Edit tour

Windows Analysis Report
https://h567268.linp067.arubabusiness.it/SI1892190290/

Overview

General Information

Sample URL:	https://h567268.linp067.arubabusiness.it/SI1892190290/
Analysis ID:	1519790
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML body contains low number of good links

HTML body with high number of embedded SVGs detected

HTML title does not match URL

Stores files to the Windows start menu directory

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2012,i,17905638569617966414,2062263898532794240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1968 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://h567268.linp067.arubabusiness.it/SI1892190290/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/v1/token?sub=0szPYkcu78NzUF1M1NXMds9hLeeIKrO4IgIXaGwvR8c HTTP/1.1Host: paiement-multicanal-api.ca.gouv.frConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.amendes.gouv.frSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.amendes.gouv.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://h567268.linp067.arubabusiness.it/SI1892190290/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://h567268.linp067.arubabusiness.it/SI1892190290/	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_390.2.dr, chromecache_325.2.dr	String found in binary or memory: tarteaucitron.addScript('https://www.youtube.com/player_api'); equals www.youtube.com (Youtube)
Source: chromecache_390.2.dr, chromecache_325.2.dr	String found in binary or memory: "uri": "https://www.facebook.com/policies/cookies/", equals www.facebook.com (Facebook)
Source: chromecache_390.2.dr, chromecache_325.2.dr	String found in binary or memory: "uri": "https://www.linkedin.com/legal/cookie_policy", equals www.linkedin.com (Linkedin)
Source: chromecache_390.2.dr, chromecache_325.2.dr	String found in binary or memory: "uri": "https://www.linkedin.com/legal/privacy-policy", equals www.linkedin.com (Linkedin)
Source: chromecache_365.2.dr	String found in binary or memory: </svg><a target="_blank" href="https://www.youtube.com/channel/UCmFgGy1_Z3i_r86I49s5ZVQ/videos" title="Pour rendre le droit encore plus accessible, d equals www.youtube.com (Youtube)
Source: chromecache_239.2.dr	String found in binary or memory: tre" href="https://www.facebook.com/ServicePublicFr" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_239.2.dr	String found in binary or memory: tre" href="https://www.linkedin.com/company/service-public-fr" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_239.2.dr	String found in binary or memory: tre" href="https://www.youtube.com/ServicePublicFrance" target="_blank"> equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: h567268.linp067.arubabusiness.it
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.amendes.gouv.fr
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: paiement-multicanal-api.ca.gouv.fr
Source: global traffic	DNS traffic detected: DNS query: stationnement.gouv.fr
Source: global traffic	DNS traffic detected: DNS query: www.antai.gouv.fr
Source: global traffic	DNS traffic detected: DNS query: rogeraccess.rogervoice.com
Source: global traffic	DNS traffic detected: DNS query: www.legifrance.gouv.fr
Source: global traffic	DNS traffic detected: DNS query: rnmb.legifrance.gouv.fr
Source: global traffic	DNS traffic detected: DNS query: www.service-public.fr
Source: global traffic	DNS traffic detected: DNS query: jcmm.service-public.fr

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 26 Sep 2024 22:33:29 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 260Connection: closeVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 26 Sep 2024 22:33:29 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 257Connection: closeVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 26 Sep 2024 22:33:30 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 257Connection: closeVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 26 Sep 2024 22:33:30 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 255Connection: closeVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddencache-control: no-cachecontent-security-policy: default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';content-type: text/html; charset=utf-8pragma: no-cachex-blocked: yesx-content-type-options: nosniffx-frame-options: DENYx-xss-protection: 1; mode=blockcontent-length: 4064strict-transport-security: max-age=16000000; includeSubDomains; preload;connection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2012,i,17905638569617966414,2062263898532794240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://h567268.linp067.arubabusiness.it/SI1892190290/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2012,i,17905638569617966414,2062263898532794240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: continue
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: continue

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://www.symauth.com/cps0(	0%	URL Reputation	safe
https://oss.maxcdn.com/respond/1.4.2/respond.min.js	0%	Avira URL Cloud	safe
https://rnmb.legifrance.gouv.fr/col13a/-/559387167?page_name=accueil&ss=1280x1024&fra=0&evariant=2-4&sd=24&pggrp=accueil&pglbl=accueil%2C%2C%2C%2Caccueil&url=https%3A%2F%2Fwww.legifrance.gouv.fr%2F&	0%	Avira URL Cloud	safe
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/dist/fonts/Marianne-Medium.woff2	0%	Avira URL Cloud	safe
https://www.adup-tech.com/datenschutz	0%	Avira URL Cloud	safe
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/dist/icons/system/arrow-down-s-line.svg	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery-simulate	0%	Avira URL Cloud	safe
https://www.service-public.fr/resources/v-40729691ed/assets/js/init.js	0%	Avira URL Cloud	safe
https://www.usagers.antai.gouv.fr/demarches/saisienumeroconsultation?lang=fr	0%	Avira URL Cloud	safe
https://www.antai.gouv.fr/sites/default/files/css/css_nsDJuukCIq7H29XHzvo0tatrdO0-17_ahqJAucL18Ho.css	0%	Avira URL Cloud	safe
https://www.service-public.fr/resources/v-40729691ed/assets/js/domReady.js	0%	Avira URL Cloud	safe
https://www.antai.gouv.fr/sites/default/files/images/flags/it.png	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery/blob/a6b0705294d336ae2f63f7276de0da1195495363/src/event.js#L638	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://www.service-public.fr/particuliers/vosdroits/theme	0%	Avira URL Cloud	safe
https://www.legifrance.gouv.fr	0%	Avira URL Cloud	safe
https://www.service-public.fr/resources/v-40729691ed/assets/js/fixDsfr.js	0%	Avira URL Cloud	safe
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/dist/icons/system/add-line.svg	0%	Avira URL Cloud	safe
https://eur-lex.europa.eu/oj/direct-access.html?locale=fr	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js	0%	Avira URL Cloud	safe
https://www.antai.gouv.fr/sites/default/files/styles/pictogramme/public/2024-08/ANTAI-picto-aproposantai-120x120-bleu_0.png?itok=cmE4ssBE	0%	Avira URL Cloud	safe
https://www.antai.gouv.fr/sites/default/files/styles/pictogramme/public/2021-06/ANTAI-picto-rapportactivites-120x120-blanc.png?itok=EYaWVJob	0%	Avira URL Cloud	safe
https://github.com/etalab/licence-ouverte/blob/master/LO.md	0%	Avira URL Cloud	safe
https://www.securite-routiere.gouv.fr/	0%	Avira URL Cloud	safe
https://www.activecampaign.com/privacy-policy/	0%	Avira URL Cloud	safe
https://rnmb.legifrance.gouv.fr/veV739.js?2	0%	Avira URL Cloud	safe
https://www.antai.gouv.fr/sites/default/files/styles/wide_460_180/public/2020-07/radar-camion.png?h=79c4976a&itok=ZCxDbLaP	0%	Avira URL Cloud	safe
https://github.com/nico3333fr/jquery-accessible-simple-tooltip-aria/blob/master/LICENSE	0%	Avira URL Cloud	safe
https://getbootstrap.com/docs/3.4/javascript/#tooltip	0%	Avira URL Cloud	safe
https://www.etracker.com/en/data-protection.html	0%	Avira URL Cloud	safe
https://www.antai.gouv.fr/sites/default/files/images/flags/en.png	0%	Avira URL Cloud	safe
https://www.service-public.fr/particuliers/vosdroits/F14128	0%	Avira URL Cloud	safe
http://wet-boew.github.io/wet-boew/demos/datepicker/datepicker-fr.html	0%	Avira URL Cloud	safe
https://www.antai.gouv.fr/sites/default/files/styles/logo_60x60_/public/logo-aides-2_1.png?itok=yAZUuiky	0%	Avira URL Cloud	safe
https://getbootstrap.com/docs/3.4/javascript/#collapse	0%	Avira URL Cloud	safe
https://stationnement.gouv.fr/assets/img/design/qrcode.png	0%	Avira URL Cloud	safe
https://www.antai.gouv.fr/themes/open_antai_swa/antai_logo.png	0%	Avira URL Cloud	safe
https://www.shareasale.com/PrivacyPolicy.pdf	0%	Avira URL Cloud	safe
https://www.info.gouv.fr/	0%	Avira URL Cloud	safe
https://www.legifrance.gouv.fr/resources/scripts/vendors/jquery-accessible-accordion-aria.js	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
rogeraccess.rogervoice.com	34.77.26.81	true	false	unknown
secure-www-sp-dila-prod.as8677.net	160.92.168.33	true	false	unknown
tlp-service-paiement.giservices.io	185.8.53.83	true	false	unknown
linp067.arubabusiness.it	80.88.87.86	true	false	unknown
p69gwj5.x.incapdns.net	45.60.14.53	true	false	unknown
amendes.gouv.fr	185.8.53.118	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
gva.et-gv.fr	91.134.109.31	true	false	unknown
stationnement.gouv.fr	185.8.53.118	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
www.antai.gouv.fr	90.102.74.9	true	false	unknown
www.legifrance.gouv.fr	unknown	unknown	false	unknown
jcmm.service-public.fr	unknown	unknown	false	unknown
paiement-multicanal-api.ca.gouv.fr	unknown	unknown	false	unknown
rnmb.legifrance.gouv.fr	unknown	unknown	false	unknown
www.amendes.gouv.fr	unknown	unknown	false	unknown
www.service-public.fr	unknown	unknown	false	unknown
h567268.linp067.arubabusiness.it	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://rnmb.legifrance.gouv.fr/col13a/-/559387167?page_name=accueil&ss=1280x1024&fra=0&evariant=2-4&sd=24&pggrp=accueil&pglbl=accueil%2C%2C%2C%2Caccueil&url=https%3A%2F%2Fwww.legifrance.gouv.fr%2F&	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/dist/icons/system/arrow-down-s-line.svg	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/dist/fonts/Marianne-Medium.woff2	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/js/domReady.js	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/css/css_nsDJuukCIq7H29XHzvo0tatrdO0-17_ahqJAucL18Ho.css	false	Avira URL Cloud: safe	unknown
https://www.amendes.gouv.fr/tai/engagement	false		unknown
https://www.service-public.fr/resources/v-40729691ed/assets/js/init.js	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/images/flags/it.png	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/js/fixDsfr.js	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/dist/icons/system/add-line.svg	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/styles/pictogramme/public/2024-08/ANTAI-picto-aproposantai-120x120-bleu_0.png?itok=cmE4ssBE	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/styles/pictogramme/public/2021-06/ANTAI-picto-rapportactivites-120x120-blanc.png?itok=EYaWVJob	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/styles/wide_460_180/public/2020-07/radar-camion.png?h=79c4976a&itok=ZCxDbLaP	false	Avira URL Cloud: safe	unknown
https://rnmb.legifrance.gouv.fr/veV739.js?2	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/images/flags/en.png	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/styles/logo_60x60_/public/logo-aides-2_1.png?itok=yAZUuiky	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/themes/open_antai_swa/antai_logo.png	false	Avira URL Cloud: safe	unknown
https://stationnement.gouv.fr/assets/img/design/qrcode.png	false	Avira URL Cloud: safe	unknown
https://www.legifrance.gouv.fr/resources/scripts/vendors/jquery-accessible-accordion-aria.js	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/js/tagFilter.js	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/styles/pictogramme/public/2021-04/pictogrammesANTAI-26.png?itok=Vb2QJUa1	false	Avira URL Cloud: safe	unknown
https://www.amendes.gouv.fr/assets/i18n/en.json	false	Avira URL Cloud: safe	unknown
https://stationnement.gouv.fr/assets/img/design/screenshot-xxl.png	false	Avira URL Cloud: safe	unknown
https://stationnement.gouv.fr/bg-intro.99be0ff321b3d0effcb2.jpg	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/images/picto-plus-cercle-noir.png	false	Avira URL Cloud: safe	unknown
https://www.legifrance.gouv.fr/contenu/logo	false	Avira URL Cloud: safe	unknown
https://www.amendes.gouv.fr/tai/confidentialite	false		unknown
https://code.jquery.com/jquery-3.6.3.min.js	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/js/entreprendre/persogeo/components/htmlGenerator.js	false	Avira URL Cloud: safe	unknown
https://h567268.linp067.arubabusiness.it/SI1892190290/am/infos_files/banner.f9855031892baad8a497.svg	true	Avira URL Cloud: phishing	unknown
https://www.legifrance.gouv.fr/resources/scripts/vendors/datepicker.min.js	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/js/video.js	false	Avira URL Cloud: safe	unknown
https://stationnement.gouv.fr/polyfills-es2017.8494660e9e7fbd9a747c.js	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/dist/dsfr.module.min.js	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/img/logo-rf-top.svg	false	Avira URL Cloud: safe	unknown
https://www.amendes.gouv.fr/styles.bd92f71559d50d7ea26a.css	false	Avira URL Cloud: safe	unknown
https://www.amendes.gouv.fr/913-es2017.717d1511ea493d8e0f54.js	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/	false		unknown
https://stationnement.gouv.fr/	false	Avira URL Cloud: safe	unknown
https://www.amendes.gouv.fr/bg-intro.9630b0c4c57c3d72d3ec.jpg	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/js/navigation.js	false	Avira URL Cloud: safe	unknown
https://stationnement.gouv.fr/fps	false		unknown
https://www.service-public.fr/resources/v-40729691ed/assets/js/choice-tree/choiceTreeAideTemplate.html	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/js/configRgpdPart.js	false	Avira URL Cloud: safe	unknown
https://www.antai.gouv.fr/sites/default/files/images/picto-noir98x98.png	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/jquery/jquery-simulate	chromecache_234.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://www.adup-tech.com/datenschutz	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usagers.antai.gouv.fr/demarches/saisienumeroconsultation?lang=fr	chromecache_418.2.dr	false	Avira URL Cloud: safe	unknown
https://oss.maxcdn.com/respond/1.4.2/respond.min.js	chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/theme	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery/blob/a6b0705294d336ae2f63f7276de0da1195495363/src/event.js#L638	chromecache_432.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_243.2.dr, chromecache_339.2.dr, chromecache_501.2.dr	false	Avira URL Cloud: safe	unknown
https://eur-lex.europa.eu/oj/direct-access.html?locale=fr	chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
https://www.legifrance.gouv.fr	chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
https://www.securite-routiere.gouv.fr/	chromecache_418.2.dr	false	Avira URL Cloud: safe	unknown
https://www.activecampaign.com/privacy-policy/	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/nico3333fr/jquery-accessible-simple-tooltip-aria/blob/master/LICENSE	chromecache_303.2.dr, chromecache_396.2.dr	false	Avira URL Cloud: safe	unknown
https://www.etracker.com/en/data-protection.html	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/etalab/licence-ouverte/blob/master/LO.md	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/docs/3.4/javascript/#tooltip	chromecache_234.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/F14128	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
http://wet-boew.github.io/wet-boew/demos/datepicker/datepicker-fr.html	chromecache_372.2.dr, chromecache_405.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shareasale.com/PrivacyPolicy.pdf	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
http://www.symauth.com/cps0(	chromecache_276.2.dr, chromecache_320.2.dr, chromecache_421.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/docs/3.4/javascript/#collapse	chromecache_234.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://www.info.gouv.fr/	chromecache_239.2.dr, chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0Font	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
http://pubdirecte.com/contact.php	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/resources/v-40729691ed/assets/dsfr-1.12/dist/favicon/manifest.webmanif	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.amendes.gouv.fr/tai/amende/ID/key	chromecache_219.2.dr, chromecache_458.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/actualites/lettresp/archives	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/gp/help/customer/display.html/ref=help_search_1-1?ie=UTF8&nodeId=201909010&qi	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gouvernement.fr/sites/default/files/contenu/piece-jointe/2021/02/20201106_aff_engagement	chromecache_261.2.dr, chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
http://www.symauth.com/rpa04	chromecache_276.2.dr, chromecache_320.2.dr, chromecache_421.2.dr	false	Avira URL Cloud: safe	unknown
https://www.legifrance.gouv.fr/liste/idcc?facetteTexteBase=TEXTE_BASE&facetteEtat=VIGUEUR&fa	chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
http://www.amendes.gouv.fr	chromecache_418.2.dr	false	Avira URL Cloud: safe	unknown
http://www.prelinker.com/index/index/cgu/	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#serialize-an-identifier	chromecache_234.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/N19806	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/N19807	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/N19808	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/N19809	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/N19803	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.legifrance.gouv.fr/search/all?query=	chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/N19804	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/recherche	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/N19805	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/F31952	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/vosdroits/N31931	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.ferank.fr/respect-vie-privee/#regiepublicitaire	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://about.pinterest.com/privacy-policy	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
http://locutus.io/php/strings/strip_tags/	chromecache_234.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/nico3333fr/jquery-accessible-tabs-aria/blob/master/LICENSE	chromecache_508.2.dr, chromecache_359.2.dr	false	Avira URL Cloud: safe	unknown
http://github.com/robloach/jquery-once	chromecache_234.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
http://www.getplus.fr/Conditions-generales-de-vente_a226.html	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.service-public.fr/particuliers/recherche?rubricFilter=serviceEnLigne&rubricTypeFilte	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.legifrance.gouv.fr/contenu/Media/Files/en-tete/legifrance-guide-de-cas-d-usage.pdf	chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
https://matterport.com/es/legal/privacy-policy/	chromecache_390.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
185.8.53.118	amendes.gouv.fr	Belgium	62325	OGONEBE	false
185.8.53.83	tlp-service-paiement.giservices.io	Belgium	62325	OGONEBE	false
160.92.168.33	secure-www-sp-dila-prod.as8677.net	France	8677	WORLDLINEFR	false
45.60.14.53	p69gwj5.x.incapdns.net	United States	19551	INCAPSULAUS	false
90.102.74.9	www.antai.gouv.fr	France	3215	FranceTelecom-OrangeFR	false
91.134.109.31	gva.et-gv.fr	France	16276	OVHFR	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
80.88.87.86	linp067.arubabusiness.it	Italy	31034	ARUBA-ASNIT	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.77.26.81	rogeraccess.rogervoice.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1519790
Start date and time:	2024-09-27 00:32:29 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://h567268.linp067.arubabusiness.it/SI1892190290/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@24/571@50/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.amendes.gouv.fr/tai Browse: https://www.amendes.gouv.fr/tai/accessibilite Browse: https://www.amendes.gouv.fr/tai/engagement Browse: https://stationnement.gouv.fr/ Browse: https://www.antai.gouv.fr/ Browse: https://www.amendes.gouv.fr/tai/confidentialite Browse: https://www.legifrance.gouv.fr/ Browse: https://www.service-public.fr/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Sep 26 21:33:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9796596838654876
Encrypted:	false
SSDEEP:	48:8IndGTi68PHMidAKZdA19ehwiZUklqehZy+3:8Igv8y6y
MD5:	CAE00A1FE32D51B77E1E9310070A819E
SHA1:	213BE1741C6EFA79C25C3152D3ACB913FF6E1607
SHA-256:	433AE711F324FCFF24AA7F49005D4F4BC15FF244F37847C353411FB74F0DC767
SHA-512:	A4324E3DB5895C56C0215213BEF580225D96AB196D930905C077D20178F1CAC97CD0D6B7CAC4A3F800C93CCEB4EE0F63CD964EA4E24E035C8F78035E66F92C97
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....0...d...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I:Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V:Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V:Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V:Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V:Y,............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d)......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 00:33:22.416492939 CEST	192.168.2.5	1.1.1.1	0x35a1	Standard query (0)	h567268.linp067.arubabusiness.it	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:22.416836023 CEST	192.168.2.5	1.1.1.1	0x1594	Standard query (0)	h567268.linp067.arubabusiness.it	65	IN (0x0001)	false
Sep 27, 2024 00:33:25.115900993 CEST	192.168.2.5	1.1.1.1	0x4d4c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:25.116581917 CEST	192.168.2.5	1.1.1.1	0x26f5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 00:33:27.146678925 CEST	192.168.2.5	1.1.1.1	0x7d59	Standard query (0)	www.amendes.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.147346020 CEST	192.168.2.5	1.1.1.1	0xb421	Standard query (0)	www.amendes.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:33:27.152121067 CEST	192.168.2.5	1.1.1.1	0xab33	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.152734041 CEST	192.168.2.5	1.1.1.1	0xc8a5	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 00:33:27.158442974 CEST	192.168.2.5	1.1.1.1	0x8905	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.159113884 CEST	192.168.2.5	1.1.1.1	0x76e8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 00:33:29.483952045 CEST	192.168.2.5	1.1.1.1	0x877c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.484153986 CEST	192.168.2.5	1.1.1.1	0x4ba7	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 00:33:29.534986019 CEST	192.168.2.5	1.1.1.1	0x5be9	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.535347939 CEST	192.168.2.5	1.1.1.1	0xeb8d	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 00:33:29.538129091 CEST	192.168.2.5	1.1.1.1	0xfc83	Standard query (0)	h567268.linp067.arubabusiness.it	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.538445950 CEST	192.168.2.5	1.1.1.1	0xff75	Standard query (0)	h567268.linp067.arubabusiness.it	65	IN (0x0001)	false
Sep 27, 2024 00:33:30.128578901 CEST	192.168.2.5	1.1.1.1	0x6161	Standard query (0)	www.amendes.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:30.128822088 CEST	192.168.2.5	1.1.1.1	0x9eeb	Standard query (0)	www.amendes.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:33:34.421175957 CEST	192.168.2.5	1.1.1.1	0xc7f	Standard query (0)	www.amendes.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:34.421345949 CEST	192.168.2.5	1.1.1.1	0x2bb	Standard query (0)	www.amendes.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:33:38.324595928 CEST	192.168.2.5	1.1.1.1	0x3fa8	Standard query (0)	paiement-multicanal-api.ca.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:38.324960947 CEST	192.168.2.5	1.1.1.1	0x113e	Standard query (0)	paiement-multicanal-api.ca.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:33:40.411319017 CEST	192.168.2.5	1.1.1.1	0x46cb	Standard query (0)	paiement-multicanal-api.ca.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:40.411679983 CEST	192.168.2.5	1.1.1.1	0x82f6	Standard query (0)	paiement-multicanal-api.ca.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:33:50.167717934 CEST	192.168.2.5	1.1.1.1	0xef0	Standard query (0)	stationnement.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:50.168359995 CEST	192.168.2.5	1.1.1.1	0x1e95	Standard query (0)	stationnement.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:33:52.031302929 CEST	192.168.2.5	1.1.1.1	0x8637	Standard query (0)	stationnement.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:52.031651974 CEST	192.168.2.5	1.1.1.1	0xd3af	Standard query (0)	stationnement.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:00.293446064 CEST	192.168.2.5	1.1.1.1	0x3177	Standard query (0)	www.antai.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:00.297954082 CEST	192.168.2.5	1.1.1.1	0xf320	Standard query (0)	www.antai.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:02.280560970 CEST	192.168.2.5	1.1.1.1	0xf2e3	Standard query (0)	www.antai.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:02.283667088 CEST	192.168.2.5	1.1.1.1	0x1568	Standard query (0)	www.antai.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:09.920785904 CEST	192.168.2.5	1.1.1.1	0x5056	Standard query (0)	rogeraccess.rogervoice.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:09.921617031 CEST	192.168.2.5	1.1.1.1	0x6805	Standard query (0)	rogeraccess.rogervoice.com	65	IN (0x0001)	false
Sep 27, 2024 00:34:16.826957941 CEST	192.168.2.5	1.1.1.1	0x2a05	Standard query (0)	www.legifrance.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:16.839755058 CEST	192.168.2.5	1.1.1.1	0xcbfb	Standard query (0)	www.legifrance.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:20.706613064 CEST	192.168.2.5	1.1.1.1	0x647e	Standard query (0)	www.legifrance.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:20.707068920 CEST	192.168.2.5	1.1.1.1	0xcba1	Standard query (0)	www.legifrance.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:22.095170021 CEST	192.168.2.5	1.1.1.1	0x3aa3	Standard query (0)	rnmb.legifrance.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:22.095357895 CEST	192.168.2.5	1.1.1.1	0x718f	Standard query (0)	rnmb.legifrance.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:23.397290945 CEST	192.168.2.5	1.1.1.1	0x6f19	Standard query (0)	rnmb.legifrance.gouv.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:23.397671938 CEST	192.168.2.5	1.1.1.1	0x7e05	Standard query (0)	rnmb.legifrance.gouv.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:26.258749962 CEST	192.168.2.5	1.1.1.1	0x9ee2	Standard query (0)	www.service-public.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:26.259125948 CEST	192.168.2.5	1.1.1.1	0x6713	Standard query (0)	www.service-public.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:27.874814987 CEST	192.168.2.5	1.1.1.1	0x2246	Standard query (0)	www.service-public.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:27.875716925 CEST	192.168.2.5	1.1.1.1	0x6224	Standard query (0)	www.service-public.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:29.584630013 CEST	192.168.2.5	1.1.1.1	0x9989	Standard query (0)	jcmm.service-public.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:29.585155964 CEST	192.168.2.5	1.1.1.1	0x2b01	Standard query (0)	jcmm.service-public.fr	65	IN (0x0001)	false
Sep 27, 2024 00:34:31.081885099 CEST	192.168.2.5	1.1.1.1	0xb376	Standard query (0)	jcmm.service-public.fr	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:31.082067013 CEST	192.168.2.5	1.1.1.1	0x224b	Standard query (0)	jcmm.service-public.fr	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 00:33:22.471359015 CEST	1.1.1.1	192.168.2.5	0x35a1	No error (0)	h567268.linp067.arubabusiness.it	linp067.arubabusiness.it		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:22.471359015 CEST	1.1.1.1	192.168.2.5	0x35a1	No error (0)	linp067.arubabusiness.it		80.88.87.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:22.525120974 CEST	1.1.1.1	192.168.2.5	0x1594	No error (0)	h567268.linp067.arubabusiness.it	linp067.arubabusiness.it		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:25.122946024 CEST	1.1.1.1	192.168.2.5	0x4d4c	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:25.123248100 CEST	1.1.1.1	192.168.2.5	0x26f5	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 00:33:27.160718918 CEST	1.1.1.1	192.168.2.5	0xab33	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.160718918 CEST	1.1.1.1	192.168.2.5	0xab33	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.160718918 CEST	1.1.1.1	192.168.2.5	0xab33	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.160718918 CEST	1.1.1.1	192.168.2.5	0xab33	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.167665958 CEST	1.1.1.1	192.168.2.5	0x8905	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.167665958 CEST	1.1.1.1	192.168.2.5	0x8905	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.168875933 CEST	1.1.1.1	192.168.2.5	0x76e8	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 00:33:27.179884911 CEST	1.1.1.1	192.168.2.5	0x7d59	No error (0)	www.amendes.gouv.fr	amendes.gouv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:27.179884911 CEST	1.1.1.1	192.168.2.5	0x7d59	No error (0)	amendes.gouv.fr		185.8.53.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:27.189165115 CEST	1.1.1.1	192.168.2.5	0xb421	No error (0)	www.amendes.gouv.fr	amendes.gouv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:29.492993116 CEST	1.1.1.1	192.168.2.5	0x4ba7	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 00:33:29.493207932 CEST	1.1.1.1	192.168.2.5	0x877c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.493207932 CEST	1.1.1.1	192.168.2.5	0x877c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.544013977 CEST	1.1.1.1	192.168.2.5	0x5be9	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.544013977 CEST	1.1.1.1	192.168.2.5	0x5be9	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.544013977 CEST	1.1.1.1	192.168.2.5	0x5be9	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.544013977 CEST	1.1.1.1	192.168.2.5	0x5be9	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.588663101 CEST	1.1.1.1	192.168.2.5	0xfc83	No error (0)	h567268.linp067.arubabusiness.it	linp067.arubabusiness.it		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:29.588663101 CEST	1.1.1.1	192.168.2.5	0xfc83	No error (0)	linp067.arubabusiness.it		80.88.87.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:29.610732079 CEST	1.1.1.1	192.168.2.5	0xff75	No error (0)	h567268.linp067.arubabusiness.it	linp067.arubabusiness.it		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:30.168668985 CEST	1.1.1.1	192.168.2.5	0x9eeb	No error (0)	www.amendes.gouv.fr	amendes.gouv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:30.169128895 CEST	1.1.1.1	192.168.2.5	0x6161	No error (0)	www.amendes.gouv.fr	amendes.gouv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:30.169128895 CEST	1.1.1.1	192.168.2.5	0x6161	No error (0)	amendes.gouv.fr		185.8.53.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:34.456763029 CEST	1.1.1.1	192.168.2.5	0x2bb	No error (0)	www.amendes.gouv.fr	amendes.gouv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:34.456810951 CEST	1.1.1.1	192.168.2.5	0xc7f	No error (0)	www.amendes.gouv.fr	amendes.gouv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:34.456810951 CEST	1.1.1.1	192.168.2.5	0xc7f	No error (0)	amendes.gouv.fr		185.8.53.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:37.358952045 CEST	1.1.1.1	192.168.2.5	0x5f34	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:37.358952045 CEST	1.1.1.1	192.168.2.5	0x5f34	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:38.410347939 CEST	1.1.1.1	192.168.2.5	0x113e	No error (0)	paiement-multicanal-api.ca.gouv.fr	paiement-multicanal-api.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:38.410347939 CEST	1.1.1.1	192.168.2.5	0x113e	No error (0)	paiement-multicanal-api.as8677.net	prd-services-paiement-antai-as.ca-net-tlp.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:38.410347939 CEST	1.1.1.1	192.168.2.5	0x113e	No error (0)	prd-services-paiement-antai-as.ca-net-tlp.as8677.net	tlp-service-paiement.giservices.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:38.433516979 CEST	1.1.1.1	192.168.2.5	0x3fa8	No error (0)	paiement-multicanal-api.ca.gouv.fr	paiement-multicanal-api.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:38.433516979 CEST	1.1.1.1	192.168.2.5	0x3fa8	No error (0)	paiement-multicanal-api.as8677.net	prd-services-paiement-antai-as.ca-net-tlp.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:38.433516979 CEST	1.1.1.1	192.168.2.5	0x3fa8	No error (0)	prd-services-paiement-antai-as.ca-net-tlp.as8677.net	tlp-service-paiement.giservices.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:38.433516979 CEST	1.1.1.1	192.168.2.5	0x3fa8	No error (0)	tlp-service-paiement.giservices.io		185.8.53.83	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:40.453470945 CEST	1.1.1.1	192.168.2.5	0x46cb	No error (0)	paiement-multicanal-api.ca.gouv.fr	paiement-multicanal-api.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:40.453470945 CEST	1.1.1.1	192.168.2.5	0x46cb	No error (0)	paiement-multicanal-api.as8677.net	prd-services-paiement-antai-as.ca-net-tlp.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:40.453470945 CEST	1.1.1.1	192.168.2.5	0x46cb	No error (0)	prd-services-paiement-antai-as.ca-net-tlp.as8677.net	tlp-service-paiement.giservices.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:40.453470945 CEST	1.1.1.1	192.168.2.5	0x46cb	No error (0)	tlp-service-paiement.giservices.io		185.8.53.83	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:40.509813070 CEST	1.1.1.1	192.168.2.5	0x82f6	No error (0)	paiement-multicanal-api.ca.gouv.fr	paiement-multicanal-api.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:40.509813070 CEST	1.1.1.1	192.168.2.5	0x82f6	No error (0)	paiement-multicanal-api.as8677.net	prd-services-paiement-antai-as.ca-net-tlp.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:40.509813070 CEST	1.1.1.1	192.168.2.5	0x82f6	No error (0)	prd-services-paiement-antai-as.ca-net-tlp.as8677.net	tlp-service-paiement.giservices.io		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:50.203207970 CEST	1.1.1.1	192.168.2.5	0xef0	No error (0)	stationnement.gouv.fr		185.8.53.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:52.064557076 CEST	1.1.1.1	192.168.2.5	0x8637	No error (0)	stationnement.gouv.fr		185.8.53.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:33:52.682442904 CEST	1.1.1.1	192.168.2.5	0x47d4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:33:52.682442904 CEST	1.1.1.1	192.168.2.5	0x47d4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:00.324568987 CEST	1.1.1.1	192.168.2.5	0x3177	No error (0)	www.antai.gouv.fr		90.102.74.9	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:02.315239906 CEST	1.1.1.1	192.168.2.5	0xf2e3	No error (0)	www.antai.gouv.fr		90.102.74.9	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:09.973473072 CEST	1.1.1.1	192.168.2.5	0x5056	No error (0)	rogeraccess.rogervoice.com		34.77.26.81	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:13.853667021 CEST	1.1.1.1	192.168.2.5	0x53f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:13.853667021 CEST	1.1.1.1	192.168.2.5	0x53f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:16.838155985 CEST	1.1.1.1	192.168.2.5	0x2a05	No error (0)	www.legifrance.gouv.fr	p69gwj5.x.incapdns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:16.838155985 CEST	1.1.1.1	192.168.2.5	0x2a05	No error (0)	p69gwj5.x.incapdns.net		45.60.14.53	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:16.867542982 CEST	1.1.1.1	192.168.2.5	0xcbfb	Server failure (2)	www.legifrance.gouv.fr	none	none	65	IN (0x0001)	false
Sep 27, 2024 00:34:20.721702099 CEST	1.1.1.1	192.168.2.5	0x647e	No error (0)	www.legifrance.gouv.fr	p69gwj5.x.incapdns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:20.721702099 CEST	1.1.1.1	192.168.2.5	0x647e	No error (0)	p69gwj5.x.incapdns.net		45.60.14.53	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:20.732368946 CEST	1.1.1.1	192.168.2.5	0xcba1	Server failure (2)	www.legifrance.gouv.fr	none	none	65	IN (0x0001)	false
Sep 27, 2024 00:34:22.102206945 CEST	1.1.1.1	192.168.2.5	0x3aa3	No error (0)	rnmb.legifrance.gouv.fr	dila.ent.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:22.102206945 CEST	1.1.1.1	192.168.2.5	0x3aa3	No error (0)	dila.ent.et-gv.fr	gva.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:22.102206945 CEST	1.1.1.1	192.168.2.5	0x3aa3	No error (0)	gva.et-gv.fr		91.134.109.31	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:22.102485895 CEST	1.1.1.1	192.168.2.5	0x718f	No error (0)	rnmb.legifrance.gouv.fr	dila.ent.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:22.102485895 CEST	1.1.1.1	192.168.2.5	0x718f	No error (0)	dila.ent.et-gv.fr	gva.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:23.408361912 CEST	1.1.1.1	192.168.2.5	0x7e05	No error (0)	rnmb.legifrance.gouv.fr	dila.ent.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:23.408361912 CEST	1.1.1.1	192.168.2.5	0x7e05	No error (0)	dila.ent.et-gv.fr	gva.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:23.441764116 CEST	1.1.1.1	192.168.2.5	0x6f19	No error (0)	rnmb.legifrance.gouv.fr	dila.ent.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:23.441764116 CEST	1.1.1.1	192.168.2.5	0x6f19	No error (0)	dila.ent.et-gv.fr	gva.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:23.441764116 CEST	1.1.1.1	192.168.2.5	0x6f19	No error (0)	gva.et-gv.fr		91.134.109.31	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:26.299304962 CEST	1.1.1.1	192.168.2.5	0x6713	No error (0)	www.service-public.fr	secure-www-sp-dila-prod.ext.dila.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:26.299304962 CEST	1.1.1.1	192.168.2.5	0x6713	No error (0)	secure-www-sp-dila-prod.ext.dila.fr	secure-www-sp-dila-prod.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:26.302757025 CEST	1.1.1.1	192.168.2.5	0x9ee2	No error (0)	www.service-public.fr	secure-www-sp-dila-prod.ext.dila.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:26.302757025 CEST	1.1.1.1	192.168.2.5	0x9ee2	No error (0)	secure-www-sp-dila-prod.ext.dila.fr	secure-www-sp-dila-prod.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:26.302757025 CEST	1.1.1.1	192.168.2.5	0x9ee2	No error (0)	secure-www-sp-dila-prod.as8677.net		160.92.168.33	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:27.901357889 CEST	1.1.1.1	192.168.2.5	0x6224	No error (0)	www.service-public.fr	secure-www-sp-dila-prod.ext.dila.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:27.901357889 CEST	1.1.1.1	192.168.2.5	0x6224	No error (0)	secure-www-sp-dila-prod.ext.dila.fr	secure-www-sp-dila-prod.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:27.949851990 CEST	1.1.1.1	192.168.2.5	0x2246	No error (0)	www.service-public.fr	secure-www-sp-dila-prod.ext.dila.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:27.949851990 CEST	1.1.1.1	192.168.2.5	0x2246	No error (0)	secure-www-sp-dila-prod.ext.dila.fr	secure-www-sp-dila-prod.as8677.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:27.949851990 CEST	1.1.1.1	192.168.2.5	0x2246	No error (0)	secure-www-sp-dila-prod.as8677.net		160.92.168.33	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:29.613099098 CEST	1.1.1.1	192.168.2.5	0x2b01	No error (0)	jcmm.service-public.fr	gva.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:29.613219023 CEST	1.1.1.1	192.168.2.5	0x9989	No error (0)	jcmm.service-public.fr	gva.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:29.613219023 CEST	1.1.1.1	192.168.2.5	0x9989	No error (0)	gva.et-gv.fr		91.134.109.31	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:31.123960018 CEST	1.1.1.1	192.168.2.5	0x224b	No error (0)	jcmm.service-public.fr	gva.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:31.126209974 CEST	1.1.1.1	192.168.2.5	0xb376	No error (0)	jcmm.service-public.fr	gva.et-gv.fr		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:31.126209974 CEST	1.1.1.1	192.168.2.5	0xb376	No error (0)	gva.et-gv.fr		91.134.109.31	A (IP address)	IN (0x0001)	false
Sep 27, 2024 00:34:34.560951948 CEST	1.1.1.1	192.168.2.5	0xcf7e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 00:34:34.560951948 CEST	1.1.1.1	192.168.2.5	0xcf7e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:23 UTC	688	OUT	GET /SI1892190290/ HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:23 UTC	208	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 26 Sep 2024 22:33:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Vary: User-Agent Location: am X-Powered-By: PleskLin

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:23 UTC	690	OUT	GET /SI1892190290/am HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:23 UTC	264	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 26 Sep 2024 22:33:23 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 265 Connection: close Location: https://h567268.linp067.arubabusiness.it/SI1892190290/am/ X-Powered-By: PleskLin
2024-09-26 22:33:23 UTC	265	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 35 36 37 32 36 38 2e 6c 69 6e 70 30 36 37 2e 61 72 75 62 61 62 75 73 69 6e 65 73 73 2e 69 74 2f 53 49 31 38 39 32 31 39 30 32 39 30 2f 61 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://h567268.linp067.arubabusiness.it/SI1892190290/am/">here</a>.</p></bod

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://h567268.linp067.arubabusiness.it/SI1892190290/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Windows Analysis Report
https://h567268.linp067.arubabusiness.it/SI1892190290/

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:24 UTC	691	OUT	GET /SI1892190290/am/ HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:25 UTC	219	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 26 Sep 2024 22:33:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Vary: User-Agent Location: infospage.php X-Powered-By: PleskLin

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:26 UTC	704	OUT	GET /SI1892190290/am/infospage.php HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:26 UTC	223	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 26 Sep 2024 22:33:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: User-Agent X-Powered-By: PleskLin
2024-09-26 22:33:26 UTC	16161	IN	Data Raw: 65 35 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 22 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 69 74 65 20 6f 66 66 69 63 69 65 6c 20 75 6e 69 71 75 65 20 64 65 20 74 c3 a9 6c c3 a9 70 61 69 65 6d 65 6e 74 20 7c 20 41 6d 65 6e 64 65 73 2e 67 6f 75 76 2e 66 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 75 6c 20 73 69 Data Ascii: e5d6<!DOCTYPE html><html lang="fr"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="utf-8"> <title>Site officiel unique de tlpaiement \| Amendes.gouv.fr</title> <meta name="description" content="Seul si
2024-09-26 22:33:26 UTC	16384	IN	Data Raw: 30 5d 2c 20 2e 6f 70 65 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 39 38 34 33 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 35 35 36 32 35 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 3a 68 6f 76 65 72 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 Data Ascii: 0], .open[_ngcontent-kke-c30] > .dropdown-toggle.btn-success.focus[_ngcontent-kke-c30]{color:#fff;background-color:#398439;border-color:#255625}.btn-success.disabled[_ngcontent-kke-c30]:hover, .btn-success[disabled][_ngcontent-kke-c30]:hover, fieldset[dis
2024-09-26 22:33:26 UTC	16384	IN	Data Raw: 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 3a 61 63 74 69 76 65 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 36 35 61 38 38 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 34 35 35 38 30 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 64 69 73 61 62 6c 65 64 5d 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 20 20 20 2e 62 74 6e 2d 70 72 69 6d 61 72 Data Ascii: y[_ngcontent-kke-c30]:active, .btn-primary.active[_ngcontent-kke-c30]{background-color:#265a88;border-color:#245580}.btn-primary.disabled[_ngcontent-kke-c30], .btn-primary[disabled][_ngcontent-kke-c30], fieldset[disabled][_ngcontent-kke-c30] .btn-primar
2024-09-26 22:33:26 UTC	9922	IN	Data Raw: 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 23 64 66 66 30 64 38 20 30 2c 23 64 30 65 39 63 36 20 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 22 23 66 66 64 66 66 30 64 38 22 2c 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 22 23 66 66 64 30 65 39 63 36 22 2c 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 70 61 6e 65 6c 2d 69 6e 66 6f 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 6b 6b 65 2d 63 33 30 5d Data Ascii: tent-kke-c30]{background-image:linear-gradient(to bottom,#dff0d8 0,#d0e9c6 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr="#ffdff0d8",endColorstr="#ffd0e9c6",GradientType=0);background-repeat:repeat-x}.panel-info[_ngcontent-kke-c30]

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-26 22:33:27 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=65567 Date: Thu, 26 Sep 2024 22:33:27 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:27 UTC	597	OUT	GET /jquery-3.6.3.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://h567268.linp067.arubabusiness.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://h567268.linp067.arubabusiness.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:27 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89947 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15f5b" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1586644 Date: Thu, 26 Sep 2024 22:33:27 GMT X-Served-By: cache-lga21985-LGA, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT X-Cache-Hits: 46, 0 X-Timer: S1727390008.849858,VS0,VE1 Vary: Accept-Encoding
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 33 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.3 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 45 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 45 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 45 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=E.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return E.each(this,e)},map:function(n){return this.pushStack(E.map(this,f
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 79 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=y.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 76 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 45 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 69 66 28 64 2e 63 73 73 53 75 70 70 6f 72 74 73 53 65 6c 65 63 74 6f 72 26 26 21 43 53 53 2e 73 75 70 70 6f 72 74 73 28 22 73 65 6c 65 63 74 6f Data Ascii: )){(f=ee.test(t)&&ve(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=E)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{if(d.cssSupportsSelector&&!CSS.supports("selecto
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 61 29 7b 72 65 74 75 72 6e 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e Data Ascii: "in e&&e.disabled===t}}function ye(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ve(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 53 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 Data Ascii: ?(b.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&S){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 52 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 45 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 7e 3d 22 29 2c 28 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 Data Ascii: [selected]").length\|\|y.push("\\["+M+"(?:value\|"+R+")"),e.querySelectorAll("[id~="+E+"-]").length\|\|y.push("~="),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|y.push("\\["+M+"name"+M+"*="+M+"
2024-09-26 22:33:27 UTC	1378	IN	Data Raw: 6e 74 45 6c 65 6d 65 6e 74 7c 7c 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 77 68 69 6c 65 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 6a 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 Data Ascii: ntElement\|\|e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)retu

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:27 UTC	578	OUT	GET /ajax/libs/jquery.mask/1.11.2/jquery.mask.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://h567268.linp067.arubabusiness.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:27 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 22:33:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec3-16bb" Last-Modified: Mon, 04 May 2020 16:11:47 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 260234 Expires: Tue, 16 Sep 2025 22:33:27 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=thxOK6tqFKwZ0kp%2B5TLyLhVI5wMddc%2F%2BXfUxMRERXRxW%2BHS0MWLfy12%2BF5rYf9m8HuxpnNLTupwIb9fg2aUiiEW%2Fq5UFe1jgl2Nj8a4I%2FJ0JuzQH68ph7i%2BzCztY6v8OtVSFwL25"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c96b73d1a8b5e6d-EWR alt-svc: h3=":443"; ma=86400
2024-09-26 22:33:27 UTC	401	IN	Data Raw: 31 36 62 62 0d 0a 2f 2f 20 6a 51 75 65 72 79 20 4d 61 73 6b 20 50 6c 75 67 69 6e 20 76 31 2e 31 31 2e 32 0a 2f 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 61 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 7c 7c 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 64 2c 65 29 7b 62 3d 61 28 62 29 3b 76 61 72 20 67 3d 74 68 69 73 2c 6c 3d 62 2e 76 61 6c 28 29 2c 6d 3b 64 3d 22 66 Data Ascii: 16bb// jQuery Mask Plugin v1.11.2// github.com/igorescobar/jQuery-Mask-Plugin(function(a){"function"===typeof define&&define.amd?define(["jquery"],a):a(window.jQuery\|\|window.Zepto)})(function(a){var y=function(b,d,e){b=a(b);var g=this,l=b.val(),m;d="f
2024-09-26 22:33:27 UTC	1369	IN	Data Raw: 3b 69 66 28 66 26 26 2d 31 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 31 30 22 29 29 6b 3d 66 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 2c 6b 2e 6d 6f 76 65 53 74 61 72 74 28 22 63 68 61 72 61 63 74 65 72 22 2c 62 2e 69 73 28 22 69 6e 70 75 74 22 29 3f 2d 62 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 3a 2d 62 2e 74 65 78 74 28 29 2e 6c 65 6e 67 74 68 29 2c 72 3d 6b 2e 74 65 78 74 2e 6c 65 6e 67 74 68 3b 65 6c 73 65 20 69 66 28 63 7c 7c 22 30 22 3d 3d 3d 63 29 72 3d 63 3b 0a 72 65 74 75 72 6e 20 72 7d 63 61 74 63 68 28 64 29 7b 7d 7d 2c 73 65 74 43 61 72 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 72 79 7b 69 66 28 62 2e 69 73 28 22 3a 66 6f 63 75 73 22 29 29 7b 76 61 72 20 72 2c 61 3d Data Ascii: ;if(f&&-1===navigator.appVersion.indexOf("MSIE 10"))k=f.createRange(),k.moveStart("character",b.is("input")?-b.val().length:-b.text().length),r=k.text.length;else if(c\|\|"0"===c)r=c;return r}catch(d){}},setCaret:function(k){try{if(b.is(":focus")){var r,a=
2024-09-26 22:33:27 UTC	1369	IN	Data Raw: 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 20 6b 65 79 75 70 20 70 61 73 74 65 20 64 72 6f 70 20 62 6c 75 72 20 66 6f 63 75 73 6f 75 74 20 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 2e 6d 61 73 6b 20 22 29 29 7d 2c 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 76 61 72 20 61 3d 62 2e 69 73 28 22 69 6e 70 75 74 22 29 3f 22 76 61 6c 22 3a 22 74 65 78 74 22 3b 69 66 28 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 69 66 28 62 5b 61 5d 28 29 21 3d 3d 6b 29 62 5b 61 5d 28 6b 29 3b 61 3d 62 7d 65 6c 73 65 20 61 3d 62 5b 61 5d 28 29 3b 72 65 74 75 72 6e 20 61 7d 2c 67 65 74 4d 43 68 61 72 73 42 65 66 6f 72 65 43 6f 75 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 Data Ascii: ts:function(){b.off("keydown keyup paste drop blur focusout ".split(" ").join(".mask "))},val:function(k){var a=b.is("input")?"val":"text";if(0<arguments.length){if(b[a]()!==k)b[a](k);a=b}else a=b[a]();return a},getMCharsBeforeCount:function(a,b){for(var
2024-09-26 22:33:27 UTC	1369	IN	Data Raw: 7c 0a 61 2e 70 75 73 68 28 62 29 3b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 22 29 7d 2c 63 61 6c 6c 62 61 63 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 67 3d 63 2e 76 61 6c 28 29 2c 6d 3d 67 21 3d 3d 6c 2c 66 3d 5b 67 2c 61 2c 62 2c 65 5d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 5b 61 5d 26 26 62 26 26 65 5b 61 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 7d 3b 70 28 22 6f 6e 43 68 61 6e 67 65 22 2c 21 30 3d 3d 3d 6d 2c 66 29 3b 70 28 22 6f 6e 4b 65 79 50 72 65 73 73 22 2c 21 30 3d 3d 3d 6d 2c 66 29 3b 70 28 22 6f 6e 43 6f 6d 70 6c 65 74 65 22 2c 67 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 2c 66 29 3b 70 28 22 6f 6e 49 6e 76 61 6c 69 64 22 2c 30 Data Ascii: \|a.push(b);return a.join("")},callbacks:function(a){var g=c.val(),m=g!==l,f=[g,a,b,e],p=function(a,b,c){"function"===typeof e[a]&&b&&e[a].apply(this,c)};p("onChange",!0===m,f);p("onKeyPress",!0===m,f);p("onComplete",g.length===d.length,f);p("onInvalid",0
2024-09-26 22:33:27 UTC	1319	IN	Data Raw: 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 28 64 3d 64 28 62 29 29 2c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6c 28 67 2e 6f 70 74 69 6f 6e 73 29 21 3d 3d 6c 28 65 29 7c 7c 67 2e 6d 61 73 6b 21 3d 3d 64 7d 63 61 74 63 68 28 6d 29 7b 7d 7d 3b 61 2e 66 6e 2e 6d 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 64 3d 64 7c 7c 7b 7d 3b 76 61 72 20 65 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2c 0a 67 3d 61 2e 6a 4d 61 73 6b 47 6c 6f 62 61 6c 73 2c 6c 3d 61 2e 6a 4d 61 73 6b 47 6c 6f 62 61 6c 73 2e 77 61 74 63 68 49 6e 74 65 72 76 61 6c 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 7a 28 74 68 69 73 2c 62 2c 64 29 29 72 65 74 75 72 6e 20 61 28 74 68 69 73 29 2e 64 61 74 61 28 22 6d 61 73 6b 22 2c 6e 65 77 20 79 28 74 Data Ascii: tion"===typeof d&&(d=d(b)),"object"!==typeof g\|\|l(g.options)!==l(e)\|\|g.mask!==d}catch(m){}};a.fn.mask=function(b,d){d=d\|\|{};var e=this.selector,g=a.jMaskGlobals,l=a.jMaskGlobals.watchInterval,m=function(){if(z(this,b,d))return a(this).data("mask",new y(t
2024-09-26 22:33:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:27 UTC	651	OUT	GET /SI1892190290/am/infos_files/styles.572738d2b631b3d66c72.css HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://h567268.linp067.arubabusiness.it/SI1892190290/am/infospage.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:28 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 26 Sep 2024 22:33:28 GMT Content-Type: text/css Content-Length: 17634 Last-Modified: Sun, 24 Mar 2024 20:02:36 GMT Connection: close Vary: Accept-Encoding Cache-Control: max-age=2592000 Expires: Sat, 26 Oct 2024 22:33:28 GMT ETag: "660086dc-44e2" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-26 22:33:28 UTC	16037	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 65 76 69 74 65 6d 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 39 39 39 39 39 39 70 78 7d 2e 65 76 69 74 65 6d 65 6e 74 3a 66 6f 63 75 73 2c 2e 65 76 69 74 65 6d 65 6e 74 3a 68 6f 76 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 30 7d 2e 74 72 61 6e 73 70 61 72 65 6e 74 7b 77 69 64 74 68 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 61 6c 6c 65 72 63 6f 6e 74 65 6e 75 20 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: @charset "UTF-8";.evitement{position:absolute;left:-999999px}.evitement:focus,.evitement:hover{position:relative;left:0}.transparent{width:100%;opacity:0;height:100%;position:absolute;left:0;top:0;overflow:hidden}.allercontenu a{font-size:1.1em;font-weigh
2024-09-26 22:33:28 UTC	1597	IN	Data Raw: 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 70 61 64 64 69 6e 67 3a 30 20 2e 35 65 6d 7d 2e 62 6c 6f 63 6b 2d 69 74 65 6d 20 2e 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 38 65 6d 7d 61 2e 62 6c 6f 63 6b 2d 69 74 65 6d 20 70 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 2e 32 65 6d 7d 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 2e 35 65 6d 7d 2e 62 75 74 74 6f 6e 2d 7a 6f 6e 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 31 2e 35 72 65 6d 20 30 7d 2e 62 75 74 74 6f 6e 2d 7a 6f 6e 65 20 61 2c 2e 62 75 74 74 6f 6e 2d 7a 6f 6e 65 20 62 75 74 74 6f 6e 2c 2e 70 72 6f 63 65 73 73 20 2e 62 75 74 74 6f 6e 2d 7a 6f 6e 65 20 61 2c 2e 70 72 Data Ascii: flex-wrap:nowrap;padding:0 .5em}.block-item .img-container{min-height:8em}a.block-item p{min-height:3.2em}.text-title{font-size:2em;padding-top:1.5em}.button-zone{display:block;margin:1.5rem 0}.button-zone a,.button-zone button,.process .button-zone a,.pr

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:27 UTC	691	OUT	GET /SI1892190290/am/infos_files/runtime-es2017.d8ae961f0555d440b720.js HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://h567268.linp067.arubabusiness.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://h567268.linp067.arubabusiness.it/SI1892190290/am/infospage.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:28 UTC	359	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 26 Sep 2024 22:33:28 GMT Content-Type: application/javascript Content-Length: 3563 Last-Modified: Sun, 24 Mar 2024 20:02:36 GMT Connection: close Vary: Accept-Encoding Cache-Control: max-age=2592000 Expires: Sat, 26 Oct 2024 22:33:28 GMT ETag: "660086dc-deb" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-26 22:33:28 UTC	3563	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 3d 7b 7d 2c 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 6f 3d 72 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 72 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 65 3d 5b 5d 2c 6e 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 2c 61 29 7b 69 66 28 21 72 29 7b 76 61 72 20 75 3d 31 2f 30 3b 66 6f 72 28 64 3d 30 3b 64 3c 65 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 72 3d 65 5b 64 5d 5b 30 Data Ascii: !function(){"use strict";var e,t={},r={};function n(e){var o=r[e];if(void 0!==o)return o.exports;var a=r[e]={exports:{}};return t[e].call(a.exports,a,a.exports,n),a.exports}n.m=t,e=[],n.O=function(t,r,o,a){if(!r){var u=1/0;for(d=0;d<e.length;d++){r=e[d][0

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:27 UTC	693	OUT	GET /SI1892190290/am/infos_files/polyfills-es2017.533ebfade82697eddcf6.js HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://h567268.linp067.arubabusiness.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://h567268.linp067.arubabusiness.it/SI1892190290/am/infospage.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:28 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 26 Sep 2024 22:33:28 GMT Content-Type: application/javascript Content-Length: 122405 Last-Modified: Sun, 24 Mar 2024 20:02:36 GMT Connection: close Vary: Accept-Encoding Cache-Control: max-age=2592000 Expires: Sat, 26 Oct 2024 22:33:28 GMT ETag: "660086dc-1de25" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-26 22:33:28 UTC	16021	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 39 5d 2c 7b 37 32 37 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 65 26 26 65 2e 6d 61 72 6b 26 26 65 2e 6d 61 72 6b 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 65 26 26 65 2e 6d 65 61 73 75 72 65 26 26 65 2e 6d 65 61 73 75 72 65 28 74 2c 6e 29 7d 6e 28 22 5a 6f 6e 65 22 29 3b 63 6f 6e 73 74 20 6f 3d 74 2e 5f 5f 5a 6f 6e 65 5f 73 79 6d 62 6f 6c 5f 70 72 65 66 69 78 7c 7c 22 5f 5f 7a 6f 6e 65 5f Data Ascii: (self.webpackChunktai=self.webpackChunktai\|\|[]).push([[429],{7277:function(){"use strict";!function(t){const e=t.performance;function n(t){e&&e.mark&&e.mark(t)}function r(t,n){e&&e.measure&&e.measure(t,n)}n("Zone");const o=t.__Zone_symbol_prefix\|\|"__zone_
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 74 61 63 6b 3a 22 22 29 29 7d 63 61 74 63 68 28 66 29 7b 72 3d 66 7d 63 26 26 28 72 2e 74 68 72 6f 77 4f 72 69 67 69 6e 61 6c 3d 21 30 29 2c 72 2e 72 65 6a 65 63 74 69 6f 6e 3d 69 2c 72 2e 70 72 6f 6d 69 73 65 3d 74 2c 72 2e 7a 6f 6e 65 3d 65 2e 63 75 72 72 65 6e 74 2c 72 2e 74 61 73 6b 3d 65 2e 63 75 72 72 65 6e 74 54 61 73 6b 2c 61 2e 70 75 73 68 28 72 29 2c 6e 2e 73 63 68 65 64 75 6c 65 4d 69 63 72 6f 54 61 73 6b 28 29 7d 7d 7d 72 65 74 75 72 6e 20 74 7d 63 6f 6e 73 74 20 53 3d 69 28 22 72 65 6a 65 63 74 69 6f 6e 48 61 6e 64 6c 65 64 48 61 6e 64 6c 65 72 22 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 69 66 28 30 3d 3d 3d 74 5b 67 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 65 5b 53 5d 3b 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: tack:""))}catch(f){r=f}c&&(r.throwOriginal=!0),r.rejection=i,r.promise=t,r.zone=e.current,r.task=e.currentTask,a.push(r),n.scheduleMicroTask()}}}return t}const S=i("rejectionHandledHandler");function T(t){if(0===t[g]){try{const n=e[S];n&&"function"==typeo
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 2c 65 3d 61 2b 28 74 2b 69 29 2c 63 3d 61 2b 28 74 2b 6f 29 3b 72 5b 74 5d 3d 7b 7d 2c 72 5b 74 5d 5b 69 5d 3d 65 2c 72 5b 74 5d 5b 6f 5d 3d 63 7d 63 6f 6e 73 74 20 63 3d 74 2e 45 76 65 6e 74 54 61 72 67 65 74 3b 63 26 26 63 2e 70 72 6f 74 6f 74 79 70 65 26 26 65 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 28 74 2c 5b 63 26 26 63 2e 70 72 6f 74 6f 74 79 70 65 5d 29 7d 28 74 2c 6e 29 3b 63 6f 6e 73 74 20 72 3d 74 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 45 76 65 6e 74 54 61 72 67 65 74 3b 72 26 26 72 2e 70 72 6f 74 6f 74 79 70 65 26 26 6e 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 28 74 2c 5b 72 2e 70 72 6f 74 6f 74 79 70 65 5d 29 7d 29 2c 5a 6f 6e 65 2e 5f 5f 6c 6f 61 64 5f 70 61 74 63 68 28 22 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 Data Ascii: ,e=a+(t+i),c=a+(t+o);r[t]={},r[t][i]=e,r[t][o]=c}const c=t.EventTarget;c&&c.prototype&&e.patchEventTarget(t,[c&&c.prototype])}(t,n);const r=t.XMLHttpRequestEventTarget;r&&r.prototype&&n.patchEventTarget(t,[r.prototype])}),Zone.__load_patch("MutationObserv
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 30 3d 3d 3d 74 3f 30 3a 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 2c 30 3d 3d 3d 74 3f 30 3a 74 2c 6e 29 2c 74 68 69 73 7d 29 7d 3b 69 66 28 69 28 74 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6d 7c 7c 21 28 76 7c 7c 62 2e 66 6f 72 45 61 63 68 26 26 21 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 65 77 20 6d 29 2e 65 6e 74 72 69 65 73 28 29 2e 6e 65 78 74 28 29 7d 29 29 29 29 78 3d 6e 2e 67 65 74 43 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 67 2c 79 29 2c 63 2e 65 6e 61 62 6c 65 28 29 3b 65 6c 73 65 20 69 66 28 69 28 74 2c 21 30 29 29 7b 76 61 72 20 45 3d 6e 65 77 20 78 2c 77 3d 45 5b 79 5d 28 76 3f 7b 7d 3a 2d 30 2c 31 29 21 3d 45 2c 53 3d Data Ascii: call(this,0===t?0:t)}:function(t,n){return e.call(this,0===t?0:t,n),this})};if(i(t,"function"!=typeof m\|\|!(v\|\|b.forEach&&!l(function(){(new m).entries().next()}))))x=n.getConstructor(e,t,g,y),c.enable();else if(i(t,!0)){var E=new x,w=E[y](v?{}:-0,1)!=E,S=
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 28 74 29 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 61 28 65 29 2c 63 3d 72 2e 6c 65 6e 67 74 68 2c 73 3d 30 3b 63 3e 73 3b 29 6f 2e 66 28 74 2c 6e 3d 72 5b 73 2b 2b 5d 2c 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 32 39 37 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 30 31 32 29 2c 6f 3d 6e 28 37 30 39 31 29 2c 69 3d 6e 28 31 30 39 39 29 2c 61 3d 6e 28 36 35 38 32 29 2c 63 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 65 2e 66 3d 72 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 69 28 74 29 2c 65 3d 61 28 65 29 2c 69 28 6e 29 2c 6f 29 74 72 79 7b 72 65 74 75 72 6e 20 63 28 74 2c 65 2c 6e 29 7d Data Ascii: eProperties:function(t,e){i(t);for(var n,r=a(e),c=r.length,s=0;c>s;)o.f(t,n=r[s++],e[n]);return t}},2975:function(t,e,n){var r=n(7012),o=n(7091),i=n(1099),a=n(6582),c=Object.defineProperty;e.f=r?c:function(t,e,n){if(i(t),e=a(e),i(n),o)try{return c(t,e,n)}
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 31 31 36 33 29 2c 6f 3d 6e 28 37 32 36 29 2c 69 3d 6e 28 37 38 38 33 29 2c 61 3d 6e 28 32 32 32 29 2c 63 3d 6e 28 35 39 30 32 29 2c 73 3d 6e 28 38 36 34 33 29 2c 75 3d 6e 28 35 33 34 37 29 2c 66 3d 6e 28 34 35 36 33 29 2c 6c 3d 6e 28 37 33 39 34 29 28 22 73 6c 69 63 65 22 29 2c 70 3d 66 28 22 73 70 65 63 69 65 73 22 29 2c 68 3d 5b 5d 2e 73 6c 69 63 65 2c 64 3d 4d 61 74 68 2e 6d 61 78 3b 72 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6c 7d 2c 7b 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 66 2c 6c 3d 73 28 74 68 69 73 29 2c 67 3d 63 28 6c 2e 6c 65 6e 67 74 68 29 2c 76 3d 61 28 74 Data Ascii: ,e,n){"use strict";var r=n(1163),o=n(726),i=n(7883),a=n(222),c=n(5902),s=n(8643),u=n(5347),f=n(4563),l=n(7394)("slice"),p=f("species"),h=[].slice,d=Math.max;r({target:"Array",proto:!0,forced:!l},{slice:function(t,e){var n,r,f,l=s(this),g=c(l.length),v=a(t
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 2e 6c 65 6e 67 74 68 3c 33 3f 74 3a 69 28 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 3b 69 66 28 68 26 26 21 70 29 72 65 74 75 72 6e 20 6c 28 74 2c 65 2c 6e 29 3b 69 66 28 74 3d 3d 6e 29 7b 73 77 69 74 63 68 28 65 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 65 77 20 74 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 65 77 20 74 28 65 5b 30 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 65 77 20 74 28 65 5b 30 5d 2c 65 5b 31 5d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6e 65 77 20 74 28 65 5b 30 5d 2c 65 5b 31 5d 2c 65 5b 32 5d 29 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6e 65 77 20 74 28 65 5b 30 5d 2c 65 5b 31 5d 2c 65 5b 32 5d 2c 65 5b 33 5d 29 7d 76 61 72 20 72 3d 5b 6e 75 6c 6c 5d 3b 72 65 74 75 72 6e 20 72 2e Data Ascii: .length<3?t:i(arguments[2]);if(h&&!p)return l(t,e,n);if(t==n){switch(e.length){case 0:return new t;case 1:return new t(e[0]);case 2:return new t(e[0],e[1]);case 3:return new t(e[0],e[1],e[2]);case 4:return new t(e[0],e[1],e[2],e[3])}var r=[null];return r.
2024-09-26 22:33:28 UTC	8080	IN	Data Raw: 5f 3d 30 2c 6b 3d 30 2c 45 3d 5b 5d 3b 6b 3c 70 2e 6c 65 6e 67 74 68 3b 29 7b 62 2e 6c 61 73 74 49 6e 64 65 78 3d 67 3f 30 3a 6b 3b 76 61 72 20 77 2c 53 3d 6c 28 62 2c 67 3f 70 2e 73 6c 69 63 65 28 6b 29 3a 70 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 53 7c 7c 28 77 3d 79 28 75 28 62 2e 6c 61 73 74 49 6e 64 65 78 2b 28 67 3f 6b 3a 30 29 29 2c 70 2e 6c 65 6e 67 74 68 29 29 3d 3d 3d 5f 29 6b 3d 73 28 70 2c 6b 2c 76 29 3b 65 6c 73 65 7b 69 66 28 45 2e 70 75 73 68 28 70 2e 73 6c 69 63 65 28 5f 2c 6b 29 29 2c 45 2e 6c 65 6e 67 74 68 3d 3d 3d 78 29 72 65 74 75 72 6e 20 45 3b 66 6f 72 28 76 61 72 20 54 3d 31 3b 54 3c 3d 53 2e 6c 65 6e 67 74 68 2d 31 3b 54 2b 2b 29 69 66 28 45 2e 70 75 73 68 28 53 5b 54 5d 29 2c 45 2e 6c 65 6e 67 74 68 3d 3d 3d 78 29 72 65 74 75 72 6e Data Ascii: _=0,k=0,E=[];k<p.length;){b.lastIndex=g?0:k;var w,S=l(b,g?p.slice(k):p);if(null===S\|\|(w=y(u(b.lastIndex+(g?k:0)),p.length))===_)k=s(p,k,v);else{if(E.push(p.slice(_,k)),E.length===x)return E;for(var T=1;T<=S.length-1;T++)if(E.push(S[T]),E.length===x)return

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:27 UTC	688	OUT	GET /SI1892190290/am/infos_files/main-es2017.8d2eb497bdf1e092bf40.js HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://h567268.linp067.arubabusiness.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://h567268.linp067.arubabusiness.it/SI1892190290/am/infospage.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:28 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 26 Sep 2024 22:33:28 GMT Content-Type: application/javascript Content-Length: 462201 Last-Modified: Sun, 24 Mar 2024 20:02:36 GMT Connection: close Vary: Accept-Encoding Cache-Control: max-age=2592000 Expires: Sat, 26 Oct 2024 22:33:28 GMT ETag: "660086dc-70d79" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-26 22:33:28 UTC	16021	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 38 32 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 3b 74 68 72 6f 77 20 65 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 65 7d 29 7d 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 2c 65 2e 72 65 73 6f 6c 76 65 3d 65 2c Data Ascii: (self.webpackChunktai=self.webpackChunktai\|\|[]).push([[179],{8255:function(t){function e(t){return Promise.resolve().then(function(){var e=new Error("Cannot find module '"+t+"'");throw e.code="MODULE_NOT_FOUND",e})}e.keys=function(){return[]},e.resolve=e,
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 5b 30 5d 2c 6f 5b 72 2e 77 41 70 2e 45 78 74 72 61 44 61 74 61 5d 5b 31 5d 5d 2c 65 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 46 28 69 2c 6e 29 7c 7c 5b 5d 7d 28 65 2c 69 2c 6f 29 2c 73 3d 74 2e 66 69 6e 64 49 6e 64 65 78 28 74 3d 3e 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 7b 63 6f 6e 73 74 5b 65 2c 6e 5d 3d 74 2c 72 3d 61 3e 3d 65 2e 68 6f 75 72 73 26 26 63 3e 3d 65 2e 6d 69 6e 75 74 65 73 2c 6f 3d 61 3c 6e 2e 68 6f 75 72 73 7c 7c 61 3d 3d 3d 6e 2e 68 6f 75 72 73 26 26 63 3c 6e 2e 6d 69 6e 75 74 65 73 3b 69 66 28 65 2e 68 6f 75 72 73 3c 6e 2e 68 6f 75 72 73 29 7b 69 66 28 72 26 26 6f 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 69 66 28 72 7c 7c 6f 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 69 66 28 74 2e 68 6f 75 72 73 3d 3d 3d 61 Data Ascii: [0],o[r.wAp.ExtraData][1]],e)\|\|[];return F(i,n)\|\|[]}(e,i,o),s=t.findIndex(t=>{if(Array.isArray(t)){const[e,n]=t,r=a>=e.hours&&c>=e.minutes,o=a<n.hours\|\|a===n.hours&&c<n.minutes;if(e.hours<n.hours){if(r&&o)return!0}else if(r\|\|o)return!0}else if(t.hours===a
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 6e 67 28 29 3b 69 66 28 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 74 68 69 73 2e 75 72 6c 57 69 74 68 50 61 72 61 6d 73 3d 65 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 6e 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 74 68 69 73 2e 75 72 6c 57 69 74 68 50 61 72 61 6d 73 3d 65 2b 28 2d 31 3d 3d 3d 6e 3f 22 3f 22 3a 6e 3c 65 2e 6c 65 6e 67 74 68 2d 31 3f 22 26 22 3a 22 22 29 2b 74 7d 7d 65 6c 73 65 20 74 68 69 73 2e 70 61 72 61 6d 73 3d 6e 65 77 20 5f 2c 74 68 69 73 2e 75 72 6c 57 69 74 68 50 61 72 61 6d 73 3d 65 7d 73 65 72 69 61 6c 69 7a 65 42 6f 64 79 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 68 69 73 2e 62 6f 64 79 3f 6e 75 6c 6c 3a 79 28 74 68 69 73 2e 62 6f 64 79 29 7c 7c 43 28 74 68 69 73 2e 62 6f 64 79 29 7c 7c 77 28 74 68 69 73 2e 62 6f 64 79 Data Ascii: ng();if(0===t.length)this.urlWithParams=e;else{const n=e.indexOf("?");this.urlWithParams=e+(-1===n?"?":n<e.length-1?"&":"")+t}}else this.params=new _,this.urlWithParams=e}serializeBody(){return null===this.body?null:y(this.body)\|\|C(this.body)\|\|w(this.body
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 74 2e 74 65 6d 70 6c 61 74 65 7c 7c 6e 75 6c 6c 2c 63 6f 6e 73 74 73 3a 74 2e 63 6f 6e 73 74 73 7c 7c 6e 75 6c 6c 2c 6e 67 43 6f 6e 74 65 6e 74 53 65 6c 65 63 74 6f 72 73 3a 74 2e 6e 67 43 6f 6e 74 65 6e 74 53 65 6c 65 63 74 6f 72 73 2c 68 6f 73 74 42 69 6e 64 69 6e 67 73 3a 74 2e 68 6f 73 74 42 69 6e 64 69 6e 67 73 7c 7c 6e 75 6c 6c 2c 68 6f 73 74 56 61 72 73 3a 74 2e 68 6f 73 74 56 61 72 73 7c 7c 30 2c 68 6f 73 74 41 74 74 72 73 3a 74 2e 68 6f 73 74 41 74 74 72 73 7c 7c 6e 75 6c 6c 2c 63 6f 6e 74 65 6e 74 51 75 65 72 69 65 73 3a 74 2e 63 6f 6e 74 65 6e 74 51 75 65 72 69 65 73 7c 7c 6e 75 6c 6c 2c 64 65 63 6c 61 72 65 64 49 6e 70 75 74 73 3a 65 2c 69 6e 70 75 74 73 3a 6e 75 6c 6c 2c 6f 75 74 70 75 74 73 3a 6e 75 6c 6c 2c 65 78 70 6f 72 74 41 73 3a 74 2e Data Ascii: t.template\|\|null,consts:t.consts\|\|null,ngContentSelectors:t.ngContentSelectors,hostBindings:t.hostBindings\|\|null,hostVars:t.hostVars\|\|0,hostAttrs:t.hostAttrs\|\|null,contentQueries:t.contentQueries\|\|null,declaredInputs:e,inputs:null,outputs:null,exportAs:t.
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 22 53 63 72 69 70 74 22 7d 7d 63 6c 61 73 73 20 5a 6e 20 65 78 74 65 6e 64 73 20 46 6e 7b 67 65 74 54 79 70 65 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 55 52 4c 22 7d 7d 63 6c 61 73 73 20 71 6e 20 65 78 74 65 6e 64 73 20 46 6e 7b 67 65 74 54 79 70 65 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 52 65 73 6f 75 72 63 65 55 52 4c 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6e 3f 74 2e 63 68 61 6e 67 69 6e 67 54 68 69 73 42 72 65 61 6b 73 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 63 75 72 69 74 79 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 48 6e 28 74 2c 65 29 7b 63 6f 6e 73 74 20 6e 3d 7a 6e 28 74 29 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 6e 21 3d 3d 65 29 7b 69 66 28 22 Data Ascii: (){return"Script"}}class Zn extends Fn{getTypeName(){return"URL"}}class qn extends Fn{getTypeName(){return"ResourceURL"}}function Bn(t){return t instanceof Fn?t.changingThisBreaksApplicationSecurity:t}function Hn(t,e){const n=zn(t);if(null!=n&&n!==e){if("
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 6e 69 28 74 2c 65 5b 6e 5d 29 7d 28 65 2c 69 29 7d 63 61 74 63 68 28 72 29 7b 74 68 72 6f 77 20 74 2e 66 69 72 73 74 43 72 65 61 74 65 50 61 73 73 26 26 28 74 2e 69 6e 63 6f 6d 70 6c 65 74 65 46 69 72 73 74 50 61 73 73 3d 21 30 2c 74 2e 66 69 72 73 74 43 72 65 61 74 65 50 61 73 73 3d 21 31 29 2c 72 7d 66 69 6e 61 6c 6c 79 7b 65 5b 32 5d 26 3d 2d 35 2c 6d 65 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 6f 28 74 2c 65 2c 6e 2c 72 29 7b 63 6f 6e 73 74 20 6f 3d 65 5b 32 5d 3b 69 66 28 32 35 36 3d 3d 28 32 35 36 26 6f 29 29 72 65 74 75 72 6e 3b 68 65 28 65 29 3b 63 6f 6e 73 74 20 69 3d 51 74 28 29 3b 74 72 79 7b 5a 74 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 42 74 2e 6c 46 72 61 Data Ascii: or(let n=0;n<e.length;n++)ni(t,e[n])}(e,i)}catch(r){throw t.firstCreatePass&&(t.incompleteFirstPass=!0,t.firstCreatePass=!1),r}finally{e[2]&=-5,me()}}function Eo(t,e,n,r){const o=e[2];if(256==(256&o))return;he(e);const i=Qt();try{Zt(e),function(t){Bt.lFra
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 6f 28 65 2c 6e 2c 75 2c 6a 74 28 6c 2c 63 29 29 2c 79 65 28 65 2c 75 29 3b 63 6f 6e 73 74 20 68 3d 75 2e 74 56 69 65 77 73 3d 56 6f 28 32 2c 75 2c 72 2c 6f 2c 69 2c 65 2e 64 69 72 65 63 74 69 76 65 52 65 67 69 73 74 72 79 2c 65 2e 70 69 70 65 52 65 67 69 73 74 72 79 2c 6e 75 6c 6c 2c 65 2e 73 63 68 65 6d 61 73 2c 6c 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 2e 71 75 65 72 69 65 73 26 26 28 65 2e 71 75 65 72 69 65 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 75 29 2c 68 2e 71 75 65 72 69 65 73 3d 65 2e 71 75 65 72 69 65 73 2e 65 6d 62 65 64 64 65 64 54 56 69 65 77 28 75 29 29 2c 75 7d 28 75 2c 6c 2c 63 2c 65 2c 6e 2c 72 2c 6f 2c 69 2c 73 29 3a 6c 2e 64 61 74 61 5b 75 5d 3b 4b 74 28 68 2c 21 31 29 3b 63 6f 6e 73 74 20 64 3d 63 5b 31 31 5d 2e 63 72 65 61 Data Ascii: o(e,n,u,jt(l,c)),ye(e,u);const h=u.tViews=Vo(2,u,r,o,i,e.directiveRegistry,e.pipeRegistry,null,e.schemas,l);return null!==e.queries&&(e.queries.template(e,u),h.queries=e.queries.embeddedTView(u)),u}(u,l,c,e,n,r,o,i,s):l.data[u];Kt(h,!1);const d=c[11].crea
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 61 69 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 61 6c 73 48 65 61 64 3d 74 68 69 73 2e 5f 72 65 6d 6f 76 61 6c 73 54 61 69 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 64 65 6e 74 69 74 79 43 68 61 6e 67 65 73 48 65 61 64 3d 74 68 69 73 2e 5f 69 64 65 6e 74 69 74 79 43 68 61 6e 67 65 73 54 61 69 6c 3d 6e 75 6c 6c 7d 7d 5f 6d 69 73 6d 61 74 63 68 28 74 2c 65 2c 6e 2c 72 29 7b 6c 65 74 20 6f 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 3f 6f 3d 74 68 69 73 2e 5f 69 74 54 61 69 6c 3a 28 6f 3d 74 2e 5f 70 72 65 76 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 28 74 29 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 3d 74 68 69 73 2e 5f 75 6e 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 3f 6e 75 6c 6c 3a 74 68 69 73 2e 5f 75 6e 6c 69 6e 6b 65 64 52 65 63 Data Ascii: ail=null,this._removalsHead=this._removalsTail=null,this._identityChangesHead=this._identityChangesTail=null}}_mismatch(t,e,n,r){let o;return null===t?o=this._itTail:(o=t._prev,this._remove(t)),null!==(t=null===this._unlinkedRecords?null:this._unlinkedRec
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 74 5b 38 5d 3d 73 2c 6f 26 26 6f 2e 66 6f 72 45 61 63 68 28 74 3d 3e 74 28 73 2c 65 29 29 2c 65 2e 63 6f 6e 74 65 6e 74 51 75 65 72 69 65 73 29 7b 63 6f 6e 73 74 20 74 3d 59 74 28 29 3b 65 2e 63 6f 6e 74 65 6e 74 51 75 65 72 69 65 73 28 31 2c 73 2c 74 2e 64 69 72 65 63 74 69 76 65 53 74 61 72 74 29 7d 63 6f 6e 73 74 20 61 3d 59 74 28 29 3b 72 65 74 75 72 6e 21 69 2e 66 69 72 73 74 43 72 65 61 74 65 50 61 73 73 7c 7c 6e 75 6c 6c 3d 3d 3d 65 2e 68 6f 73 74 42 69 6e 64 69 6e 67 73 26 26 6e 75 6c 6c 3d 3d 3d 65 2e 68 6f 73 74 41 74 74 72 73 7c 7c 28 5f 65 28 61 2e 69 6e 64 65 78 29 2c 42 6f 28 6e 5b 31 5d 2c 61 2c 30 2c 61 2e 64 69 72 65 63 74 69 76 65 53 74 61 72 74 2c 61 2e 64 69 72 65 63 74 69 76 65 45 6e 64 2c 65 29 2c 48 6f 28 65 2c 73 29 29 2c 73 7d 28 Data Ascii: t[8]=s,o&&o.forEach(t=>t(s,e)),e.contentQueries){const t=Yt();e.contentQueries(1,s,t.directiveStart)}const a=Yt();return!i.firstCreatePass\|\|null===e.hostBindings&&null===e.hostAttrs\|\|(_e(a.index),Bo(n[1],a,0,a.directiveStart,a.directiveEnd,e),Ho(e,s)),s}(
2024-09-26 22:33:28 UTC	16384	IN	Data Raw: 5f 63 61 6c 6c 62 61 63 6b 73 2e 70 6f 70 28 29 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 2e 74 69 6d 65 6f 75 74 49 64 29 2c 74 2e 64 6f 6e 65 43 62 28 74 68 69 73 2e 5f 64 69 64 57 6f 72 6b 29 7d 74 68 69 73 2e 5f 64 69 64 57 6f 72 6b 3d 21 31 7d 29 3b 65 6c 73 65 7b 6c 65 74 20 74 3d 74 68 69 73 2e 67 65 74 50 65 6e 64 69 6e 67 54 61 73 6b 73 28 29 3b 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 66 69 6c 74 65 72 28 65 3d 3e 21 65 2e 75 70 64 61 74 65 43 62 7c 7c 21 65 2e 75 70 64 61 74 65 43 62 28 74 29 7c 7c 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 2e 74 69 6d 65 6f 75 74 49 64 29 2c 21 31 29 29 2c 74 68 69 73 2e 5f 64 69 64 57 6f 72 6b 3d 21 30 7d 7d 67 65 74 50 65 6e 64 69 6e 67 54 61 73 6b Data Ascii: _callbacks.pop();clearTimeout(t.timeoutId),t.doneCb(this._didWork)}this._didWork=!1});else{let t=this.getPendingTasks();this._callbacks=this._callbacks.filter(e=>!e.updateCb\|\|!e.updateCb(t)\|\|(clearTimeout(e.timeoutId),!1)),this._didWork=!0}}getPendingTask

Timestamp	Bytes transferred	Direction	Data
2024-09-26 22:33:27 UTC	687	OUT	GET /SI1892190290/am/infos_files/logo-amendes-gouv.svg HTTP/1.1 Host: h567268.linp067.arubabusiness.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h567268.linp067.arubabusiness.it/SI1892190290/am/infospage.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-26 22:33:28 UTC	280	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 26 Sep 2024 22:33:28 GMT Content-Type: image/svg+xml Content-Length: 23741 Last-Modified: Sun, 24 Mar 2024 20:02:36 GMT Connection: close Vary: Accept-Encoding ETag: "660086dc-5cbd" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-26 22:33:28 UTC	16104	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 32 35 2e 33 38 36 22 20 68 65 69 67 68 74 3d 22 32 32 38 2e 32 38 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 37 31 2e 33 20 36 30 2e 34 22 3e 3c 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 33 33 30 2e 37 31 34 20 36 39 2e 32 38 36 68 36 30 37 2e 31 32 34 76 31 38 30 2e 33 37 31 48 33 33 30 2e 37 31 34 7a 22 20 69 64 3d 22 61 22 2f 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 2e 31 31 38 20 31 36 2e 30 33 68 32 2e 34 33 35 63 31 2e 37 37 32 20 30 20 32 2e 38 35 37 2e 38 39 39 20 32 2e 38 35 37 20 32 2e 33 38 20 30 20 2e 39 35 33 2d 2e 34 37 36 20 31 2e 36 39 34 2d 31 2e 32 37 20 32 2e 30 36 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1025.386" height="228.283" viewBox="0 0 271.3 60.4"><defs><path d="M330.714 69.286h607.124v180.371H330.714z" id="a"/></defs><path d="M.118 16.03h2.435c1.772 0 2.857.899 2.857 2.38 0 .953-.476 1.694-1.27 2.064
2024-09-26 22:33:28 UTC	7637	IN	Data Raw: 33 2e 33 37 2e 31 30 36 2e 31 38 35 2d 2e 31 33 32 2e 32 39 31 2d 2e 32 36 34 2e 33 37 2e 30 35 33 2e 30 35 34 2e 31 33 32 2e 30 35 34 2e 31 33 32 2e 30 38 2e 30 32 36 2e 31 30 36 2e 31 33 32 2e 31 35 39 2e 30 35 33 2e 32 36 35 2d 2e 30 38 2e 31 33 32 2d 2e 33 31 38 2e 31 38 35 2d 2e 32 31 32 2e 33 37 2e 30 38 2e 31 33 32 2e 30 32 37 2e 32 39 31 2d 2e 30 32 36 2e 34 35 2d 2e 30 35 33 2e 31 38 35 2d 2e 32 31 32 2e 32 36 34 2d 2e 33 37 2e 32 39 61 2e 36 30 37 2e 36 30 37 20 30 20 30 31 2d 2e 33 37 31 2e 30 32 37 63 2d 2e 30 35 33 2d 2e 30 32 36 2d 2e 30 38 2d 2e 30 35 33 2d 2e 31 33 32 2d 2e 30 35 33 2d 2e 33 34 34 2d 2e 30 35 33 2d 2e 36 38 38 2d 2e 31 33 32 2d 31 2e 30 33 32 2d 2e 31 33 32 2d 2e 31 30 36 2e 30 32 37 2d 2e 32 31 32 2e 30 35 33 2d 2e 32 39 Data Ascii: 3.37.106.185-.132.291-.264.37.053.054.132.054.132.08.026.106.132.159.053.265-.08.132-.318.185-.212.37.08.132.027.291-.026.45-.053.185-.212.264-.37.29a.607.607 0 01-.371.027c-.053-.026-.08-.053-.132-.053-.344-.053-.688-.132-1.032-.132-.106.027-.212.053-.29