rtl .size-compact #branding { padding-right: 0; padding-left: 0; text-align: center;}.rtl .size-compact #terms { text-align: center;}.rtl .size-compact #cf-stage { padding-right: 48px;}.rtl .size-compact #success-icon { left: 86px

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:38 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89dfca97d9109dff HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:38 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:38 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 192945 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 89dfca9cf91b8ce0-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:38 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 7a 2c 66 46 2c 66 47 2c 66 4e 2c 66 52 2c 66 55 2c 66 56 2c 67 6c 2c 67 6d 2c 67 71 2c 67 72 2c 67 73 2c 67 77 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 76 2c Data Ascii: window._cf_chl_opt.uaO=false;~function(iz,fF,fG,fN,fR,fU,fV,gl,gm,gq,gr,gs,gw,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hv,
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 34 31 36 29 5d 28 53 74 72 69 6e 67 5b 6a 63 28 33 34 32 29 5d 28 68 5b 6a 63 28 31 33 30 38 29 5d 28 28 32 35 35 2e 37 36 26 6d 29 2d 6a 2d 68 5b 6a 63 28 31 33 30 38 29 5d 28 69 2c 36 35 35 33 35 29 2b 36 35 35 33 35 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 6a 63 28 31 33 30 35 29 5d 28 27 27 29 7d 2c 66 53 3d 5b 5d 2c 66 54 3d 30 3b 32 35 36 3e 66 54 3b 66 53 5b 66 54 5d 3d 53 74 72 69 6e 67 5b 69 7a 28 33 34 32 29 5d 28 66 54 29 2c 66 54 2b 2b 29 3b 66 55 3d 28 30 2c 65 76 61 6c 29 28 69 7a 28 33 36 37 29 29 2c 66 56 3d 61 74 6f 62 28 69 7a 28 37 38 37 29 29 2c 67 6c 3d 7b 7d 2c 67 6c 5b 69 7a 28 31 31 34 36 29 5d 3d 27 6f 27 2c 67 6c 5b 69 7a 28 31 32 38 36 29 5d 3d 27 73 27 2c 67 6c 5b 69 7a 28 38 39 33 29 5d 3d 27 75 27 2c 67 6c 5b 69 Data Ascii: 416)](String[jc(342)](h[jc(1308)]((255.76&m)-j-h[jc(1308)](i,65535)+65535,255))));return k[jc(1305)]('')},fS=[],fT=0;256>fT;fS[fT]=String[iz(342)](fT),fT++);fU=(0,eval)(iz(367)),fV=atob(iz(787)),gl={},gl[iz(1146)]='o',gl[iz(1286)]='s',gl[iz(893)]='u',gl[i
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 28 31 38 35 34 29 5d 5b 6a 4d 28 31 37 33 33 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 6a 4d 28 34 31 36 29 5d 28 47 29 7d 7d 2c 67 71 3d 69 7a 28 31 33 37 39 29 5b 69 7a 28 32 32 37 29 5d 28 27 3b 27 29 2c 67 72 3d 67 71 5b 69 7a 28 31 34 35 36 29 5d 5b 69 7a 28 31 31 30 35 29 5d 28 67 71 29 2c 66 46 5b 69 7a 28 31 39 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 50 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 6a 50 3d 69 7a 2c 6a 3d 7b 7d 2c 6a 5b 6a 50 28 31 32 35 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 2b 76 7d 2c 6a 5b 6a 50 28 31 36 32 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 7d 2c 6a 5b 6a 50 28 31 35 35 33 29 5d 3d Data Ascii: (1854)][jM(1733)](j,H)\|\|(j[H]=[]),j[H][jM(416)](G)}},gq=iz(1379)[iz(227)](';'),gr=gq[iz(1456)][iz(1105)](gq),fF[iz(196)]=function(h,i,jP,j,k,l,m,n,o){for(jP=iz,j={},j[jP(1256)]=function(s,v){return s+v},j[jP(1627)]=function(s,v){return s===v},j[jP(1553)]=
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 75 73 74 54 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 47 4d 52 68 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 50 7a 62 76 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 48 79 49 79 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 64 69 4b 61 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4b 59 53 7a 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4e 4e 73 4e 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 Data Ascii: ion(h,i){return h*i},'ustTx':function(h,i){return i!=h},'GMRhO':function(h,i){return i==h},'Pzbvt':function(h,i){return h(i)},'HyIyP':function(h,i){return h(i)},'diKaJ':function(h,i){return h>i},'KYSzm':function(h,i){return i==h},'NNsNK':function(h,i){ret
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 64 5b 6a 54 28 33 37 38 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 6a 54 28 39 30 38 29 5d 28 64 5b 6a 54 28 31 31 39 29 5d 28 48 2c 31 29 2c 4f 29 2c 49 3d 3d 64 5b 6a 54 28 31 33 38 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 54 28 34 31 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 6a 54 28 31 35 34 38 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 64 5b 6a 54 28 35 35 35 29 5d 28 48 3c 3c 31 2e 37 38 2c 4f 26 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6a 54 28 34 31 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 6a 54 Data Ascii: :I++,O>>=1,s++);}else{for(O=1,s=0;d[jT(378)](s,F);H=d[jT(908)](d[jT(119)](H,1),O),I==d[jT(138)](j,1)?(I=0,G[jT(416)](o(H)),H=0):I++,O=0,s++);for(O=C[jT(1548)](0),s=0;16>s;H=d[jT(555)](H<<1.78,O&1),I==j-1?(I=0,G[jT(416)](o(H)),H=0):I++,O>>=1,s++);}D--,d[jT
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 6a 54 28 31 33 30 35 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 6a 55 29 7b 72 65 74 75 72 6e 20 6a 55 3d 6a 52 2c 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 64 5b 6a 55 28 32 35 32 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 6a 55 28 31 32 38 33 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 56 29 7b 72 65 74 75 72 6e 20 6a 56 3d 6a 55 2c 68 5b 6a 56 28 31 35 34 38 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 57 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 6a 57 3d 6a 52 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 Data Ascii: se I++;return G[jT(1305)]('')},'j':function(h,jU){return jU=jR,h==null?'':d[jU(252)]('',h)?null:f.i(h[jU(1283)],32768,function(i,jV){return jV=jU,h[jV(1548)](i)})},'i':function(i,j,o,jW,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(jW=jR,s=[],x=4,B=4,C=3,D=[],G=o(0),H
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 3b 65 6c 73 65 20 69 66 28 4d 3d 3d 3d 42 29 4d 3d 45 2b 45 5b 6a 57 28 31 37 36 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 6a 57 28 34 31 36 29 5d 28 4d 29 2c 73 5b 42 2b 2b 5d 3d 64 5b 6a 57 28 33 34 30 29 5d 28 45 2c 4d 5b 6a 57 28 31 37 36 29 5d 28 30 29 29 2c 78 2d 2d 2c 45 3d 4d 2c 64 5b 6a 57 28 31 37 31 30 29 5d 28 30 2c 78 29 26 26 28 78 3d 4d 61 74 68 5b 6a 57 28 37 38 39 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 6a 52 28 38 30 31 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 66 46 5b 69 7a 28 31 38 33 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 58 2c 64 2c 65 2c 66 2c 67 29 7b 6a 58 3d 69 7a 2c 64 3d 7b 7d 2c 64 5b 6a 58 28 31 31 33 35 29 5d 3d 6a 58 28 31 30 36 32 29 2c 64 5b 6a 58 28 31 38 35 29 Data Ascii: ;else if(M===B)M=E+E[jW(176)](0);else return null;D[jW(416)](M),s[B++]=d[jW(340)](E,M[jW(176)](0)),x--,E=M,d[jW(1710)](0,x)&&(x=Math[jW(789)](2,C),C++)}}},g={},g[jR(801)]=f.h,g}(),fF[iz(1834)]=function(jX,d,e,f,g){jX=iz,d={},d[jX(1135)]=jX(1062),d[jX(185)
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 6a 5a 28 31 30 31 39 29 5d 28 73 29 2c 42 3d 67 73 5b 6a 5a 28 38 30 31 29 5d 28 78 29 5b 6a 5a 28 32 32 30 29 5d 28 27 2b 27 2c 6a 5a 28 31 34 38 32 29 29 2c 6e 5b 6a 5a 28 31 32 37 37 29 5d 28 6a 5b 6a 5a 28 35 39 39 29 5d 28 27 76 5f 27 2b 66 46 5b 6a 5a 28 32 31 31 30 29 5d 5b 6a 5a 28 31 35 32 36 29 5d 2c 27 3d 27 29 2b 42 29 7d 63 61 74 63 68 28 43 29 7b 7d 7d 2c 66 46 5b 69 7a 28 31 31 37 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 6b 30 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 6b 30 3d 69 7a 2c 69 3d 7b 7d 2c 69 5b 6b 30 28 31 31 31 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 6b 30 28 31 39 33 31 29 5d 3d 6b 30 28 39 34 33 29 2c 69 5b 6b 30 28 32 36 39 29 5d 3d 6b 30 28 31 Data Ascii: jZ(1019)](s),B=gs[jZ(801)](x)[jZ(220)]('+',jZ(1482)),n[jZ(1277)](j[jZ(599)]('v_'+fF[jZ(2110)][jZ(1526)],'=')+B)}catch(C){}},fF[iz(1171)]=function(d,e,f,g,h,k0,i,j,k,l,m){(k0=iz,i={},i[k0(1114)]=function(n,o){return n+o},i[k0(1931)]=k0(943),i[k0(269)]=k0(1
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 36 35 35 29 2c 67 7a 5b 69 7a 28 31 38 38 35 29 5d 3d 69 7a 28 31 33 38 38 29 2c 67 7a 5b 69 7a 28 32 35 39 29 5d 3d 69 7a 28 31 30 37 36 29 2c 67 41 3d 7b 7d 2c 67 41 5b 69 7a 28 32 33 32 29 5d 3d 69 7a 28 31 36 38 32 29 2c 67 41 5b 69 7a 28 34 37 38 29 5d 3d 69 7a 28 31 38 36 30 29 2c 67 41 5b 69 7a 28 36 32 34 29 5d 3d 69 7a 28 31 39 34 32 29 2c 67 41 5b 69 7a 28 31 32 37 30 29 5d 3d 69 7a 28 31 30 31 31 29 2c 67 41 5b 69 7a 28 35 35 33 29 5d 3d 69 7a 28 31 31 37 37 29 2c 67 41 5b 69 7a 28 31 35 39 31 29 5d 3d 69 7a 28 36 33 37 29 2c 67 41 5b 69 7a 28 31 30 32 32 29 5d 3d 69 7a 28 31 33 36 29 2c 67 41 5b 69 7a 28 31 38 39 33 29 5d 3d 69 7a 28 31 39 36 34 29 2c 67 41 5b 69 7a 28 32 30 31 38 29 5d 3d 69 7a 28 36 35 35 29 2c 67 41 5b 69 7a 28 31 33 35 39 Data Ascii: 655),gz[iz(1885)]=iz(1388),gz[iz(259)]=iz(1076),gA={},gA[iz(232)]=iz(1682),gA[iz(478)]=iz(1860),gA[iz(624)]=iz(1942),gA[iz(1270)]=iz(1011),gA[iz(553)]=iz(1177),gA[iz(1591)]=iz(637),gA[iz(1022)]=iz(136),gA[iz(1893)]=iz(1964),gA[iz(2018)]=iz(655),gA[iz(1359
2024-07-04 14:26:38 UTC	1369	IN	Data Raw: 37 35 29 5d 3d 69 7a 28 31 31 38 34 29 2c 67 44 5b 69 7a 28 38 33 35 29 5d 3d 69 7a 28 38 32 33 29 2c 67 44 5b 69 7a 28 35 39 38 29 5d 3d 69 7a 28 38 33 38 29 2c 67 44 5b 69 7a 28 31 33 36 33 29 5d 3d 69 7a 28 31 37 38 37 29 2c 67 44 5b 69 7a 28 31 37 34 35 29 5d 3d 69 7a 28 31 38 30 35 29 2c 67 44 5b 69 7a 28 31 38 38 35 29 5d 3d 69 7a 28 31 39 35 37 29 2c 67 44 5b 69 7a 28 32 35 39 29 5d 3d 69 7a 28 31 39 37 37 29 2c 67 45 3d 7b 7d 2c 67 45 5b 69 7a 28 32 33 32 29 5d 3d 69 7a 28 33 31 38 29 2c 67 45 5b 69 7a 28 34 37 38 29 5d 3d 69 7a 28 31 36 36 34 29 2c 67 45 5b 69 7a 28 36 32 34 29 5d 3d 69 7a 28 38 30 30 29 2c 67 45 5b 69 7a 28 31 32 37 30 29 5d 3d 69 7a 28 36 39 31 29 2c 67 45 5b 69 7a 28 35 35 33 29 5d 3d 69 7a 28 33 35 32 29 2c 67 45 5b 69 7a 28 Data Ascii: 75)]=iz(1184),gD[iz(835)]=iz(823),gD[iz(598)]=iz(838),gD[iz(1363)]=iz(1787),gD[iz(1745)]=iz(1805),gD[iz(1885)]=iz(1957),gD[iz(259)]=iz(1977),gE={},gE[iz(232)]=iz(318),gE[iz(478)]=iz(1664),gE[iz(624)]=iz(800),gE[iz(1270)]=iz(691),gE[iz(553)]=iz(352),gE[iz(

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:38 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:38 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 89dfca9d19ae42c6-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:38 UTC	636	OUT	GET /favicon.ico HTTP/1.1 Host: decobat.moscow Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://decobat.moscow/yVvWs/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mfdq5qhpir1dlu8cr6enp60jnn
2024-07-04 14:26:38 UTC	661	IN	HTTP/1.1 404 Not Found Date: Thu, 04 Jul 2024 14:26:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, max-age=0 pragma: no-cache vary: Accept-Encoding CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uor4IspR7yE0AuPUSo%2B5HcAvrk%2BMzCMgPUMpcnyTv%2BuFGjm4tg%2FhQBOSxr3nDSZZUsMG991F5Rg2qSV9scNY3pqqRVpVoyahYHam%2Fufh16d2jlVK%2BW73ekxubUZCH%2Fsk0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89dfcaa00c8842c0-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:38 UTC	708	IN	Data Raw: 34 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f Data Ascii: 4e1<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</
2024-07-04 14:26:38 UTC	548	IN	Data Raw: 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 Data Ascii: p>The resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1p
2024-07-04 14:26:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:39 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/586121416:1720099642:9mmu7psAvAoTWKUGZB2PFc55h4f45AcHGROK6sKgc4Y/89dfca97d9109dff/1ad911b2d8246a4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1ad911b2d8246a4 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:39 UTC	2909	OUT	Data Raw: 76 5f 38 39 64 66 63 61 39 37 64 39 31 30 39 64 66 66 3d 74 50 7a 43 51 43 6e 43 42 43 78 43 49 43 33 47 61 6b 47 61 56 42 77 56 77 65 62 48 77 62 61 77 42 6d 65 4f 7a 70 61 41 6d 61 67 42 79 65 2d 50 77 64 61 34 47 33 61 34 56 77 78 74 47 61 77 43 57 61 77 6a 61 70 70 62 49 56 61 69 50 77 24 44 47 55 50 61 73 61 77 50 77 44 4f 70 77 67 6f 49 79 57 70 61 49 61 43 69 7a 70 61 6c 54 59 55 32 2d 4c 63 65 30 50 61 48 70 42 6d 50 79 75 38 42 61 73 39 36 6f 73 70 61 66 61 4f 70 62 6a 2d 34 78 70 37 41 42 50 39 2d 6b 65 78 77 6d 4a 71 70 51 46 61 69 42 42 61 34 70 77 6f 56 49 6e 66 61 34 6d 61 6f 49 42 50 42 74 61 50 43 34 67 4e 63 61 61 69 61 54 32 58 74 61 61 33 35 43 61 55 25 32 62 32 2d 73 35 47 47 53 77 31 49 61 6b 44 52 24 61 62 65 37 43 61 68 4a 42 57 47 Data Ascii: v_89dfca97d9109dff=tPzCQCnCBCxCIC3GakGaVBwVwebHwbawBmeOzpaAmagBye-Pwda4G3a4VwxtGawCWawjappbIVaiPw$DGUPasawPwDOpwgoIyWpaIaCizpalTYU2-Lce0PaHpBmPyu8Bas96ospafaOpbj-4xp7ABP9-kexwmJqpQFaiBBa4pwoVInfa4maoIBPBtaPC4gNcaaiaT2Xtaa35CaU%2b2-s5GGSw1IakDR$abe7CahJBWG
2024-07-04 14:26:39 UTC	771	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 128552 Connection: close cf-chl-gen: /UnXLVBJoc2SBJtkml377QpZoBq1B6ZkMz+eZ8DQ4nEKzQ6uRUmqU3E3LCL3VWIscrZT6e8LIiL0RgCTQ+ddJltOwDeBozlo6g7UIssGaUHYNYw56jwqF9zvkCkvgerUCumBwM7yJvoKa72rVXoR80yx1zCw0k5jTZITol8v22WAf/sANYImSFXph3NXklonkNhhHxm+Lbydz/SIjY3G1DTuAMsBOh1N3HE/J/h6MgUD2pyIPBHuA+DQrgqR+IBE4z+hIgy/YtCF+f2nA+82L+gw8jpzykASKYdyX04JYD/gcQ++RSGkiNvNLrcOsKn/nQsqLWBP7AbNVhQl7Co5IRhow9elvQvarhAEa+fgneurVMlrdP4itkJuIv4qNNFPcEpjA2jNYhSUxZ/e/4KOFqz55l7CBfjxaCeAKZp2ZlU5ZrST7354O4lnqqejJXHI515QyescB7Qc2LWOF/nah0UBpYh7gMat1whRE/ylSOK6sV4JUEkpFXlgc+7g9SG/$cxBFRDbCI7H5QdHBzj90NQ== Server: cloudflare CF-RAY: 89dfcaa3ed49c41b-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:39 UTC	598	IN	Data Raw: 75 49 2b 48 6d 48 79 4b 69 4d 4b 57 6e 37 4b 69 70 72 69 70 6e 49 61 4b 6c 6f 4f 47 70 61 79 6f 76 61 47 30 30 72 44 52 79 63 50 56 72 39 79 56 71 72 36 73 79 36 7a 66 6c 74 76 5a 33 5a 72 4b 33 4c 33 64 76 65 76 46 37 63 2f 50 35 62 33 75 7a 61 37 34 79 73 33 56 75 71 2f 49 39 76 54 67 2b 64 53 39 39 2f 76 6f 32 75 6f 45 42 51 33 31 2f 63 6e 6a 30 65 54 73 38 38 66 6f 46 41 7a 71 38 75 6a 74 46 42 37 7a 45 76 41 65 39 78 62 32 4a 52 2f 78 43 67 4d 74 2b 77 50 6c 47 78 6f 48 36 52 38 6d 49 44 67 6a 38 69 6a 32 44 42 6f 6d 47 44 45 39 41 55 51 45 4d 69 54 39 48 69 63 48 46 51 4d 61 47 41 45 4b 47 6b 5a 47 4b 55 63 67 55 31 56 43 4f 6a 56 63 4e 43 6b 5a 4e 6c 51 34 4f 78 74 47 4e 30 45 30 50 6c 4e 43 49 7a 55 72 50 6d 52 76 59 57 39 4d 52 30 78 58 53 33 42 Data Ascii: uI+HmHyKiMKWn7KipripnIaKloOGpayovaG00rDRycPVr9yVqr6sy6zfltvZ3ZrK3L3dvevF7c/P5b3uza74ys3Vuq/I9vTg+dS99/vo2uoEBQ31/cnj0eTs88foFAzq8ujtFB7zEvAe9xb2JR/xCgMt+wPlGxoH6R8mIDgj8ij2DBomGDE9AUQEMiT9HicHFQMaGAEKGkZGKUcgU1VCOjVcNCkZNlQ4OxtGN0E0PlNCIzUrPmRvYW9MR0xXS3B
2024-07-04 14:26:39 UTC	1369	IN	Data Raw: 5a 55 55 32 30 34 57 32 38 38 54 6b 49 2f 65 34 42 47 5a 47 69 45 65 55 6c 62 6a 33 4a 79 67 47 65 54 59 58 61 4b 6b 57 32 47 5a 58 6d 5a 6e 35 4e 7a 62 6d 31 74 6f 33 47 6d 65 4a 64 6c 64 6e 56 33 65 62 43 4e 70 6d 32 54 68 61 32 4f 72 71 6d 5a 64 59 68 79 6a 59 61 51 65 59 79 73 73 34 2b 68 6f 4d 57 45 77 61 43 55 79 72 65 6a 71 6f 65 6b 30 63 76 49 7a 74 47 68 73 4d 54 56 72 74 71 37 33 4a 36 36 6e 64 76 43 74 4d 48 6c 74 4f 4f 6a 74 61 71 2f 31 71 72 44 75 36 37 67 30 2b 44 53 78 4f 36 78 37 39 50 54 7a 4e 37 4f 41 64 58 51 7a 65 4c 64 30 41 62 65 30 38 49 49 79 63 4c 63 44 39 63 50 41 50 4c 2b 35 51 77 47 79 51 66 55 45 4e 54 76 47 65 33 71 2b 41 76 38 39 39 7a 6b 42 68 51 62 43 76 77 49 46 75 6e 75 36 41 38 4f 49 68 34 30 39 53 77 4f 38 79 4d 6b 4c Data Ascii: ZUU204W288TkI/e4BGZGiEeUlbj3JygGeTYXaKkW2GZXmZn5Nzbm1to3GmeJdldnV3ebCNpm2Tha2OrqmZdYhyjYaQeYyss4+hoMWEwaCUyrejqoek0cvIztGhsMTVrtq73J66ndvCtMHltOOjtaq/1qrDu67g0+DSxO6x79PTzN7OAdXQzeLd0Abe08IIycLcD9cPAPL+5QwGyQfUENTvGe3q+Av899zkBhQbCvwIFunu6A8OIh409SwO8yMkL
2024-07-04 14:26:39 UTC	1369	IN	Data Raw: 37 54 55 46 37 68 46 42 35 65 46 61 44 67 34 46 47 69 59 6c 6b 54 47 4b 43 64 56 52 58 6b 57 4b 55 64 6e 43 50 65 6f 31 62 62 35 4e 6b 66 59 43 55 6f 70 4f 47 65 59 6d 68 65 49 4a 72 6a 47 79 4c 62 6f 69 48 71 49 71 54 6a 4c 4b 54 71 6e 57 4b 71 37 4b 76 65 33 71 6b 70 5a 65 42 78 62 64 39 78 61 76 41 6e 38 69 39 76 4d 75 72 6b 4a 53 51 72 62 58 57 76 4a 4c 53 78 73 75 77 73 35 37 6b 30 74 53 79 32 4c 58 41 77 75 43 2b 37 63 4c 71 76 50 44 4b 38 71 72 57 72 2b 44 31 79 62 50 54 30 74 37 61 38 72 4c 4d 36 76 54 50 33 72 2f 68 43 74 58 2b 76 51 72 6f 2f 51 2f 43 45 65 67 4c 35 2b 7a 6d 36 51 76 57 44 78 51 4f 31 66 6b 59 45 66 33 5a 45 78 66 66 42 53 49 63 46 77 73 41 34 76 59 70 44 6a 49 51 37 66 45 56 46 42 48 78 4f 44 51 6a 39 54 77 53 45 67 6b 39 46 66 Data Ascii: 7TUF7hFB5eFaDg4FGiYlkTGKCdVRXkWKUdnCPeo1bb5NkfYCUopOGeYmheIJrjGyLboiHqIqTjLKTqnWKq7Kve3qkpZeBxbd9xavAn8i9vMurkJSQrbXWvJLSxsuws57k0tSy2LXAwuC+7cLqvPDK8qrWr+D1ybPT0t7a8rLM6vTP3r/hCtX+vQro/Q/CEegL5+zm6QvWDxQO1fkYEf3ZExffBSIcFwsA4vYpDjIQ7fEVFBHxODQj9TwSEgk9Ff
2024-07-04 14:26:39 UTC	1369	IN	Data Raw: 67 58 6c 72 52 59 31 67 63 49 79 44 6a 48 53 43 56 6b 31 58 67 59 79 55 66 4a 4b 56 6a 49 32 57 6e 5a 71 44 6c 33 71 64 66 6f 52 6e 59 61 74 70 6a 49 61 64 6f 35 71 4b 61 71 56 2b 6b 36 79 49 68 49 6d 72 73 70 65 2f 71 6f 31 35 78 4d 57 4f 68 5a 61 64 75 36 61 72 71 63 4f 46 68 34 32 5a 75 72 37 51 79 4d 47 6b 72 38 4f 35 6f 39 6e 4e 7a 4c 6e 59 79 5a 2b 78 34 4c 6e 57 35 74 53 69 77 4e 58 45 71 75 50 76 7a 64 6e 68 72 4f 54 7a 72 65 2f 4b 2b 65 50 61 74 39 72 32 34 4f 72 72 76 38 48 61 41 2b 45 44 31 4d 50 62 39 51 76 4b 31 67 66 50 45 4e 7a 63 44 76 30 58 38 68 48 57 31 67 54 38 38 67 7a 61 37 4f 38 69 45 42 33 58 39 65 45 6e 4a 4f 45 5a 47 51 4d 73 47 44 41 46 44 2b 6f 56 46 41 51 6b 47 52 72 36 4b 42 6b 62 4d 68 77 64 4e 68 6b 37 4e 6b 51 76 52 67 59 Data Ascii: gXlrRY1gcIyDjHSCVk1XgYyUfJKVjI2WnZqDl3qdfoRnYatpjIado5qKaqV+k6yIhImrspe/qo15xMWOhZadu6arqcOFh42Zur7QyMGkr8O5o9nNzLnYyZ+x4LnW5tSiwNXEquPvzdnhrOTzre/K+ePat9r24Orrv8HaA+ED1MPb9QvK1gfPENzcDv0X8hHW1gT88gza7O8iEB3X9eEnJOEZGQMsGDAFD+oVFAQkGRr6KBkbMhwdNhk7NkQvRgY
2024-07-04 14:26:39 UTC	1369	IN	Data Raw: 49 4b 44 59 5a 56 66 5a 34 57 58 57 57 31 59 6d 47 35 34 69 33 69 52 63 71 43 68 62 58 65 55 59 70 69 48 6d 70 6d 6a 64 71 71 5a 6b 58 47 75 70 36 4f 57 69 34 69 6a 72 49 53 71 72 4a 32 77 6a 48 36 32 73 4a 65 58 6d 36 4f 6a 74 6f 43 73 6e 4b 4b 74 69 4d 61 37 6e 73 57 38 79 71 6e 48 77 72 53 32 76 4d 65 34 32 5a 47 58 6d 72 76 4c 72 36 54 53 78 75 54 41 36 63 61 6f 33 4c 62 41 72 38 50 61 7a 64 2f 56 36 75 6e 68 36 76 47 7a 32 2f 66 49 38 4e 6e 65 41 76 69 2b 32 51 44 36 41 2f 48 41 31 73 58 6a 41 41 76 43 45 39 4c 50 78 67 7a 4e 39 39 58 72 2b 76 76 6f 45 66 73 65 33 41 76 61 33 41 34 54 34 78 34 52 41 76 4d 55 2f 66 37 39 42 67 77 6d 42 2f 77 6d 36 79 6f 69 45 78 63 75 2b 6a 55 7a 4e 43 6f 38 46 7a 67 44 45 6b 4d 36 4d 68 77 42 43 41 74 48 49 43 6b 39 Data Ascii: IKDYZVfZ4WXWW1YmG54i3iRcqChbXeUYpiHmpmjdqqZkXGup6OWi4ijrISqrJ2wjH62sJeXm6OjtoCsnKKtiMa7nsW8yqnHwrS2vMe42ZGXmrvLr6TSxuTA6cao3LbAr8Pazd/V6unh6vGz2/fI8NneAvi+2QD6A/HA1sXjAAvCE9LPxgzN99Xr+vvoEfse3Ava3A4T4x4RAvMU/f79BgwmB/wm6yoiExcu+jUzNCo8FzgDEkM6MhwBCAtHICk9
2024-07-04 14:26:39 UTC	1369	IN	Data Raw: 64 6e 69 6f 64 7a 66 4a 71 4f 62 57 6d 67 58 4a 56 76 6e 5a 61 6e 65 32 4a 69 68 36 61 41 6f 6d 46 72 6d 34 4b 43 72 47 32 47 62 70 42 72 6f 36 31 7a 65 6e 53 74 64 36 32 4e 76 59 43 61 6e 62 6c 2f 71 4c 4b 7a 75 4b 75 45 69 35 69 5a 6e 71 69 47 30 36 71 6f 6f 74 57 51 6d 71 61 31 70 72 47 71 7a 75 43 30 6d 72 75 63 6f 62 4c 42 36 4c 71 30 34 62 72 6d 72 63 43 6f 34 74 37 4e 76 2b 43 30 78 2b 53 35 2f 65 33 59 79 4e 4c 4b 31 4d 41 43 30 39 7a 62 31 65 6e 70 39 38 7a 61 7a 75 6e 6e 79 65 62 78 33 64 33 4d 43 42 51 47 37 2b 6e 34 44 39 34 67 46 39 76 35 33 50 54 37 35 66 48 36 47 41 45 67 48 76 37 74 43 75 59 4b 2b 79 77 57 4d 77 67 72 45 78 59 62 4b 43 34 54 4b 76 34 54 4e 76 77 41 44 76 34 53 53 52 49 2b 51 41 59 58 44 69 6b 63 4f 30 41 77 53 54 51 49 52 Data Ascii: dniodzfJqObWmgXJVvnZane2Jih6aAomFrm4KCrG2GbpBro61zenStd62NvYCanbl/qLKzuKuEi5iZnqiG06qootWQmqa1prGqzuC0mrucobLB6Lq04brmrcCo4t7Nv+C0x+S5/e3YyNLK1MAC09zb1enp98zazunnyebx3d3MCBQG7+n4D94gF9v53PT75fH6GAEgHv7tCuYK+ywWMwgrExYbKC4TKv4TNvwADv4SSRI+QAYXDikcO0AwSTQIR
2024-07-04 14:26:39 UTC	1369	IN	Data Raw: 66 6e 49 6d 67 6d 71 4f 43 5a 4b 57 51 59 70 36 67 6f 6d 78 39 59 48 6d 6a 71 71 65 6f 73 59 75 69 64 6e 61 72 68 35 69 56 6c 48 32 64 69 62 65 32 72 4c 57 61 73 73 53 43 77 4a 65 46 76 35 75 41 75 63 61 76 70 38 69 47 6b 4a 50 48 30 62 53 78 7a 73 79 7a 32 64 57 62 6d 70 53 73 31 74 2f 45 6e 71 61 69 74 38 6a 6e 35 64 62 48 71 61 75 2f 72 38 72 6b 79 75 47 30 74 4e 44 51 79 2b 37 4b 75 74 79 33 76 2f 61 32 33 4f 44 6a 77 50 54 47 43 39 6e 56 43 4d 30 4b 34 76 41 41 43 66 62 67 44 67 58 56 36 42 51 56 33 41 2f 59 44 64 72 35 4a 52 44 78 46 51 66 31 33 2b 67 45 42 77 67 77 2f 4f 6a 6a 36 66 4d 4f 41 6a 49 49 45 52 55 75 4e 78 55 61 43 41 6b 59 4d 54 67 6a 4e 7a 67 78 4d 43 63 79 4b 51 56 49 52 45 4a 42 54 6b 6b 39 53 41 63 65 56 31 4e 52 4c 46 4e 4f 55 7a Data Ascii: fnImgmqOCZKWQYp6gomx9YHmjqqeosYuidnarh5iVlH2dibe2rLWassSCwJeFv5uAucavp8iGkJPH0bSxzsyz2dWbmpSs1t/Enqait8jn5dbHqau/r8rkyuG0tNDQy+7Kuty3v/a23ODjwPTGC9nVCM0K4vAACfbgDgXV6BQV3A/YDdr5JRDxFQf13+gEBwgw/Ojj6fMOAjIIERUuNxUaCAkYMTgjNzgxMCcyKQVIREJBTkk9SAceV1NRLFNOUz
2024-07-04 14:26:39 UTC	1369	IN	Data Raw: 6b 47 4b 6e 6c 48 71 41 5a 71 61 56 67 58 2b 76 66 6e 47 46 66 5a 47 57 73 34 69 46 74 4b 32 4f 6d 62 53 35 6b 34 71 73 64 5a 75 74 68 4a 6a 49 6e 61 43 2f 77 72 61 67 71 63 4f 64 69 4e 47 55 73 72 62 4e 6c 36 7a 57 70 64 6d 39 30 74 76 55 7a 70 79 61 6c 71 32 6b 6f 4a 37 6d 76 73 44 42 34 65 66 61 37 37 33 64 36 4d 37 41 35 2b 4f 32 35 4f 76 6c 75 4c 33 75 75 67 4c 42 38 39 75 39 32 74 58 38 2b 41 58 63 77 77 37 61 7a 76 37 35 33 75 73 44 37 39 58 55 47 41 62 76 37 2f 7a 55 42 74 30 63 2b 42 66 74 44 65 4c 39 45 42 4d 56 42 2b 6b 68 43 2b 4d 67 48 66 30 77 2f 4f 38 57 4a 6a 67 78 4b 50 45 74 48 54 67 66 45 42 49 72 47 68 58 39 4a 68 41 43 4a 52 6b 6a 4e 55 30 2f 47 69 51 6d 4b 6b 51 73 49 67 39 57 4c 43 42 4e 4e 77 30 73 4d 55 6f 63 55 6b 73 68 49 69 34 Data Ascii: kGKnlHqAZqaVgX+vfnGFfZGWs4iFtK2OmbS5k4qsdZuthJjInaC/wragqcOdiNGUsrbNl6zWpdm90tvUzpyalq2koJ7mvsDB4efa773d6M7A5+O25OvluL3uugLB89u92tX8+AXcww7azv753usD79XUGAbv7/zUBt0c+BftDeL9EBMVB+khC+MgHf0w/O8WJjgxKPEtHTgfEBIrGhX9JhACJRkjNU0/GiQmKkQsIg9WLCBNNw0sMUocUkshIi4
2024-07-04 14:26:39 UTC	1369	IN	Data Raw: 48 69 59 5a 6d 79 59 6b 71 65 46 63 6e 4b 33 71 32 36 57 72 72 61 37 65 37 71 66 6d 70 43 76 73 5a 4b 6c 72 35 75 69 79 62 54 45 75 4c 69 72 7a 36 2b 4e 6f 4d 4f 78 6c 4b 36 4a 31 38 61 57 32 4a 61 5a 70 37 4c 4a 6f 65 4f 62 30 63 43 2b 7a 2b 4c 45 70 64 50 72 7a 64 37 50 37 50 48 4e 33 61 62 66 76 2b 44 46 31 63 72 76 75 50 4c 58 79 38 2b 2f 37 4d 76 66 35 4e 37 38 36 50 58 48 33 65 62 38 2f 67 59 52 45 66 73 4f 46 51 50 67 45 64 51 46 36 39 54 38 35 2f 6e 57 2b 39 77 56 49 76 73 47 2f 67 63 46 41 2b 58 6f 4a 52 6f 64 36 76 37 77 2f 66 49 44 49 76 37 31 2b 43 59 4e 4f 54 67 4e 4c 68 44 35 46 68 38 4e 51 6a 63 50 4a 42 6f 56 2f 44 55 74 49 41 63 73 55 41 30 69 4b 67 35 55 4e 52 42 48 56 55 35 52 55 54 38 74 47 78 4d 75 55 56 31 66 56 47 68 66 4e 54 70 6f Data Ascii: HiYZmyYkqeFcnK3q26Wrra7e7qfmpCvsZKlr5uiybTEuLirz6+NoMOxlK6J18aW2JaZp7LJoeOb0cC+z+LEpdPrzd7P7PHN3abfv+DF1crvuPLXy8+/7Mvf5N786PXH3eb8/gYREfsOFQPgEdQF69T85/nW+9wVIvsG/gcFA+XoJRod6v7w/fIDIv71+CYNOTgNLhD5Fh8NQjcPJBoV/DUtIAcsUA0iKg5UNRBHVU5RUT8tGxMuUV1fVGhfNTpo

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:39 UTC	545	OUT	OPTIONS /report/v4?s=uor4IspR7yE0AuPUSo%2B5HcAvrk%2BMzCMgPUMpcnyTv%2BuFGjm4tg%2FhQBOSxr3nDSZZUsMG991F5Rg2qSV9scNY3pqqRVpVoyahYHam%2Fufh16d2jlVK%2BW73ekxubUZCH%2Fsk0g%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://decobat.moscow Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:39 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 04 Jul 2024 14:26:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:40 UTC	488	OUT	POST /report/v4?s=uor4IspR7yE0AuPUSo%2B5HcAvrk%2BMzCMgPUMpcnyTv%2BuFGjm4tg%2FhQBOSxr3nDSZZUsMG991F5Rg2qSV9scNY3pqqRVpVoyahYHam%2Fufh16d2jlVK%2BW73ekxubUZCH%2Fsk0g%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 423 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:40 UTC	423	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 30 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 63 6f 62 61 74 2e 6d 6f 73 63 6f 77 2f 79 56 76 57 73 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 Data Ascii: [{"age":0,"body":{"elapsed_time":309,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://decobat.moscow/yVvWs/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error","ur
2024-07-04 14:26:40 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 04 Jul 2024 14:26:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:40 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/g/i/89dfca97d9109dff/1720103199364/fF-kNqT04GFDqAR HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:40 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:40 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 89dfcaad88fe4201-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 62 00 00 00 4d 08 02 00 00 00 d2 3d 26 ba 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRbM=&IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:40 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/586121416:1720099642:9mmu7psAvAoTWKUGZB2PFc55h4f45AcHGROK6sKgc4Y/89dfca97d9109dff/1ad911b2d8246a4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:41 UTC	375	IN	HTTP/1.1 404 Not Found Date: Thu, 04 Jul 2024 14:26:40 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: rVPRpfhHKVUTZNhtgW7cag==$ql9FyXK8EvXUIJTM/3e57g== Server: cloudflare CF-RAY: 89dfcaae0c97c459-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:41 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:42 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/89dfca97d9109dff/1720103199364/fF-kNqT04GFDqAR HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:42 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:42 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 89dfcab62e6c4288-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 62 00 00 00 4d 08 02 00 00 00 d2 3d 26 ba 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRbM=&IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:42 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/89dfca97d9109dff/1720103199366/364b98951f2b5a1f56b7257eff4bfb0438576b6c7c77c39f3323c96c7353d70e/QSD9xNuEbLDVAM5 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:42 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 04 Jul 2024 14:26:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-07-04 14:26:42 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4e 6b 75 59 6c 52 38 72 57 68 39 57 74 79 56 2d 5f 30 76 37 42 44 68 58 61 32 78 38 64 38 4f 66 4d 79 50 4a 62 48 4e 54 31 77 34 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gNkuYlR8rWh9WtyV-_0v7BDhXa2x8d8OfMyPJbHNT1w4AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-07-04 14:26:42 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2024-07-04 14:26:44 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/586121416:1720099642:9mmu7psAvAoTWKUGZB2PFc55h4f45AcHGROK6sKgc4Y/89dfca97d9109dff/1ad911b2d8246a4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 30907 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1ad911b2d8246a4 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/77poe/0x4AAAAAAAd399TRbO1YOeS-/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 14:26:44 UTC	16384	OUT	Data Raw: 76 5f 38 39 64 66 63 61 39 37 64 39 31 30 39 64 66 66 3d 74 50 7a 43 75 54 77 4f 46 77 56 6d 7a 34 65 56 34 56 46 43 61 46 77 56 54 66 61 33 2d 61 50 43 62 56 61 31 61 2d 43 54 56 62 24 61 5a 54 61 62 70 43 54 49 69 61 47 43 2d 56 62 2d 41 61 39 43 66 56 77 39 77 59 77 7a 61 73 61 34 4d 56 61 79 43 61 50 51 42 43 37 46 77 73 6d 4a 42 62 65 32 61 6d 38 4d 74 75 2d 30 63 70 4a 61 49 47 65 59 67 35 56 43 74 56 61 36 37 69 6a 59 43 61 62 34 61 62 41 7a 7a 39 42 77 24 61 4f 24 65 38 47 61 69 41 58 39 39 42 61 6c 43 46 77 34 79 48 77 42 4e 6d 4a 53 61 79 58 2d 74 25 32 62 54 61 4b 49 47 44 6d 33 6d 61 77 4d 54 61 61 48 65 55 39 64 6f 31 43 77 78 57 70 69 52 66 56 38 57 35 44 4a 61 78 5a 78 34 53 63 44 30 34 44 4e 57 48 36 38 58 4b 6c 44 67 36 46 68 4c 46 67 24 Data Ascii: v_89dfca97d9109dff=tPzCuTwOFwVmz4eV4VFCaFwVTfa3-aPCbVa1a-CTVb$aZTabpCTIiaGC-Vb-Aa9CfVw9wYwzasa4MVayCaPQBC7FwsmJBbe2am8Mtu-0cpJaIGeYg5VCtVa67ijYCab4abAzz9Bw$aO$e8GaiAX99BalCFw4yHwBNmJSayX-t%2bTaKIGDm3mawMTaaHeU9do1CwxWpiRfV8W5DJaxZx4ScD04DNWH68XKlDg6FhLFg$
2024-07-04 14:26:44 UTC	14523	OUT	Data Raw: 61 38 41 54 43 41 42 61 70 35 65 6c 42 33 48 43 67 61 66 54 4e 42 54 50 54 52 61 54 58 78 7a 54 31 61 65 43 63 7a 77 4b 2d 66 43 37 46 77 70 61 52 6d 79 46 61 35 61 38 43 66 56 62 78 61 45 74 61 46 62 4e 7a 63 61 77 54 54 55 45 55 67 63 59 54 30 4e 50 56 35 50 61 39 58 6e 79 46 32 61 66 61 4e 5a 30 61 61 36 45 30 70 62 53 71 47 43 65 61 61 76 48 75 43 35 61 69 43 54 4e 61 69 61 74 50 61 34 56 53 67 35 70 62 42 70 30 43 6b 76 71 2d 61 76 76 4b 35 61 43 61 76 61 2d 75 7a 31 61 51 43 7a 45 61 43 61 59 43 77 61 35 78 61 49 61 35 61 61 42 77 47 43 54 56 77 70 61 54 61 4f 49 47 42 61 77 61 66 37 54 37 61 58 43 74 56 47 66 61 61 43 6b 38 62 6b 45 52 6d 54 4b 54 2d 61 63 61 37 43 61 24 45 57 43 63 6e 71 45 70 2d 43 56 62 54 65 61 69 61 77 36 54 78 43 4e 43 70 34 Data Ascii: a8ATCABap5elB3HCgafTNBTPTRaTXxzT1aeCczwK-fC7FwpaRmyFa5a8CfVbxaEtaFbNzcawTTUEUgcYT0NPV5Pa9XnyF2afaNZ0aa6E0pbSqGCeaavHuC5aiCTNaiatPa4VSg5pbBp0Ckvq-avvK5aCava-uz1aQCzEaCaYCwa5xaIa5aaBwGCTVwpaTaOIGBawaf7T7aXCtVGfaaCk8bkERmTKT-aca7Ca$EWCcnqEp-CVbTeaiaw6TxCNCp4
2024-07-04 14:26:44 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 14:26:44 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 23384 Connection: close cf-chl-gen: +79MXOwbhNrl27C+RpZwxZ023QLg5o6JGJAtercdU1uTvfVzzFtMzMQc09bllvF9$3jURMNfAQZMu96RyJHnnLA== Server: cloudflare CF-RAY: 89dfcac3dea943b5-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 14:26:44 UTC	1047	IN	Data Raw: 75 49 2b 48 6d 48 79 77 6e 5a 43 64 74 5a 32 61 6d 36 43 6c 75 5a 2b 39 6c 6f 79 4a 70 61 61 51 6a 61 6e 4a 30 4e 4f 74 32 62 4b 53 75 72 58 52 73 5a 62 59 6d 5a 6d 34 7a 64 36 6a 34 37 58 6f 75 62 50 6c 37 65 61 72 76 73 76 70 72 50 58 46 38 38 33 31 31 39 66 74 78 66 62 56 74 67 48 53 31 64 33 43 74 38 37 43 35 75 4c 32 36 39 6e 49 37 65 49 52 2b 51 4c 4e 7a 78 48 6a 47 41 66 70 35 68 72 62 2f 4f 72 35 43 78 6a 38 41 4f 30 41 43 4e 6b 61 47 2b 62 64 2b 79 44 74 4a 2f 6b 53 43 7a 55 32 45 6a 6a 70 46 42 45 71 47 54 51 4d 46 79 73 4d 49 2f 77 74 47 44 55 41 51 69 67 79 42 55 63 32 4f 41 74 4d 4c 77 73 4d 46 43 42 41 45 31 4e 57 54 52 4e 58 45 7a 77 58 53 56 63 31 4f 30 41 34 4a 46 45 32 55 55 59 6b 52 44 38 72 4c 32 74 67 53 45 4d 7a 54 47 41 30 56 44 56 Data Ascii: uI+HmHywnZCdtZ2am6CluZ+9loyJpaaQjanJ0NOt2bKSurXRsZbYmZm4zd6j47XoubPl7earvsvprPXF883119ftxfbVtgHS1d3Ct87C5uL269nI7eIR+QLNzxHjGAfp5hrb/Or5Cxj8AO0ACNkaG+bd+yDtJ/kSCzU2EjjpFBEqGTQMFysMI/wtGDUAQigyBUc2OAtMLwsMFCBAE1NWTRNXEzwXSVc1O0A4JFE2UUYkRD8rL2tgSEMzTGA0VDV
2024-07-04 14:26:44 UTC	1369	IN	Data Raw: 4c 78 63 69 6a 6f 71 4c 49 6a 4a 58 47 6c 37 6d 51 74 4c 6e 50 79 4b 79 31 33 64 32 68 33 64 57 78 6e 71 4c 42 74 38 4f 69 77 37 72 65 75 63 76 6b 30 4e 44 4d 39 2b 66 5a 71 38 37 55 35 4f 2f 6f 2f 73 2f 62 37 76 73 43 38 50 33 46 41 4d 6a 2b 31 77 54 46 33 75 50 67 32 77 4d 4f 42 75 76 31 43 38 72 74 31 41 38 62 43 64 6a 34 31 77 37 63 42 65 51 53 4b 50 33 36 47 75 51 4e 35 52 66 6f 45 66 41 61 41 41 6f 50 39 66 34 48 4b 2f 67 6c 4e 41 38 75 43 54 2f 36 4d 41 41 55 52 68 45 37 4a 55 63 66 53 51 77 4a 49 7a 6c 47 55 69 64 41 4a 6c 52 52 49 53 64 57 49 6c 55 54 47 54 31 54 4e 30 6b 62 4e 7a 59 6c 49 6c 52 6f 55 31 6f 6a 5a 55 31 4c 4b 6d 35 49 54 45 35 52 54 31 35 78 59 44 46 31 5a 58 41 76 56 47 41 2f 58 56 64 39 4f 30 46 64 54 31 64 41 57 6d 4a 5a 57 57 Data Ascii: LxcijoqLIjJXGl7mQtLnPyKy13d2h3dWxnqLBt8Oiw7reucvk0NDM9+fZq87U5O/o/s/b7vsC8P3FAMj+1wTF3uPg2wMOBuv1C8rt1A8bCdj41w7cBeQSKP36GuQN5RfoEfAaAAoP9f4HK/glNA8uCT/6MAAURhE7JUcfSQwJIzlGUidAJlRRISdWIlUTGT1TN0kbNzYlIlRoU1ojZU1LKm5ITE5RT15xYDF1ZXAvVGA/XVd9O0FdT1dAWmJZWW
2024-07-04 14:26:44 UTC	1369	IN	Data Raw: 71 63 43 78 74 36 61 51 72 4e 71 74 31 4d 37 52 75 35 75 7a 6e 4d 50 6e 73 74 48 6a 76 71 54 5a 35 61 7a 61 32 4d 62 6a 36 4d 76 4e 33 39 48 50 36 76 54 4a 32 66 4f 36 41 63 2f 39 2b 62 33 58 41 63 54 52 39 76 7a 35 2f 51 37 6a 77 4f 6e 68 44 2b 51 47 41 74 38 4d 38 78 6a 32 44 78 6e 70 47 50 4c 71 38 39 2f 34 32 52 30 6a 32 50 6f 64 42 68 51 74 47 2b 66 33 2b 68 6b 77 38 41 55 54 46 51 54 76 4c 43 37 79 38 79 6b 61 39 78 45 78 41 41 77 34 49 45 45 6a 41 51 64 47 52 44 39 41 49 77 46 43 42 7a 78 4c 4b 56 59 57 52 79 4e 57 49 6b 74 53 4b 46 56 56 59 45 34 75 59 42 73 74 54 6c 74 52 61 55 74 48 58 7a 73 39 5a 58 46 51 58 30 67 38 58 6b 39 34 62 54 5a 6a 57 48 70 79 56 47 73 2f 54 33 4a 56 55 48 46 75 69 46 56 5a 69 30 74 6a 58 34 69 4b 5a 47 74 77 67 32 35 Data Ascii: qcCxt6aQrNqt1M7Ru5uznMPnstHjvqTZ5aza2Mbj6MvN39HP6vTJ2fO6Ac/9+b3XAcTR9vz5/Q7jwOnhD+QGAt8M8xj2DxnpGPLq89/42R0j2PodBhQtG+f3+hkw8AUTFQTvLC7y8yka9xExAAw4IEEjAQdGRD9AIwFCBzxLKVYWRyNWIktSKFVVYE4uYBstTltRaUtHXzs9ZXFQX0g8Xk94bTZjWHpyVGs/T3JVUHFuiFVZi0tjX4iKZGtwg25
2024-07-04 14:26:44 UTC	1369	IN	Data Raw: 64 71 39 74 5a 69 6f 30 61 2f 42 76 4a 75 66 33 61 48 44 34 4d 75 6a 6e 39 72 50 32 4d 37 6e 7a 2b 62 4e 71 4d 57 33 2b 4d 69 79 75 64 43 33 39 2b 69 34 41 37 6e 52 2b 66 58 36 30 74 6e 36 42 4f 59 4c 34 75 34 4a 38 51 55 41 45 77 7a 65 33 2b 50 78 48 41 62 78 35 66 51 66 43 2f 59 50 48 65 4d 43 41 2f 41 42 35 41 6f 44 36 52 38 50 36 67 6f 74 43 53 30 50 46 43 6b 7a 44 41 34 48 4f 54 30 4f 2b 7a 51 53 47 69 39 46 47 6b 59 67 51 6a 51 2f 51 7a 30 5a 46 68 6b 4c 53 69 68 55 4c 54 39 55 54 6b 67 79 4b 42 46 45 4e 42 6b 70 4f 53 6c 66 57 56 51 2b 58 69 39 56 61 44 4a 46 50 47 4a 6f 4f 79 49 6a 4c 55 6c 51 4d 6b 34 75 54 44 5a 54 56 6a 78 46 56 46 70 2f 54 31 6d 45 67 6a 35 79 55 6d 68 47 59 47 5a 4c 54 47 52 72 57 45 68 70 6c 4a 4a 53 62 49 47 43 65 70 4e 75 Data Ascii: dq9tZio0a/BvJuf3aHD4Mujn9rP2M7nz+bNqMW3+MiyudC39+i4A7nR+fX60tn6BOYL4u4J8QUAEwze3+PxHAbx5fQfC/YPHeMCA/AB5AoD6R8P6gotCS0PFCkzDA4HOT0O+zQSGi9FGkYgQjQ/Qz0ZFhkLSihULT9UTkgyKBFENBkpOSlfWVQ+Xi9VaDJFPGJoOyIjLUlQMk4uTDZTVjxFVFp/T1mEgj5yUmhGYGZLTGRrWEhplJJSbIGCepNu
2024-07-04 14:26:44 UTC	1369	IN	Data Raw: 62 59 6e 71 2b 6d 77 62 54 54 32 4d 6a 68 7a 4b 44 66 76 61 37 6b 33 74 48 57 37 36 33 4f 2b 4f 54 4a 2b 72 58 34 39 4e 55 42 37 41 43 38 41 51 50 38 2b 67 72 65 34 76 76 2b 36 65 67 43 7a 64 2f 6b 45 77 48 33 35 66 58 33 38 77 6a 78 43 77 34 61 47 64 66 34 47 43 45 4f 46 66 77 6e 4a 39 77 44 47 51 59 4b 42 66 6b 51 45 51 4c 38 35 2f 41 42 44 77 6b 79 44 6a 51 76 48 68 2f 79 45 54 41 78 41 41 45 36 4a 7a 45 62 46 7a 30 35 49 6b 56 46 51 79 30 52 44 6b 4d 50 4d 7a 68 58 4d 30 34 59 55 55 77 56 55 54 41 73 56 6d 56 63 51 31 67 35 4f 43 4a 6c 5a 55 5a 71 4c 30 42 63 61 6d 31 78 64 6c 4d 74 4d 33 4e 77 5a 48 49 34 66 6d 6c 37 57 48 39 68 67 56 4a 59 58 6a 2b 45 61 6c 5a 74 67 46 68 5a 57 47 61 41 5a 59 78 69 66 6d 4e 73 56 6f 35 73 64 32 56 6f 6e 6c 2b 62 57 Data Ascii: bYnq+mwbTT2MjhzKDfva7k3tHW763O+OTJ+rX49NUB7AC8AQP8+gre4vv+6egCzd/kEwH35fX38wjxCw4aGdf4GCEOFfwnJ9wDGQYKBfkQEQL85/ABDwkyDjQvHh/yETAxAAE6JzEbFz05IkVFQy0RDkMPMzhXM04YUUwVUTAsVmVcQ1g5OCJlZUZqL0Bcam1xdlMtM3NwZHI4fml7WH9hgVJYXj+EalZtgFhZWGaAZYxifmNsVo5sd2Vonl+bW
2024-07-04 14:26:44 UTC	1369	IN	Data Raw: 6c 30 2b 66 70 36 63 62 72 37 65 33 72 36 63 66 79 79 65 48 4b 39 74 4c 35 7a 50 69 38 75 4c 33 67 2b 67 4d 45 39 66 54 35 2b 39 58 36 78 77 54 67 42 2f 66 64 30 4e 37 67 42 76 54 70 35 52 6f 56 32 42 77 51 43 64 73 49 2b 74 50 59 38 2b 2f 58 4a 41 4d 70 38 68 67 74 34 67 55 68 35 53 51 78 49 2b 55 6a 4a 41 66 79 49 67 63 46 47 42 51 4f 4c 68 67 30 44 68 6f 6b 4c 52 51 67 4b 44 63 62 4a 53 67 6c 48 43 67 77 53 7a 41 6f 49 45 6f 75 51 55 78 61 56 42 6b 6d 4b 68 78 4c 47 6c 77 67 54 78 35 67 4d 53 39 59 58 55 59 36 56 55 70 4c 59 6c 35 64 52 56 74 68 53 6d 4a 46 56 32 46 58 4e 6e 6f 31 57 46 74 55 53 56 49 36 58 6b 56 5a 55 33 68 52 56 47 6c 39 5a 47 39 34 53 70 47 45 64 49 52 2f 63 6c 4f 5a 63 45 79 52 6a 35 35 70 6e 56 64 36 6d 35 69 58 6b 70 74 33 63 48 Data Ascii: l0+fp6cbr7e3r6cfyyeHK9tL5zPi8uL3g+gME9fT5+9X6xwTgB/fd0N7gBvTp5RoV2BwQCdsI+tPY8+/XJAMp8hgt4gUh5SQxI+UjJAfyIgcFGBQOLhg0DhokLRQgKDcbJSglHCgwSzAoIEouQUxaVBkmKhxLGlwgTx5gMS9YXUY6VUpLYl5dRVthSmJFV2FXNno1WFtUSVI6XkVZU3hRVGl9ZG94SpGEdIR/clOZcEyRj55pnVd6m5iXkpt3cH
2024-07-04 14:26:44 UTC	1369	IN	Data Raw: 6f 73 6a 4e 38 62 4c 4a 35 38 58 4a 36 63 72 6e 30 75 37 65 2f 74 50 61 30 75 2f 4f 39 65 58 33 41 50 62 38 32 38 6a 6b 36 67 2f 43 41 38 77 4f 79 2b 72 68 42 2b 54 77 44 4f 6e 35 38 75 6e 33 49 66 6e 75 38 39 37 2b 42 69 50 39 41 52 33 33 34 67 55 68 2b 2b 59 4d 4e 43 72 77 44 41 49 69 36 68 45 57 4f 76 6f 53 4d 41 34 53 4d 68 4d 77 47 7a 63 6e 52 78 77 6a 47 7a 67 58 50 69 35 41 53 44 39 46 4a 51 64 48 45 56 49 51 4c 79 5a 4d 4f 6a 4d 71 4f 53 73 33 47 6b 45 6a 51 55 49 6b 4d 6b 49 32 50 55 46 45 53 69 67 36 52 53 31 6b 53 6d 4e 73 4d 44 52 70 52 33 4d 38 61 56 74 53 56 57 39 6a 58 6c 52 7a 66 56 5a 55 65 56 64 64 69 32 65 48 67 31 70 37 54 5a 52 6d 67 6d 4f 51 6a 32 39 37 57 31 6c 30 65 70 4a 67 64 36 52 62 59 48 32 59 6e 71 6d 44 6e 4a 36 74 67 6f 70 Data Ascii: osjN8bLJ58XJ6crn0u7e/tPa0u/O9eX3APb828jk6g/CA8wOy+rhB+TwDOn58un3Ifnu897+BiP9AR334gUh++YMNCrwDAIi6hEWOvoSMA4SMhMwGzcnRxwjGzgXPi5ASD9FJQdHEVIQLyZMOjMqOSs3GkEjQUIkMkI2PUFESig6RS1kSmNsMDRpR3M8aVtSVW9jXlRzfVZUeVddi2eHg1p7TZRmgmOQj297W1l0epJgd6RbYH2YnqmDnJ6tgop
2024-07-04 14:26:44 UTC	1369	IN	Data Raw: 2b 57 71 30 75 76 70 72 74 50 4a 7a 37 4c 57 42 41 4b 32 32 77 6a 44 31 74 2f 56 42 73 7a 6b 32 51 72 4b 36 41 51 47 46 65 76 4e 39 39 4c 76 35 52 4c 4f 38 78 41 4b 33 50 67 55 48 69 54 2b 47 42 4c 69 41 50 58 33 35 67 54 35 35 75 73 47 44 67 59 53 44 79 38 69 38 43 73 38 4c 76 6f 55 51 41 7a 39 46 30 51 75 41 78 77 34 4d 78 63 66 54 44 37 2b 4a 55 42 43 43 79 6c 45 51 68 4d 73 44 6a 67 56 4d 45 78 4f 46 7a 49 36 56 68 4d 34 4c 68 38 67 50 31 68 57 4a 30 42 73 56 68 39 43 59 47 59 76 53 54 35 6a 51 30 78 53 59 6a 6c 4f 56 6b 78 38 55 34 42 79 50 56 5a 66 5a 45 42 64 55 6e 35 47 58 6e 78 36 53 47 4a 71 66 6b 4e 72 68 45 74 51 61 6f 69 53 55 33 47 4d 6d 6c 64 31 65 34 42 64 65 58 35 66 59 58 32 59 58 36 69 41 64 70 70 74 6f 59 75 59 72 59 65 62 70 33 43 69 Data Ascii: +Wq0uvprtPJz7LWBAK22wjD1t/VBszk2QrK6AQGFevN99Lv5RLO8xAK3PgUHiT+GBLiAPX35gT55usGDgYSDy8i8Cs8LvoUQAz9F0QuAxw4MxcfTD7+JUBCCylEQhMsDjgVMExOFzI6VhM4Lh8gP1hWJ0BsVh9CYGYvST5jQ0xSYjlOVkx8U4ByPVZfZEBdUn5GXnx6SGJqfkNrhEtQaoiSU3GMmld1e4BdeX5fYX2YX6iAdpptoYuYrYebp3Ci